$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa File: d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa (raw, json) Hash identifier: bsAvT0KUViT3bxqNMCfWOeUl2sx/0zHOh7cF80+dNRE= Subject key identifier: F3:8C:CB:A6:89:6A:7F:9E:97:C9:08:B9:50:BE:7A:E5:6E:74:C0:DD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD624605F2B1EE98CB31F75E Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 19437 IP address blocks: 131.153.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:46:05:f2:b1:ee:98:cb:31:f7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=b3f7a37b-8ad7-4996-b79d-7a2f1cd59add Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0e:b4:b6:c8:30:15:02:50:16:ae:9e:96:6d: 50:52:09:c3:6a:10:2a:45:58:99:74:97:dc:94:f2: 50:3e:93:ac:bc:c8:f2:66:26:75:fe:bd:5f:2e:85: d7:ff:d1:24:18:03:be:be:f8:36:b5:79:d5:6a:b8: d3:49:e2:59:06:2b:62:be:2d:5b:c6:e8:ce:1d:bc: 19:d8:9e:25:2f:2a:f6:fe:9f:96:68:f0:eb:21:f6: 03:0a:23:7c:84:76:a0:28:fb:d2:13:4e:06:48:f9: a2:8a:04:68:7d:bd:35:ab:d9:cb:ef:a3:2b:b1:e2: 96:7c:57:37:1c:1d:75:06:b4:ed:7d:b7:95:d2:3b: e0:86:39:90:7e:da:e2:3e:4d:b6:2d:11:fa:27:45: ce:30:6e:7b:c5:84:7a:a3:98:ca:d7:76:db:ab:9a: 37:28:37:3d:34:97:85:ed:17:41:1a:54:74:10:2f: a1:3d:09:49:84:1e:35:75:ee:c1:b1:a2:22:95:f2: ca:dd:31:37:91:b6:a7:c3:a6:bb:b2:d2:06:52:65: 1a:35:8b:93:37:63:a7:aa:76:a8:ec:38:79:97:f8: 45:c7:91:db:7a:2c:1b:0a:3d:09:af:42:45:1a:35: 94:3d:3a:3b:b7:3c:0a:05:04:1f:69:39:1f:20:af: 35:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:8C:CB:A6:89:6A:7F:9E:97:C9:08:B9:50:BE:7A:E5:6E:74:C0:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:88:f5:a9:76:c8:21:5e:fd:ab:f7:af:3e:40:62:38:05:13: fc:4c:64:23:82:4f:ce:36:3c:67:18:b7:ac:e3:7d:2c:54:65: 40:98:0d:d8:96:2a:bd:94:f7:91:2c:80:32:45:6c:b6:04:87: 1c:d6:36:27:b8:22:82:03:ec:94:d2:6f:10:4f:cf:8f:14:9d: a4:eb:a5:dd:c0:00:47:32:2e:22:84:a7:72:fc:cc:3b:bb:da: aa:42:4a:cf:80:c8:95:9b:0b:2b:d0:d5:f0:2f:74:e8:28:cf: 07:5b:0c:88:d4:4d:45:a9:da:27:3f:e6:a8:6c:6a:4c:ea:b7: e5:ce:3e:8b:ed:be:76:8c:9f:11:1f:cc:49:3d:1d:b1:0f:0e: 60:91:ef:71:be:1a:0a:88:89:7e:b8:2e:04:5d:62:3e:91:d3: ef:24:d1:f5:df:eb:50:1f:c1:7e:84:06:4a:45:d8:c0:bb:14: 0a:a5:3c:76:4d:84:4f:c6:77:e3:4a:c7:e8:eb:16:4b:e9:77: e1:35:dc:ff:5e:6d:d2:17:f1:c5:9f:33:64:81:67:f1:c9:22: 65:61:6d:99:ef:2a:da:19:1a:64:b9:e3:b0:df:f9:86:41:a3: 26:2c:b8:00:91:bf:09:fd:cc:09:5b:6d:d6:c1:4f:ac:80:b3: 83:84:e9:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkYF8rHumMsx914wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk YjNmN2EzN2ItOGFkNy00OTk2LWI3OWQtN2EyZjFjZDU5YWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug60tsgwFQJQFq6elm1QUgnDahAqRViZdJfc lPJQPpOsvMjyZiZ1/r1fLoXX/9EkGAO+vvg2tXnVarjTSeJZBitivi1bxujOHbwZ 2J4lLyr2/p+WaPDrIfYDCiN8hHagKPvSE04GSPmiigRofb01q9nL76MrseKWfFc3 HB11BrTtfbeV0jvghjmQftriPk22LRH6J0XOMG57xYR6o5jK13bbq5o3KDc9NJeF 7RdBGlR0EC+hPQlJhB41de7BsaIilfLK3TE3kbanw6a7stIGUmUaNYuTN2Onqnao 7Dh5l/hFx5HbeiwbCj0Jr0JFGjWUPTo7tzwKBQQfaTkfIK81UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOMy6aJan+el8kIuVC+euVudMDdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDI1MGM5NzMtZjNjOC0z N2RmLWI0NzctZTNjNDlhZDBhNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+I9al2yCFe/av3rz5AYjgFE/xMZCOCT842PGcYt6zjfSxUZUCYDdiW Kr2U95EsgDJFbLYEhxzWNie4IoID7JTSbxBPz48UnaTrpd3AAEcyLiKEp3L8zDu7 2qpCSs+AyJWbCyvQ1fAvdOgozwdbDIjUTUWp2ic/5qhsakzqt+XOPovtvnaMnxEf zEk9HbEPDmCR73G+GgqIiX64LgRdYj6R0+8k0fXf61AfwX6EBkpF2MC7FAqlPHZN hE/Gd+NKx+jrFkvpd+E13P9ebdIX8cWfM2SBZ/HJImVhbZnvKtoZGmS547Df+YZB oyYsuACRvwn9zAlbbdbBT6yAs4OE6YM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:45:07 2025 by rpki-client