$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa File: fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json) Hash identifier: wRZjCDzAZEvF9OxHhofSXsUE/CvF0+TqpKM0rqJ2+IA= Subject key identifier: 31:BB:A3:1D:64:0C:1F:76:FD:95:F4:37:6F:7F:45:BE:27:B0:B2:13 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584BB2F7A6CA92AABAFF87976B80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 0 IP address blocks: 131.153.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:a6:ca:92:aa:ba:ff:87:97:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=58083efc-b9ca-4091-a30f-a1f0d0ffd29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f2:44:4f:06:d3:e8:7e:49:3b:56:fa:77:07: ba:74:81:1a:a9:34:85:9f:89:ea:b6:7f:58:d5:5e: bc:58:54:3c:52:04:bc:48:95:78:f2:40:36:b0:30: d6:2a:2e:9d:b5:ed:76:dd:e5:cc:e9:09:ba:ce:70: ac:b9:9d:a1:11:a0:66:f5:2e:1d:a2:cb:7c:25:21: 76:c0:f4:31:a0:12:f3:00:24:a0:30:d7:52:1c:4e: 12:07:d1:31:57:09:d8:da:74:80:af:19:c7:f5:5b: 54:8a:53:57:0f:b0:00:47:39:6b:79:d2:72:b0:cd: d3:fa:04:53:d9:42:65:19:c6:cd:bb:ac:22:f2:1a: ee:1f:f6:1e:bc:50:e6:89:1a:6a:ed:43:82:54:97: 1f:ac:c7:93:38:16:97:5e:e9:25:98:e3:f2:68:16: ec:50:bc:cd:45:b9:0b:d2:b9:80:81:09:44:1a:7d: 19:e5:21:f3:4e:f1:41:c6:ae:22:d1:0c:41:02:c1: 90:ba:2a:c8:d9:c5:b3:06:b0:e1:f7:95:0b:0b:9e: b0:55:92:05:17:71:ca:9d:b7:21:7a:fe:1e:d0:5f: d2:5d:f3:3e:c0:b9:1e:20:69:d8:26:e9:46:82:46: 2e:d4:46:28:9e:01:a8:b7:66:35:23:55:cc:68:aa: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BB:A3:1D:64:0C:1F:76:FD:95:F4:37:6F:7F:45:BE:27:B0:B2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:06:6c:6b:5b:df:fe:60:56:f5:dd:6b:69:e9:70:dd:d6:fb: 0d:44:bd:4e:4e:ef:13:1c:cc:47:8b:e6:68:c0:fb:e3:e5:ec: 3f:67:aa:8c:02:34:f4:c9:8e:b6:82:14:70:4b:14:46:7e:e6: 1d:69:f7:78:85:30:70:05:73:b7:45:75:da:a9:08:56:20:cb: e8:eb:5f:4e:c0:ef:76:7e:fc:f0:61:3b:c8:20:24:70:32:98: 8e:7a:dd:e0:c3:ed:99:ab:a1:24:1a:9a:fa:c1:12:57:ec:48: 15:28:69:7d:91:df:a5:72:0e:0b:94:ba:1a:10:26:df:64:61: 3e:e5:d8:d4:be:76:bc:35:37:38:08:15:32:41:ea:cf:23:99: ab:fd:98:a5:3f:8f:9d:0b:dd:cd:66:ee:c1:fd:e1:e8:41:7a: 7e:df:f9:e9:85:77:20:a6:01:1b:aa:e9:53:ee:f7:1e:44:73: f9:a7:34:66:ed:00:a0:93:28:59:a6:c5:c7:a9:02:42:ec:46: 7e:c2:46:af:20:35:66:dd:f6:f4:32:68:05:42:41:eb:82:37: 19:b0:7b:ad:cf:ae:be:f2:74:7d:ef:28:f3:50:a6:1d:f4:ab: 4b:ef:84:d5:3d:1d:06:94:16:1e:ab:32:46:af:a0:f3:52:d3: 1b:b2:b6:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96bKkqq6/4eXa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NTgwODNlZmMtYjljYS00MDkxLWEzMGYtYTFmMGQwZmZkMjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPJETwbT6H5JO1b6dwe6dIEaqTSFn4nqtn9Y 1V68WFQ8UgS8SJV48kA2sDDWKi6dte123eXM6Qm6znCsuZ2hEaBm9S4dost8JSF2 wPQxoBLzACSgMNdSHE4SB9ExVwnY2nSArxnH9VtUilNXD7AARzlredJysM3T+gRT 2UJlGcbNu6wi8hruH/YevFDmiRpq7UOCVJcfrMeTOBaXXuklmOPyaBbsULzNRbkL 0rmAgQlEGn0Z5SHzTvFBxq4i0QxBAsGQuirI2cWzBrDh95ULC56wVZIFF3HKnbch ev4e0F/SXfM+wLkeIGnYJulGgkYu1EYongGot2Y1I1XMaKqkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG7ox1kDB92/ZX0N29/Rb4nsLITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZmQwMjRmN2ItN2Y4Mi0z OTdhLWI2NzYtMGU0YjEzNDliY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAIGbGtb3/5gVvXda2npcN3W+w1EvU5O7xMczEeL5mjA++Pl7D9nqowC NPTJjraCFHBLFEZ+5h1p93iFMHAFc7dFddqpCFYgy+jrX07A73Z+/PBhO8ggJHAy mI563eDD7ZmroSQamvrBElfsSBUoaX2R36VyDguUuhoQJt9kYT7l2NS+drw1NzgI FTJB6s8jmav9mKU/j50L3c1m7sH94ehBen7f+emFdyCmARuq6VPu9x5Ec/mnNGbt AKCTKFmmxcepAkLsRn7CRq8gNWbd9vQyaAVCQeuCNxmwe63Prr7ydH3vKPNQph30 q0vvhNU9HQaUFh6rMkavoPNS0xuytl0= -----END CERTIFICATE-----Generated at Tue Nov 4 21:01:40 2025 by rpki-client