$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e759a736-f5b0-3416-9d0c-5469caee75a9.roa File: e759a736-f5b0-3416-9d0c-5469caee75a9.roa (raw, json) Hash identifier: OT6GZwSlfJY+hQdI1ZmHj/pzO+51YGVtFbMe4rgppKo= Subject key identifier: C0:9D:E6:52:FD:94:61:69:72:3F:91:2B:06:94:33:06:48:26:92:64 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7AFB4337F203E9587B0C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e759a736-f5b0-3416-9d0c-5469caee75a9.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 20454 IP address blocks: 131.153.14.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:af:b4:33:7f:20:3e:95:87:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=0d34ae62-7242-4b9c-9473-a715c8e75dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d9:9a:f5:56:d5:b5:72:ba:5f:2e:84:30:a5: e2:05:cb:9c:b3:aa:e9:40:17:8f:4e:af:34:3e:42: dd:7a:1d:fb:01:81:d4:c7:67:62:a3:53:f4:15:3b: 41:d2:bb:59:d0:aa:64:83:b1:8e:2f:97:df:b2:d0: 78:69:0b:f6:35:f8:4d:a7:07:b6:77:27:7b:91:64: 8c:a0:26:2f:3a:19:5d:11:7c:d0:f5:d4:0f:fc:af: b2:33:a6:3b:5d:c6:a8:04:6b:35:db:d6:53:82:eb: 46:91:0e:93:8e:35:c4:c4:8f:52:4b:53:8b:7e:4c: a5:2f:ac:bd:b0:65:d3:b6:e4:3b:1a:58:27:e5:99: 10:54:db:c9:dc:9c:b3:6c:d9:4b:71:c6:8b:31:02: c5:bd:5f:1b:f5:8f:3e:8a:a5:8e:4a:ee:0a:1a:c2: cb:c7:ca:d1:15:d9:3e:b8:ac:61:bc:15:09:cb:c0: 54:28:7c:41:70:58:2b:0c:d9:89:4b:3d:b2:d1:5c: 5f:81:01:00:e7:b7:9f:47:83:f7:60:4c:b2:16:2d: 47:ee:b3:47:ce:4b:ee:69:12:18:4d:37:fc:c2:1f: c5:d2:66:a1:58:a3:e9:71:77:67:6e:b1:5f:b9:1a: bc:01:09:b1:d0:e4:03:9c:95:50:cb:04:a9:21:56: 26:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:E6:52:FD:94:61:69:72:3F:91:2B:06:94:33:06:48:26:92:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/e759a736-f5b0-3416-9d0c-5469caee75a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ce:7d:db:a3:bb:ae:fc:13:4a:73:72:46:0d:ca:c3:09:ef: b5:8b:61:fc:df:2a:5b:83:e4:ef:2e:b2:9f:a2:37:74:88:ef: 39:a3:fc:1b:bc:08:fc:67:80:14:39:1f:d6:98:b6:1d:3c:2b: 97:1d:e6:29:de:8d:c2:bc:a3:2d:0b:3a:00:1b:99:96:c0:af: 9a:f2:07:8b:f6:4a:58:8b:ec:e3:d2:ff:12:9c:9f:c3:e5:58: 95:99:f6:9c:16:2f:6f:3d:62:59:e9:33:3c:62:b5:58:82:93: c3:94:76:08:11:8c:36:a5:8c:5d:37:0e:f0:4c:5f:ef:5c:a8: 87:40:5c:5e:d4:f1:c4:81:a5:7c:a8:b5:d4:15:71:63:bc:d9: 77:24:79:1a:d7:f3:23:f2:16:4a:25:6e:69:e7:6c:33:3c:6a: 66:dc:07:b2:eb:61:f5:0c:21:f4:67:19:49:ad:fc:17:01:96: 03:5a:3e:49:56:97:97:9a:05:f3:a0:2d:52:1b:67:01:4f:3d: 5e:82:b2:31:25:37:17:4b:08:fd:41:5c:76:2d:c3:41:a1:c8: 06:f3:e0:13:de:00:b5:d7:ee:10:d7:33:c4:cb:e3:45:5e:20: c4:61:b8:37:3c:c4:04:37:96:c1:df:47:aa:77:63:58:4d:82: 90:94:96:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux6+0M38gPpWHsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MGQzNGFlNjItNzI0Mi00YjljLTk0NzMtYTcxNWM4ZTc1ZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNma9VbVtXK6Xy6EMKXiBcucs6rpQBePTq80 PkLdeh37AYHUx2dio1P0FTtB0rtZ0Kpkg7GOL5ffstB4aQv2NfhNpwe2dyd7kWSM oCYvOhldEXzQ9dQP/K+yM6Y7XcaoBGs129ZTgutGkQ6TjjXExI9SS1OLfkylL6y9 sGXTtuQ7Glgn5ZkQVNvJ3JyzbNlLccaLMQLFvV8b9Y8+iqWOSu4KGsLLx8rRFdk+ uKxhvBUJy8BUKHxBcFgrDNmJSz2y0VxfgQEA57efR4P3YEyyFi1H7rNHzkvuaRIY TTf8wh/F0mahWKPpcXdnbrFfuRq8AQmx0OQDnJVQywSpIVYmgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCd5lL9lGFpcj+RKwaUMwZIJpJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZTc1OWE3MzYtZjViMC0z NDE2LTlkMGMtNTQ2OWNhZWU3NWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5kOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLOfduju678E0pzckYNysMJ77WLYfzfKluD5O8usp+iN3SI7zmj/Bu8 CPxngBQ5H9aYth08K5cd5inejcK8oy0LOgAbmZbAr5ryB4v2SliL7OPS/xKcn8Pl WJWZ9pwWL289YlnpMzxitViCk8OUdggRjDaljF03DvBMX+9cqIdAXF7U8cSBpXyo tdQVcWO82XckeRrX8yPyFkolbmnnbDM8ambcB7LrYfUMIfRnGUmt/BcBlgNaPklW l5eaBfOgLVIbZwFPPV6CsjElNxdLCP1BXHYtw0GhyAbz4BPeALXX7hDXM8TL40Ve IMRhuDc8xAQ3lsHfR6p3Y1hNgpCUll0= -----END CERTIFICATE-----Generated at Wed Nov 5 02:40:05 2025 by rpki-client