$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa File: 7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json) Hash identifier: 3aMv0dCKqzFNmQNjqK3AvNqL3wnc6f9OFmwWQ1S7mbM= Subject key identifier: E4:A3:6E:1D:64:8F:74:C8:4A:D6:E4:17:67:94:BA:B7:BD:23:B2:CD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AFED237102C500F43000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 12189 IP address blocks: 131.153.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:ed:23:71:02:c5:00:f4:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=05f6163d-29d4-4d8c-8339-7568cb6c274b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a7:2d:f4:16:71:9e:98:9b:eb:b8:b9:6f:39: 07:30:c0:dd:f6:b2:bd:7e:78:8c:03:09:2f:ab:0f: a8:81:f0:45:75:56:a9:22:7b:88:17:3b:64:be:4c: 76:6e:e2:67:d3:46:31:bf:75:43:69:b9:fe:d8:d6: 2e:b4:77:5b:3e:5b:e3:1f:3e:b8:14:3b:1f:76:33: 52:c9:82:bb:a5:51:73:d4:df:6a:00:b4:e7:26:87: 53:c6:f9:94:65:eb:2b:18:53:45:29:11:40:ce:d2: 18:74:b7:d0:ae:80:29:aa:82:ab:d7:2b:a4:b7:ee: 0b:b4:16:5e:a0:e0:bf:ac:72:10:e5:27:5b:3d:9c: 88:4f:be:d6:6d:db:27:d9:70:ad:df:79:13:de:6e: 22:bc:c8:2e:fa:9a:13:02:d3:1b:fe:2b:5e:82:51: 25:99:f8:af:3c:f9:a9:da:4b:36:2c:c5:37:48:e5: 02:f0:cb:4c:3e:10:1d:f0:26:98:1e:cb:d0:8e:36: 00:6b:a5:71:6e:8e:bc:19:a7:e8:07:d3:9a:2e:ec: c7:6c:dc:6e:87:fe:dd:dd:09:df:7e:fe:94:9c:8f: c9:f6:dc:33:32:33:44:ce:56:85:75:3f:c3:8d:8a: e5:4a:f4:63:e9:d7:91:23:b7:fb:96:90:5c:8c:8d: a6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A3:6E:1D:64:8F:74:C8:4A:D6:E4:17:67:94:BA:B7:BD:23:B2:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:93:81:94:91:09:06:0d:56:5d:cb:bf:97:69:42:23:38:7c: 5d:4e:09:0d:59:df:3e:dd:d0:13:5b:35:1e:76:87:75:54:47: 12:b9:61:3c:6c:f7:ef:c5:76:40:b7:00:11:2f:4d:c9:16:8f: 35:3c:42:a8:74:f5:49:89:a1:77:ca:46:08:f9:71:8c:8a:75: 13:10:56:60:90:4d:bd:3c:6d:1d:a5:2c:20:af:e1:53:3d:2c: 3c:41:b3:14:c7:61:ac:bf:d0:ab:02:82:3f:4b:9d:18:ae:bf: c8:33:61:13:f5:51:d7:4c:f5:cd:97:f6:d7:78:bb:b6:bc:97: a4:a7:af:e7:63:51:cd:72:76:a5:cc:f2:c2:95:77:67:1a:ef: 7b:73:d1:72:77:d3:78:ca:1b:ff:16:61:2a:5b:8b:c9:8d:7d: 11:1e:29:76:d7:5b:02:65:8c:87:01:cf:ce:75:7f:59:a7:25: 98:99:9c:ff:62:f1:8b:99:6b:a7:15:a2:f9:80:83:7b:23:8c: 8e:36:19:03:71:0c:ec:9b:60:73:15:c9:54:c7:d7:d6:57:f4: 99:72:17:74:e6:66:b9:d8:b2:29:c2:47:08:0a:13:de:60:73: c8:d1:01:75:2b:46:5a:0a:c1:08:3a:11:eb:27:75:36:77:8e: 65:06:a2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6/tI3ECxQD0MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MDVmNjE2M2QtMjlkNC00ZDhjLTgzMzktNzU2OGNiNmMyNzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqct9BZxnpib67i5bzkHMMDd9rK9fniMAwkv qw+ogfBFdVapInuIFztkvkx2buJn00Yxv3VDabn+2NYutHdbPlvjHz64FDsfdjNS yYK7pVFz1N9qALTnJodTxvmUZesrGFNFKRFAztIYdLfQroApqoKr1yukt+4LtBZe oOC/rHIQ5SdbPZyIT77Wbdsn2XCt33kT3m4ivMgu+poTAtMb/iteglElmfivPPmp 2ks2LMU3SOUC8MtMPhAd8CaYHsvQjjYAa6Vxbo68GafoB9OaLuzHbNxuh/7d3Qnf fv6UnI/J9twzMjNEzlaFdT/DjYrlSvRj6deRI7f7lpBcjI2mAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSjbh1kj3TIStbkF2eUure9I7LNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2FmNTcyNTUtOTVlOS0z NWY4LWEzYjQtOTY0Y2MwZTY2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHaTgZSRCQYNVl3Lv5dpQiM4fF1OCQ1Z3z7d0BNbNR52h3VURxK5YTxs 9+/FdkC3ABEvTckWjzU8Qqh09UmJoXfKRgj5cYyKdRMQVmCQTb08bR2lLCCv4VM9 LDxBsxTHYay/0KsCgj9LnRiuv8gzYRP1UddM9c2X9td4u7a8l6Snr+djUc1ydqXM 8sKVd2ca73tz0XJ303jKG/8WYSpbi8mNfREeKXbXWwJljIcBz851f1mnJZiZnP9i 8YuZa6cVovmAg3sjjI42GQNxDOybYHMVyVTH19ZX9JlyF3TmZrnYsinCRwgKE95g c8jRAXUrRloKwQg6EesndTZ3jmUGojY= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:42 2025 by rpki-client