$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa File: 3b710bba-fc04-3741-970d-7622d98c7f22.roa (raw, json) Hash identifier: /qSqc5hpHCv6ue9tKUjmnnRQCob1i0a7S1U5kZ6bEfc= Subject key identifier: 44:3F:0F:61:3D:6A:E8:0F:74:B5:18:50:20:F7:14:73:9F:78:D3:85 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F6292D8837600EA6AAE2A6200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 20454 IP address blocks: 131.153.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:d8:83:76:00:ea:6a:ae:2a:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=7d619c04-2103-4182-bf4f-a66c52173a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:f2:d0:f3:13:8d:66:29:1f:aa:e7:33:25: 6a:58:d6:98:00:4a:f8:ff:af:8c:84:38:da:1b:72: 8e:b5:19:e3:cc:00:e0:2b:aa:c0:1e:0d:92:1d:ca: 6f:2b:39:3a:26:0f:d3:84:e4:20:24:05:2b:aa:31: 1a:bb:76:0f:58:14:94:25:c9:32:6d:93:e5:cd:66: 16:1e:f5:f1:bd:79:ab:31:16:5e:9a:40:bf:fb:15: a7:48:74:ad:fb:46:c5:44:b7:32:fb:33:5e:61:e0: 7f:da:c1:60:2e:46:f0:c7:9b:3a:07:21:a4:32:ec: b6:fd:34:d4:d1:6f:4d:52:2e:e2:ec:b5:09:a0:02: 82:58:71:2f:1d:3c:8e:7f:13:51:f4:93:3f:af:40: 07:bc:5e:a8:4b:ad:3f:85:d9:79:b0:d1:21:0c:03: 96:d9:f1:ff:d0:b5:73:25:e5:97:fc:58:ba:8c:59: 0d:12:72:15:ff:51:c3:73:56:4e:fe:20:07:3e:a5: 20:c6:3d:6f:69:98:48:30:92:71:5f:17:42:f9:27: ae:3f:69:17:91:43:7d:99:02:d9:26:21:55:5c:2b: ab:04:3a:7b:4a:88:25:0d:bd:13:7d:66:36:24:4e: 57:08:ca:5b:c8:9a:4c:7d:88:1a:ee:bb:12:31:ff: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:3F:0F:61:3D:6A:E8:0F:74:B5:18:50:20:F7:14:73:9F:78:D3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6a:91:08:b0:52:a0:0b:dc:9e:20:31:29:5e:0e:9b:d2:4d: f0:b3:7e:c5:29:9e:dc:9e:b5:06:5c:ea:37:d4:a0:3b:33:71: 52:ed:a3:52:36:17:5d:fc:7f:48:fe:01:0e:7d:7f:c1:e6:09: 91:f8:74:df:ed:85:dc:93:af:04:6d:89:fc:db:d7:0b:60:36: e0:65:e9:37:d8:33:2b:c2:f6:53:62:6b:ca:3c:21:50:86:2c: d4:a0:e8:d6:0b:bf:6c:f0:b5:06:a6:58:6c:a7:8c:b0:4b:d7: 58:12:8c:9e:e6:3f:fc:6a:1d:52:5a:02:48:64:5a:38:7d:f5: 5b:72:49:e9:34:7b:fe:18:95:a0:ed:e6:b6:45:42:ee:a7:57: 9a:61:9b:e1:92:3e:58:5a:53:73:32:cb:2d:7a:3e:c6:cd:4e: bb:1c:fd:06:8f:d8:8b:c8:e8:cd:40:4f:6f:4c:e2:17:9d:a3: 2a:aa:a1:fe:0b:3d:2a:c9:a3:8f:44:29:9a:a3:b4:54:ed:59: f5:0f:6c:54:a3:f2:65:78:20:a5:47:6b:8c:ca:5c:52:dc:80: a7:f6:d1:c1:5f:dd:ac:a4:96:8c:b7:71:4a:bd:7e:90:f6:37: b8:ab:2b:3d:b9:c4:84:f8:bd:67:fd:e4:4c:ba:1b:03:18:01: b1:7e:28:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iktiDdgDqaq4qYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk N2Q2MTljMDQtMjEwMy00MTgyLWJmNGYtYTY2YzUyMTczYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIvy0PMTjWYpH6rnMyVqWNaYAEr4/6+MhDja G3KOtRnjzADgK6rAHg2SHcpvKzk6Jg/ThOQgJAUrqjEau3YPWBSUJckybZPlzWYW HvXxvXmrMRZemkC/+xWnSHSt+0bFRLcy+zNeYeB/2sFgLkbwx5s6ByGkMuy2/TTU 0W9NUi7i7LUJoAKCWHEvHTyOfxNR9JM/r0AHvF6oS60/hdl5sNEhDAOW2fH/0LVz JeWX/Fi6jFkNEnIV/1HDc1ZO/iAHPqUgxj1vaZhIMJJxXxdC+SeuP2kXkUN9mQLZ JiFVXCurBDp7SoglDb0TfWY2JE5XCMpbyJpMfYga7rsSMf+UrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEQ/D2E9augPdLUYUCD3FHOfeNOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2I3MTBiYmEtZmMwNC0z NzQxLTk3MGQtNzYyMmQ5OGM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFqkQiwUqAL3J4gMSleDpvSTfCzfsUpntyetQZc6jfUoDszcVLto1I2 F138f0j+AQ59f8HmCZH4dN/thdyTrwRtifzb1wtgNuBl6TfYMyvC9lNia8o8IVCG LNSg6NYLv2zwtQamWGynjLBL11gSjJ7mP/xqHVJaAkhkWjh99VtySek0e/4YlaDt 5rZFQu6nV5phm+GSPlhaU3Myyy16PsbNTrsc/QaP2IvI6M1AT29M4hedoyqqof4L PSrJo49EKZqjtFTtWfUPbFSj8mV4IKVHa4zKXFLcgKf20cFf3aykloy3cUq9fpD2 N7irKz25xIT4vWf95Ey6GwMYAbF+KEQ= -----END CERTIFICATE-----Generated at Sun Oct 11 21:14:25 2026 by rpki-client