$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa File: b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa (raw, json) Hash identifier: tCDxuD8/IMX2ePQiRSfHfZvtmGX7oY/6vvL39VIZAqw= Subject key identifier: F4:EA:78:02:CB:17:C6:16:23:BD:31:76:6F:27:D1:6B:55:36:57:6A Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD6249D5C6A6962B4967A980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 59210 IP address blocks: 131.153.85.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:49:d5:c6:a6:96:2b:49:67:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b99fc190-8c56-447e-b78f-72dae54e9af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9f:39:3a:91:19:69:fd:0d:5e:9f:ca:bc:5c: 7d:af:07:b1:ff:bb:c0:8b:33:f3:ab:1b:16:ec:28: 90:a8:43:07:85:57:a1:20:62:2f:ab:b8:60:ce:83: 47:a7:2e:2a:79:5c:d5:65:15:b5:16:5d:2c:c7:d8: 48:d2:4a:7e:3c:05:de:b0:e0:89:0b:98:38:36:54: a1:61:31:62:68:2d:f0:9b:4b:84:ad:26:e6:2b:3c: 1a:b4:54:82:11:c7:db:4c:62:f1:66:5d:8d:63:01: 87:87:85:a1:a2:4f:3f:fb:76:d0:b3:00:04:3c:8a: b5:7c:b4:f4:c3:57:70:ef:4f:65:14:92:ed:64:ae: 5b:31:2a:ba:3a:ef:df:54:f4:38:1a:95:2b:aa:13: 95:13:1d:3b:ce:63:eb:5f:e9:e4:68:73:0b:9d:1c: af:a4:97:74:2b:fe:15:bf:d6:7d:e5:c7:f8:57:94: b6:a3:5a:c2:a5:79:10:d5:ab:1a:23:53:8b:12:48: ac:d9:ad:8d:23:2e:3a:01:8f:81:c3:32:8e:92:3a: 2a:08:86:56:f6:bd:f8:30:42:60:52:a7:7c:c9:59: 64:53:00:19:c5:7e:5e:f4:4a:c5:5a:2d:d6:ab:22: 18:fb:69:98:8e:55:16:10:33:a8:21:65:af:89:e5: 0d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:EA:78:02:CB:17:C6:16:23:BD:31:76:6F:27:D1:6B:55:36:57:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/b47f1b33-dc76-3364-ba4b-10578bf34b2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:02:a6:49:3a:e2:40:2f:14:bc:a8:37:a1:bc:49:f7:51:05: 4b:0e:f0:a7:77:21:9c:fd:94:1b:f9:b9:f6:49:1b:39:19:1c: 6c:a7:33:f3:80:1c:56:47:aa:34:f3:d5:09:d8:7e:d8:5a:94: 12:37:fb:3c:db:17:1f:70:23:0b:be:74:e7:4e:58:16:1a:8f: ad:3b:7b:01:06:02:70:92:58:0f:0d:50:56:c7:62:22:3b:d7: a9:8c:b3:36:b3:f8:63:66:b8:a8:2f:a4:e8:78:62:d2:b8:ef: 66:f9:d4:03:59:92:57:21:6c:3b:68:12:75:86:25:b4:e6:4f: a2:6a:cd:ad:5d:d4:21:64:e8:1d:c2:3d:db:7e:69:1a:62:fe: 09:f9:d4:f0:79:01:06:7e:24:68:95:86:f4:9f:ef:09:5b:52: 48:82:de:39:e4:69:75:74:57:c3:21:1e:db:19:3e:59:15:53: 97:3c:c4:f5:12:e0:9b:37:23:05:61:28:db:3d:0c:5c:70:e1: 7d:a3:ae:1d:3e:e8:a5:12:c4:6b:41:e7:59:89:cf:cc:13:1b: 24:3d:f9:32:db:2b:a6:80:32:b5:34:02:49:05:b3:79:3a:b6: d1:8c:2b:44:58:14:fd:0e:b3:b3:50:98:79:f3:f1:53:f4:f5: d0:fc:31:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYknVxqaWK0lnqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk Yjk5ZmMxOTAtOGM1Ni00NDdlLWI3OGYtNzJkYWU1NGU5YWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ85OpEZaf0NXp/KvFx9rwex/7vAizPzqxsW 7CiQqEMHhVehIGIvq7hgzoNHpy4qeVzVZRW1Fl0sx9hI0kp+PAXesOCJC5g4NlSh YTFiaC3wm0uErSbmKzwatFSCEcfbTGLxZl2NYwGHh4Whok8/+3bQswAEPIq1fLT0 w1dw709lFJLtZK5bMSq6Ou/fVPQ4GpUrqhOVEx07zmPrX+nkaHMLnRyvpJd0K/4V v9Z95cf4V5S2o1rCpXkQ1asaI1OLEkis2a2NIy46AY+BwzKOkjoqCIZW9r34MEJg Uqd8yVlkUwAZxX5e9ErFWi3WqyIY+2mYjlUWEDOoIWWvieUNiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTqeALLF8YWI70xdm8n0WtVNldqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYjQ3ZjFiMzMtZGM3Ni0z MzY0LWJhNGItMTA1NzhiZjM0YjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoCpkk64kAvFLyoN6G8SfdRBUsO8Kd3IZz9lBv5ufZJGzkZHGynM/OA HFZHqjTz1QnYfthalBI3+zzbFx9wIwu+dOdOWBYaj607ewEGAnCSWA8NUFbHYiI7 16mMszaz+GNmuKgvpOh4YtK472b51ANZklchbDtoEnWGJbTmT6Jqza1d1CFk6B3C Pdt+aRpi/gn51PB5AQZ+JGiVhvSf7wlbUkiC3jnkaXV0V8MhHtsZPlkVU5c8xPUS 4Js3IwVhKNs9DFxw4X2jrh0+6KUSxGtB51mJz8wTGyQ9+TLbK6aAMrU0AkkFs3k6 ttGMK0RYFP0Os7NQmHnz8VP09dD8Mbk= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:34 2025 by rpki-client