$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa File: 69872d89-79da-3819-8185-7de21929d884.roa (raw, json) Hash identifier: WWMw4Cxbfi5AYP8Z6HtFj6tkcoZm4rqADAG2j/CF2Jg= Subject key identifier: 56:74:1A:13:3B:D1:D0:78:F6:D2:C2:C7:45:66:E3:F3:3D:B3:A5:F8 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F1467A11536D12BF81ACEC700 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 19437 IP address blocks: 131.153.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:a1:15:36:d1:2b:f8:1a:ce:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=60728cb2-6f62-4b64-a75f-a7653c151e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3f:2f:c7:5d:40:96:ba:8d:ef:25:26:1f:22: aa:9f:fa:f4:8a:76:7a:8f:44:d5:4e:a4:17:63:53: ce:ad:10:7b:67:6a:ba:e6:88:77:51:6d:02:e6:fa: 2f:4e:ff:c6:12:9f:97:ab:3d:e7:aa:88:03:d7:3f: 19:61:30:a8:b2:2e:18:1d:35:74:91:91:32:09:b4: ce:d0:20:ac:46:c2:6c:63:0f:df:d4:f7:73:fe:9f: 93:9d:b1:9b:4c:1c:00:23:35:1b:a3:36:90:11:f5: 2d:12:3f:ec:6c:93:c7:ff:71:22:b5:19:34:54:2f: 42:43:ca:31:2a:9d:a9:d9:c1:82:c9:dd:db:00:1e: 6a:b1:15:4f:96:69:cf:fb:23:21:67:e0:70:d8:18: 24:86:ab:b0:20:f8:3c:78:53:5e:97:af:0c:6e:c5: ea:53:8f:a3:db:b4:65:49:ce:d2:d7:e9:50:28:4b: b3:24:61:11:37:4c:75:e1:e8:80:40:5d:60:c5:04: 47:97:c9:24:f9:6b:8e:a2:d0:b1:06:37:8d:c2:08: 71:1f:e0:da:ec:ab:14:4f:6b:a8:62:84:b4:52:1b: 7b:dd:14:c5:d1:30:dc:74:61:54:ef:fc:c5:ff:5d: 24:f3:f4:70:0b:98:eb:47:03:26:2b:88:cf:51:e7: 54:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:74:1A:13:3B:D1:D0:78:F6:D2:C2:C7:45:66:E3:F3:3D:B3:A5:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c3:78:96:02:e8:71:52:b4:58:82:83:72:5d:45:c7:60:bc: dd:5a:ca:27:f3:90:22:ab:c7:e6:e3:f3:37:57:f0:54:aa:25: 9c:40:5b:15:75:0d:c8:a7:92:82:c5:fd:91:95:55:b6:dc:d8: 41:a7:1a:30:a7:d6:4a:aa:a3:12:60:2c:06:c8:85:1d:73:12: f0:a3:ec:f7:b5:f6:47:e3:97:2e:6f:f1:38:b5:c0:dc:20:33: 4f:aa:f5:5b:0b:d2:03:f4:21:e4:11:7f:a6:df:00:8d:03:ee: 9f:4f:85:29:b3:32:8d:94:3d:92:a9:57:47:fd:06:6d:1a:38: 31:63:83:28:90:bc:04:cf:28:02:be:7d:69:58:87:e5:c4:5a: de:0a:06:1a:ef:7c:43:37:e1:1e:a5:60:b4:72:37:3e:c7:04: 74:0a:f5:3c:54:73:ad:0c:2f:22:99:b7:4b:b7:cc:80:b3:ab: 30:b3:e7:41:80:45:d5:1d:e1:df:66:3c:d1:ce:5d:e4:3c:02: a5:7f:04:09:8c:21:03:db:25:23:cc:16:8b:49:c7:2b:66:3a: 8d:00:73:ba:19:0b:5e:f8:25:e6:22:61:33:a0:eb:01:09:fc: b6:9f:ae:be:7d:88:2d:4d:d5:37:7d:05:58:84:4d:54:4d:4e: 47:d7:11:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ6EVNtEr+BrOxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NjA3MjhjYjItNmY2Mi00YjY0LWE3NWYtYTc2NTNjMTUxZTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T8vx11AlrqN7yUmHyKqn/r0inZ6j0TVTqQX Y1POrRB7Z2q65oh3UW0C5vovTv/GEp+Xqz3nqogD1z8ZYTCosi4YHTV0kZEyCbTO 0CCsRsJsYw/f1Pdz/p+TnbGbTBwAIzUbozaQEfUtEj/sbJPH/3EitRk0VC9CQ8ox Kp2p2cGCyd3bAB5qsRVPlmnP+yMhZ+Bw2BgkhquwIPg8eFNel68MbsXqU4+j27Rl Sc7S1+lQKEuzJGERN0x14eiAQF1gxQRHl8kk+WuOotCxBjeNwghxH+Da7KsUT2uo YoS0Uht73RTF0TDcdGFU7/zF/10k8/RwC5jrRwMmK4jPUedUcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ0GhM70dB49tLCx0Vm4/M9s6X4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjk4NzJkODktNzlkYS0z ODE5LTgxODUtN2RlMjE5MjlkODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfDeJYC6HFStFiCg3JdRcdgvN1ayifzkCKrx+bj8zdX8FSqJZxAWxV1 DcinkoLF/ZGVVbbc2EGnGjCn1kqqoxJgLAbIhR1zEvCj7Pe19kfjly5v8Ti1wNwg M0+q9VsL0gP0IeQRf6bfAI0D7p9PhSmzMo2UPZKpV0f9Bm0aODFjgyiQvATPKAK+ fWlYh+XEWt4KBhrvfEM34R6lYLRyNz7HBHQK9TxUc60MLyKZt0u3zICzqzCz50GA RdUd4d9mPNHOXeQ8AqV/BAmMIQPbJSPMFotJxytmOo0Ac7oZC174JeYiYTOg6wEJ /Lafrr59iC1N1Td9BViETVRNTkfXEXs= -----END CERTIFICATE-----Generated at Tue Sep 29 02:07:30 2026 by rpki-client