$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa File: 592675de-1b35-3401-9682-044785d5e65a.roa (raw, json) Hash identifier: FNe3U8FxM4ILd7clsH/HkIH+LxTRtSgYI1mZGgiikVE= Subject key identifier: 8A:B9:C1:E9:3C:AF:83:BF:6E:8F:B9:74:4D:47:0D:07:18:BD:7D:EC Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AF8B05B3B54351920000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 46385 IP address blocks: 131.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:8b:05:b3:b5:43:51:92:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=f4c8467b-15e9-4c48-88e4-3bd5a703a995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2f:76:99:cf:c9:95:4a:4e:10:cf:d6:38:09: 7d:98:22:0f:a9:17:9b:96:69:63:0d:c5:18:c1:82: cb:17:36:23:b2:bb:0d:35:c2:26:db:5a:e6:1e:dd: 0d:af:97:fa:09:dc:43:fa:71:62:7b:29:ab:26:1e: e0:29:b0:32:69:3c:b5:4f:ae:74:9d:24:77:d3:1e: 7f:cb:78:d8:b5:c1:02:aa:23:e0:ca:a6:0c:2e:cb: 1d:d2:73:ea:b5:df:83:da:52:5a:47:af:00:9e:e8: 4a:b4:33:a9:f0:89:56:91:e7:a3:ea:73:b2:80:15: b9:06:e2:7a:53:8f:99:20:5b:13:84:5f:8f:a6:a3: 46:48:d6:91:e0:40:fb:88:86:ba:f9:2f:0f:e8:59: 0f:e4:9f:67:62:ba:fa:17:a4:cb:21:41:a2:c0:95: 53:7d:d2:47:da:10:93:ad:ab:53:11:76:ea:8d:98: 85:b9:7e:e8:30:0a:38:eb:e0:57:c5:a0:cb:11:a9: fb:8c:75:d1:71:91:be:ed:36:27:5a:9b:ee:cb:05: 78:1e:5f:b4:e1:69:1e:c7:15:a2:44:cd:b7:06:49: 8b:f3:4c:2b:d9:05:7c:d7:2b:17:d3:ca:ea:e9:fc: 88:96:86:1f:83:73:79:11:a8:87:f8:03:da:8a:a4: 70:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:C1:E9:3C:AF:83:BF:6E:8F:B9:74:4D:47:0D:07:18:BD:7D:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:ab:17:73:3f:4b:a2:34:c0:ab:f4:b5:b3:aa:b5:4a:a9:5c: fe:d4:f9:45:76:f4:92:af:41:4c:8e:87:86:14:27:a0:3f:e3: 68:34:54:49:0f:25:a0:c2:a8:02:9f:67:ee:b3:10:73:f4:fa: fb:3b:20:f5:4b:f0:88:a1:ab:50:5e:1f:db:17:00:c9:bd:06: ee:44:50:e8:65:20:30:e1:2f:49:43:59:46:65:90:3a:50:51: 92:9b:6e:71:d7:06:94:85:b8:c5:3c:11:23:8a:66:71:fa:9f: d4:56:81:6a:d1:2c:c5:c0:c5:a9:8c:55:5f:59:84:97:5f:cb: 68:06:5c:1d:52:ca:0c:f6:fb:39:ee:fd:8c:fd:d6:73:0b:5a: 27:e1:11:1f:c2:0e:5d:6f:08:bb:df:2d:89:78:f8:e2:35:b1: 05:e0:8f:62:88:72:94:72:35:25:ed:8f:7d:33:b1:fe:d9:1f: 0d:4e:e8:a5:0b:88:f5:db:d9:50:e3:fe:f6:9e:5a:ab:09:2d: ce:ff:66:2b:b8:18:88:a7:36:7f:ea:2f:89:e1:51:d4:05:e7: ae:9d:c0:7a:e6:1f:7a:9b:a0:58:26:4b:0b:b9:6f:aa:8e:18: f9:f4:fe:fb:88:82:af:25:42:aa:13:15:ab:08:8a:af:38:b9: 7d:fa:c3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6+LBbO1Q1GSAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk ZjRjODQ2N2ItMTVlOS00YzQ4LTg4ZTQtM2JkNWE3MDNhOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC92mc/JlUpOEM/WOAl9mCIPqReblmljDcUY wYLLFzYjsrsNNcIm21rmHt0Nr5f6CdxD+nFieymrJh7gKbAyaTy1T650nSR30x5/ y3jYtcECqiPgyqYMLssd0nPqtd+D2lJaR68AnuhKtDOp8IlWkeej6nOygBW5BuJ6 U4+ZIFsThF+PpqNGSNaR4ED7iIa6+S8P6FkP5J9nYrr6F6TLIUGiwJVTfdJH2hCT ratTEXbqjZiFuX7oMAo46+BXxaDLEan7jHXRcZG+7TYnWpvuywV4Hl+04WkexxWi RM23BkmL80wr2QV81ysX08rq6fyIloYfg3N5EaiH+APaiqRwqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIq5wek8r4O/bo+5dE1HDQcYvX3sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTkyNjc1ZGUtMWIzNS0z NDAxLTk2ODItMDQ0Nzg1ZDVlNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEirF3M/S6I0wKv0tbOqtUqpXP7U+UV29JKvQUyOh4YUJ6A/42g0VEkP JaDCqAKfZ+6zEHP0+vs7IPVL8Iihq1BeH9sXAMm9Bu5EUOhlIDDhL0lDWUZlkDpQ UZKbbnHXBpSFuMU8ESOKZnH6n9RWgWrRLMXAxamMVV9ZhJdfy2gGXB1Sygz2+znu /Yz91nMLWifhER/CDl1vCLvfLYl4+OI1sQXgj2KIcpRyNSXtj30zsf7ZHw1O6KUL iPXb2VDj/vaeWqsJLc7/Ziu4GIinNn/qL4nhUdQF566dwHrmH3qboFgmSwu5b6qO GPn0/vuIgq8lQqoTFasIiq84uX36w6s= -----END CERTIFICATE-----Generated at Wed Nov 5 01:15:37 2025 by rpki-client