$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa File: f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json) Hash identifier: O3MJajzSlyGs/mWjxt0ax1Q7ShglpvZcdSVXHC2DJGw= Subject key identifier: 3F:83:10:EC:85:88:16:EC:42:36:04:8F:4C:38:64:9F:EA:99:F1:43 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BAEC7B50C78B3E9A473201880 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa Signing time: Wed 29 Oct 2025 13:00:39 +0000 ROA not before: Wed 29 Oct 2025 13:00:39 +0000 ROA not after: Tue 27 Jan 2026 14:00:39 +0000 asID: 19437 IP address blocks: 131.153.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ae:c7:b5:0c:78:b3:e9:a4:73:20:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 29 13:00:39 2025 GMT Not After : Jan 27 14:00:39 2026 GMT Subject: CN=282debfd-8d54-481d-bc0b-407d27157643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:1b:64:14:c3:f9:3f:f0:07:89:e9:7d:ed:bf: e4:01:81:41:06:72:93:3a:76:e7:73:6f:72:1a:9e: da:b2:33:0a:f3:02:35:43:37:19:06:c8:75:af:44: 5a:ab:b0:d6:79:c3:6d:b3:44:69:86:d2:bb:52:62: f8:eb:79:40:66:96:8f:4d:32:1f:94:9a:3f:6a:48: ef:9f:fe:a7:4b:34:63:cc:5f:e8:df:d9:4b:3a:f1: 1e:4e:15:82:f3:44:41:2c:26:23:89:91:fc:d9:2b: f0:bc:78:1e:6d:12:52:4c:2d:94:2f:8c:89:31:2d: be:8c:9d:76:a3:ef:ad:1f:63:9f:81:f4:b1:33:f8: 59:c9:df:19:d9:e8:99:e6:d5:55:51:4a:ca:dd:6e: 6f:ba:8d:3e:be:fa:97:fb:33:8c:52:f0:8e:21:12: ae:49:c5:fb:dc:08:c9:da:8d:61:e6:a1:11:06:f7: 8d:a0:04:89:ce:e6:da:8c:6a:ef:98:c0:89:88:f8: 67:26:49:bb:76:53:69:c2:d5:d4:de:98:9d:8b:c2: f2:99:a0:eb:59:2b:f3:c7:db:c3:c0:48:54:b5:31: e6:19:b4:f2:11:dc:cf:10:3b:e9:04:ae:bf:51:de: 26:af:d4:a8:e4:1e:ba:b8:7f:56:b3:39:f4:47:a9: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:83:10:EC:85:88:16:EC:42:36:04:8F:4C:38:64:9F:EA:99:F1:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:52:61:ae:14:8d:b6:f8:a6:c7:2f:bb:85:9c:da:9d:51:6d: 61:83:06:ac:a4:e2:df:69:9b:3c:e9:f2:64:34:af:e9:a0:7d: 12:a9:19:c3:0f:19:2c:93:b7:d7:04:79:b3:4d:36:6b:41:8a: 7c:14:52:8a:10:75:e4:b5:b9:b2:bb:63:11:44:d0:31:4e:ce: f4:02:7e:cb:33:57:b5:94:10:93:c4:16:c1:9f:5e:72:d1:f0: 65:47:bb:89:06:63:8e:98:59:74:fc:0c:13:a5:67:66:d6:3c: 18:39:73:c5:22:1e:42:98:f8:40:eb:85:c8:e5:82:37:ab:27: c2:97:4f:df:55:b8:bc:2a:0c:07:eb:a3:2b:70:28:43:5c:b4: 2d:43:3b:ea:0c:2a:e5:b4:43:13:38:ed:5a:3e:30:2b:39:e3: 7e:3a:86:cd:f5:9b:40:12:3c:c9:5d:52:6f:58:ac:16:7e:2f: 2b:1c:c5:55:48:87:b3:78:42:02:e5:aa:36:c7:e0:72:0d:2c: 4b:1e:ee:ee:0f:d2:6e:4b:79:27:e1:59:69:38:c7:35:a3:a5: b3:6f:d4:80:7d:05:1a:ec:29:ce:80:bb:30:e4:cf:b2:2a:91: 36:28:6e:26:22:63:77:97:b7:38:7c:bc:84:4e:25:3c:6f:01: 66:54:4b:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuux7UMeLPppHMgGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAyOTEzMDAzOVoXDTI2MDEyNzE0MDAzOVowLzEtMCsGA1UEAxMk MjgyZGViZmQtOGQ1NC00ODFkLWJjMGItNDA3ZDI3MTU3NjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohtkFMP5P/AHiel97b/kAYFBBnKTOnbnc29y Gp7asjMK8wI1QzcZBsh1r0Raq7DWecNts0RphtK7UmL463lAZpaPTTIflJo/akjv n/6nSzRjzF/o39lLOvEeThWC80RBLCYjiZH82SvwvHgebRJSTC2UL4yJMS2+jJ12 o++tH2OfgfSxM/hZyd8Z2eiZ5tVVUUrK3W5vuo0+vvqX+zOMUvCOIRKuScX73AjJ 2o1h5qERBveNoASJzubajGrvmMCJiPhnJkm7dlNpwtXU3pidi8LymaDrWSvzx9vD wEhUtTHmGbTyEdzPEDvpBK6/Ud4mr9So5B66uH9Wszn0R6kb+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+DEOyFiBbsQjYEj0w4ZJ/qmfFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjI2OTI0YTctMzkwNy0z MWNhLTkyOGItZTNmZjBmMzQxNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFSYa4Ujbb4pscvu4Wc2p1RbWGDBqyk4t9pmzzp8mQ0r+mgfRKpGcMP GSyTt9cEebNNNmtBinwUUooQdeS1ubK7YxFE0DFOzvQCfsszV7WUEJPEFsGfXnLR 8GVHu4kGY46YWXT8DBOlZ2bWPBg5c8UiHkKY+EDrhcjlgjerJ8KXT99VuLwqDAfr oytwKENctC1DO+oMKuW0QxM47Vo+MCs54346hs31m0ASPMldUm9YrBZ+LyscxVVI h7N4QgLlqjbH4HINLEse7u4P0m5LeSfhWWk4xzWjpbNv1IB9BRrsKc6AuzDkz7Iq kTYobiYiY3eXtzh8vIROJTxvAWZUSzo= -----END CERTIFICATE-----Generated at Wed Nov 5 19:20:00 2025 by rpki-client