$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa File: c8fa4d08-d3d2-3130-a026-334d188ad040.roa (raw, json) Hash identifier: iyCD1O95Ziod/sAZxS4FAc4oR0ZZHiIB2QfPdCA0bvA= Subject key identifier: 1F:1A:8D:19:DC:8E:3B:E7:82:14:E3:9A:B4:50:FF:DF:F5:A5:4D:4E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AFFF8FA33563788B8900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 59210 IP address blocks: 131.153.76.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:ff:8f:a3:35:63:78:8b:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=3de4fd19-ff7b-4f31-af5b-7929fc074121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:72:cf:76:fc:1f:06:fd:52:66:6f:94:30:d0: c8:e8:de:6c:e8:4e:08:b2:af:85:d7:86:4b:24:d7: 48:ed:22:f1:8e:63:80:66:0c:f0:e0:a3:9e:d2:d7: 5e:43:83:39:68:1e:6e:f8:b8:36:6b:f8:7d:ea:56: 5b:6b:f4:e7:c0:c5:a4:ce:1d:e3:a9:a9:1c:6f:97: 0d:14:11:0e:b7:f9:1a:bd:b7:f4:f6:95:98:f2:21: b0:05:e0:58:4a:b7:fd:a6:1d:a6:98:4c:28:5b:65: ef:de:d3:58:bd:19:d3:98:ec:df:dd:14:3c:5c:3f: e9:3b:b1:c3:81:b0:47:6f:8e:6a:9d:b2:71:57:e1: 13:64:ec:58:38:3c:e5:2e:dc:9a:ea:2b:97:ce:d5: c6:79:a5:8d:74:bb:37:78:b1:85:e3:fc:20:86:e4: f8:32:3a:06:dc:2d:f3:47:1d:fb:d9:0f:62:bf:45: 83:e3:3b:d5:9f:0e:6d:e2:60:49:78:53:9b:a0:9d: ba:8a:ee:76:c0:2c:54:35:44:03:fa:c2:02:8d:6a: 65:86:8a:b7:3f:0b:73:15:55:03:42:dd:b3:84:cb: 7c:f6:65:c2:c9:2f:d2:06:bb:de:df:fe:2f:e9:80: f9:a4:60:fa:58:d1:cf:28:7e:b4:79:2a:5b:9e:47: 43:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1A:8D:19:DC:8E:3B:E7:82:14:E3:9A:B4:50:FF:DF:F5:A5:4D:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c8fa4d08-d3d2-3130-a026-334d188ad040.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c4:1c:9c:3f:90:1f:fe:10:0e:6e:5e:60:fc:e5:a7:3c:e1: db:85:fe:49:84:93:19:62:3a:f2:d1:de:dd:7e:63:79:dd:67: c7:35:66:4c:a1:e6:81:10:43:cb:2a:96:b6:6a:bc:85:e2:0b: ef:98:bb:a2:e9:52:29:24:73:29:0a:b2:d2:ae:ce:34:e9:6a: c5:c4:4d:93:47:7e:d5:9a:eb:5a:bd:32:c6:4e:1c:30:c2:f9: cc:a4:4c:3a:c3:f8:07:d4:f2:7e:43:c5:08:0c:62:32:97:4b: c4:c7:fe:2b:59:ab:3d:fd:9f:30:ab:61:d9:f6:30:d7:38:2e: 71:15:2a:23:d5:60:cd:2a:f5:fa:ab:2b:a4:ca:7c:77:07:84: a9:1e:76:a3:5c:8b:2a:95:31:88:ad:3a:59:1f:ac:23:46:68: dc:ea:03:1c:6a:5d:e0:f4:99:da:2d:7c:e9:dd:03:6b:53:da: e0:75:11:a3:3f:09:1d:70:43:dd:00:7a:1f:01:6a:57:fa:0f: cf:4d:f2:13:58:21:7e:ad:c6:36:17:04:81:1a:11:9e:83:a8: e4:5b:20:c3:70:2e:93:2d:2b:ca:8c:19:6d:4d:56:97:ba:5d: 2e:73:4c:c3:d3:57:fd:b6:26:80:95:56:23:13:98:5b:b5:8a: 6f:d5:ce:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6//j6M1Y3iLiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk M2RlNGZkMTktZmY3Yi00ZjMxLWFmNWItNzkyOWZjMDc0MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLPdvwfBv1SZm+UMNDI6N5s6E4Isq+F14ZL JNdI7SLxjmOAZgzw4KOe0tdeQ4M5aB5u+Lg2a/h96lZba/TnwMWkzh3jqakcb5cN FBEOt/kavbf09pWY8iGwBeBYSrf9ph2mmEwoW2Xv3tNYvRnTmOzf3RQ8XD/pO7HD gbBHb45qnbJxV+ETZOxYODzlLtya6iuXztXGeaWNdLs3eLGF4/wghuT4MjoG3C3z Rx372Q9iv0WD4zvVnw5t4mBJeFOboJ26iu52wCxUNUQD+sICjWplhoq3PwtzFVUD Qt2zhMt89mXCyS/SBrve3/4v6YD5pGD6WNHPKH60eSpbnkdDUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8ajRncjjvnghTjmrRQ/9/1pU1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzhmYTRkMDgtZDNkMi0z MTMwLWEwMjYtMzM0ZDE4OGFkMDQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLEHJw/kB/+EA5uXmD85ac84duF/kmEkxliOvLR3t1+Y3ndZ8c1Zkyh 5oEQQ8sqlrZqvIXiC++Yu6LpUikkcykKstKuzjTpasXETZNHftWa61q9MsZOHDDC +cykTDrD+AfU8n5DxQgMYjKXS8TH/itZqz39nzCrYdn2MNc4LnEVKiPVYM0q9fqr K6TKfHcHhKkedqNciyqVMYitOlkfrCNGaNzqAxxqXeD0mdotfOndA2tT2uB1EaM/ CR1wQ90Aeh8Balf6D89N8hNYIX6txjYXBIEaEZ6DqORbIMNwLpMtK8qMGW1NVpe6 XS5zTMPTV/22JoCVViMTmFu1im/Vzow= -----END CERTIFICATE-----Generated at Tue Nov 4 23:24:59 2025 by rpki-client