$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa File: 3b710bba-fc04-3741-970d-7622d98c7f22.roa (raw, json) Hash identifier: 7DHV40WvgeI4cdDL9L2rRHnC1jDGU1vOwAzHoZUsdJ0= Subject key identifier: FA:36:09:39:E8:88:93:76:20:DB:DF:D9:10:43:A8:79:EB:05:72:91 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B7F520C5F0189451D03CA0E00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20454 IP address blocks: 131.153.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:0c:5f:01:89:45:1d:03:ca:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=8f33f0fe-d015-4117-8b45-48b03e9c15b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d8:98:33:62:f3:d3:64:c8:73:3b:ca:62:d9: 8a:c4:2b:09:b7:5b:74:b1:30:34:f8:f0:2a:3d:e3: e3:fe:ee:2f:03:9d:b1:8c:71:7e:73:12:8d:c7:8a: b2:5d:67:24:3e:6b:4c:4b:dc:f7:a7:b1:fd:c9:1c: b0:69:9d:0e:14:3b:ba:5a:d3:3e:01:fc:92:fb:cd: 92:b3:0e:37:37:4f:3e:69:85:dc:f8:e9:9a:3f:32: ad:c3:13:6d:39:44:f9:e2:4e:bf:3f:ca:8e:2e:e4: 4a:b5:d8:f1:53:9e:a2:84:ae:d5:e6:5d:0a:a6:ad: 75:41:c3:84:c5:61:6c:a9:71:67:e1:48:8f:b4:65: ce:cb:04:b1:05:73:e6:96:0a:ec:4a:78:ff:09:26: fc:8f:97:2a:40:49:af:0d:46:cf:c1:a1:19:d9:2d: 51:62:64:a3:2a:c4:94:da:58:cc:76:f4:aa:be:6f: 5d:7d:83:52:40:44:0e:48:58:e0:ea:fe:23:b2:eb: f6:67:66:63:22:a1:9f:09:af:3d:52:24:1c:3f:cd: 04:69:6e:69:a6:08:a1:09:2f:43:b5:a2:60:61:66: 65:c3:ca:63:21:d4:64:39:4f:10:e8:98:ee:df:1a: e1:9e:03:7b:fb:76:1e:d6:d6:db:ce:64:5c:e0:f1: d6:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:36:09:39:E8:88:93:76:20:DB:DF:D9:10:43:A8:79:EB:05:72:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:31:3e:85:9c:e0:72:90:56:f4:bc:2c:60:18:3f:47:c1:f9: 44:33:7f:6f:3b:d8:2d:51:33:5a:29:10:b1:ef:be:0a:1f:4d: 75:5d:1a:29:84:a9:19:b7:98:18:68:49:c6:0f:e0:e1:06:5f: 4b:72:7b:de:6d:6c:3d:ee:4a:f4:bc:6f:d8:73:19:6a:36:80: 90:da:d5:b3:e5:ee:f5:fe:4d:a2:3b:46:cc:fc:8d:7e:0e:37: 71:6c:41:68:02:7a:b8:87:c2:cb:0c:65:0b:9d:8c:f8:70:c0: 64:c2:64:9e:67:ad:37:be:a8:2d:1c:8f:9c:ed:d8:55:eb:1b: 1e:30:03:15:65:7e:b9:f1:da:ef:83:e1:11:78:6b:6c:46:c7: 29:dd:2e:de:0e:0a:c6:4f:8a:91:0d:b4:66:85:8e:e2:f4:ca: 82:db:94:dd:8a:3e:9e:d7:a8:c4:a1:1c:b5:7c:25:e3:22:28: 5a:77:f4:bc:fd:0e:30:57:7a:6b:a5:b9:2e:3f:64:8c:0f:7f: 73:93:16:61:91:60:1f:55:f7:ab:dd:d3:94:2d:32:2d:07:63: 1b:58:27:6e:fa:fa:e6:0a:1a:eb:42:77:22:24:6a:9f:ba:76: ca:ba:98:00:e2:6f:fc:88:54:f1:7b:71:67:5a:81:83:bf:a3: e2:60:ae:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UgxfAYlFHQPKDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk OGYzM2YwZmUtZDAxNS00MTE3LThiNDUtNDhiMDNlOWMxNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9iYM2Lz02TIczvKYtmKxCsJt1t0sTA0+PAq PePj/u4vA52xjHF+cxKNx4qyXWckPmtMS9z3p7H9yRywaZ0OFDu6WtM+AfyS+82S sw43N08+aYXc+OmaPzKtwxNtOUT54k6/P8qOLuRKtdjxU56ihK7V5l0Kpq11QcOE xWFsqXFn4UiPtGXOywSxBXPmlgrsSnj/CSb8j5cqQEmvDUbPwaEZ2S1RYmSjKsSU 2ljMdvSqvm9dfYNSQEQOSFjg6v4jsuv2Z2ZjIqGfCa89UiQcP80EaW5ppgihCS9D taJgYWZlw8pjIdRkOU8Q6Jju3xrhngN7+3Ye1tbbzmRc4PHWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo2CTnoiJN2INvf2RBDqHnrBXKRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2I3MTBiYmEtZmMwNC0z NzQxLTk3MGQtNzYyMmQ5OGM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsxPoWc4HKQVvS8LGAYP0fB+UQzf2872C1RM1opELHvvgofTXVdGimE qRm3mBhoScYP4OEGX0tye95tbD3uSvS8b9hzGWo2gJDa1bPl7vX+TaI7Rsz8jX4O N3FsQWgCeriHwssMZQudjPhwwGTCZJ5nrTe+qC0cj5zt2FXrGx4wAxVlfrnx2u+D 4RF4a2xGxyndLt4OCsZPipENtGaFjuL0yoLblN2KPp7XqMShHLV8JeMiKFp39Lz9 DjBXemuluS4/ZIwPf3OTFmGRYB9V96vd05QtMi0HYxtYJ276+uYKGutCdyIkap+6 dsq6mADib/yIVPF7cWdagYO/o+JgrjI= -----END CERTIFICATE-----Generated at Sun Oct 19 17:53:41 2025 by rpki-client