$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa File: cd1d2995-4610-3bd4-b98d-17721b22293f.roa (raw, json) Hash identifier: uLkxBGpOqTPY4947qCpekiQxf/d7NY0zl56UzoJ2vu0= Subject key identifier: FD:60:86:24:65:E7:76:D5:9B:72:92:FF:DE:07:81:C1:D5:01:FC:63 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD6249E9412996FEFCD5AD80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 60558 IP address blocks: 131.153.86.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:49:e9:41:29:96:fe:fc:d5:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=f1f2225f-0ba0-47ac-b299-59e2bfdaa3bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d9:45:2e:c3:0a:c9:b5:5b:20:e3:a4:ef:3c: 1b:33:5b:7c:34:0a:f7:af:5f:24:62:39:c8:4f:38: 99:1c:3b:e1:3d:e8:a2:5f:c7:4b:02:23:c3:48:4d: 01:0e:42:26:5c:55:4b:f0:f6:3a:34:8e:00:0d:db: 6c:0b:52:3b:87:73:b6:2e:2b:99:99:63:c0:9c:98: 0e:b1:70:67:d1:3c:e7:4f:0b:25:e1:f8:9e:82:df: 36:10:eb:db:4a:6e:ef:e6:4e:79:7e:f2:cf:ea:b7: 6b:b1:0c:99:c0:68:c3:03:7e:37:c0:7a:2b:fd:38: 41:31:39:75:1c:2e:5e:c4:f1:47:61:bd:76:86:61: d1:a6:77:16:7a:95:73:c9:dc:78:1a:f4:55:f0:85: 30:45:89:8f:b0:74:15:f8:10:44:dd:53:29:66:c2: 11:ea:36:d0:e9:50:85:70:0a:c4:ae:3c:55:ba:8d: 43:8c:cb:ed:aa:27:7c:dd:a2:53:8f:a9:85:30:e8: 02:04:3b:5a:e9:e6:ff:1f:1a:4a:97:7d:96:b0:77: 86:9e:ee:52:7e:5a:f2:57:12:0c:62:9b:d0:0f:6c: 37:bf:1d:ea:1d:c2:6d:fd:b6:82:94:ba:92:87:85: 32:49:63:c0:7b:a3:ca:c1:f8:6b:68:d9:89:1d:45: 0c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:60:86:24:65:E7:76:D5:9B:72:92:FF:DE:07:81:C1:D5:01:FC:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:97:ec:06:74:59:ea:c0:b8:74:15:1d:00:85:26:9c:ac:57: 0f:d1:64:95:28:a9:9b:75:f0:0c:86:69:8e:e2:54:c6:ed:0b: 1b:ac:d5:45:cb:3d:0a:3f:50:af:e2:57:d9:08:3e:8b:0d:8f: 61:68:04:a0:04:ec:78:b7:e8:99:e5:e3:e5:e3:1b:d3:4c:19: 3b:34:aa:d8:0e:7c:fa:b7:cb:21:d5:4b:35:41:2b:9b:2e:e8: 0b:ce:81:a9:b2:43:54:b0:fd:c6:cd:95:a3:28:41:ab:12:17: 1a:1a:19:eb:3e:3a:8f:ef:5f:bf:7c:bf:ce:c7:e5:80:18:2d: aa:8e:8e:5d:d2:95:7a:64:ef:6b:7c:24:1e:5f:74:bc:78:9b: 64:ae:8f:25:c6:88:c5:78:93:5e:3c:ba:5f:dc:75:c4:ab:0f: b2:5c:21:23:f0:c4:ee:73:f9:c1:85:dd:8a:82:96:b1:d6:8d: c0:e7:18:6c:4c:69:6e:b2:c7:a6:75:29:29:d2:14:fc:12:05: 35:53:3c:e6:54:50:e7:de:58:23:b3:ca:89:43:ec:82:1f:2d: 3b:bf:46:ce:0e:f1:58:98:08:49:d8:84:c2:8a:61:48:2c:be: ad:cb:ba:e6:64:20:b1:55:13:c4:78:3d:8d:90:87:8e:15:18: cc:d7:ba:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYknpQSmW/vzVrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk ZjFmMjIyNWYtMGJhMC00N2FjLWIyOTktNTllMmJmZGFhM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9lFLsMKybVbIOOk7zwbM1t8NAr3r18kYjnI TziZHDvhPeiiX8dLAiPDSE0BDkImXFVL8PY6NI4ADdtsC1I7h3O2LiuZmWPAnJgO sXBn0TznTwsl4fiegt82EOvbSm7v5k55fvLP6rdrsQyZwGjDA343wHor/ThBMTl1 HC5exPFHYb12hmHRpncWepVzydx4GvRV8IUwRYmPsHQV+BBE3VMpZsIR6jbQ6VCF cArErjxVuo1DjMvtqid83aJTj6mFMOgCBDta6eb/HxpKl32WsHeGnu5SflryVxIM YpvQD2w3vx3qHcJt/baClLqSh4UySWPAe6PKwfhraNmJHUUMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1ghiRl53bVm3KS/94HgcHVAfxjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2QxZDI5OTUtNDYxMC0z YmQ0LWI5OGQtMTc3MjFiMjIyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+X7AZ0WerAuHQVHQCFJpysVw/RZJUoqZt18AyGaY7iVMbtCxus1UXL PQo/UK/iV9kIPosNj2FoBKAE7Hi36Jnl4+XjG9NMGTs0qtgOfPq3yyHVSzVBK5su 6AvOgamyQ1Sw/cbNlaMoQasSFxoaGes+Oo/vX798v87H5YAYLaqOjl3SlXpk72t8 JB5fdLx4m2SujyXGiMV4k148ul/cdcSrD7JcISPwxO5z+cGF3YqClrHWjcDnGGxM aW6yx6Z1KSnSFPwSBTVTPOZUUOfeWCOzyolD7IIfLTu/Rs4O8ViYCEnYhMKKYUgs vq3LuuZkILFVE8R4PY2Qh44VGMzXuvw= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:13 2025 by rpki-client