$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa File: cc973301-7c68-348a-bd7d-e22b5396a832.roa (raw, json) Hash identifier: HtsnxjvAXhU2CslA4Uou3IBktjMgxiQ+Bk6/XFVxmzs= Subject key identifier: DA:51:F3:8C:70:74:AD:0E:4E:A8:18:D7:41:D6:4E:AD:16:DE:CF:C1 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EF182009CA05A5427E25AC580 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 12189 IP address blocks: 131.153.112.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:00:9c:a0:5a:54:27:e2:5a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=85e544a3-6e89-4a81-8042-b05f2239285d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:47:71:e2:ef:7f:ca:26:c3:c3:5e:c2:0a: bd:69:36:73:a4:c4:b2:dc:76:4d:8e:ee:01:61:d6: a0:e2:bb:ba:7f:de:3a:20:08:e4:a7:c9:2b:73:05: 66:b6:a0:b4:02:5a:9a:63:b0:7b:4b:b0:61:0d:d5: bb:eb:f1:fd:8a:62:50:09:40:ad:34:5d:51:5a:ca: 34:1a:ad:ea:19:ff:25:00:66:f4:0d:f4:b8:2c:3a: 87:66:d4:8d:98:81:46:fe:8f:fb:f1:39:7b:04:4c: 33:d1:96:56:ee:9f:9f:95:ff:0a:11:ea:08:fa:69: 22:3a:5f:dc:90:43:ed:d8:5a:bc:ee:bf:bf:7d:02: db:04:f4:88:3e:85:7f:be:59:74:73:1f:91:62:62: 26:b0:07:50:09:94:66:09:1f:cf:bd:79:7f:4b:f5: f9:6d:87:c9:70:96:a9:d9:0f:31:19:6f:26:bd:1d: 65:76:67:cc:bb:ee:7a:c8:66:f3:43:dc:9e:00:61: d5:d9:2a:e3:d8:97:d8:a8:50:bf:a4:df:c7:87:7e: 39:14:27:9a:41:2b:41:e2:d9:f9:80:4a:6e:ff:8d: 95:7d:52:d7:ee:68:c3:26:bc:fe:a0:2c:73:f0:0a: c8:28:b7:e0:66:2f:43:96:38:28:54:5d:03:ab:19: 55:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:51:F3:8C:70:74:AD:0E:4E:A8:18:D7:41:D6:4E:AD:16:DE:CF:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc973301-7c68-348a-bd7d-e22b5396a832.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bb:c0:d1:39:1e:c2:03:90:7c:44:f1:6e:a3:a6:31:bd:ec: ec:c4:ef:2f:39:be:ca:ed:cc:1e:e3:a7:d0:8c:73:86:f6:57: 9a:db:39:76:16:e1:07:19:ca:cc:3d:86:e4:ef:19:3b:4c:fe: 08:fd:5f:98:75:db:f7:8b:c8:56:32:ff:06:18:ce:80:3a:11: f5:06:59:82:61:59:71:54:6e:10:e6:3c:48:1e:6c:41:d5:4a: c5:b6:a4:0b:47:ff:1b:48:e6:51:bc:e6:0f:90:73:8f:e7:52: 40:ff:21:91:24:0c:14:c7:11:46:51:4b:40:81:94:76:4a:cf: 20:11:25:f7:1d:9a:95:fc:dd:5e:e1:66:1a:ce:ca:c2:4b:6e: 6c:ea:88:5e:b0:ca:66:a8:9b:1a:95:1d:17:ee:57:7d:54:34: 8c:76:49:27:c9:0a:55:1b:5f:5a:50:bf:46:df:da:d0:7c:02: e5:81:15:83:79:75:3d:44:ec:9a:db:dd:33:ca:7b:ea:1e:ce: 0b:31:7c:fa:84:ae:c5:70:be:4a:aa:9b:ce:c2:b0:d6:ed:e9: 4d:14:5f:d3:66:64:ae:51:10:ac:5f:2e:ca:4c:c2:3d:6a:17: b3:0e:b0:46:43:9b:6a:21:1a:e9:a2:c9:8d:44:ba:23:f4:af: 08:72:fb:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggCcoFpUJ+JaxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ODVlNTQ0YTMtNmU4OS00YTgxLTgwNDItYjA1ZjIyMzkyODVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79HceLvf8omw8Newgq9aTZzpMSy3HZNju4B Ydag4ru6f946IAjkp8krcwVmtqC0AlqaY7B7S7BhDdW76/H9imJQCUCtNF1RWso0 Gq3qGf8lAGb0DfS4LDqHZtSNmIFG/o/78Tl7BEwz0ZZW7p+flf8KEeoI+mkiOl/c kEPt2Fq87r+/fQLbBPSIPoV/vll0cx+RYmImsAdQCZRmCR/PvXl/S/X5bYfJcJap 2Q8xGW8mvR1ldmfMu+56yGbzQ9yeAGHV2Srj2JfYqFC/pN/Hh345FCeaQStB4tn5 gEpu/42VfVLX7mjDJrz+oCxz8ArIKLfgZi9DljgoVF0DqxlVDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpR84xwdK0OTqgY10HWTq0W3s/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M5NzMzMDEtN2M2OC0z NDhhLWJkN2QtZTIyYjUzOTZhODMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy7wNE5HsIDkHxE8W6jpjG97OzE7y85vsrtzB7jp9CMc4b2V5rbOXYW 4QcZysw9huTvGTtM/gj9X5h12/eLyFYy/wYYzoA6EfUGWYJhWXFUbhDmPEgebEHV SsW2pAtH/xtI5lG85g+Qc4/nUkD/IZEkDBTHEUZRS0CBlHZKzyARJfcdmpX83V7h ZhrOysJLbmzqiF6wymaomxqVHRfuV31UNIx2SSfJClUbX1pQv0bf2tB8AuWBFYN5 dT1E7Jrb3TPKe+oezgsxfPqErsVwvkqqm87CsNbt6U0UX9NmZK5REKxfLspMwj1q F7MOsEZDm2ohGumiyY1EuiP0rwhy+1Q= -----END CERTIFICATE-----Generated at Tue Sep 22 22:01:01 2026 by rpki-client