$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa File: ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa (raw, json) Hash identifier: PlOmCXyXbQdywkBeOSQRblgyn5I82+A/mn7uiiwFWyg= Subject key identifier: 29:AD:E6:15:28:93:62:05:D5:A2:3A:39:F3:2A:8B:B5:A5:3A:91:E0 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD6249AF434F8B35F9C0C200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 20454 IP address blocks: 131.153.68.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:49:af:43:4f:8b:35:f9:c0:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=bd52b9f1-62df-4ebb-b07b-42236781bcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:97:e5:56:9d:08:d0:db:4d:58:ab:21:be: e7:3d:a3:ad:0e:60:55:a1:7c:36:47:1e:ed:72:0d: 3a:3c:0d:82:5f:a1:a3:2a:2c:78:dc:78:bc:27:12: 84:b7:dd:08:14:c4:11:dd:74:58:b2:4d:10:65:54: 27:1f:62:73:ad:0c:34:47:b5:72:43:13:61:88:c7: 52:54:02:14:13:7a:48:e8:4d:4c:82:f8:53:01:58: 94:f6:a4:30:22:75:3b:31:ed:84:be:f4:4e:03:a4: a3:94:db:00:e5:83:2c:b1:75:aa:a8:4b:f5:90:25: fa:e0:af:db:e8:c0:ef:c6:6c:8e:3a:3c:65:3f:2e: dd:5a:af:8d:6b:2a:f5:4e:0e:08:35:4a:84:9f:3e: b8:fb:f7:e9:07:9a:2d:6f:77:e7:16:8d:cc:18:66: 84:00:77:5d:04:69:d1:7b:3e:29:0d:10:15:c5:52: 81:49:4c:4b:a6:9b:ce:6c:aa:71:be:f8:cd:51:c7: 98:d8:cb:bd:f4:7e:ec:2a:0b:da:82:34:98:28:53: 19:0b:2c:fb:95:8a:ee:aa:79:dd:39:80:34:ee:18: ed:6d:9a:57:bc:e8:d4:b2:90:b3:cc:46:11:d4:88: 64:05:db:20:89:98:b4:41:af:95:03:35:1b:04:cc: 25:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AD:E6:15:28:93:62:05:D5:A2:3A:39:F3:2A:8B:B5:A5:3A:91:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ac7b4e1e-0a10-3720-8cd3-3356381d352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:74:f0:18:0f:72:36:41:82:90:cb:39:0d:fe:cf:29:00:8f: 43:61:fe:13:76:21:a5:bc:ac:3f:29:ce:ef:5d:d6:40:e8:dc: 9f:60:9c:e2:1d:82:6e:80:95:0a:5d:be:d7:d6:76:5e:04:c5: d0:1a:a0:e7:7d:db:22:85:ba:37:4e:db:f4:b8:46:5d:e1:89: b8:46:e9:74:54:84:57:6e:26:e6:9b:e8:fd:6b:4a:f4:f9:b1: 2c:ab:18:b2:3d:b3:2a:fe:90:9d:a6:5c:73:fa:10:db:b1:55: 72:04:0e:c8:26:ff:1e:0f:8c:8e:7a:57:f8:8e:7e:e7:e0:53: a7:0e:e5:6c:b3:4a:fd:49:b1:2d:ab:97:18:d7:e8:14:9d:49: 29:c4:3d:20:c2:3a:dd:0c:2d:a0:3b:c1:10:11:c0:55:db:fc: 05:ef:c9:06:a3:43:79:89:35:72:40:91:7f:b0:e7:0b:ed:1b: fe:f2:19:b1:46:ec:fa:89:cb:36:aa:b1:9b:5d:24:77:a4:2c: 08:3a:9c:dc:e1:b1:d5:1d:a0:d3:a4:73:ff:01:2d:51:c0:55: fb:d1:c8:8a:e6:8b:72:3e:9e:d9:f8:29:04:a3:68:a7:ec:03: 84:12:32:38:04:75:0d:69:49:92:4b:85:48:5a:68:29:cb:dc: 74:93:9f:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkmvQ0+LNfnAwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YmQ1MmI5ZjEtNjJkZi00ZWJiLWIwN2ItNDIyMzY3ODFiY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8iX5VadCNDbTVirIb7nPaOtDmBVoXw2Rx7t cg06PA2CX6GjKix43Hi8JxKEt90IFMQR3XRYsk0QZVQnH2JzrQw0R7VyQxNhiMdS VAIUE3pI6E1MgvhTAViU9qQwInU7Me2EvvROA6SjlNsA5YMssXWqqEv1kCX64K/b 6MDvxmyOOjxlPy7dWq+Nayr1Tg4INUqEnz64+/fpB5otb3fnFo3MGGaEAHddBGnR ez4pDRAVxVKBSUxLppvObKpxvvjNUceY2Mu99H7sKgvagjSYKFMZCyz7lYruqnnd OYA07hjtbZpXvOjUspCzzEYR1IhkBdsgiZi0Qa+VAzUbBMwlFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmt5hUok2IF1aI6OfMqi7WlOpHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWM3YjRlMWUtMGExMC0z NzIwLThjZDMtMzM1NjM4MWQzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ508BgPcjZBgpDLOQ3+zykAj0Nh/hN2IaW8rD8pzu9d1kDo3J9gnOId gm6AlQpdvtfWdl4ExdAaoOd92yKFujdO2/S4Rl3hibhG6XRUhFduJuab6P1rSvT5 sSyrGLI9syr+kJ2mXHP6ENuxVXIEDsgm/x4PjI56V/iOfufgU6cO5WyzSv1JsS2r lxjX6BSdSSnEPSDCOt0MLaA7wRARwFXb/AXvyQajQ3mJNXJAkX+w5wvtG/7yGbFG 7PqJyzaqsZtdJHekLAg6nNzhsdUdoNOkc/8BLVHAVfvRyIrmi3I+ntn4KQSjaKfs A4QSMjgEdQ1pSZJLhUhaaCnL3HSTn0E= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:54 2025 by rpki-client