$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa File: f3bf331d-19cf-3d03-986c-190a6e650b75.roa (raw, json) Hash identifier: O66q3GgKTQV2AJt/scFt58Fw6XIG7bgUwVgTyeB1s9I= Subject key identifier: E7:1F:77:EE:4A:9F:06:7C:6C:8F:A3:D8:82:CE:82:BC:7F:30:88:64 Certificate issuer: /CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Certificate serial: 010D0C9F4328584B1F017391FCEA3725F07C4880 Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa Signing time: Mon 08 Sep 2025 01:00:33 +0000 ROA not before: Mon 08 Sep 2025 01:00:33 +0000 ROA not after: Sun 07 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 164.153.131.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1f:01:73:91:fc:ea:37:25:f0:7c:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0 Validity Not Before: Sep 8 01:00:33 2025 GMT Not After : Dec 7 02:00:33 2025 GMT Subject: CN=02502471-02e8-49dc-9c8f-348b32238ee2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:36:57:ca:40:77:39:7e:8a:b7:72:24:ec: d0:d3:a2:2c:f7:be:15:f2:b5:53:79:45:d7:1c:0b: f8:72:d5:cb:38:50:f8:61:b7:de:4f:de:1f:32:ae: 47:9a:c5:07:91:99:0d:bd:d3:71:19:aa:ec:90:ac: 58:a6:0b:59:94:0a:d0:ba:f8:4b:13:80:eb:3b:ba: 19:db:b2:c0:fa:61:03:4a:e1:d4:eb:f8:f1:ac:d5: ad:41:e8:a5:aa:85:f6:6d:3f:d6:78:c2:86:f6:b1: d1:5c:49:86:a9:77:ed:6d:08:9e:47:fa:3f:3b:25: 1f:8d:bd:74:5f:f0:df:f0:b2:d0:9d:4f:17:cc:1f: fa:e0:33:37:96:97:f6:60:7c:05:39:77:ec:87:8a: f8:21:49:b3:38:84:a4:4f:1e:ff:88:90:58:69:4f: ae:78:4b:1d:ee:6e:dd:9f:0a:16:28:66:56:6e:34: b7:4b:4c:d9:70:91:96:2c:f8:61:fd:99:45:47:d6: 2e:5f:54:ac:05:bf:b9:30:16:65:9a:60:63:ac:4f: ca:c6:4b:52:a5:4f:51:b2:71:12:b3:6b:ab:93:3b: a9:34:cd:81:50:ae:ae:11:c5:78:6a:f4:b4:96:7f: ae:38:dd:46:c3:53:e8:8c:d2:0c:37:ae:bb:90:b0: 32:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:1F:77:EE:4A:9F:06:7C:6C:8F:A3:D8:82:CE:82:BC:7F:30:88:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/f3bf331d-19cf-3d03-986c-190a6e650b75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl X509v3 Authority Key Identifier: keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer sbgp-ipAddrBlock: critical IPv4: 164.153.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:f5:ac:7d:5c:04:eb:14:59:f3:4b:2a:31:41:1a:9d:8f:91: 19:1b:35:9c:ad:7f:3f:a6:f0:0b:d7:2e:b2:fd:4f:1a:2c:e3: f0:3f:ec:bd:e9:f6:aa:6e:08:7d:ea:56:d0:29:45:99:e4:60: 35:f8:49:36:13:be:9e:a6:94:83:10:60:7b:ec:a8:37:66:37: ff:21:fd:a6:e7:38:46:94:ac:50:4b:ca:09:44:6d:c0:08:bf: bf:35:de:f1:56:ba:12:3c:1a:6e:91:65:ee:53:6f:f4:58:6d: a8:00:48:f4:cc:87:5a:bd:a6:42:6d:51:89:b0:21:f2:2f:33: 45:3b:3f:65:af:8a:32:46:35:9f:5c:a0:42:54:65:c8:f7:8b: 33:72:9c:77:f5:85:54:7e:23:31:3b:3b:94:61:62:02:5c:8f: d0:66:db:ed:62:4a:87:50:25:12:eb:eb:6a:9a:ba:41:43:86: 6f:e8:d8:7b:40:37:cc:23:12:42:5e:dc:1c:28:95:e1:96:c0: 85:6c:88:7c:2c:74:6c:72:9b:77:c0:ff:88:f0:59:56:a1:35: 05:d2:11:0c:b4:0c:f2:9f:b8:7c:10:ae:d3:78:ba:de:65:03: b3:74:31:21:ec:68:94:c2:17:3c:45:3a:92:3e:df:ec:fd:07: 18:9c:d5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAXOR/Oo3JfB8SIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM4NmQzNjYtOWYwOC00ODUyLWIwNjAtNTNjNTRlZjZk ZGEwMB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk MDI1MDI0NzEtMDJlOC00OWRjLTljOGYtMzQ4YjMyMjM4ZWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8E2V8pAdzl+irdyJOzQ06Is974V8rVTeUXX HAv4ctXLOFD4YbfeT94fMq5HmsUHkZkNvdNxGarskKxYpgtZlArQuvhLE4DrO7oZ 27LA+mEDSuHU6/jxrNWtQeilqoX2bT/WeMKG9rHRXEmGqXftbQieR/o/OyUfjb10 X/Df8LLQnU8XzB/64DM3lpf2YHwFOXfsh4r4IUmzOISkTx7/iJBYaU+ueEsd7m7d nwoWKGZWbjS3S0zZcJGWLPhh/ZlFR9YuX1SsBb+5MBZlmmBjrE/KxktSpU9RsnES s2urkzupNM2BUK6uEcV4avS0ln+uON1Gw1PojNIMN667kLAyhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcfd+5KnwZ8bI+j2ILOgrx/MIhkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2 ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1NGVmNmRkYTAvZjNiZjMzMWQtMTljZi0z ZDAzLTk4NmMtMTkwYTZlNjUwYjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNmM4NmQzNjYtOWYwOC00ODUyLWIw NjAtNTNjNTRlZjZkZGEwLzZjODZkMzY2LTlmMDgtNDg1Mi1iMDYwLTUzYzU0ZWY2 ZGRhMC5jcmwwHwYDVR0jBBgwFoAUrIupbk9Z3OsRWaUXpqufnhQ48X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82Yzg2ZDM2Ni05ZjA4LTQ4NTItYjA2MC01M2M1 NGVmNmRkYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApJmDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMn1rH1cBOsUWfNLKjFBGp2PkRkbNZytfz+m8AvXLrL9Txos4/A/7L3p 9qpuCH3qVtApRZnkYDX4STYTvp6mlIMQYHvsqDdmN/8h/abnOEaUrFBLyglEbcAI v7813vFWuhI8Gm6RZe5Tb/RYbagASPTMh1q9pkJtUYmwIfIvM0U7P2WvijJGNZ9c oEJUZcj3izNynHf1hVR+IzE7O5RhYgJcj9Bm2+1iSodQJRLr62qaukFDhm/o2HtA N8wjEkJe3BwoleGWwIVsiHwsdGxym3fA/4jwWVahNQXSEQy0DPKfuHwQrtN4ut5l A7N0MSHsaJTCFzxFOpI+3+z9Bxic1aI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:40:12 2025 by rpki-client