$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa File: f6f9a004-d208-326b-81c8-642c2ada7bb8.roa (raw, json) Hash identifier: P/3Z2ddL1f+eLNTJCy8N8Tnn5sN6bWIW0EQKvzudrCs= Subject key identifier: 2E:02:28:63:94:71:34:82:2F:9E:3B:AF:9F:EF:20:C7:3E:FB:53:7A Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B0A1169A18A9738029ED52300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 152879 IP address blocks: 131.153.230.0/24 maxlen: 32 131.153.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:69:a1:8a:97:38:02:9e:d5:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=aa5b414d-0330-4d22-9554-86faae6fdb9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ef:fe:fb:2c:9a:97:71:6e:ef:cc:fb:41:c8: 38:d9:30:d5:05:28:97:fe:a8:e0:f8:46:55:1a:17: 6c:30:1c:c5:67:62:9e:5b:fe:30:8b:26:ea:38:3f: e7:2d:4f:5d:1b:21:6c:0c:ce:08:53:1e:37:e6:d6: c3:72:95:0d:fb:2d:51:a3:30:96:83:c8:6c:fc:da: 8f:90:8d:e7:a4:31:8f:60:2f:bf:66:f5:19:30:0c: 8e:0e:2b:ea:00:12:4e:c7:05:52:b2:06:15:31:38: 58:1a:3d:13:4a:d1:8d:3a:47:86:e3:e4:61:9d:10: 8e:9f:df:1e:d4:18:34:57:4b:18:6b:f4:13:e1:ec: d8:ad:3d:16:5e:cf:47:d2:12:f5:1d:38:de:19:f5: 74:36:64:77:93:7a:9b:91:dd:41:3e:40:a2:93:b0: a6:2d:eb:3a:ff:a6:dd:37:4a:c3:78:c8:6b:83:7d: d0:fa:b4:8d:f0:79:6a:74:75:8e:3c:7f:b3:5a:ee: df:94:99:a4:a7:be:cf:64:d1:46:73:cf:63:ad:a3: 5a:85:fd:62:93:20:45:40:da:47:fe:ac:91:29:0c: b4:9f:3e:4c:7b:d3:e0:a3:3a:f6:2a:6e:50:b7:a6: d1:d9:be:54:02:9d:85:42:50:ad:ae:a2:1f:af:15: 6d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:02:28:63:94:71:34:82:2F:9E:3B:AF:9F:EF:20:C7:3E:FB:53:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.230.0/24 131.153.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:84:32:c8:1d:77:ac:8a:69:fc:5c:c3:ce:43:0e:d8:ae:18: 3b:01:ab:53:c0:74:aa:8a:e4:7f:70:3d:6c:f8:18:11:cc:6a: 74:f6:ee:1b:74:c0:3d:b0:98:31:b0:9a:7d:3a:eb:e4:41:92: 35:86:1a:7a:65:ee:13:ba:bb:d0:fb:7a:c4:59:f6:f3:ef:d4: 2f:6e:b8:64:d1:b7:4e:ed:a5:83:01:0f:c3:d3:d2:d2:cd:a4: 05:7e:f5:86:32:43:61:1e:fd:e7:13:15:c5:de:7a:5d:00:ed: 8d:eb:f9:4c:24:92:18:b2:e3:03:55:cd:5a:96:09:33:9d:83: d2:03:9e:1e:7c:f4:72:00:75:86:84:58:72:38:1e:23:10:e5: d6:84:6c:fe:ff:f8:c5:47:4f:88:de:c6:01:ca:ea:64:a4:5e: 6b:34:71:5c:85:09:0d:f9:2d:9a:c4:c3:65:aa:79:e6:89:6a: 78:01:c8:87:8d:30:78:13:23:d4:bc:21:0e:53:d6:2f:dd:b0: 01:c5:dc:58:07:92:a4:93:0d:da:0f:52:f1:50:94:b9:5e:00: 4f:e7:7e:2e:62:cd:a2:52:bf:49:b8:6d:3b:17:65:fe:f5:df: 83:7f:89:e6:9b:27:74:c6:20:df:09:ff:e2:62:36:9f:bb:6c: 32:e2:1c:15 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsKEWmhipc4Ap7VIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YWE1YjQxNGQtMDMzMC00ZDIyLTk1NTQtODZmYWFlNmZkYjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+/++yyal3Fu78z7Qcg42TDVBSiX/qjg+EZV GhdsMBzFZ2KeW/4wiybqOD/nLU9dGyFsDM4IUx435tbDcpUN+y1RozCWg8hs/NqP kI3npDGPYC+/ZvUZMAyODivqABJOxwVSsgYVMThYGj0TStGNOkeG4+RhnRCOn98e 1Bg0V0sYa/QT4ezYrT0WXs9H0hL1HTjeGfV0NmR3k3qbkd1BPkCik7CmLes6/6bd N0rDeMhrg33Q+rSN8HlqdHWOPH+zWu7flJmkp77PZNFGc89jraNahf1ikyBFQNpH /qyRKQy0nz5Me9Pgozr2Km5Qt6bR2b5UAp2FQlCtrqIfrxVt6QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC4CKGOUcTSCL547r5/vIMc++1N6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjZmOWEwMDQtZDIwOC0z MjZiLTgxYzgtNjQyYzJhZGE3YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg5nmAwQA g5n1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFaEMsgdd6yKafxcw85DDtiuGDsBq1PAdKqK5H9wPWz4GBHM anT27ht0wD2wmDGwmn066+RBkjWGGnpl7hO6u9D7esRZ9vPv1C9uuGTRt07tpYMB D8PT0tLNpAV+9YYyQ2Ee/ecTFcXeel0A7Y3r+Uwkkhiy4wNVzVqWCTOdg9IDnh58 9HIAdYaEWHI4HiMQ5daEbP7/+MVHT4jexgHK6mSkXms0cVyFCQ35LZrEw2WqeeaJ angByIeNMHgTI9S8IQ5T1i/dsAHF3FgHkqSTDdoPUvFQlLleAE/nfi5izaJSv0m4 bTsXZf7134N/ieabJ3TGIN8J/+JiNp+7bDLiHBU= -----END CERTIFICATE-----Generated at Sun Oct 19 17:51:52 2025 by rpki-client