$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa File: 3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa (raw, json) Hash identifier: dDcfrxqPmH4pAdHt3LoHwlc/2wMJC/p6timUKOBKrZE= Subject key identifier: AD:2B:3B:EC:68:99:70:8E:C4:F2:0C:40:F0:D2:41:9B:33:5F:C1:E1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B2CF6DEFCF593D091605CFD80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 19181 IP address blocks: 131.153.224.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:de:fc:f5:93:d0:91:60:5c:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=65dbdafc-bc2e-4850-83dd-41d0497a43cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:fe:f2:e6:a5:0a:18:9f:30:3b:ec:4f:30:1a: 3b:a9:1b:76:50:6d:b2:b8:34:4f:f3:32:d2:3a:62: 02:d1:8f:36:5d:53:95:92:d9:bb:5f:c6:17:24:b2: 3d:64:0b:55:00:8c:2b:44:5d:dc:fb:a1:4c:68:88: 36:6f:af:ec:6b:2b:4e:73:04:bb:46:a2:a9:74:86: b1:59:d4:66:5d:13:f4:15:80:3f:5d:7a:51:c8:df: 62:42:4c:c7:df:2f:e6:3a:12:70:c5:a1:1d:67:15: cd:d9:50:8c:1d:9a:a3:b9:02:03:e4:57:90:ed:f1: 54:d2:b6:ec:74:ab:b9:98:fd:b6:57:79:27:9d:b5: 17:79:2c:04:4f:2e:1a:b0:6b:16:34:71:a1:59:f3: e3:0f:53:78:e5:42:cf:b6:b1:0c:2b:2e:3b:a4:f0: 84:45:dc:d7:7e:d8:5d:7a:ad:c0:4b:99:10:aa:2f: 7f:fd:92:ac:cb:ee:b8:55:80:c6:47:58:09:80:b3: 73:a3:e7:91:d7:cf:e1:ea:cc:03:e2:80:7d:33:1b: da:41:ad:97:65:13:8c:99:80:e4:76:6f:92:d8:35: 75:37:d6:be:0e:c9:e5:70:33:83:fe:c8:82:07:b2: 5b:66:ca:c2:e1:3a:a6:d9:87:79:02:ab:3c:19:46: 69:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2B:3B:EC:68:99:70:8E:C4:F2:0C:40:F0:D2:41:9B:33:5F:C1:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ab54a66-25b0-3e50-a398-0c25be9a9b70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:54:0f:0b:2a:0a:b1:ef:2c:80:af:99:fd:77:b8:ab:f6:5a: 80:80:b9:3e:97:d3:64:0a:7a:f8:2b:05:6d:2b:80:a7:35:00: 42:b7:59:53:02:6a:c6:77:90:6f:0b:32:9b:b8:f4:5d:c3:da: 1d:09:5f:7d:8b:2a:1a:19:20:8b:ff:7b:d7:9e:e8:59:f8:a2: 4a:22:7b:36:49:b3:ca:d8:c8:96:bc:1f:fb:64:3e:45:3a:47: d5:65:46:17:49:99:59:56:c5:03:8f:28:b5:82:70:c6:86:f1: a7:a4:4d:36:65:60:dc:2d:3c:2a:96:78:8a:9f:64:6d:b5:b8: 41:66:73:49:a3:86:8f:3b:7c:1c:51:d3:90:23:31:62:59:65: d2:91:af:e2:fc:89:08:6b:10:93:55:16:f6:c4:26:40:4d:21: 98:17:8a:d2:94:94:6a:c9:c6:6a:44:b1:f9:c7:ba:39:95:09: a5:1f:92:db:4f:b9:53:d0:95:8f:3a:2c:72:f8:66:f3:02:75: a4:9a:b0:71:e3:d6:99:b4:9a:e7:0b:94:9e:02:2a:f8:35:8e: 53:58:5b:35:7f:19:fe:32:09:43:ab:bd:85:b2:d0:29:a3:c3: 39:41:ed:d1:03:d9:3d:b9:7b:07:aa:b9:6b:04:f1:a4:c5:77: 15:eb:22:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9t789ZPQkWBc/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk NjVkYmRhZmMtYmMyZS00ODUwLTgzZGQtNDFkMDQ5N2E0M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2P7y5qUKGJ8wO+xPMBo7qRt2UG2yuDRP8zLS OmIC0Y82XVOVktm7X8YXJLI9ZAtVAIwrRF3c+6FMaIg2b6/saytOcwS7RqKpdIax WdRmXRP0FYA/XXpRyN9iQkzH3y/mOhJwxaEdZxXN2VCMHZqjuQID5FeQ7fFU0rbs dKu5mP22V3knnbUXeSwETy4asGsWNHGhWfPjD1N45ULPtrEMKy47pPCERdzXfthd eq3AS5kQqi9//ZKsy+64VYDGR1gJgLNzo+eR18/h6swD4oB9MxvaQa2XZROMmYDk dm+S2DV1N9a+DsnlcDOD/siCB7JbZsrC4Tqm2Yd5Aqs8GUZpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0rO+xomXCOxPIMQPDSQZszX8HhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2FiNTRhNjYtMjViMC0z ZTUwLWEzOTgtMGMyNWJlOWE5YjcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFUDwsqCrHvLICvmf13uKv2WoCAuT6X02QKevgrBW0rgKc1AEK3WVMC asZ3kG8LMpu49F3D2h0JX32LKhoZIIv/e9ee6Fn4okoiezZJs8rYyJa8H/tkPkU6 R9VlRhdJmVlWxQOPKLWCcMaG8aekTTZlYNwtPCqWeIqfZG21uEFmc0mjho87fBxR 05AjMWJZZdKRr+L8iQhrEJNVFvbEJkBNIZgXitKUlGrJxmpEsfnHujmVCaUfkttP uVPQlY86LHL4ZvMCdaSasHHj1pm0mucLlJ4CKvg1jlNYWzV/Gf4yCUOrvYWy0Cmj wzlB7dED2T25ewequWsE8aTFdxXrIls= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:37 2025 by rpki-client