$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa File: f167a86e-0304-38f6-baf0-2ee2779263a8.roa (raw, json) Hash identifier: CRQVM7qHY3RuZ9jaUxz/4tVNY/ESBljflzgoXXXJqhw= Subject key identifier: 2A:3E:A8:E6:38:39:EC:CF:AD:80:55:E4:19:9C:B2:41:71:89:31:2C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7B4F5B1791C1E9CC51780 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 59210 IP address blocks: 131.153.159.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b4:f5:b1:79:1c:1e:9c:c5:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=bffde840-ac2b-4c3e-a6ad-4681bb62e9a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f3:fc:b2:06:30:7c:6e:10:33:e8:3b:9a:df: 68:2f:0b:b2:fe:4c:c9:33:13:11:1c:0c:6e:da:65: 7f:4c:c6:a3:27:4c:76:47:46:51:c1:a9:31:b6:5f: 39:30:c4:2f:9c:2f:20:c6:5b:22:7e:20:63:0a:99: 3e:48:60:a8:85:b4:27:1b:69:4c:2f:f1:4d:24:79: f7:84:07:26:99:a1:8d:fe:01:00:41:33:29:78:2b: b6:62:e0:e9:79:7c:71:87:ab:05:49:c2:a7:1b:29: 09:dc:6b:00:d5:2d:bb:2c:f6:e7:da:ac:14:4b:b8: 1e:04:eb:56:fe:f9:ef:11:b4:79:9d:74:32:f2:73: b8:cd:bb:f7:5d:95:66:a1:45:b3:4c:0a:6c:cf:e7: aa:37:57:d7:02:6c:f4:cf:6b:1e:6e:46:9a:17:ee: a4:93:49:8b:82:a8:79:ca:a0:0b:65:17:35:f3:6e: 03:3e:44:87:47:79:32:62:fe:f7:f1:a8:aa:fb:76: 0c:23:bc:97:99:d4:91:3b:87:28:f2:2d:9e:2f:8a: c4:e3:3e:12:b3:99:e5:63:0d:d3:ae:a8:70:34:37: 04:c6:ef:74:27:6b:ed:7e:37:4c:54:f5:ba:81:e0: c8:2b:68:a5:89:c7:fa:e4:15:9e:ef:e0:19:a9:96: 97:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3E:A8:E6:38:39:EC:CF:AD:80:55:E4:19:9C:B2:41:71:89:31:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f167a86e-0304-38f6-baf0-2ee2779263a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:89:86:36:0a:e8:79:c2:50:f5:08:69:59:ad:3b:57:33:c4: c1:d9:6e:5c:c3:1a:47:c9:2f:bc:7c:36:9f:21:e2:b6:91:ea: 6a:30:fa:12:e4:f6:6f:20:4d:d7:cb:ed:d1:f5:ba:98:a4:83: 71:78:43:08:6a:2e:a5:35:ee:f5:b7:d0:82:91:b8:01:b3:34: f1:1d:cc:82:31:1e:27:3c:7a:da:20:49:33:17:8b:ac:db:e8: 1c:e3:96:1b:d0:36:5b:88:68:ea:16:e1:9d:64:88:3c:26:41: c0:33:36:0d:99:5e:da:05:78:86:1a:c8:09:fa:87:7b:41:6b: 8c:26:bd:b0:af:3e:91:16:d1:3c:68:65:5d:7e:08:64:7a:97: 11:b4:af:58:49:b5:90:65:fe:d5:80:0f:9b:e8:f4:a9:0a:6a: f0:69:55:13:0d:81:3a:ae:31:d7:25:79:05:bd:2d:e8:44:a9: 84:87:9c:7a:e0:a1:65:35:d2:07:4b:f9:fc:7b:8c:84:bc:fc: 6a:6a:7f:fb:c6:51:f3:aa:bc:33:1b:a0:ae:1a:14:9a:e7:c4: cb:ae:37:a9:dd:b1:25:89:b6:48:64:04:13:e0:0b:f4:00:af: c2:1e:59:20:f8:b8:7c:e0:67:1a:95:60:cf:0e:0a:dc:16:31: 59:59:8c:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7T1sXkcHpzFF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk YmZmZGU4NDAtYWMyYi00YzNlLWE2YWQtNDY4MWJiNjJlOWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPP8sgYwfG4QM+g7mt9oLwuy/kzJMxMRHAxu 2mV/TMajJ0x2R0ZRwakxtl85MMQvnC8gxlsifiBjCpk+SGCohbQnG2lML/FNJHn3 hAcmmaGN/gEAQTMpeCu2YuDpeXxxh6sFScKnGykJ3GsA1S27LPbn2qwUS7geBOtW /vnvEbR5nXQy8nO4zbv3XZVmoUWzTApsz+eqN1fXAmz0z2sebkaaF+6kk0mLgqh5 yqALZRc1824DPkSHR3kyYv738aiq+3YMI7yXmdSRO4co8i2eL4rE4z4Ss5nlYw3T rqhwNDcExu90J2vtfjdMVPW6geDIK2ilicf65BWe7+AZqZaXlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo+qOY4OezPrYBV5BmcskFxiTEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjE2N2E4NmUtMDMwNC0z OGY2LWJhZjAtMmVlMjc3OTI2M2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGJhjYK6HnCUPUIaVmtO1czxMHZblzDGkfJL7x8Np8h4raR6mow+hLk 9m8gTdfL7dH1upikg3F4QwhqLqU17vW30IKRuAGzNPEdzIIxHic8etogSTMXi6zb 6BzjlhvQNluIaOoW4Z1kiDwmQcAzNg2ZXtoFeIYayAn6h3tBa4wmvbCvPpEW0Txo ZV1+CGR6lxG0r1hJtZBl/tWAD5vo9KkKavBpVRMNgTquMdcleQW9LehEqYSHnHrg oWU10gdL+fx7jIS8/Gpqf/vGUfOqvDMboK4aFJrnxMuuN6ndsSWJtkhkBBPgC/QA r8IeWSD4uHzgZxqVYM8OCtwWMVlZjNE= -----END CERTIFICATE-----Generated at Wed Nov 5 00:56:54 2025 by rpki-client