$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa File: db061df5-cce6-33ed-9e57-80dd3d303f28.roa (raw, json) Hash identifier: 6Y2Svcpwg7PfZKwX/PdJ6aWQzgqTooYovQ81brsh5YM= Subject key identifier: 2E:1B:89:3D:00:3B:88:F7:00:D3:AC:B6:74:E4:F8:FD:81:10:47:9B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584AFC1BF583955B6C98B3673300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 400672 IP address blocks: 131.153.87.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1b:f5:83:95:5b:6c:98:b3:67:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=f5747b1e-c94d-4263-9dea-5858771dd12c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:10:8f:e6:98:f6:4c:57:8f:12:24:ce:1f:96: ed:f9:0b:20:13:51:12:cb:44:91:f2:56:00:86:8e: 3f:bb:07:d5:af:62:44:e2:1b:4f:97:66:40:be:b3: 58:55:12:9c:54:23:fe:d4:8f:17:83:2f:b0:d3:02: cc:b1:40:e7:ac:ee:57:62:2c:de:cc:f5:a3:6c:a4: 01:ff:e4:d5:e8:d8:68:ed:39:42:9a:a2:64:23:e9: fd:cb:6e:08:7d:96:10:c5:5e:4c:06:a4:88:01:5c: 89:ca:61:e9:0b:a8:44:48:19:44:4e:9f:14:6f:48: 17:26:80:85:fb:e2:26:e4:db:28:0b:b7:e4:f4:42: da:3b:54:e4:da:1a:01:85:70:b6:7e:75:31:78:a5: 3f:e1:8b:00:87:bc:e4:a2:b9:e5:98:28:7c:91:e3: 97:00:f5:cb:fc:40:89:4c:99:fe:c0:09:0c:df:70: 64:02:7e:96:58:0f:eb:d0:1d:dd:f3:40:61:ea:81: 2e:22:13:0a:05:17:43:19:ad:fd:4c:07:50:48:c1: c1:9e:a4:a5:d6:4e:e1:82:f7:6a:27:7d:b2:31:75: 4f:9e:20:24:91:a1:7e:dc:2d:5d:f1:6a:15:7e:28: 79:6a:6f:a1:87:88:b4:2b:29:e1:46:01:1e:32:8d: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1B:89:3D:00:3B:88:F7:00:D3:AC:B6:74:E4:F8:FD:81:10:47:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db061df5-cce6-33ed-9e57-80dd3d303f28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:72:14:28:c2:8a:a0:5b:d7:3f:1f:3a:c0:25:96:2a:3a:79: 29:b4:c6:fc:8d:d2:7b:ef:50:5c:39:50:a5:c1:d8:b9:8f:76: 5e:04:f6:06:28:22:a4:b1:ff:e0:f0:2c:ef:80:55:e1:f2:02: 66:72:22:8c:53:ed:28:22:7a:70:39:e3:49:3a:70:44:41:17: 06:6c:c5:12:25:b2:b9:ec:af:cf:d3:b9:75:64:99:a0:05:7c: 06:3e:7e:f1:c6:08:0a:1b:60:1a:f5:a8:86:f2:e6:32:53:a2: 46:45:41:fc:9c:de:31:46:6a:79:b2:db:73:fc:eb:50:91:c5: 86:a8:98:d8:24:43:1c:17:06:83:98:ff:3d:fe:03:02:5d:cf: e3:55:1d:07:72:a9:c8:05:7a:05:5a:de:47:fe:2a:a1:20:22: 5f:3a:c5:45:f3:47:8a:32:b8:fb:4d:da:d5:43:c6:71:b4:fe: a1:9b:2b:29:ea:24:24:0b:06:bc:36:eb:b6:4c:6b:ad:7c:05: 9c:b9:55:8c:57:33:57:3e:2e:9e:c0:a0:35:e0:5b:9b:d0:7f: 35:5e:66:4a:7e:25:fe:5a:89:e4:2c:9b:ed:b4:84:9d:06:c1: 2b:fa:6e:8f:2e:cf:6e:ed:41:0b:f9:7d:07:0f:36:20:62:f1: 80:b4:cc:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8G/WDlVtsmLNnMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjU3NDdiMWUtYzk0ZC00MjYzLTlkZWEtNTg1ODc3MWRkMTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBCP5pj2TFePEiTOH5bt+QsgE1ESy0SR8lYA ho4/uwfVr2JE4htPl2ZAvrNYVRKcVCP+1I8Xgy+w0wLMsUDnrO5XYizezPWjbKQB /+TV6Nho7TlCmqJkI+n9y24IfZYQxV5MBqSIAVyJymHpC6hESBlETp8Ub0gXJoCF ++Im5NsoC7fk9ELaO1Tk2hoBhXC2fnUxeKU/4YsAh7zkornlmCh8keOXAPXL/ECJ TJn+wAkM33BkAn6WWA/r0B3d80Bh6oEuIhMKBRdDGa39TAdQSMHBnqSl1k7hgvdq J32yMXVPniAkkaF+3C1d8WoVfih5am+hh4i0KynhRgEeMo0mkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4biT0AO4j3ANOstnTk+P2BEEebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNjFkZjUtY2NlNi0z M2VkLTllNTctODBkZDNkMzAzZjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9yFCjCiqBb1z8fOsAllio6eSm0xvyN0nvvUFw5UKXB2LmPdl4E9gYo IqSx/+DwLO+AVeHyAmZyIoxT7SgienA540k6cERBFwZsxRIlsrnsr8/TuXVkmaAF fAY+fvHGCAobYBr1qIby5jJTokZFQfyc3jFGanmy23P861CRxYaomNgkQxwXBoOY /z3+AwJdz+NVHQdyqcgFegVa3kf+KqEgIl86xUXzR4oyuPtN2tVDxnG0/qGbKynq JCQLBrw267ZMa618BZy5VYxXM1c+Lp7AoDXgW5vQfzVeZkp+Jf5aieQsm+20hJ0G wSv6bo8uz27tQQv5fQcPNiBi8YC0zMQ= -----END CERTIFICATE-----Generated at Fri Oct 10 22:01:49 2025 by rpki-client