$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa File: ebd5f0ba-0855-35b4-b758-5607a432fd86.roa (raw, json) Hash identifier: CSINHnMqjX/L62to5MUVSRbyyThWEmGNFuLYjgGVtsU= Subject key identifier: 34:F7:C8:E1:55:A0:46:BF:F8:D0:17:9D:69:0E:04:62:82:C0:8E:34 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD624725D5ED1A96720B8F00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 19437 IP address blocks: 131.153.102.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:47:25:d5:ed:1a:96:72:0b:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=4c21fb05-6e74-461d-a66d-1f4d3a0d19ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9b:16:03:32:0f:13:d7:f7:58:7e:61:b1:8e: 34:68:23:52:65:76:f8:73:8b:4a:ef:32:4d:cc:83: be:d5:d3:06:37:52:dd:c0:09:66:7c:a5:7b:84:d5: 32:f4:9a:84:99:9f:c0:52:c0:7d:87:bc:62:e3:32: 00:31:b3:8b:3c:b9:fb:a6:fa:c5:dd:b1:bc:32:aa: dc:c9:32:09:eb:ad:ca:c9:6b:4e:74:10:66:19:cd: 0f:28:44:62:dd:a9:8b:49:54:a3:15:61:b8:18:42: 1d:bc:85:8f:6e:24:ad:c2:b3:d8:ee:7c:cd:92:db: 9d:aa:04:6a:2e:8b:9f:7b:ad:90:69:52:99:72:50: 05:6a:b7:fa:5b:29:60:6f:d8:58:07:5c:c1:98:09: d0:8e:c8:25:d8:5a:35:62:27:73:18:9a:34:b4:5d: 8f:b8:f3:ad:b3:02:9f:eb:0f:5b:ba:9f:c0:1d:6a: cd:7e:f6:0a:ee:fe:9f:d4:b4:6b:8c:ae:4b:bd:28: 4c:49:c7:33:89:8e:07:01:34:39:94:7a:37:7c:f1: 09:56:1f:d5:c8:84:59:06:87:a2:ee:33:a9:08:66: cb:30:93:c2:41:4e:b5:bd:cc:e0:66:5e:88:32:28: 94:48:52:34:f7:d6:18:35:48:76:4d:a7:dd:b6:11: 3f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F7:C8:E1:55:A0:46:BF:F8:D0:17:9D:69:0E:04:62:82:C0:8E:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ebd5f0ba-0855-35b4-b758-5607a432fd86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:d9:44:87:0e:3c:b5:bb:be:32:3d:ff:4c:ac:36:36:90:29: ca:4a:44:81:01:a5:dc:f2:af:a5:2e:31:89:e7:4d:58:de:42: 3d:14:9d:cb:f8:ef:79:ab:81:97:e1:5c:de:51:a7:37:53:4b: 7a:37:87:c4:02:a9:c2:04:e3:82:ef:22:1c:51:44:ea:57:08: ed:1e:7c:8a:be:0c:db:a6:95:e1:89:75:30:8d:c2:74:0e:08: a0:5d:dd:f4:41:1d:8c:09:99:90:34:59:30:bb:48:da:75:e7: 38:f3:9a:85:36:a7:55:6f:92:65:d5:84:1c:13:5b:38:30:43: 7d:c3:8f:f6:4b:82:9d:82:d7:92:65:9e:1b:b9:9f:ad:da:ff: cf:d2:c3:79:d3:5d:e0:79:e8:fd:a3:c7:ff:1c:4e:39:1e:4d: 35:fc:d6:dc:71:0a:45:5a:6f:b2:ad:56:35:41:24:74:71:08: 80:81:c7:32:47:68:14:dd:75:92:85:f5:ff:6d:3b:2a:00:eb: 14:ca:40:5b:6e:91:d8:50:b7:1a:91:27:b2:e0:1a:09:ef:a0: 44:36:89:32:1e:3c:79:d4:6c:7c:8d:0a:12:ee:94:6f:ad:97: 4f:46:66:40:ba:de:6f:ca:64:84:39:dc:10:79:c0:47:d1:7f: b2:b9:3c:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkcl1e0alnILjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk NGMyMWZiMDUtNmU3NC00NjFkLWE2NmQtMWY0ZDNhMGQxOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJsWAzIPE9f3WH5hsY40aCNSZXb4c4tK7zJN zIO+1dMGN1LdwAlmfKV7hNUy9JqEmZ/AUsB9h7xi4zIAMbOLPLn7pvrF3bG8Mqrc yTIJ663KyWtOdBBmGc0PKERi3amLSVSjFWG4GEIdvIWPbiStwrPY7nzNktudqgRq Loufe62QaVKZclAFarf6Wylgb9hYB1zBmAnQjsgl2Fo1YidzGJo0tF2PuPOtswKf 6w9bup/AHWrNfvYK7v6f1LRrjK5LvShMSccziY4HATQ5lHo3fPEJVh/VyIRZBoei 7jOpCGbLMJPCQU61vczgZl6IMiiUSFI099YYNUh2TafdthE/ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT3yOFVoEa/+NAXnWkOBGKCwI40MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZWJkNWYwYmEtMDg1NS0z NWI0LWI3NTgtNTYwN2E0MzJmZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHZRIcOPLW7vjI9/0ysNjaQKcpKRIEBpdzyr6UuMYnnTVjeQj0Uncv4 73mrgZfhXN5RpzdTS3o3h8QCqcIE44LvIhxRROpXCO0efIq+DNumleGJdTCNwnQO CKBd3fRBHYwJmZA0WTC7SNp15zjzmoU2p1VvkmXVhBwTWzgwQ33Dj/ZLgp2C15Jl nhu5n63a/8/Sw3nTXeB56P2jx/8cTjkeTTX81txxCkVab7KtVjVBJHRxCICBxzJH aBTddZKF9f9tOyoA6xTKQFtukdhQtxqRJ7LgGgnvoEQ2iTIePHnUbHyNChLulG+t l09GZkC63m/KZIQ53BB5wEfRf7K5PME= -----END CERTIFICATE-----Generated at Wed Nov 5 07:27:11 2025 by rpki-client