$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa File: 498edecf-1b28-3ff2-8e56-58ead838dea2.roa (raw, json) Hash identifier: 0LeI420j6wgGErNYUfEcdHFPIxow5vgKOG0ZKIsj5/k= Subject key identifier: CF:02:F2:D0:CB:60:D3:8A:FD:08:12:01:A2:3A:02:4D:D2:BA:DD:8D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD62468BE0C0263C4B73A100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 46385 IP address blocks: 131.153.84.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:46:8b:e0:c0:26:3c:4b:73:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=95850724-6928-41fc-a605-ec9aef8d43ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6d:f9:f6:1a:29:d6:97:13:11:a9:c8:0a:ff: e9:6c:74:a9:bf:ee:47:be:37:d0:42:17:c4:0e:b0: 01:61:42:43:11:cc:67:d5:fd:00:66:92:24:d7:2a: 54:37:31:3a:66:e8:23:1d:e2:d4:f7:04:39:28:01: 22:e3:9b:51:a0:d4:79:bd:7f:72:7f:0b:c1:f7:9c: 08:df:da:3d:39:f8:08:31:a3:bc:74:47:16:8b:05: 57:95:58:45:00:18:7e:b4:5e:a1:10:51:c3:c1:60: ed:b6:07:47:3b:93:5a:10:43:fa:8c:bd:c1:3d:9c: 7b:65:0e:48:63:75:ed:69:2b:be:71:c1:9d:1b:61: 3d:8e:e2:a8:ac:48:fd:1e:83:8d:bd:cc:94:0a:50: 5e:67:8e:ca:fb:0f:de:47:0e:28:0e:18:d5:f1:ea: 14:80:63:bd:36:15:f9:c7:04:5f:a5:52:76:95:21: b0:5b:39:c6:f4:b3:5b:f4:8b:6a:05:86:07:87:c2: a6:40:25:e6:20:40:b5:26:97:92:56:b7:a5:b5:5f: ff:17:a5:45:3c:1f:7e:fc:16:f0:a7:51:6d:aa:e8: 3b:49:2b:2b:84:57:14:b2:e7:88:2a:28:c6:c4:c0: fa:41:ac:a2:27:03:06:82:73:d0:4f:7f:6b:44:b8: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:02:F2:D0:CB:60:D3:8A:FD:08:12:01:A2:3A:02:4D:D2:BA:DD:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/498edecf-1b28-3ff2-8e56-58ead838dea2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:18:82:27:20:fa:59:33:bb:2c:65:f3:e4:fd:83:fc:ec:e9: ea:2d:a5:4b:d1:4a:2f:22:cd:0e:2a:b8:68:ad:8a:67:b3:7b: 38:75:36:f9:62:75:4f:df:20:62:8d:5b:ec:fc:b5:97:51:70: 26:1b:70:2d:1d:ec:04:b6:19:0c:21:34:45:97:31:d9:cc:ab: 89:14:07:ff:1b:ed:83:e0:26:63:db:0c:51:45:77:fe:36:61: 44:ca:04:cb:3b:d5:ac:7f:d9:b3:87:c1:1b:db:55:a9:7d:a2: 1a:1e:a4:52:84:5d:d5:53:f2:0a:8c:5a:4b:68:93:55:ac:02: d2:27:d6:4e:a4:91:0a:5d:4a:72:a3:03:12:64:95:db:69:be: 72:84:2c:f6:4f:6e:dc:e9:58:44:8a:89:91:cd:b5:05:9a:cf: fb:55:76:7f:1d:fd:9d:06:52:cd:61:79:a0:8a:77:c6:e7:c4: 7c:d1:d5:b4:a0:e0:08:bc:04:a1:e3:c8:14:82:65:2f:b3:d9: d3:01:c9:d5:4a:79:0d:e5:48:ce:9a:2e:f5:fa:99:01:ab:fc: 50:46:55:ac:52:b0:92:28:4e:24:b0:67:5f:e8:74:7a:93:08: a3:c6:b4:59:19:f1:55:94:fb:eb:f5:11:52:23:18:cc:e5:4b: 54:b4:f4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkaL4MAmPEtzoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk OTU4NTA3MjQtNjkyOC00MWZjLWE2MDUtZWM5YWVmOGQ0M2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm359hop1pcTEanICv/pbHSpv+5HvjfQQhfE DrABYUJDEcxn1f0AZpIk1ypUNzE6ZugjHeLU9wQ5KAEi45tRoNR5vX9yfwvB95wI 39o9OfgIMaO8dEcWiwVXlVhFABh+tF6hEFHDwWDttgdHO5NaEEP6jL3BPZx7ZQ5I Y3XtaSu+ccGdG2E9juKorEj9HoONvcyUClBeZ47K+w/eRw4oDhjV8eoUgGO9NhX5 xwRfpVJ2lSGwWznG9LNb9ItqBYYHh8KmQCXmIEC1JpeSVreltV//F6VFPB9+/Bbw p1Ftqug7SSsrhFcUsueIKijGxMD6QayiJwMGgnPQT39rRLgz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8C8tDLYNOK/QgSAaI6Ak3Sut2NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNDk4ZWRlY2YtMWIyOC0z ZmYyLThlNTYtNThlYWQ4MzhkZWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAYgicg+lkzuyxl8+T9g/zs6eotpUvRSi8izQ4quGitimezezh1Nvli dU/fIGKNW+z8tZdRcCYbcC0d7AS2GQwhNEWXMdnMq4kUB/8b7YPgJmPbDFFFd/42 YUTKBMs71ax/2bOHwRvbVal9ohoepFKEXdVT8gqMWktok1WsAtIn1k6kkQpdSnKj AxJkldtpvnKELPZPbtzpWESKiZHNtQWaz/tVdn8d/Z0GUs1heaCKd8bnxHzR1bSg 4Ai8BKHjyBSCZS+z2dMBydVKeQ3lSM6aLvX6mQGr/FBGVaxSsJIoTiSwZ1/odHqT CKPGtFkZ8VWU++v1EVIjGMzlS1S09Ck= -----END CERTIFICATE-----Generated at Tue Nov 4 23:38:58 2025 by rpki-client