$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa File: 1953286a-a99c-383c-b91c-34fa8adbd086.roa (raw, json) Hash identifier: uNlCs8H9Tms+7AswovZYW2lOEkPCa62GjgRvwWQX5q0= Subject key identifier: 97:F2:B9:9C:36:03:8D:6F:21:58:59:22:EB:F6:82:74:BF:51:1C:15 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AF673D4F71DC169E5E80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 19437 IP address blocks: 131.153.162.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:67:3d:4f:71:dc:16:9e:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=7739a53c-414c-42df-a41d-d83a8b42effe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:19:01:07:39:de:e5:f7:5f:26:56:d2:a8:b7: ca:6c:16:aa:46:c8:15:75:cd:80:17:7a:bc:5d:3c: 38:a3:01:9a:2d:b0:7a:74:9d:10:c2:74:2d:eb:46: 71:02:3c:61:3a:82:5c:bd:5c:85:89:cf:be:00:11: 25:b0:6c:e8:32:e4:16:58:7e:18:94:b8:53:3e:68: 1f:2b:12:d2:f2:13:20:f2:48:e1:f6:d2:4c:f7:4a: 25:e4:2b:13:c7:c7:6c:2b:d4:6a:84:d1:93:f0:ed: 0c:23:c6:d1:b0:c9:97:f6:27:bf:2f:5d:b5:84:52: 02:86:21:97:0c:8d:fd:04:69:15:94:18:70:70:c2: 1c:37:43:46:25:ad:53:96:e3:18:71:de:1a:7a:7d: fe:76:07:e1:c9:74:f9:00:c4:27:1d:61:00:b9:71: bc:57:3c:41:67:21:6f:ed:40:e8:10:1f:a1:df:95: b3:7f:a7:a8:66:d7:41:e6:be:be:d6:4f:db:0e:ad: 6e:c4:0b:12:66:c7:da:28:d0:77:82:d8:18:d7:d5: 4d:1c:54:ae:61:7e:07:dc:c2:55:ba:a3:ab:4d:4f: f1:3f:2b:23:59:12:93:ac:e9:7a:18:35:41:86:ef: 38:e7:5b:f1:c0:fa:67:b5:f4:0a:8e:e7:34:93:e9: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F2:B9:9C:36:03:8D:6F:21:58:59:22:EB:F6:82:74:BF:51:1C:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1953286a-a99c-383c-b91c-34fa8adbd086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:48:da:35:c0:4f:d9:e4:6e:d3:34:b8:17:c1:ba:2e:93:83: 3b:ce:7e:f1:88:02:df:85:8b:b9:1a:07:dc:af:de:6c:11:67: 11:e1:45:11:ad:aa:b6:34:39:b8:83:23:ec:4f:d7:f6:0a:4f: f8:7e:86:a9:95:0b:f4:ef:12:63:32:21:4d:f1:c2:79:bc:a9: 86:60:aa:18:84:a5:81:71:19:91:99:74:a7:59:06:2b:c0:e7: 0e:4e:a3:22:a1:6e:88:f3:f6:e5:2a:d7:e7:fc:1c:aa:f6:65: d2:fe:87:7e:53:a4:13:8c:1d:0b:4a:66:84:98:d8:4e:83:af: d9:e7:46:c8:93:6a:50:3d:f6:c4:19:8f:2a:31:a0:68:a8:b8: 0e:52:34:6b:a4:8d:a2:86:aa:64:c0:d0:ca:a2:c3:bf:a2:4c: 5e:a1:50:9c:1d:b3:ad:46:71:6c:63:83:49:47:93:28:ad:2d: 3d:e4:e1:0b:b5:cd:57:76:9c:96:2b:e7:98:de:04:24:39:e0: 61:ef:ad:e6:d4:eb:f7:56:30:34:9b:94:0f:2e:39:d5:fa:81: ab:dc:22:1e:08:33:c2:38:da:6c:89:97:df:b4:64:3a:16:94: c5:a4:e8:9a:b1:ea:45:f9:50:8b:56:0f:5c:97:65:ba:03:5c: f5:90:76:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux69nPU9x3BaeXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NzczOWE1M2MtNDE0Yy00MmRmLWE0MWQtZDgzYThiNDJlZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghkBBzne5fdfJlbSqLfKbBaqRsgVdc2AF3q8 XTw4owGaLbB6dJ0QwnQt60ZxAjxhOoJcvVyFic++ABElsGzoMuQWWH4YlLhTPmgf KxLS8hMg8kjh9tJM90ol5CsTx8dsK9RqhNGT8O0MI8bRsMmX9ie/L121hFIChiGX DI39BGkVlBhwcMIcN0NGJa1TluMYcd4aen3+dgfhyXT5AMQnHWEAuXG8VzxBZyFv 7UDoEB+h35Wzf6eoZtdB5r6+1k/bDq1uxAsSZsfaKNB3gtgY19VNHFSuYX4H3MJV uqOrTU/xPysjWRKTrOl6GDVBhu8451vxwPpntfQKjuc0k+nl1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfyuZw2A41vIVhZIuv2gnS/URwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTk1MzI4NmEtYTk5Yy0z ODNjLWI5MWMtMzRmYThhZGJkMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5miMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlI2jXAT9nkbtM0uBfBui6TgzvOfvGIAt+Fi7kaB9yv3mwRZxHhRRGt qrY0ObiDI+xP1/YKT/h+hqmVC/TvEmMyIU3xwnm8qYZgqhiEpYFxGZGZdKdZBivA 5w5OoyKhbojz9uUq1+f8HKr2ZdL+h35TpBOMHQtKZoSY2E6Dr9nnRsiTalA99sQZ jyoxoGiouA5SNGukjaKGqmTA0Mqiw7+iTF6hUJwds61GcWxjg0lHkyitLT3k4Qu1 zVd2nJYr55jeBCQ54GHvrebU6/dWMDSblA8uOdX6gavcIh4IM8I42myJl9+0ZDoW lMWk6Jqx6kX5UItWD1yXZboDXPWQdoU= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:32 2025 by rpki-client