$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa File: dcaafa36-cbc9-3741-b66e-6b1039749e40.roa (raw, json) Hash identifier: 3OvoPTZaY+SisElSTbt1xFCTmpHw7Szt8DCQbxzE6RQ= Subject key identifier: 6B:C3:48:07:F0:4D:41:28:DB:6A:8B:1E:E1:41:BC:0E:D1:C4:45:96 Certificate issuer: /CN=34f935ff-170a-4b14-b64c-790e52fa9534 Certificate serial: 010D0C9F4328584AC8764B8EA3987B9116B66680 Authority key identifier: FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 8111 IP address blocks: 131.162.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:4b:8e:a3:98:7b:91:16:b6:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f935ff-170a-4b14-b64c-790e52fa9534 Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=174630cb-3863-4947-82f3-6e2410b67845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:3b:c0:45:7e:de:10:fa:cc:8a:fb:d6:b2: f9:ef:22:c9:96:a9:38:7b:7a:80:0a:1b:0a:4e:90: 4a:e7:8a:0f:01:91:62:08:6d:76:6d:cf:a4:de:e7: e5:ee:41:6c:74:39:f9:67:08:94:05:d1:b6:32:ec: 4c:a9:8d:37:78:18:5c:fc:fc:03:ae:93:d4:c0:ce: 35:dd:28:0f:b9:06:c8:04:92:9e:76:fb:f6:60:69: 53:5c:82:62:84:82:0b:67:5e:d4:a6:91:57:5c:9e: 24:a2:59:1a:24:3f:20:09:3e:ca:d2:2f:3e:cd:93: 88:3e:89:fd:27:3d:30:15:28:74:16:6a:5b:fe:2e: 55:ea:e7:a5:f3:f0:61:15:01:82:7a:32:71:7e:45: b6:ad:3b:ef:bc:bf:7b:00:8e:b3:b7:55:93:6e:68: 4a:7a:eb:09:b6:6d:32:1b:e4:40:5c:02:c0:be:c4: b4:4e:1b:ca:4c:ce:4f:13:7d:33:73:c3:bd:41:09: 5f:f7:54:39:3e:5e:15:d1:e8:58:0f:18:79:8c:98: 56:80:f7:da:0e:5b:34:20:5b:cc:17:48:2c:f6:99: 9f:f0:c5:21:70:a3:3c:ed:98:cb:af:a0:58:1c:d7: 71:cd:30:bf:fe:61:e2:09:6a:38:a7:d7:13:64:a7: d5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:48:07:F0:4D:41:28:DB:6A:8B:1E:E1:41:BC:0E:D1:C4:45:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/dcaafa36-cbc9-3741-b66e-6b1039749e40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534/34f935ff-170a-4b14-b64c-790e52fa9534.crl X509v3 Authority Key Identifier: keyid:FB:D8:7A:7D:73:3B:56:9C:59:45:D9:AF:88:BC:6A:21:D6:B2:5D:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/34f935ff-170a-4b14-b64c-790e52fa9534.cer sbgp-ipAddrBlock: critical IPv4: 131.162.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:26:0a:5e:5f:c5:d5:c1:8e:a8:b8:df:ea:60:20:c0:80:c3: 03:5a:1a:22:47:18:58:b3:63:00:ab:4a:0f:b1:58:b3:04:06: e5:49:83:f3:b5:c3:72:b1:4d:55:58:22:6e:6f:e7:fa:b5:fd: ca:9a:8c:6c:ac:a3:65:a2:52:a7:64:79:14:fa:34:b1:17:a6: 95:0b:e9:c6:1d:5f:2b:9c:aa:58:f2:27:27:e0:68:74:3c:c6: 6d:97:5c:a4:df:8a:fd:e7:72:cf:d6:dd:f4:3a:13:11:e0:e5: 0b:bd:4d:75:15:00:33:c1:5b:97:c5:96:32:96:c5:ae:20:2a: c5:25:e5:fa:5e:ca:b7:1b:27:3c:ba:89:a0:ce:d3:5b:ed:a7: 5c:ed:a7:fd:33:6e:ef:74:fc:8d:95:d1:11:a9:72:05:88:c4: 37:d1:8b:53:d1:c2:35:04:46:e5:34:ff:89:84:06:f7:57:8d: 83:2b:e2:16:09:11:7c:0c:f9:0a:6b:be:a5:14:e3:23:aa:23: 57:3d:bb:5c:8b:12:e1:9e:9b:13:9f:4c:04:af:d4:77:65:13: 15:fe:33:23:6b:ef:8d:c8:c6:8a:f8:3d:d9:00:7f:4a:83:79: b1:95:b0:47:bd:ae:a6:07:91:d5:90:9c:ba:33:c8:44:a3:e8: 7b:c9:a9:e3 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErIdkuOo5h7kRa2ZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRmOTM1ZmYtMTcwYS00YjE0LWI2NGMtNzkwZTUyZmE5 NTM0MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MTc0NjMwY2ItMzg2My00OTQ3LTgyZjMtNmUyNDEwYjY3ODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKg7wEV+3hD6zIr71rL57yLJlqk4e3qAChsK TpBK54oPAZFiCG12bc+k3ufl7kFsdDn5ZwiUBdG2MuxMqY03eBhc/PwDrpPUwM41 3SgPuQbIBJKedvv2YGlTXIJihIILZ17UppFXXJ4kolkaJD8gCT7K0i8+zZOIPon9 Jz0wFSh0Fmpb/i5V6uel8/BhFQGCejJxfkW2rTvvvL97AI6zt1WTbmhKeusJtm0y G+RAXALAvsS0ThvKTM5PE30zc8O9QQlf91Q5Pl4V0ehYDxh5jJhWgPfaDls0IFvM F0gs9pmf8MUhcKM87ZjLr6BYHNdxzTC//mHiCWo4p9cTZKfVgwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGvDSAfwTUEo22qLHuFBvA7RxEWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5 MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBlNTJmYTk1MzQvZGNhYWZhMzYtY2JjOS0z NzQxLWI2NmUtNmIxMDM5NzQ5ZTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzRmOTM1ZmYtMTcwYS00YjE0LWI2 NGMtNzkwZTUyZmE5NTM0LzM0ZjkzNWZmLTE3MGEtNGIxNC1iNjRjLTc5MGU1MmZh OTUzNC5jcmwwHwYDVR0jBBgwFoAU+9h6fXM7VpxZRdmviLxqIdayXY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNGY5MzVmZi0xNzBhLTRiMTQtYjY0Yy03OTBl NTJmYTk1MzQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAg6IwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAYyYKXl/F1cGOqLjf6mAgwIDDA1oaIkcYWLNjAKtKD7FYswQG5UmD87XD crFNVVgibm/n+rX9ypqMbKyjZaJSp2R5FPo0sRemlQvpxh1fK5yqWPInJ+BodDzG bZdcpN+K/edyz9bd9DoTEeDlC71NdRUAM8Fbl8WWMpbFriAqxSXl+l7KtxsnPLqJ oM7TW+2nXO2n/TNu73T8jZXREalyBYjEN9GLU9HCNQRG5TT/iYQG91eNgyviFgkR fAz5Cmu+pRTjI6ojVz27XIsS4Z6bE59MBK/Ud2UTFf4zI2vvjcjGivg92QB/SoN5 sZWwR72upgeR1ZCcujPIRKPoe8mp4w== -----END CERTIFICATE-----Generated at Thu Aug 21 07:17:03 2025 by rpki-client