$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa File: cd1d2995-4610-3bd4-b98d-17721b22293f.roa (raw, json) Hash identifier: uAWbJ13UDfezfIY0nzkB1EqJjzmUV167bfjVf70T3Mw= Subject key identifier: 4F:D4:FA:C3:92:CA:F4:4F:F4:EA:DB:3E:80:E9:AB:86:21:59:D7:24 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EF18201D19AC6B204F131C240 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 60558 IP address blocks: 131.153.86.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:01:d1:9a:c6:b2:04:f1:31:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=34b1d770-fbf5-4069-9ffa-05d8c6393ccf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:08:bc:7f:a3:c8:87:58:6e:7c:9d:35:00:85: c7:ba:42:b9:34:c3:d3:49:d7:77:15:8b:a6:a3:9b: 4c:86:4e:21:a0:c9:d0:7d:b5:de:3f:1e:d7:f6:1d: 58:79:5e:de:92:d1:c2:08:a4:4e:e5:5e:f5:96:5d: 63:fd:52:e4:ec:e0:4b:28:ec:2d:b4:04:9b:48:61: 60:34:d2:a5:8d:ec:01:c0:3d:2f:64:13:c8:0d:d9: d5:23:39:02:2b:b8:44:8d:7f:37:94:fe:5a:76:3a: 00:26:76:96:87:28:71:31:5a:a1:7b:e8:76:67:25: 43:56:c4:5e:28:5e:11:30:5a:47:a7:7c:1c:6f:68: 10:b2:6e:99:2b:4f:5b:09:f4:be:c8:32:b0:16:13: 7f:34:4c:ab:86:3d:53:46:18:8b:dc:a3:70:48:e6: 18:20:cf:2d:23:c9:d2:26:a1:eb:e5:5a:74:91:6a: da:04:ce:39:56:e2:cd:27:48:bd:4b:05:ba:dc:7a: 9f:62:b5:b0:f9:de:59:fd:21:99:45:ac:e6:3e:97: 84:94:45:b4:22:2d:73:b3:10:1c:88:4d:d0:73:81: 44:af:4a:7e:ab:e9:0d:08:6d:22:ee:8b:d9:2f:ea: 16:eb:8b:f2:bc:fb:83:44:90:7d:e7:b5:aa:ab:b2: c4:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:D4:FA:C3:92:CA:F4:4F:F4:EA:DB:3E:80:E9:AB:86:21:59:D7:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cd1d2995-4610-3bd4-b98d-17721b22293f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:15:25:ed:4b:88:e9:a2:0d:17:81:c8:2a:7b:e2:9b:93:6c: e4:c4:4f:7b:28:d9:a5:ca:83:41:15:64:54:98:dd:fe:a7:a0: 4b:8f:d5:33:43:05:96:de:b3:8e:6e:1f:88:97:ff:87:8d:f9: a4:1d:64:c7:95:41:bd:47:ba:7e:27:e8:9d:f4:6d:08:ee:2e: 0b:f1:13:16:9c:3a:a4:b0:58:13:71:0c:31:8d:17:2f:1a:db: e2:47:d7:6b:97:2c:4e:a9:c0:9f:d1:12:a9:6f:93:a0:07:f7: f8:38:62:d7:4b:e5:7c:18:9c:f3:ad:3e:c7:c6:1e:3b:e5:58: 1d:93:bc:ab:ea:44:38:3e:7d:a9:46:9b:b4:47:da:ee:7f:d4: 45:e9:ca:10:15:27:c0:6d:4d:9d:9d:6f:5c:43:4a:89:c4:44: 0e:c2:a9:b4:2e:69:8a:0e:77:86:b2:8f:7f:41:0a:8d:70:32: 1c:60:30:2e:a8:28:1e:a9:6d:d1:71:7f:ee:14:49:f7:5d:cc: 84:56:de:4b:27:2e:67:07:91:1b:76:7f:10:ac:01:98:83:d5: 84:44:38:74:c0:6d:2d:c8:de:67:85:16:bc:87:5a:2d:5a:41: 87:0e:35:b8:82:ea:04:6f:35:67:e5:90:e3:8d:0f:04:00:dd: b3:89:f1:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggHRmsayBPExwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MzRiMWQ3NzAtZmJmNS00MDY5LTlmZmEtMDVkOGM2MzkzY2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAi8f6PIh1hufJ01AIXHukK5NMPTSdd3FYum o5tMhk4hoMnQfbXePx7X9h1YeV7ektHCCKRO5V71ll1j/VLk7OBLKOwttASbSGFg NNKljewBwD0vZBPIDdnVIzkCK7hEjX83lP5adjoAJnaWhyhxMVqhe+h2ZyVDVsRe KF4RMFpHp3wcb2gQsm6ZK09bCfS+yDKwFhN/NEyrhj1TRhiL3KNwSOYYIM8tI8nS JqHr5Vp0kWraBM45VuLNJ0i9SwW63HqfYrWw+d5Z/SGZRazmPpeElEW0Ii1zsxAc iE3Qc4FEr0p+q+kNCG0i7ovZL+oW64vyvPuDRJB957Wqq7LEaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/U+sOSyvRP9OrbPoDpq4YhWdckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2QxZDI5OTUtNDYxMC0z YmQ0LWI5OGQtMTc3MjFiMjIyOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEVJe1LiOmiDReByCp74puTbOTET3so2aXKg0EVZFSY3f6noEuP1TND BZbes45uH4iX/4eN+aQdZMeVQb1Hun4n6J30bQjuLgvxExacOqSwWBNxDDGNFy8a 2+JH12uXLE6pwJ/REqlvk6AH9/g4YtdL5XwYnPOtPsfGHjvlWB2TvKvqRDg+falG m7RH2u5/1EXpyhAVJ8BtTZ2db1xDSonERA7CqbQuaYoOd4ayj39BCo1wMhxgMC6o KB6pbdFxf+4USfddzIRW3ksnLmcHkRt2fxCsAZiD1YREOHTAbS3I3meFFryHWi1a QYcONbiC6gRvNWflkOONDwQA3bOJ8e4= -----END CERTIFICATE-----Generated at Tue Sep 22 18:31:20 2026 by rpki-client