$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa File: 7776e941-b405-3bce-be48-def35de489d4.roa (raw, json) Hash identifier: D3GGHGPF9Vll2DinUW3Py1j4vm/OB8Ur78h5vF2TGYs= Subject key identifier: E8:8A:0E:28:97:B6:50:07:35:32:71:63:A3:7E:02:E2:F1:37:AB:C1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B031693B8D8AA60EA7F00A600 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa Signing time: Fri 29 Aug 2025 01:00:32 +0000 ROA not before: Fri 29 Aug 2025 01:00:32 +0000 ROA not after: Thu 27 Nov 2025 02:00:32 +0000 asID: 20454 IP address blocks: 131.153.236.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:03:16:93:b8:d8:aa:60:ea:7f:00:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 29 01:00:32 2025 GMT Not After : Nov 27 02:00:32 2025 GMT Subject: CN=4700f972-d299-4eb3-a18b-a68ac7c13410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:15:d1:5f:f8:23:bf:c7:4d:eb:d9:b9:61:8f: fd:a3:a7:3a:ab:b6:df:49:40:43:1f:f9:e1:db:03: 3a:8c:83:a0:ca:e8:e2:68:83:51:24:8e:61:8d:22: 23:80:47:62:2d:0a:f1:00:0c:a7:e1:81:76:1f:46: ce:0f:c0:e0:c0:91:2a:70:05:9d:cf:49:a0:40:4d: 45:e2:20:31:c0:20:71:7a:63:57:8e:6b:04:3a:8e: 21:51:31:15:f5:33:57:95:02:14:17:3b:36:78:53: ef:75:04:eb:98:2d:78:25:3b:57:d4:50:a7:ad:f6: 80:f2:26:7c:71:64:5c:e9:e9:c7:ef:ca:a5:23:4e: bf:18:65:36:68:d9:6a:e0:cd:59:e7:5e:61:95:1f: 4a:29:47:5a:c7:b3:20:14:de:80:5e:e5:b6:a1:18: 84:e7:43:eb:e8:39:27:93:bc:52:89:75:77:e9:14: d3:24:6a:17:c4:e7:17:e4:0d:54:bd:56:58:3e:44: cf:8a:4c:3c:59:55:f2:30:c0:83:fe:3c:49:bc:5b: 60:aa:df:8e:3c:e5:07:bf:ca:aa:f6:b4:42:f8:d3: 3f:fd:16:d3:5d:db:9b:a3:e9:26:11:12:8d:d6:4b: 50:c6:7a:56:82:52:9b:d1:e4:ae:a0:c2:b3:f4:72: bc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8A:0E:28:97:B6:50:07:35:32:71:63:A3:7E:02:E2:F1:37:AB:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7776e941-b405-3bce-be48-def35de489d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:96:88:09:32:d2:17:4b:92:8d:5f:ee:44:c3:f8:89:9f:0b: 32:d1:43:88:d5:b3:9a:77:b1:f5:d3:45:0c:02:39:73:9e:67: 56:30:f5:f4:5c:24:56:07:b3:e2:5b:ec:12:5a:c3:c9:56:52: 43:05:9e:67:de:a8:e8:7d:7d:38:fe:8c:9d:28:12:89:8b:ff: 1b:c2:f5:3a:a2:d8:69:bc:1a:fe:9f:ed:ec:5b:c6:bf:24:cf: 09:34:33:8e:f7:49:16:9e:0f:27:c4:8f:35:32:00:72:cb:5b: 13:fb:b6:0d:e3:3e:b1:30:13:aa:5c:82:05:dd:d9:61:75:0c: ca:6e:15:8a:a7:a0:c4:d2:6c:b5:dc:bc:6e:6b:e9:79:67:eb: 40:9a:a4:bc:e0:56:f0:28:b9:14:65:a5:01:15:b0:7d:5d:b5: 5f:45:8c:03:cc:97:f9:fb:41:7f:1e:45:d9:50:36:50:53:5d: b6:e6:c5:f9:bb:1b:75:a9:3b:a0:48:b3:70:43:03:26:48:4f: f1:3a:07:6e:bd:50:0d:7e:e4:79:51:74:db:14:c7:03:ca:6b: d9:4b:58:8e:d5:1d:f1:f5:87:d0:7d:43:e2:45:0f:20:b1:e3: 9a:24:0d:e3:56:9d:50:9d:d9:8e:4d:72:7d:c1:83:ec:1c:be: e9:65:3c:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsDFpO42Kpg6n8ApgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDgyOTAxMDAzMloXDTI1MTEyNzAyMDAzMlowLzEtMCsGA1UEAxMk NDcwMGY5NzItZDI5OS00ZWIzLWExOGItYTY4YWM3YzEzNDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BXRX/gjv8dN69m5YY/9o6c6q7bfSUBDH/nh 2wM6jIOgyujiaINRJI5hjSIjgEdiLQrxAAyn4YF2H0bOD8DgwJEqcAWdz0mgQE1F 4iAxwCBxemNXjmsEOo4hUTEV9TNXlQIUFzs2eFPvdQTrmC14JTtX1FCnrfaA8iZ8 cWRc6enH78qlI06/GGU2aNlq4M1Z515hlR9KKUdax7MgFN6AXuW2oRiE50Pr6Dkn k7xSiXV36RTTJGoXxOcX5A1UvVZYPkTPikw8WVXyMMCD/jxJvFtgqt+OPOUHv8qq 9rRC+NM//RbTXdubo+kmERKN1ktQxnpWglKb0eSuoMKz9HK8JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiKDiiXtlAHNTJxY6N+AuLxN6vBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNzc3NmU5NDEtYjQwNS0z YmNlLWJlNDgtZGVmMzVkZTQ4OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOWiAky0hdLko1f7kTD+ImfCzLRQ4jVs5p3sfXTRQwCOXOeZ1Yw9fRc JFYHs+Jb7BJaw8lWUkMFnmfeqOh9fTj+jJ0oEomL/xvC9Tqi2Gm8Gv6f7exbxr8k zwk0M473SRaeDyfEjzUyAHLLWxP7tg3jPrEwE6pcggXd2WF1DMpuFYqnoMTSbLXc vG5r6Xln60CapLzgVvAouRRlpQEVsH1dtV9FjAPMl/n7QX8eRdlQNlBTXbbmxfm7 G3WpO6BIs3BDAyZIT/E6B269UA1+5HlRdNsUxwPKa9lLWI7VHfH1h9B9Q+JFDyCx 45okDeNWnVCd2Y5Ncn3Bg+wcvullPFQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:52:03 2025 by rpki-client