$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa File: 5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json) Hash identifier: ZTgYGZQkNJ2ADmmUYQ2qN5+lBTsyLeaMD0NOuvRq608= Subject key identifier: 1D:36:84:EB:6E:02:A6:10:FE:01:35:3C:B6:52:3E:BD:84:38:FF:21 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7B4B6483135E488B2F380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 19437 IP address blocks: 131.153.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b4:b6:48:31:35:e4:88:b2:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=3e808f43-6050-4739-9860-72b3ffdf048d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c2:8a:a7:2a:5f:7b:0a:db:76:17:08:ee:23: b8:de:6c:ec:1b:37:2c:c6:f0:34:b7:63:22:f5:e2: 36:6e:34:fc:ab:7e:5e:11:9b:14:32:5a:0f:d6:4c: 40:38:99:f8:71:e6:b2:2a:4a:b6:9d:7c:28:89:8b: 9c:4a:c2:e2:1f:d4:b0:b3:c7:5a:4c:c1:95:25:6f: ba:08:4d:71:02:39:4b:39:9c:0e:79:4c:ec:21:5c: 4c:36:b6:d8:fd:40:93:7c:cc:09:4f:e7:c9:7d:dc: 86:2a:8d:82:fc:98:79:c9:fb:0a:ef:b6:46:73:b6: 3e:60:91:88:d6:7e:92:52:ce:bc:45:74:fc:a6:c3: 78:b3:26:bb:f0:e8:57:a0:95:14:d2:7b:74:78:d6: 44:d9:3b:a6:a7:0e:73:82:1f:e3:5a:32:0d:cd:ad: 9d:0a:3e:17:75:5b:46:77:83:f1:7b:c8:93:82:51: 7a:16:08:0a:e9:1a:0c:dc:bd:fa:58:d8:cf:6b:9c: a3:f1:31:7f:85:3c:40:97:80:81:8f:f6:f7:e3:bd: 04:46:c8:fe:36:68:5d:5a:1a:13:74:d9:4b:8c:ef: 41:d2:e3:27:e8:9b:d2:a6:85:94:e8:9f:26:d6:f0: 17:89:ce:0f:21:59:a0:0f:56:bc:22:1c:9a:de:66: ef:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:36:84:EB:6E:02:A6:10:FE:01:35:3C:B6:52:3E:BD:84:38:FF:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:ba:fa:a9:58:bc:a4:1d:4c:7e:92:41:fe:a5:2a:ac:34:a3: d2:61:a7:6d:24:05:a5:a6:5a:d4:1e:91:23:f3:9b:d9:7b:55: a0:14:a9:5f:34:25:6b:c3:e6:a5:2c:ff:05:67:c1:43:6f:c0: 10:f4:82:69:56:1d:56:c3:52:64:30:bc:88:6a:f8:80:de:5c: 22:3d:36:e8:4a:23:8c:c8:2b:1f:81:e5:3b:c4:bd:08:7f:d3: 9e:b5:54:20:0d:6b:5a:5e:e4:6e:e6:09:a7:1f:1e:98:cb:87: 6e:a4:81:85:a9:a1:89:f2:1a:20:f8:37:ab:c5:a7:50:dc:e6: 96:bf:f2:4b:e4:34:e2:7f:e1:05:fe:9c:44:2d:38:a0:8e:7b: 60:ef:dc:8e:7e:04:8c:23:ca:d6:8a:cb:af:74:71:78:7a:30: 93:c5:37:d6:c3:02:9a:2b:c7:2a:92:db:b4:33:6e:c3:a1:89: 63:93:02:c6:ed:5b:11:fc:d4:94:16:1a:fb:03:ff:11:53:56: 76:29:b3:c1:60:26:01:a5:db:f5:47:8c:6e:37:25:d4:46:48: 0a:0e:9f:23:60:2d:f7:ef:f7:ce:b5:d9:b2:19:75:7a:76:81: ee:ad:68:70:5d:d0:d4:aa:ad:c2:0f:c7:ef:e6:54:ee:c5:c9: ae:e9:67:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7S2SDE15Iiy84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk M2U4MDhmNDMtNjA1MC00NzM5LTk4NjAtNzJiM2ZmZGYwNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8KKpypfewrbdhcI7iO43mzsGzcsxvA0t2Mi 9eI2bjT8q35eEZsUMloP1kxAOJn4ceayKkq2nXwoiYucSsLiH9Sws8daTMGVJW+6 CE1xAjlLOZwOeUzsIVxMNrbY/UCTfMwJT+fJfdyGKo2C/Jh5yfsK77ZGc7Y+YJGI 1n6SUs68RXT8psN4sya78OhXoJUU0nt0eNZE2Tumpw5zgh/jWjINza2dCj4XdVtG d4Pxe8iTglF6FggK6RoM3L36WNjPa5yj8TF/hTxAl4CBj/b3470ERsj+NmhdWhoT dNlLjO9B0uMn6JvSpoWU6J8m1vAXic4PIVmgD1a8Ihya3mbvKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB02hOtuAqYQ/gE1PLZSPr2EOP8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNWYzNDAyZTUtY2Q5Mi0z M2I2LTgxMmMtMDg5MmMwYjhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIm6+qlYvKQdTH6SQf6lKqw0o9Jhp20kBaWmWtQekSPzm9l7VaAUqV80 JWvD5qUs/wVnwUNvwBD0gmlWHVbDUmQwvIhq+IDeXCI9NuhKI4zIKx+B5TvEvQh/ 0561VCANa1pe5G7mCacfHpjLh26kgYWpoYnyGiD4N6vFp1Dc5pa/8kvkNOJ/4QX+ nEQtOKCOe2Dv3I5+BIwjytaKy690cXh6MJPFN9bDAporxyqS27QzbsOhiWOTAsbt WxH81JQWGvsD/xFTVnYps8FgJgGl2/VHjG43JdRGSAoOnyNgLffv98612bIZdXp2 ge6taHBd0NSqrcIPx+/mVO7Fya7pZ9I= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:30 2025 by rpki-client