$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa File: 1823aeee-620e-331b-bd1e-36eec1af6cfa.roa (raw, json) Hash identifier: d3RQNDcB9cuwmZqAjF9c8LuXzUO8W8xT9pUc/VB7YRo= Subject key identifier: CB:AB:5C:71:01:33:E9:87:79:C5:49:92:88:BB:CE:C2:42:72:CA:8D Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD62494138CD924FB6307500 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 20454 IP address blocks: 131.153.42.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:49:41:38:cd:92:4f:b6:30:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=6e20a200-c2c0-431f-a91c-94b11a046230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:67:2a:dd:dc:f6:d3:75:f6:1a:22:f0:e0: c9:ef:f2:4b:81:0d:90:bb:29:97:8c:cb:1d:8c:ef: f6:0b:eb:09:23:fd:b0:f6:23:0b:d3:3b:77:c6:71: 28:01:56:b5:ff:98:9d:51:70:34:1d:48:54:ff:be: 3e:db:9c:08:8d:f4:26:f9:ba:16:3a:90:31:23:98: 9a:00:fe:b0:1d:80:11:7f:24:8f:ed:a8:98:bf:9f: 27:3c:42:36:a2:ff:07:d9:b2:8e:e3:18:f8:ba:73: 1a:5e:61:9a:8a:29:ba:a5:80:15:99:e4:ff:c9:89: bb:e7:f1:69:53:d7:17:66:e0:66:51:90:f9:38:b5: 4c:c1:ec:b6:eb:b6:4a:99:b1:11:61:0a:07:c0:77: 76:3b:07:42:6c:58:cf:97:65:65:67:19:60:97:f2: 5f:e9:32:e2:03:9d:0f:1a:48:7b:1f:aa:d5:55:24: 7c:52:36:8d:ad:b8:c9:58:3a:0a:a8:9b:ad:4b:2c: 09:a9:bf:24:71:c1:0e:98:89:48:e5:41:51:0a:b8: 06:d8:69:f3:27:f6:a7:cb:21:2e:28:bf:9f:6f:f3: 2d:05:0b:58:11:10:a9:00:88:65:61:67:be:3a:8a: 87:ca:cc:1a:be:8c:d4:ea:7c:32:48:8f:e9:59:13: cb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:AB:5C:71:01:33:E9:87:79:C5:49:92:88:BB:CE:C2:42:72:CA:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:2e:3a:e4:ed:27:93:e8:b7:18:91:7a:80:12:ad:2c:0c:a2: c6:c1:4b:fd:77:f8:16:f0:ab:3d:51:41:e4:06:cb:5b:7a:12: 4c:90:2e:63:9a:1b:72:23:a5:4e:63:1d:f3:04:c0:48:47:da: fd:8c:94:b5:47:aa:df:40:d3:92:10:f8:c8:6d:d8:65:ea:52: b9:23:13:dc:67:57:ff:99:36:bd:e6:a5:9a:b3:cc:b1:19:85: 01:1b:0d:58:7b:3a:ec:22:64:5a:6f:60:f3:0c:ea:cb:fb:d5: dd:54:78:d8:ee:08:29:66:1b:9a:da:91:0f:ed:9c:04:03:f3: 22:e5:55:8a:82:58:24:75:dc:15:07:dc:23:95:2b:4a:7d:e4: 95:3b:44:d1:54:f9:37:ad:fc:e1:b7:25:15:c2:e4:f1:ff:1e: 36:f2:7a:c3:f1:0f:c5:48:3d:3e:24:a3:76:cb:13:3c:a4:dd: 40:1c:af:bf:a1:fa:cd:d7:37:16:52:57:84:6d:15:18:9d:b2: 27:77:bc:85:25:06:57:93:af:c5:2a:ac:0a:a3:0b:76:ee:cf: bf:d0:e7:57:81:8c:bf:8d:b4:e4:21:51:34:a1:cd:f3:ae:f3: b3:35:1a:cb:9c:0b:0f:df:66:b0:5f:bb:03:1e:86:a6:b0:d1: cd:70:b3:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYklBOM2ST7YwdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NmUyMGEyMDAtYzJjMC00MzFmLWE5MWMtOTRiMTFhMDQ2MjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwZnKt3c9tN19hoi8ODJ7/JLgQ2QuymXjMsd jO/2C+sJI/2w9iML0zt3xnEoAVa1/5idUXA0HUhU/74+25wIjfQm+boWOpAxI5ia AP6wHYARfySP7aiYv58nPEI2ov8H2bKO4xj4unMaXmGaiim6pYAVmeT/yYm75/Fp U9cXZuBmUZD5OLVMwey267ZKmbERYQoHwHd2OwdCbFjPl2VlZxlgl/Jf6TLiA50P Gkh7H6rVVSR8UjaNrbjJWDoKqJutSywJqb8kccEOmIlI5UFRCrgG2GnzJ/anyyEu KL+fb/MtBQtYERCpAIhlYWe+OoqHyswavozU6nwySI/pWRPLtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMurXHEBM+mHecVJkoi7zsJCcsqNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTgyM2FlZWUtNjIwZS0z MzFiLWJkMWUtMzZlZWMxYWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8uOuTtJ5PotxiReoASrSwMosbBS/13+Bbwqz1RQeQGy1t6EkyQLmOa G3IjpU5jHfMEwEhH2v2MlLVHqt9A05IQ+Mht2GXqUrkjE9xnV/+ZNr3mpZqzzLEZ hQEbDVh7OuwiZFpvYPMM6sv71d1UeNjuCClmG5rakQ/tnAQD8yLlVYqCWCR13BUH 3COVK0p95JU7RNFU+Tet/OG3JRXC5PH/HjbyesPxD8VIPT4ko3bLEzyk3UAcr7+h +s3XNxZSV4RtFRidsid3vIUlBleTr8UqrAqjC3buz7/Q51eBjL+NtOQhUTShzfOu 87M1GsucCw/fZrBfuwMehqaw0c1ws3M= -----END CERTIFICATE-----Generated at Wed Nov 5 01:08:34 2025 by rpki-client