$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa File: 3b710bba-fc04-3741-970d-7622d98c7f22.roa (raw, json) Hash identifier: TqLyu6KfSfouLSa0AdCepU62lXAWPN2rF38q9Qtqxxk= Subject key identifier: B5:64:55:1C:E3:E4:10:DB:73:17:A1:C1:21:2E:E8:66:3F:EC:2E:B1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A9E9617F8D5A8131BD5D7AA60 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa Signing time: Thu 24 Jul 2025 01:00:50 +0000 ROA not before: Thu 24 Jul 2025 01:00:50 +0000 ROA not after: Wed 22 Oct 2025 01:00:50 +0000 asID: 20454 IP address blocks: 131.153.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9e:96:17:f8:d5:a8:13:1b:d5:d7:aa:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jul 24 01:00:50 2025 GMT Not After : Oct 22 01:00:50 2025 GMT Subject: CN=407f73e4-c2cc-43c1-a64a-382ee08b161c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:0a:2a:99:36:c2:fa:56:a4:ae:6c:06:9a:69: 41:a5:78:cf:67:34:67:90:01:93:09:c1:2c:44:f7: 7c:aa:0c:aa:19:dd:9b:f4:47:d0:ae:61:d2:8e:77: 04:7a:4c:59:d8:c1:fd:b6:32:cc:84:fe:fb:d5:f1: 97:3f:2a:b8:6f:8b:5d:b6:91:7a:cc:c3:a3:c1:61: db:e3:6b:9f:7e:ce:e8:ed:52:f4:49:d9:d5:7b:58: 9e:99:6b:0b:ce:75:22:ab:37:77:92:06:9c:33:86: 73:36:98:f6:b4:ab:cf:fc:f6:72:91:42:00:52:5e: 8d:b1:fd:06:3f:c5:64:8a:43:84:8f:48:52:2a:51: b7:52:77:21:3b:a1:ee:55:42:a4:66:38:73:85:09: 23:ba:fc:d0:c4:13:c4:5f:42:39:2c:55:3c:b6:8b: 4e:31:46:5d:7c:d7:71:55:02:71:ac:9f:21:41:93: 0c:b2:3d:dc:1c:f0:4b:8a:a7:8c:4e:5a:7a:1d:72: 3f:bb:61:8e:75:6f:37:bd:f7:98:41:e7:81:00:15: df:24:74:17:89:25:22:04:e9:23:73:65:53:19:9b: 6b:16:26:cd:a6:1a:60:81:68:79:29:39:af:92:30: 41:7c:5f:d9:8e:c6:6e:4f:20:53:b3:4d:c4:dd:d5: 0c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:64:55:1C:E3:E4:10:DB:73:17:A1:C1:21:2E:E8:66:3F:EC:2E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:28:e4:a7:ea:f2:ad:4a:68:fe:c8:38:31:bd:60:82:c9:66: 0e:e7:a4:78:22:ce:20:b8:32:38:a2:63:d3:46:71:ef:fc:a6: 49:a3:7e:0b:7f:56:89:a5:00:d0:eb:0c:ca:0f:a5:a9:f2:d5: a0:1c:4b:11:9c:d5:c1:01:14:dd:de:6e:03:59:95:0d:79:83: ec:b7:89:6e:f8:7e:2d:4f:05:5b:16:d3:fc:21:e8:18:8d:83: 4e:5c:14:70:b3:b1:6f:4a:4f:06:12:a9:f4:0a:38:fa:ff:c3: 03:7b:1c:59:df:d1:2c:f3:a4:51:f7:d0:79:1f:f6:26:c6:1b: 0f:b6:bd:b8:e7:6b:b6:bc:f8:28:8e:2c:3d:90:3f:c3:48:21: dc:12:83:99:34:2e:7b:46:86:8f:1c:5e:93:f4:87:13:02:54: 2d:9d:77:2e:60:b1:53:ad:39:cc:48:cf:23:ca:40:17:f5:16: 24:17:96:4a:5a:e3:65:45:53:78:94:bf:61:0c:f0:d8:37:fd: ee:2f:f4:e7:e3:95:0a:91:aa:cf:24:5d:82:ae:8c:e8:ad:cb: 04:02:90:e7:42:2f:3e:fa:c2:30:92:33:db:f2:da:dd:0a:31: 8c:3b:29:ee:c3:d1:72:4d:89:6b:de:be:92:4e:c9:c9:5c:d9: a7:a5:fc:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelhf41agTG9XXqmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk NDA3ZjczZTQtYzJjYy00M2MxLWE2NGEtMzgyZWUwOGIxNjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5woqmTbC+lakrmwGmmlBpXjPZzRnkAGTCcEs RPd8qgyqGd2b9EfQrmHSjncEekxZ2MH9tjLMhP771fGXPyq4b4tdtpF6zMOjwWHb 42uffs7o7VL0SdnVe1iemWsLznUiqzd3kgacM4ZzNpj2tKvP/PZykUIAUl6Nsf0G P8VkikOEj0hSKlG3UnchO6HuVUKkZjhzhQkjuvzQxBPEX0I5LFU8totOMUZdfNdx VQJxrJ8hQZMMsj3cHPBLiqeMTlp6HXI/u2GOdW83vfeYQeeBABXfJHQXiSUiBOkj c2VTGZtrFibNphpggWh5KTmvkjBBfF/ZjsZuTyBTs03E3dUMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVkVRzj5BDbcxehwSEu6GY/7C6xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2I3MTBiYmEtZmMwNC0z NzQxLTk3MGQtNzYyMmQ5OGM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQo5Kfq8q1KaP7IODG9YILJZg7npHgiziC4MjiiY9NGce/8pkmjfgt/ VomlANDrDMoPpany1aAcSxGc1cEBFN3ebgNZlQ15g+y3iW74fi1PBVsW0/wh6BiN g05cFHCzsW9KTwYSqfQKOPr/wwN7HFnf0SzzpFH30Hkf9ibGGw+2vbjna7a8+CiO LD2QP8NIIdwSg5k0LntGho8cXpP0hxMCVC2ddy5gsVOtOcxIzyPKQBf1FiQXlkpa 42VFU3iUv2EM8Ng3/e4v9OfjlQqRqs8kXYKujOitywQCkOdCLz76wjCSM9vy2t0K MYw7Ke7D0XJNiWvevpJOyclc2ael/Es= -----END CERTIFICATE-----Generated at Wed Aug 6 09:31:13 2025 by rpki-client