$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa File: ea53d572-5bb7-36a2-b587-3aaa2690505e.roa (raw, json) Hash identifier: 27nnwTfTrVTQaPJ7AmSG+IWfq7LAz1CQ85BUX3TVzc0= Subject key identifier: 91:B8:91:CD:49:EF:A9:24:CB:95:54:E2:97:F9:42:04:41:65:A5:AA Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B477C6F8D2AA3ED42E3116B80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa Signing time: Mon 22 Sep 2025 13:00:42 +0000 ROA not before: Mon 22 Sep 2025 13:00:42 +0000 ROA not after: Sun 21 Dec 2025 14:00:42 +0000 asID: 20454 IP address blocks: 131.153.226.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:7c:6f:8d:2a:a3:ed:42:e3:11:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 22 13:00:42 2025 GMT Not After : Dec 21 14:00:42 2025 GMT Subject: CN=5bc8be8d-5d25-4334-86c5-76495f524cc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ab:d8:ee:a4:ff:d9:a7:fb:31:9c:2e:af:68: bf:30:46:b5:dc:69:34:b8:81:73:7a:95:11:db:05: 85:39:8d:60:0e:2c:17:c5:4a:d7:7f:69:30:85:1c: 39:35:81:78:8a:34:be:87:fc:ef:b1:d7:9f:35:d2: 19:8b:f4:5a:8e:26:cb:85:a2:89:ed:9e:75:d0:63: ec:53:6c:a5:73:35:83:4b:d3:33:8c:a4:f8:1a:e0: 9c:81:69:c9:d0:a4:d1:f2:e4:69:a3:57:06:cf:54: a6:17:d8:8d:1b:e7:7a:0c:d8:f4:a6:a5:90:20:77: 5b:67:f2:2d:3a:52:30:04:29:53:5d:e3:fe:69:c7: 3b:dc:bf:e4:14:44:1d:1e:cb:95:69:0c:15:e7:56: ab:13:b7:66:ba:5b:d0:b0:99:3c:b5:d2:24:ab:b5: 6e:58:5a:02:c3:2c:f8:99:46:a4:4d:92:e7:b5:aa: 81:65:46:89:51:b0:15:7d:36:60:43:ac:58:57:34: 6c:3f:7f:08:d6:9f:e9:7b:77:f2:df:30:e2:c2:40: be:32:6b:44:66:4a:44:65:ea:54:42:b1:b5:56:25: 4b:1a:93:af:4e:d3:f0:0c:38:a3:cf:ad:f2:be:08: 25:9d:4b:61:2b:97:33:9f:c9:88:81:70:28:75:9e: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B8:91:CD:49:EF:A9:24:CB:95:54:E2:97:F9:42:04:41:65:A5:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ea53d572-5bb7-36a2-b587-3aaa2690505e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:71:20:88:21:fb:22:6b:ef:01:d9:87:70:b4:9c:42:5a:9d: d6:a2:d2:b4:55:5c:93:42:f5:6b:8a:82:dc:3f:f1:36:75:91: 72:bc:ae:3f:3a:9d:0e:1f:fe:db:c0:63:3a:44:7c:02:e8:d3: b4:16:87:19:84:2c:8c:3d:c7:21:ef:41:0a:f6:d7:4c:76:87: a5:20:ee:d3:fa:90:aa:c7:30:df:77:fe:f3:0d:0f:0b:0d:76: 17:6b:59:d5:f3:03:b0:42:e5:41:0c:d9:96:55:78:88:14:96: ea:7c:ec:69:8b:4d:7e:4d:73:4d:d2:a2:6f:21:1d:c1:81:46: 9b:b4:fc:0f:24:be:62:df:b5:79:86:70:b6:bc:f4:8f:0b:48: ab:36:21:b7:af:b4:36:af:fe:fd:e6:c0:d0:db:b4:04:59:f9: e0:49:18:3d:f3:4b:a4:4c:2c:fc:af:27:4d:23:48:f4:28:ae: c9:66:e4:fd:5f:7c:ce:e1:3a:a0:0b:9a:d1:ad:b0:3f:f8:c0: 0b:aa:73:cd:83:ca:1f:5d:21:10:78:3f:ba:b9:aa:cb:95:00: 54:16:92:89:de:f3:79:1e:a3:0b:bb:00:74:f5:91:bc:20:aa: ef:49:2b:71:68:c5:e0:27:42:db:3f:9c:b9:6d:2d:e6:54:09: 9e:f4:ec:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHfG+NKqPtQuMRa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDkyMjEzMDA0MloXDTI1MTIyMTE0MDA0MlowLzEtMCsGA1UEAxMk NWJjOGJlOGQtNWQyNS00MzM0LTg2YzUtNzY0OTVmNTI0Y2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavY7qT/2af7MZwur2i/MEa13Gk0uIFzepUR 2wWFOY1gDiwXxUrXf2kwhRw5NYF4ijS+h/zvsdefNdIZi/RajibLhaKJ7Z510GPs U2ylczWDS9MzjKT4GuCcgWnJ0KTR8uRpo1cGz1SmF9iNG+d6DNj0pqWQIHdbZ/It OlIwBClTXeP+acc73L/kFEQdHsuVaQwV51arE7dmulvQsJk8tdIkq7VuWFoCwyz4 mUakTZLntaqBZUaJUbAVfTZgQ6xYVzRsP38I1p/pe3fy3zDiwkC+MmtEZkpEZepU QrG1ViVLGpOvTtPwDDijz63yvgglnUthK5czn8mIgXAodZ7QaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG4kc1J76kky5VU4pf5QgRBZaWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWE1M2Q1NzItNWJiNy0z NmEyLWI1ODctM2FhYTI2OTA1MDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5niMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdxIIgh+yJr7wHZh3C0nEJandai0rRVXJNC9WuKgtw/8TZ1kXK8rj86 nQ4f/tvAYzpEfALo07QWhxmELIw9xyHvQQr210x2h6Ug7tP6kKrHMN93/vMNDwsN dhdrWdXzA7BC5UEM2ZZVeIgUlup87GmLTX5Nc03Som8hHcGBRpu0/A8kvmLftXmG cLa89I8LSKs2IbevtDav/v3mwNDbtARZ+eBJGD3zS6RMLPyvJ00jSPQorslm5P1f fM7hOqALmtGtsD/4wAuqc82Dyh9dIRB4P7q5qsuVAFQWkone83keowu7AHT1kbwg qu9JK3FoxeAnQts/nLltLeZUCZ707LE= -----END CERTIFICATE-----Generated at Sun Oct 19 20:13:45 2025 by rpki-client