$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa File: 7f85d337-9f8f-38fb-85b0-eea49c753437.roa (raw, json) Hash identifier: bU5vIV/U2ozwVMqvQ0gxja7STMnI43eAkfobhSuSEy4= Subject key identifier: 59:FB:6C:37:F3:41:35:33:FA:1A:EB:F4:34:57:64:AA:7A:F9:55:91 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AF0EDD5837142AB46380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 19437 IP address blocks: 131.153.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:0e:dd:58:37:14:2a:b4:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=a2841a3e-d6b3-44a0-9abf-f0d28856afd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:11:9b:8c:e7:9f:27:60:9c:fb:7d:39:4d:16: ed:7c:ea:dc:ee:2f:a1:51:86:00:cd:e3:5f:d0:1b: 0d:91:36:c4:d9:22:9a:0f:7c:99:80:9e:dd:cc:a3: fb:2d:4e:c9:15:8a:4c:e3:7d:37:52:1c:97:a8:51: 70:32:40:17:26:02:12:8b:9a:f2:5e:d9:e2:54:ce: b1:fe:0f:c7:fc:e9:82:29:33:5b:69:b6:9a:e3:ec: 53:cc:cb:65:4a:b7:fd:0b:bb:bd:c0:d2:18:e5:e8: fc:ca:db:f1:ce:1b:62:85:0c:10:e1:b4:fa:8f:9f: df:89:9a:34:45:a3:7e:ef:77:ce:5f:83:fe:80:33: 30:4a:4f:8b:25:b7:70:45:b9:67:8d:39:a1:be:4f: e5:d0:25:ce:c9:a7:3f:99:f9:38:1d:9e:29:1b:a9: 3e:1d:1f:55:5f:b9:86:ce:91:b0:77:0d:5e:d0:f7: 33:b4:4d:66:9f:13:d8:89:b6:97:8b:a8:88:6c:6a: bb:2f:96:a4:0f:15:78:11:d8:98:97:ed:e1:28:a5: d8:8e:6c:e8:9a:23:76:41:fb:bf:17:ed:e5:78:4d: d8:e9:b1:e7:3e:66:75:a4:20:e9:53:59:2b:68:28: d1:dc:2a:a8:8e:58:01:45:86:b9:c6:67:6c:9b:d6: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FB:6C:37:F3:41:35:33:FA:1A:EB:F4:34:57:64:AA:7A:F9:55:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7f85d337-9f8f-38fb-85b0-eea49c753437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:79:32:2a:37:fe:76:e3:ec:46:87:ec:04:93:34:36:70:24: f7:a7:01:18:6c:b1:6d:84:9a:d5:b0:bb:aa:b1:37:52:03:7a: e0:fc:1b:23:6d:94:7e:1a:b1:a6:e7:7d:8d:2d:be:55:bd:82: 5b:08:42:b9:e7:2d:63:13:9c:8a:a4:19:2f:60:a3:c2:ac:59: 10:e4:02:94:cf:66:4a:9a:ea:27:2a:32:1e:34:86:79:1b:35: 6f:cd:a1:3e:4f:cf:bc:17:4c:9c:9a:5e:bd:df:c6:bb:1a:49: 39:61:ac:1c:d4:27:d5:d9:98:ab:56:c7:97:12:46:5d:7d:45: 00:b8:db:3f:82:df:ab:7f:66:eb:24:89:c9:7e:09:8f:22:88: 8b:d3:c0:d4:9f:c4:48:d8:57:c6:a1:6d:7b:66:70:4e:ab:fe: 2c:4d:e7:6e:23:04:72:f2:ac:1f:22:f8:c0:c6:a7:47:37:5a: cb:3e:26:9d:65:b9:19:c3:21:f5:a8:d6:b0:f7:38:b7:20:25: d8:17:9c:0c:5f:6d:d5:b9:5c:d5:51:4f:f1:c3:19:e8:6f:09: cd:23:e7:5e:73:77:3d:71:ca:79:a1:46:3f:05:57:f4:5d:a6: 74:90:8c:f8:72:8a:00:38:71:51:80:6d:76:30:c1:d3:f0:92: 1f:ad:86:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux68O3Vg3FCq0Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YTI4NDFhM2UtZDZiMy00NGEwLTlhYmYtZjBkMjg4NTZhZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhGbjOefJ2Cc+305TRbtfOrc7i+hUYYAzeNf 0BsNkTbE2SKaD3yZgJ7dzKP7LU7JFYpM4303UhyXqFFwMkAXJgISi5ryXtniVM6x /g/H/OmCKTNbabaa4+xTzMtlSrf9C7u9wNIY5ej8ytvxzhtihQwQ4bT6j5/fiZo0 RaN+73fOX4P+gDMwSk+LJbdwRblnjTmhvk/l0CXOyac/mfk4HZ4pG6k+HR9VX7mG zpGwdw1e0PcztE1mnxPYibaXi6iIbGq7L5akDxV4EdiYl+3hKKXYjmzomiN2Qfu/ F+3leE3Y6bHnPmZ1pCDpU1kraCjR3CqojlgBRYa5xmdsm9aikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn7bDfzQTUz+hrr9DRXZKp6+VWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2Y4NWQzMzctOWY4Zi0z OGZiLTg1YjAtZWVhNDljNzUzNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx5Mio3/nbj7EaH7ASTNDZwJPenARhssW2EmtWwu6qxN1IDeuD8GyNt lH4asabnfY0tvlW9glsIQrnnLWMTnIqkGS9go8KsWRDkApTPZkqa6icqMh40hnkb NW/NoT5Pz7wXTJyaXr3fxrsaSTlhrBzUJ9XZmKtWx5cSRl19RQC42z+C36t/Zusk icl+CY8iiIvTwNSfxEjYV8ahbXtmcE6r/ixN524jBHLyrB8i+MDGp0c3Wss+Jp1l uRnDIfWo1rD3OLcgJdgXnAxfbdW5XNVRT/HDGehvCc0j515zdz1xynmhRj8FV/Rd pnSQjPhyigA4cVGAbXYwwdPwkh+thrI= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:16 2025 by rpki-client