$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa File: c65d17e9-2b10-369a-adb3-84d59213e320.roa (raw, json) Hash identifier: yhIQnE3sWW/oEc1mYSiUrUFsKO8IF+2r9HJtra9Ihss= Subject key identifier: E9:39:45:BC:33:75:1B:89:E6:35:DC:2B:B7:F6:8D:B5:78:22:AA:6B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584B38219F4652079456319A2400 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 19181 IP address blocks: 131.153.233.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:9f:46:52:07:94:56:31:9a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=cdc4f370-a0a7-4b48-8a83-b478f4251ec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:2c:24:22:27:b6:5c:b7:01:8b:af:60:3f: d0:9f:b7:43:0d:35:d3:02:24:95:03:62:7e:fc:ae: 3d:39:8a:eb:21:ea:c0:ef:64:59:8b:50:b5:ba:8b: 29:43:cc:ea:c6:e6:01:87:9c:80:ff:e1:b9:13:64: 04:8f:d5:10:c7:d2:40:d2:83:e3:22:a6:95:f1:e9: 92:05:74:48:cf:2b:4b:52:17:f6:86:fd:79:c6:69: 88:e1:ad:73:57:7c:02:a3:b5:81:83:01:df:9d:ca: 70:54:0f:ba:d6:29:7b:5e:db:73:7c:d4:a6:d1:fe: 34:12:2a:06:7e:1b:99:30:ad:3f:c5:bc:90:9c:e3: d6:a0:d6:0c:24:51:0c:1e:a6:0f:c9:a8:49:cf:17: ef:19:26:95:4c:6d:cf:db:e0:2a:2b:09:52:c1:68: b5:7f:00:46:fb:93:08:19:66:b3:48:0b:21:90:8f: e0:b4:fc:f4:73:de:72:c5:3d:35:d9:05:f4:47:60: 81:2a:6b:6b:e9:60:4c:0d:7c:dd:9f:f2:0a:15:66: c3:16:09:f1:eb:90:7e:ce:53:b2:4e:d6:0a:65:ee: d0:2b:3b:0d:59:db:45:4a:ce:61:bc:2e:f0:17:58: c7:ef:78:25:09:e7:21:35:b1:a7:09:0c:58:29:75: 64:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:39:45:BC:33:75:1B:89:E6:35:DC:2B:B7:F6:8D:B5:78:22:AA:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c65d17e9-2b10-369a-adb3-84d59213e320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1f:1e:8e:6d:c4:bf:14:93:11:5f:d2:ac:08:26:4d:19:b5: 7d:4a:8d:15:a3:67:3c:a1:30:1d:4a:29:89:33:eb:27:43:99: 24:f5:4d:35:97:93:cf:dc:eb:1b:c0:3e:5c:d1:0c:b7:ef:b8: 88:be:d9:ee:f4:d1:6c:85:bf:36:c7:e4:c9:b5:da:f0:07:0d: 7d:48:ce:e1:a7:4d:6f:15:31:54:d1:b8:2e:34:36:c5:c6:53: ca:27:c1:de:6c:4c:cf:56:a3:fa:0e:e3:f1:4c:26:46:05:e7: 00:c3:ae:89:e6:2e:dd:cf:66:90:38:08:09:d0:f5:4a:8c:bb: 99:7b:31:42:1f:9c:21:ac:85:66:ab:ae:9a:c6:c8:bb:1f:b4: 87:bb:12:89:6c:5d:27:c7:b6:c4:cd:fb:c6:37:05:e3:63:2f: 6a:46:59:2c:10:a0:dc:4c:29:c2:ca:bf:62:72:05:a2:33:00: 81:c5:77:45:4a:ab:bf:b7:b9:4b:34:9e:15:1f:87:6b:6a:a6: 7c:c0:f6:32:58:95:f2:20:d6:66:60:82:9d:40:39:c1:39:68: d6:d3:ad:26:5a:b4:c0:62:12:ff:61:34:fd:f7:18:cc:bb:3f: 53:d1:66:78:10:39:44:62:d4:52:ce:de:78:b7:e9:b2:bc:3c: 75:c4:08:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IZ9GUgeUVjGaJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk Y2RjNGYzNzAtYTBhNy00YjQ4LThhODMtYjQ3OGY0MjUxZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqwsJCIntly3AYuvYD/Qn7dDDTXTAiSVA2J+ /K49OYrrIerA72RZi1C1uospQ8zqxuYBh5yA/+G5E2QEj9UQx9JA0oPjIqaV8emS BXRIzytLUhf2hv15xmmI4a1zV3wCo7WBgwHfncpwVA+61il7XttzfNSm0f40EioG fhuZMK0/xbyQnOPWoNYMJFEMHqYPyahJzxfvGSaVTG3P2+AqKwlSwWi1fwBG+5MI GWazSAshkI/gtPz0c95yxT012QX0R2CBKmtr6WBMDXzdn/IKFWbDFgnx65B+zlOy TtYKZe7QKzsNWdtFSs5hvC7wF1jH73glCechNbGnCQxYKXVkQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk5RbwzdRuJ5jXcK7f2jbV4IqprMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzY1ZDE3ZTktMmIxMC0z NjlhLWFkYjMtODRkNTkyMTNlMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5npMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4fHo5txL8UkxFf0qwIJk0ZtX1KjRWjZzyhMB1KKYkz6ydDmST1TTWX k8/c6xvAPlzRDLfvuIi+2e700WyFvzbH5Mm12vAHDX1IzuGnTW8VMVTRuC40NsXG U8onwd5sTM9Wo/oO4/FMJkYF5wDDronmLt3PZpA4CAnQ9UqMu5l7MUIfnCGshWar rprGyLsftIe7EolsXSfHtsTN+8Y3BeNjL2pGWSwQoNxMKcLKv2JyBaIzAIHFd0VK q7+3uUs0nhUfh2tqpnzA9jJYlfIg1mZggp1AOcE5aNbTrSZatMBiEv9hNP33GMy7 P1PRZngQOURi1FLO3ni36bK8PHXECLg= -----END CERTIFICATE-----Generated at Fri Oct 10 22:12:29 2025 by rpki-client