$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa File: 6352be7b-1542-39bc-93ee-5ee5f8591782.roa (raw, json) Hash identifier: QUbfOjPNRgeFdOwR4TwMMFUCjrLAleviMvAEihi/R6g= Subject key identifier: 8F:5F:F4:E0:1D:7F:B9:81:DC:5B:6A:85:8F:93:C3:39:E5:C9:35:F9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7B4E00821140246BBA100 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 60558 IP address blocks: 131.153.158.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b4:e0:08:21:14:02:46:bb:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=b3f333cc-ea38-4b45-b48e-97a452fef1fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:96:0c:53:d0:d3:d1:fc:4b:a5:e8:81:c7:71: 6b:00:12:c3:e7:a1:7b:08:02:1b:ad:dd:92:d7:c2: f3:cd:24:60:37:66:21:d4:b7:63:aa:73:3e:30:84: ac:fe:66:82:42:88:4c:cc:e5:1f:1f:6d:98:b6:1a: ca:ff:94:15:cd:04:4f:5f:34:44:7b:9e:ac:78:f1: ce:75:f2:6f:d3:f0:5c:cd:42:29:b7:0f:b6:40:1c: f1:d1:aa:f5:99:db:4f:67:c5:54:c6:38:ff:c6:2e: 88:d3:5d:9c:d8:40:73:b1:eb:86:16:42:5b:e2:79: 09:b4:dd:41:93:7a:68:26:b2:5d:51:2c:51:94:11: cd:3b:b0:54:99:bf:a2:1d:74:3d:0f:79:1e:c3:c9: 1b:9a:03:73:29:40:49:c3:9c:a5:08:0b:5f:27:8b: 04:d6:fd:ff:76:cd:e6:d0:40:7d:a9:f0:af:cf:cb: 57:b5:78:3e:7d:e9:89:db:6a:d1:ee:d9:24:52:2a: 10:ef:35:8d:98:99:bd:f6:6a:11:3e:91:3d:ef:d1: 4d:ba:07:67:4a:36:3f:7c:e3:76:b8:32:d5:0b:12: ba:3f:06:b0:05:a2:93:46:bb:30:a0:b8:14:5f:6a: 93:c7:e8:fe:32:29:ea:d8:04:ea:1f:7a:96:81:27: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:5F:F4:E0:1D:7F:B9:81:DC:5B:6A:85:8F:93:C3:39:E5:C9:35:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6352be7b-1542-39bc-93ee-5ee5f8591782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:79:ba:1d:27:ed:9b:18:4d:37:34:60:cf:f9:5c:c5:6f:7f: 3e:2e:7d:20:83:a4:a6:b0:41:a8:47:20:fe:33:89:a7:bc:57: 1d:d2:ce:eb:be:60:4c:a7:2a:c6:28:13:25:4f:0a:42:ce:81: 7a:3d:3b:91:dd:86:3e:e4:1b:69:7f:5f:7c:1c:cf:54:e7:a1: dc:09:2e:19:5b:30:db:99:68:8c:db:52:e5:f2:2a:de:7c:6e: ff:12:51:37:33:f7:53:c3:2a:7f:95:da:ab:1b:5e:7c:69:bc: 20:8d:78:63:1d:99:37:d9:2c:f5:f6:2c:48:46:ac:4b:0d:9f: dc:2a:a2:ef:29:7d:73:e7:d2:7a:7b:4f:24:1f:55:e2:bc:d1: 51:4e:2f:07:f3:11:f8:c1:e7:4f:55:66:12:5c:3f:ba:55:58: 6b:27:89:26:7f:24:7c:17:0e:a4:ca:fb:bc:43:9e:85:56:18: ba:df:19:53:50:a6:49:0c:2e:c2:27:20:4f:02:e9:0f:85:d0: e0:de:ff:80:8e:85:c0:a8:b7:6b:1e:de:33:fd:df:87:dc:74: 11:cb:ff:cf:f4:3c:d5:f1:a7:26:6b:7b:60:d1:19:bd:07:2c: 86:7b:f4:6e:db:fc:1b:ba:ba:be:3d:96:e5:6f:27:45:63:a5: ca:a2:9f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7TgCCEUAka7oQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YjNmMzMzY2MtZWEzOC00YjQ1LWI0OGUtOTdhNDUyZmVmMWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZYMU9DT0fxLpeiBx3FrABLD56F7CAIbrd2S 18LzzSRgN2Yh1LdjqnM+MISs/maCQohMzOUfH22YthrK/5QVzQRPXzREe56sePHO dfJv0/BczUIptw+2QBzx0ar1mdtPZ8VUxjj/xi6I012c2EBzseuGFkJb4nkJtN1B k3poJrJdUSxRlBHNO7BUmb+iHXQ9D3kew8kbmgNzKUBJw5ylCAtfJ4sE1v3/ds3m 0EB9qfCvz8tXtXg+femJ22rR7tkkUioQ7zWNmJm99moRPpE979FNugdnSjY/fON2 uDLVCxK6PwawBaKTRrswoLgUX2qTx+j+Minq2ATqH3qWgSeMLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9f9OAdf7mB3FtqhY+TwznlyTX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjM1MmJlN2ItMTU0Mi0z OWJjLTkzZWUtNWVlNWY4NTkxNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5meMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGN5uh0n7ZsYTTc0YM/5XMVvfz4ufSCDpKawQahHIP4ziae8Vx3Szuu+ YEynKsYoEyVPCkLOgXo9O5Hdhj7kG2l/X3wcz1TnodwJLhlbMNuZaIzbUuXyKt58 bv8SUTcz91PDKn+V2qsbXnxpvCCNeGMdmTfZLPX2LEhGrEsNn9wqou8pfXPn0np7 TyQfVeK80VFOLwfzEfjB509VZhJcP7pVWGsniSZ/JHwXDqTK+7xDnoVWGLrfGVNQ pkkMLsInIE8C6Q+F0ODe/4COhcCot2se3jP934fcdBHL/8/0PNXxpyZre2DRGb0H LIZ79G7b/Bu6ur49luVvJ0VjpcqinwE= -----END CERTIFICATE-----Generated at Tue Nov 4 23:59:12 2025 by rpki-client