$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa File: befbf2d4-33bd-301f-926b-a3513a089308.roa (raw, json) Hash identifier: AbL6LZb/Oif6C6zlWkGl3nPEHe9VbhjFb1/vYlTrOFY= Subject key identifier: 84:52:22:15:96:42:A1:64:8F:A0:D6:AB:F9:D1:6B:5B:F5:D2:CE:35 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584A5FC5D836B69B2415F3A64980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 400275 IP address blocks: 131.153.204.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d8:36:b6:9b:24:15:f3:a6:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=fcf54959-39c8-45e5-844d-26a85c727ef2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4e:46:14:c5:b9:83:d9:35:48:16:d3:dc:cd: d2:ef:80:33:42:d8:be:ce:9b:4f:4f:48:21:29:82: 34:aa:05:05:ec:72:3c:68:06:04:1a:c2:f3:df:ff: 76:a9:3f:34:91:a8:0d:19:93:8a:db:dc:a3:75:09: c6:48:1e:c2:88:82:ca:20:80:fc:36:14:b1:a6:d3: db:1e:90:19:65:d9:ac:ee:07:5c:0f:28:e1:9d:b2: f5:92:01:4d:7b:d9:0f:e2:7b:06:10:7a:7e:6a:af: d3:8c:39:e1:0f:8b:97:e5:0f:1e:61:ad:9b:69:2f: 25:7b:21:70:a3:f5:a8:d5:16:65:ce:6d:5a:3a:f2: 9c:47:71:16:f0:8d:3b:96:4a:e5:aa:a6:11:07:0e: 33:2d:e8:10:d9:34:1c:b7:5a:24:ae:6a:52:3f:c5: 8e:c8:de:2f:97:56:42:43:ed:6a:e3:86:5a:85:54: 78:41:f3:dc:55:21:6d:5c:88:b5:10:27:f2:cc:ce: a1:dc:59:4d:0b:ac:1e:90:00:34:ca:90:a6:e4:e0: 2d:1a:68:64:bc:63:a2:6e:2c:4d:07:48:70:7a:89: ce:03:4c:d5:b7:7a:a6:b8:46:70:41:9e:a5:78:c0: 00:3a:91:02:3d:f9:cc:11:35:91:47:34:b9:cc:d2: 6b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:52:22:15:96:42:A1:64:8F:A0:D6:AB:F9:D1:6B:5B:F5:D2:CE:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befbf2d4-33bd-301f-926b-a3513a089308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:7f:df:c1:06:e6:f9:64:c3:a6:25:35:8d:e4:27:a9:db:39: 7e:b0:2b:81:0b:68:1b:ff:74:61:c0:76:8c:11:72:4b:cb:cb: 57:ad:54:78:a0:11:33:d9:59:f6:87:23:e0:fd:3a:99:c8:0b: a6:e9:07:7b:82:66:80:c8:2f:8a:d5:16:89:f3:b1:2f:48:2c: 6c:4c:24:cc:7b:7c:a8:7b:51:ad:80:ad:ab:97:d7:6d:91:49: b4:48:af:f0:5b:64:b9:62:d3:f9:a8:08:b8:24:30:1a:f6:38: 07:09:d0:ed:be:eb:9b:dc:83:3a:30:87:79:6b:80:6e:0f:4c: 76:e4:4d:92:4e:7f:1b:f8:b8:67:bf:94:15:93:d2:1a:71:3d: 7f:0f:a8:54:28:a2:91:1c:05:81:6f:26:d7:14:75:2e:8a:1a: 89:5b:0c:45:ac:47:e8:d0:4a:1c:c1:d3:b5:eb:f3:70:17:10: ef:f0:73:e1:7a:d5:2c:2c:5e:2f:a7:5b:23:db:63:7f:2e:b3: 17:a3:51:0a:38:95:42:3c:70:85:16:7f:24:94:2a:3b:0f:e5: 42:8b:be:7b:64:2e:00:61:29:ac:9b:32:88:af:42:77:7e:18: 57:1f:9b:0b:f1:39:8a:c8:bd:fa:02:94:8d:3a:1e:5f:5c:73: 06:85:36:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdg2tpskFfOmSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmNmNTQ5NTktMzljOC00NWU1LTg0NGQtMjZhODVjNzI3ZWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU5GFMW5g9k1SBbT3M3S74AzQti+zptPT0gh KYI0qgUF7HI8aAYEGsLz3/92qT80kagNGZOK29yjdQnGSB7CiILKIID8NhSxptPb HpAZZdms7gdcDyjhnbL1kgFNe9kP4nsGEHp+aq/TjDnhD4uX5Q8eYa2baS8leyFw o/Wo1RZlzm1aOvKcR3EW8I07lkrlqqYRBw4zLegQ2TQct1okrmpSP8WOyN4vl1ZC Q+1q44ZahVR4QfPcVSFtXIi1ECfyzM6h3FlNC6wekAA0ypCm5OAtGmhkvGOibixN B0hweonOA0zVt3qmuEZwQZ6leMAAOpECPfnMETWRRzS5zNJr+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRSIhWWQqFkj6DWq/nRa1v10s41MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYmYyZDQtMzNiZC0z MDFmLTkyNmItYTM1MTNhMDg5MzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADR/38EG5vlkw6YlNY3kJ6nbOX6wK4ELaBv/dGHAdowRckvLy1etVHig ETPZWfaHI+D9OpnIC6bpB3uCZoDIL4rVFonzsS9ILGxMJMx7fKh7Ua2ArauX122R SbRIr/BbZLli0/moCLgkMBr2OAcJ0O2+65vcgzowh3lrgG4PTHbkTZJOfxv4uGe/ lBWT0hpxPX8PqFQoopEcBYFvJtcUdS6KGolbDEWsR+jQShzB07Xr83AXEO/wc+F6 1SwsXi+nWyPbY38usxejUQo4lUI8cIUWfySUKjsP5UKLvntkLgBhKaybMoivQnd+ GFcfmwvxOYrIvfoClI06Hl9ccwaFNlA= -----END CERTIFICATE-----Generated at Wed Jul 9 15:54:27 2025 by rpki-client