$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa File: 8806f017-bb65-315a-9c2b-a0754dc20c8a.roa (raw, json) Hash identifier: d0L5+3C39t2nawTJVGlfNJiuqFvMCztl8wqC/mZF9Dg= Subject key identifier: FD:DC:EF:D2:29:C1:FD:83:B7:DA:52:E7:20:3E:67:47:A7:CB:E0:96 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AFC619D54E2D38194900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 207134 IP address blocks: 131.153.40.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:c6:19:d5:4e:2d:38:19:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=48e3c239-d574-493e-8ad3-a59c0c99fa45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:1c:43:bf:ea:b4:b4:d4:d8:66:70:9b:9a: 6b:40:fb:e7:4f:21:21:51:0b:08:17:fb:c9:06:0d: f9:8c:35:1b:4e:01:a2:9b:18:f0:af:ad:bb:da:c8: 2c:18:61:f1:8e:a4:30:28:10:57:a8:f9:93:25:8c: 19:83:76:a8:dd:85:79:c7:6a:54:a1:2a:75:26:cf: 93:6e:b1:67:8e:b1:72:8f:42:d9:fb:92:38:96:41: c6:9d:01:a8:09:ec:2c:9a:45:e7:4c:8f:b1:3f:19: d4:3d:26:31:b1:9d:2f:06:8c:0d:27:8c:66:98:a2: 84:0d:89:d1:b9:a0:dc:47:8f:6f:00:69:02:8b:6a: bd:dc:b9:fb:36:95:ba:1e:27:14:1a:2a:9f:16:4d: e3:94:ef:bc:f7:10:7e:3c:09:03:af:04:89:76:52: 30:0c:f5:2f:58:2d:c5:27:ae:b4:18:6b:0d:bf:4c: 86:35:a5:bd:a0:6f:4b:b8:be:10:b4:59:10:df:a5: 44:26:6b:83:44:b7:61:5e:78:58:46:e1:be:cb:a0: fe:7e:be:f6:3d:2d:5a:4e:ef:bf:de:c9:90:46:b1: e5:cd:93:82:39:5d:d7:86:36:5e:5d:de:f1:5b:7c: 15:f5:c4:22:9a:90:cb:27:ef:d7:cd:38:db:82:17: 01:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DC:EF:D2:29:C1:FD:83:B7:DA:52:E7:20:3E:67:47:A7:CB:E0:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8806f017-bb65-315a-9c2b-a0754dc20c8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:72:99:cd:b0:b3:32:8b:80:ef:16:5f:ae:0c:d1:5b:29:b4: a1:7d:b1:40:72:14:d3:29:d0:b8:38:ee:4d:51:7b:bb:a9:ce: ee:ec:ee:ed:d9:a4:e9:c4:08:c6:66:4d:51:b7:80:2d:e5:06: 48:37:f8:d8:b1:ba:56:dd:c6:ad:16:4d:2e:ff:3e:b0:c2:1f: 3e:09:c7:a6:3d:0f:89:72:6a:31:e0:65:5b:62:7d:05:20:44: 13:55:68:20:ac:f9:52:07:8b:60:ae:dc:d0:57:51:76:59:4b: 6b:19:37:c0:4b:ac:4f:6f:8a:0c:64:1e:44:f8:4b:57:29:7d: c0:14:b8:23:f1:28:8f:6b:bc:a4:b3:cd:bb:50:e5:22:c1:9e: f9:1c:24:ec:c7:f0:dd:71:9d:4e:e1:2a:86:77:ce:38:61:89: 91:56:7d:51:23:44:79:42:6c:70:c7:2c:d4:2a:56:b8:b1:07: 08:94:25:b0:11:c9:de:02:af:11:4f:89:80:9e:20:62:53:f5: 9f:db:28:29:77:a2:49:f9:5d:fa:28:cc:ec:1d:ff:27:28:dc: e8:c8:d4:10:f6:11:d2:02:10:21:b7:76:ab:a2:ee:bb:da:f6: 18:9c:2b:55:be:87:8c:44:e5:72:a7:53:3d:2a:d5:a2:eb:4c: 09:d1:d2:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6/GGdVOLTgZSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk NDhlM2MyMzktZDU3NC00OTNlLThhZDMtYTU5YzBjOTlmYTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAQcQ7/qtLTU2GZwm5prQPvnTyEhUQsIF/vJ Bg35jDUbTgGimxjwr6272sgsGGHxjqQwKBBXqPmTJYwZg3ao3YV5x2pUoSp1Js+T brFnjrFyj0LZ+5I4lkHGnQGoCewsmkXnTI+xPxnUPSYxsZ0vBowNJ4xmmKKEDYnR uaDcR49vAGkCi2q93Ln7NpW6HicUGiqfFk3jlO+89xB+PAkDrwSJdlIwDPUvWC3F J660GGsNv0yGNaW9oG9LuL4QtFkQ36VEJmuDRLdhXnhYRuG+y6D+fr72PS1aTu+/ 3smQRrHlzZOCOV3XhjZeXd7xW3wV9cQimpDLJ+/XzTjbghcBkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3c79Ipwf2Dt9pS5yA+Z0eny+CWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODgwNmYwMTctYmI2NS0z MTVhLTljMmItYTA3NTRkYzIwYzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABhymc2wszKLgO8WX64M0VsptKF9sUByFNMp0Lg47k1Re7upzu7s7u3Z pOnECMZmTVG3gC3lBkg3+Nixulbdxq0WTS7/PrDCHz4Jx6Y9D4lyajHgZVtifQUg RBNVaCCs+VIHi2Cu3NBXUXZZS2sZN8BLrE9vigxkHkT4S1cpfcAUuCPxKI9rvKSz zbtQ5SLBnvkcJOzH8N1xnU7hKoZ3zjhhiZFWfVEjRHlCbHDHLNQqVrixBwiUJbAR yd4CrxFPiYCeIGJT9Z/bKCl3okn5XfoozOwd/yco3OjI1BD2EdICECG3dqui7rva 9hicK1W+h4xE5XKnUz0q1aLrTAnR0nw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:36 2025 by rpki-client