$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa File: 36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa (raw, json) Hash identifier: 08B+WCSIkzvErwCQjpoOXSCSZLRacF19tKp5wPwQ8V4= Subject key identifier: 23:41:7B:8C:FF:55:BB:1A:8D:5B:9A:44:F4:3F:29:1B:08:FD:02:F4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D30417BA98A28C9B8B4F00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 20454 IP address blocks: 131.153.52.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:04:17:ba:98:a2:8c:9b:8b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=600f6e34-4883-4724-928d-ef1f7755aac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:78:de:03:15:52:fa:1b:a2:30:b4:37:19: 82:b4:18:30:84:6c:f2:76:79:1a:d1:6f:af:1a:29: f2:55:19:ac:72:0b:ae:84:0b:6c:15:b3:84:8c:fd: cd:d0:30:4a:31:3e:03:ef:46:0a:61:db:df:17:6d: c7:63:89:f0:e3:b5:e6:2b:14:0c:13:fd:8a:7a:e9: a0:c9:9c:03:54:e0:00:9e:ca:f0:52:b3:fc:08:90: e0:27:f3:e3:74:35:2d:71:7f:33:07:70:89:a0:40: 63:b4:ca:34:6d:b1:8c:fa:4f:55:75:25:39:c4:32: 37:29:6c:64:de:0d:7e:63:b9:b9:e9:5e:68:df:7f: 27:60:fd:a6:9e:06:97:64:37:7b:b9:0c:e2:2f:6b: 24:14:2f:35:59:8b:24:88:60:4a:b0:81:0a:0a:65: be:aa:0c:44:76:78:95:7c:e3:31:e0:aa:2f:9a:e5: 66:ce:c6:78:28:85:f8:f4:8a:4f:43:47:ed:b0:36: 89:b6:2a:92:54:06:b5:6c:20:8c:56:a6:2f:3a:fa: 48:81:be:84:95:36:fb:55:47:cb:ba:2d:87:96:91: ed:6f:e7:d4:ab:84:f5:3b:70:26:57:c9:71:7b:f4: a4:c0:6e:2a:12:f4:61:00:6e:d7:f7:03:fe:fc:ae: 39:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:41:7B:8C:FF:55:BB:1A:8D:5B:9A:44:F4:3F:29:1B:08:FD:02:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/36b43f4d-1b6e-39b4-a213-06d0cfd5f7d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:90:9e:1e:64:ab:f9:ff:66:a8:f1:3a:12:f0:fb:5a:2f:1f: 63:f6:f1:42:59:78:f3:1c:4d:bd:44:99:d7:29:08:72:58:88: 36:6c:48:cc:07:5d:26:ad:57:1c:f6:75:3c:9f:29:60:a6:84: b0:42:21:eb:fd:02:96:bf:58:0d:09:f3:63:25:36:dd:72:37: 36:58:66:61:83:72:b7:74:7e:d5:ce:4a:8a:47:ea:49:33:39: 7b:32:8c:dd:d3:68:38:d3:29:98:b8:50:b2:61:30:7b:3e:9f: cd:c4:e0:e6:c4:f4:f4:f6:d1:f9:71:79:40:03:37:9e:ac:93: 87:f9:59:22:53:34:1a:1a:7e:90:c7:96:0c:8c:2d:f8:d2:c6: ac:0b:bb:f0:6a:bc:ed:21:b7:04:a8:c9:41:6e:55:db:93:cf: 09:70:0b:9f:0b:cc:08:76:79:c8:0b:5d:d1:0d:c8:2f:e5:a4: a0:b5:07:4c:47:e5:29:75:5d:c8:d9:a0:10:94:61:37:49:57: be:65:e3:91:e3:c5:de:e5:39:d6:6a:2c:92:80:69:1d:f0:26: c2:c7:52:f7:ec:e0:e2:bc:48:4c:23:19:97:d0:fc:58:c9:85: c0:5f:03:50:b7:2a:e0:1f:8c:ea:e2:0b:41:67:da:c8:f2:60: da:41:82:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wQXupiijJuLTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjAwZjZlMzQtNDg4My00NzI0LTkyOGQtZWYxZjc3NTVhYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/N43gMVUvobojC0NxmCtBgwhGzydnka0W+v GinyVRmscguuhAtsFbOEjP3N0DBKMT4D70YKYdvfF23HY4nw47XmKxQME/2Keumg yZwDVOAAnsrwUrP8CJDgJ/PjdDUtcX8zB3CJoEBjtMo0bbGM+k9VdSU5xDI3KWxk 3g1+Y7m56V5o338nYP2mngaXZDd7uQziL2skFC81WYskiGBKsIEKCmW+qgxEdniV fOMx4KovmuVmzsZ4KIX49IpPQ0ftsDaJtiqSVAa1bCCMVqYvOvpIgb6ElTb7VUfL ui2HlpHtb+fUq4T1O3AmV8lxe/SkwG4qEvRhAG7X9wP+/K45xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNBe4z/VbsajVuaRPQ/KRsI/QL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMzZiNDNmNGQtMWI2ZS0z OWI0LWEyMTMtMDZkMGNmZDVmN2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWQnh5kq/n/ZqjxOhLw+1ovH2P28UJZePMcTb1EmdcpCHJYiDZsSMwH XSatVxz2dTyfKWCmhLBCIev9Apa/WA0J82MlNt1yNzZYZmGDcrd0ftXOSopH6kkz OXsyjN3TaDjTKZi4ULJhMHs+n83E4ObE9PT20flxeUADN56sk4f5WSJTNBoafpDH lgyMLfjSxqwLu/BqvO0htwSoyUFuVduTzwlwC58LzAh2ecgLXdENyC/lpKC1B0xH 5Sl1XcjZoBCUYTdJV75l45Hjxd7lOdZqLJKAaR3wJsLHUvfs4OK8SEwjGZfQ/FjJ hcBfA1C3KuAfjOriC0Fn2sjyYNpBgiI= -----END CERTIFICATE-----Generated at Sat Oct 24 19:06:52 2026 by rpki-client