$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa File: 36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa (raw, json) Hash identifier: e/gah0S9h8MLRw7x9bD0tTzmPqVpMaon4Bih9JILuK4= Subject key identifier: 5D:9E:0B:21:60:F0:15:89:F2:F7:0D:F4:A7:EC:38:00:81:DF:CE:94 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD6245AE2D6C97E42A415300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 20454 IP address blocks: 131.153.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:45:ae:2d:6c:97:e4:2a:41:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=a74fb255-20b2-41f3-afef-edc4b11d53f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ff:91:e8:93:98:76:26:02:91:17:a3:38:cd: ae:60:d8:3d:57:89:b6:3e:6f:72:cc:a1:a4:19:2a: d2:3d:c3:05:59:60:7c:1e:ec:e8:3f:eb:90:64:ad: 37:00:94:3d:a9:64:39:77:1b:b5:0e:10:89:fe:ff: 3b:8d:16:50:c6:dc:8b:5d:b7:ff:40:15:0a:9e:24: 1f:42:17:03:a6:66:36:05:3b:23:5c:3c:69:02:ae: e8:36:1e:3a:01:7a:5e:af:b2:ac:aa:62:41:71:0c: 93:c3:f7:98:8b:28:99:44:9d:46:f1:47:03:1b:2d: 8f:ab:84:d2:be:66:95:a7:67:94:bd:f4:0a:4d:91: 09:61:19:58:da:82:58:94:98:b1:95:69:d0:fa:29: 1e:b3:5a:fa:3d:a9:f4:49:d2:a0:4c:48:e1:dd:51: 78:8d:30:e7:38:f5:7c:d0:23:dd:bd:41:f7:75:59: ce:6e:08:0f:b1:b7:8b:55:a7:93:53:2a:ac:60:55: 5b:95:47:40:78:38:89:22:65:e7:ad:d6:b4:d7:cb: f7:39:af:8d:c2:e9:83:c4:56:44:31:5d:b2:92:68: a2:59:4e:1a:96:7a:cb:4d:32:c2:ce:c4:06:6a:d0: 24:00:64:c6:b6:9f:3f:18:07:30:0b:8a:ad:5b:a1: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:9E:0B:21:60:F0:15:89:F2:F7:0D:F4:A7:EC:38:00:81:DF:CE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:24:0b:4b:f6:8d:0c:ac:3c:e6:8c:4d:17:b6:4e:c2:b3:0f: 76:30:d5:e0:51:53:a0:fb:4c:ce:ec:e2:ad:10:5f:d7:bf:02: 37:14:52:ed:9c:5d:bc:13:16:4d:8f:e4:cb:9b:7c:1d:b9:cc: 60:e4:38:92:c6:1c:a9:f5:d0:67:6a:db:57:8d:2d:9c:fc:78: 91:be:cc:c5:e0:7c:c0:3f:df:53:bb:1f:af:64:33:de:49:fb: 6e:2d:64:bc:dc:f9:4a:66:62:89:42:bc:92:c6:bd:31:6d:fb: 9f:69:a2:d8:bd:9c:e5:6b:ce:a1:b0:0c:52:e6:0d:44:f8:6a: 63:52:e5:cc:99:23:ed:aa:57:e3:2d:b4:f5:9a:07:6a:9f:a4: e8:4d:aa:e5:ad:52:ce:ec:24:94:5a:df:d4:b1:e1:13:1e:4f: c1:30:70:3e:06:e7:39:0e:31:94:89:0c:d0:05:5e:f1:3f:04: 12:55:02:54:19:31:a5:cf:9f:10:f5:9a:dc:f9:ef:ea:93:45: 7b:32:2b:eb:05:be:84:9f:1c:03:1e:ad:9f:bd:67:85:93:82: ae:f7:ed:80:af:40:a2:85:e3:c1:4d:df:b3:ad:53:6a:40:e5: aa:87:dc:4f:8d:9c:c4:ce:2f:f4:96:f0:9b:cb:c3:10:6a:c6: d6:d3:76:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkWuLWyX5CpBUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YTc0ZmIyNTUtMjBiMi00MWYzLWFmZWYtZWRjNGIxMWQ1M2Y2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv+R6JOYdiYCkRejOM2uYNg9V4m2Pm9yzKGk GSrSPcMFWWB8HuzoP+uQZK03AJQ9qWQ5dxu1DhCJ/v87jRZQxtyLXbf/QBUKniQf QhcDpmY2BTsjXDxpAq7oNh46AXper7KsqmJBcQyTw/eYiyiZRJ1G8UcDGy2Pq4TS vmaVp2eUvfQKTZEJYRlY2oJYlJixlWnQ+ikes1r6Pan0SdKgTEjh3VF4jTDnOPV8 0CPdvUH3dVnObggPsbeLVaeTUyqsYFVblUdAeDiJImXnrda018v3Oa+NwumDxFZE MV2ykmiiWU4alnrLTTLCzsQGatAkAGTGtp8/GAcwC4qtW6GAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2eCyFg8BWJ8vcN9KfsOACB386UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzZiNDNmNGQtMWI2ZS0z OWI0LWEyMTMtMDZkMGNmZDVmN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQkC0v2jQysPOaMTRe2TsKzD3Yw1eBRU6D7TM7s4q0QX9e/AjcUUu2c XbwTFk2P5MubfB25zGDkOJLGHKn10Gdq21eNLZz8eJG+zMXgfMA/31O7H69kM95J +24tZLzc+UpmYolCvJLGvTFt+59poti9nOVrzqGwDFLmDUT4amNS5cyZI+2qV+Mt tPWaB2qfpOhNquWtUs7sJJRa39Sx4RMeT8EwcD4G5zkOMZSJDNAFXvE/BBJVAlQZ MaXPnxD1mtz57+qTRXsyK+sFvoSfHAMerZ+9Z4WTgq737YCvQKKF48FN37OtU2pA 5aqH3E+NnMTOL/SW8JvLwxBqxtbTdrE= -----END CERTIFICATE-----Generated at Wed Nov 5 02:30:43 2025 by rpki-client