$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json) Hash identifier: LyAd1eTuoWfy5qqY6F5NkX1HXiLD0kQZ8kV2hrk1Nf8= Subject key identifier: B9:73:B4:F5:8B:21:8A:59:B2:4A:88:55:CC:AD:CA:75:E4:EF:0A:F0 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BB2F7AD15AFA387824E68E340 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 19437 IP address blocks: 131.153.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:ad:15:af:a3:87:82:4e:68:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=a34fe2b6-8af7-406d-9246-bb8890f091bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:d4:4a:cf:59:e7:8d:f0:59:22:d3:4b:fa: d2:e6:fa:23:f2:63:b0:d7:71:7d:c8:fe:c0:23:c3: bf:9a:cb:ce:45:ea:e0:45:99:f8:95:db:de:f5:7f: 75:94:90:cd:f9:b7:d6:1c:0b:fc:37:b9:16:06:19: ae:37:d2:bb:51:a0:23:ae:9b:44:ce:16:41:39:86: 91:be:f4:ee:62:d1:9e:5b:2f:d8:8f:15:a5:64:c7: bd:ab:a6:2b:4c:a8:c7:eb:b4:6a:52:08:39:4a:59: 16:22:f8:e3:0b:eb:29:d1:9b:04:4f:2e:bd:c6:37: 4e:a6:78:ff:b6:2d:4f:71:e8:21:67:fb:c4:20:ab: a7:ec:f6:6d:d5:e5:32:c8:68:1a:df:b9:fc:63:00: f1:ec:b2:01:1f:70:41:95:e9:da:09:bf:76:ff:c5: 87:8c:1c:35:ad:fb:25:09:b1:63:0d:05:6a:93:c2: 84:04:bc:60:d7:55:20:a2:9a:d0:30:d5:98:10:54: 85:71:ab:d2:31:b1:44:05:d6:c7:0e:fc:c6:c7:e2: ab:c0:1d:93:93:a0:91:13:59:8b:f9:1b:4a:83:37: 8d:f2:c0:6d:00:28:d4:a8:6e:6c:68:71:ec:21:08: 92:25:be:24:f9:be:ac:b4:14:42:0a:52:79:51:f1: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:B4:F5:8B:21:8A:59:B2:4A:88:55:CC:AD:CA:75:E4:EF:0A:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:7e:35:e9:5a:e5:43:a2:1b:40:bb:98:91:80:5e:5c:bf:76: 12:69:0b:6e:59:af:2e:bb:9b:a9:87:91:32:7d:ad:9b:67:19: bb:0c:28:ea:be:dc:51:a2:d2:cb:fd:53:3f:e8:3f:58:04:56: 29:07:d4:55:90:eb:06:bb:b8:7f:6c:13:57:03:f2:5a:4e:1c: 0c:35:79:66:f0:a1:a8:f0:60:5a:85:aa:22:72:cf:b7:48:dc: 34:52:64:3c:5a:a0:40:53:27:f8:9e:3a:af:89:65:b3:83:8b: 49:59:50:cf:af:ab:0d:9f:69:d3:3b:e8:1f:44:83:79:a4:cb: c2:e4:e7:ce:a1:df:7b:93:8a:ac:fd:08:d0:f5:fa:19:35:ef: c7:28:4a:b3:5d:2f:41:63:c7:71:f7:72:2a:4b:68:c6:48:f4: df:01:1c:d5:6e:89:3f:c3:e6:52:38:8c:7f:35:18:27:7f:85: 0e:61:93:89:4b:e0:2f:f4:df:c1:98:94:db:dc:10:11:2e:25: ea:27:85:23:45:aa:53:d9:ce:85:66:49:06:94:5d:bf:57:f6: 14:86:ad:46:55:92:6d:fd:8e:89:1b:d9:e0:8e:05:ac:de:5c: 4d:69:bb:26:e2:2a:22:a6:e2:8d:31:0a:1d:98:a6:24:32:f5: ea:dc:bc:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy960Vr6OHgk5o40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk YTM0ZmUyYjYtOGFmNy00MDZkLTkyNDYtYmI4ODkwZjA5MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivTUSs9Z543wWSLTS/rS5voj8mOw13F9yP7A I8O/msvORergRZn4ldve9X91lJDN+bfWHAv8N7kWBhmuN9K7UaAjrptEzhZBOYaR vvTuYtGeWy/YjxWlZMe9q6YrTKjH67RqUgg5SlkWIvjjC+sp0ZsETy69xjdOpnj/ ti1PceghZ/vEIKun7PZt1eUyyGga37n8YwDx7LIBH3BBlenaCb92/8WHjBw1rfsl CbFjDQVqk8KEBLxg11UgoprQMNWYEFSFcavSMbFEBdbHDvzGx+KrwB2Tk6CRE1mL +RtKgzeN8sBtACjUqG5saHHsIQiSJb4k+b6stBRCClJ5UfHx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlztPWLIYpZskqIVcytynXk7wrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYzUyZGQtNzNlYS0z YzE0LTgxNGUtNzc1OGZjYTFmZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN+Nela5UOiG0C7mJGAXly/dhJpC25Zry67m6mHkTJ9rZtnGbsMKOq+ 3FGi0sv9Uz/oP1gEVikH1FWQ6wa7uH9sE1cD8lpOHAw1eWbwoajwYFqFqiJyz7dI 3DRSZDxaoEBTJ/ieOq+JZbODi0lZUM+vqw2fadM76B9Eg3mky8Lk586h33uTiqz9 CND1+hk178coSrNdL0Fjx3H3cipLaMZI9N8BHNVuiT/D5lI4jH81GCd/hQ5hk4lL 4C/038GYlNvcEBEuJeonhSNFqlPZzoVmSQaUXb9X9hSGrUZVkm39jokb2eCOBaze XE1puybiKiKm4o0xCh2YpiQy9ercvOU= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:34 2025 by rpki-client