$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11728ff-8e59-317b-958e-adbcc7ce8335.roa File: f11728ff-8e59-317b-958e-adbcc7ce8335.roa (raw, json) Hash identifier: ALsWoziv+9LnTI2sUgxjkQgXzafpt12REE9YEMFBVIs= Subject key identifier: 57:E3:50:1E:E0:ED:2C:14:97:0F:93:27:C7:73:35:7F:D4:A5:82:79 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAD624582C94818443D54D080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11728ff-8e59-317b-958e-adbcc7ce8335.roa Signing time: Wed 29 Oct 2025 01:00:31 +0000 ROA not before: Wed 29 Oct 2025 01:00:31 +0000 ROA not after: Tue 27 Jan 2026 02:00:31 +0000 asID: 59210 IP address blocks: 131.153.46.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:62:45:82:c9:48:18:44:3d:54:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 01:00:31 2025 GMT Not After : Jan 27 02:00:31 2026 GMT Subject: CN=7b19e5de-c589-4c5c-b935-c1eb5b17d9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c3:9c:c8:f4:a9:f3:df:9b:8d:0a:ab:8a:f2: 73:eb:e6:67:e0:1d:c8:6b:74:96:09:f2:ee:31:f2: e9:d0:c9:eb:c1:fe:b4:d0:db:5d:10:87:5e:a7:5d: 8b:27:de:31:82:8b:ed:50:cb:c7:53:e0:11:95:54: 40:fa:ee:77:39:a4:b1:7a:4b:50:43:9e:97:79:45: 10:66:a0:5d:1e:af:9e:8b:ee:99:d2:d5:0a:fa:34: 75:ab:e2:08:cb:e0:60:06:db:5f:84:73:1f:c7:93: 97:37:80:25:76:70:f2:fe:8e:90:d0:37:9e:c2:72: 51:d4:9c:ad:98:ef:61:fe:9c:7f:e9:43:92:99:27: f8:7f:9f:62:1f:ec:01:c3:72:b0:fb:d9:da:f5:63: 9f:b0:8e:b5:0c:78:30:b8:16:ec:9c:05:07:2c:db: b4:10:b0:a5:3c:e5:00:71:76:4b:87:80:18:ec:54: ed:16:5a:d3:a1:bd:26:f6:e4:ac:9a:82:d6:e0:ba: 57:3f:2c:a6:90:24:3d:c1:8e:3c:54:8c:13:7d:76: f2:25:75:49:bb:11:ec:79:5b:8a:f3:61:a9:1d:b8: b5:12:5b:35:a9:65:46:1c:1d:11:d1:f5:67:93:5b: a7:51:ba:67:1c:05:bc:82:43:01:73:d1:7e:f4:73: bd:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:50:1E:E0:ED:2C:14:97:0F:93:27:C7:73:35:7F:D4:A5:82:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f11728ff-8e59-317b-958e-adbcc7ce8335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0e:2c:08:53:d0:c6:00:b8:2f:b1:5b:a8:8f:1a:7b:80:68: 4d:6b:88:58:ad:d2:a0:c6:79:e1:db:81:8d:2c:21:d2:ae:75: ac:36:5f:09:e8:0f:73:d0:88:1a:c8:ab:95:c8:a7:18:67:d2: ee:21:81:9c:48:54:61:28:60:b7:73:a7:b6:8d:2d:a0:c9:ae: 37:1d:64:06:d3:9a:13:7f:07:85:b9:26:53:b8:c3:6a:d7:2e: ff:0a:dd:8b:77:5c:7d:93:da:f2:6d:9d:0a:99:7c:ad:5c:b8: 9e:12:bd:47:56:c3:0b:26:19:47:f7:b3:6c:4d:7d:50:cc:54: ab:4c:50:9f:37:85:cf:5b:9d:60:3a:db:e6:35:6d:fb:43:11: de:f3:4e:3b:c6:e5:7b:5b:16:a6:92:df:3f:f6:8e:d5:fd:94: 24:cb:37:97:79:1c:a5:67:e3:9c:3b:3a:46:e4:54:60:1a:24: 53:b5:17:16:4d:ec:95:40:dd:46:0c:8a:03:a8:cf:f9:eb:be: 8a:0f:e5:f1:8b:d6:d7:75:a9:77:ac:4e:de:28:51:f3:79:78: 87:7b:d7:74:83:6d:8f:ac:5f:61:26:6d:e5:5a:40:bf:8f:9f: 23:4c:fd:b7:a5:8c:b0:da:c9:0b:85:65:f9:e0:fc:41:0b:62: 0f:84:11:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYkWCyUgYRD1U0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk N2IxOWU1ZGUtYzU4OS00YzVjLWI5MzUtYzFlYjViMTdkOWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsOcyPSp89+bjQqrivJz6+Zn4B3Ia3SWCfLu MfLp0Mnrwf600NtdEIdep12LJ94xgovtUMvHU+ARlVRA+u53OaSxektQQ56XeUUQ ZqBdHq+ei+6Z0tUK+jR1q+IIy+BgBttfhHMfx5OXN4AldnDy/o6Q0DeewnJR1Jyt mO9h/px/6UOSmSf4f59iH+wBw3Kw+9na9WOfsI61DHgwuBbsnAUHLNu0ELClPOUA cXZLh4AY7FTtFlrTob0m9uSsmoLW4LpXPyymkCQ9wY48VIwTfXbyJXVJuxHseVuK 82GpHbi1Els1qWVGHB0R0fVnk1unUbpnHAW8gkMBc9F+9HO9rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFfjUB7g7SwUlw+TJ8dzNX/UpYJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjExNzI4ZmYtOGU1OS0z MTdiLTk1OGUtYWRiY2M3Y2U4MzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5kuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUOLAhT0MYAuC+xW6iPGnuAaE1riFit0qDGeeHbgY0sIdKudaw2Xwno D3PQiBrIq5XIpxhn0u4hgZxIVGEoYLdzp7aNLaDJrjcdZAbTmhN/B4W5JlO4w2rX Lv8K3Yt3XH2T2vJtnQqZfK1cuJ4SvUdWwwsmGUf3s2xNfVDMVKtMUJ83hc9bnWA6 2+Y1bftDEd7zTjvG5XtbFqaS3z/2jtX9lCTLN5d5HKVn45w7OkbkVGAaJFO1FxZN 7JVA3UYMigOoz/nrvooP5fGL1td1qXesTt4oUfN5eId713SDbY+sX2EmbeVaQL+P nyNM/beljLDayQuFZfng/EELYg+EEUs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:30:24 2025 by rpki-client