$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa File: 5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json) Hash identifier: ybHGFrMrxxI5nauFBgYnvCRpbCMK8hETPOZcS3cDvXc= Subject key identifier: 61:8B:4C:F5:F4:6B:AC:82:87:9E:D3:FA:B3:E2:F7:6B:C2:9A:98:2A Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D33FB23F4915D44B831D80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 19437 IP address blocks: 131.153.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:3f:b2:3f:49:15:d4:4b:83:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=222c0a61-6a23-4931-b20f-7f09b2f7de8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5e:88:69:87:bc:9d:77:e7:6f:6e:ee:5c:b8: 77:97:00:2c:c9:5e:95:53:a6:31:25:01:d2:f3:2c: c9:4e:9d:e5:55:54:9f:1d:0a:1f:23:7d:22:d6:34: 67:08:bd:67:db:4a:a5:f1:28:9b:0d:8b:22:89:26: 72:6e:71:28:93:31:9f:7c:45:c2:0b:7c:a6:b4:f3: 6f:41:ee:d0:bb:32:d3:b6:6a:73:90:93:69:54:c7: 11:c6:3e:85:f9:cf:6a:c3:60:e8:18:f4:ce:f2:1e: 31:6f:f4:9b:41:cf:6f:1b:49:a2:93:a2:78:6c:3d: 06:88:1f:7f:5c:6b:68:6d:99:cd:c2:8a:69:cd:66: a4:9d:34:88:96:91:2d:1f:04:0c:a5:6a:6c:a7:a9: 0b:c2:5b:44:fe:b8:c4:ff:ac:25:44:63:9d:26:65: ac:35:a6:be:d1:57:a9:1e:cc:b0:d6:e9:e4:1b:91: 06:b1:62:46:aa:df:5e:8f:3c:5a:95:62:f0:73:96: 4a:57:5a:bc:41:ef:85:5b:f4:f1:33:aa:94:20:75: 70:d8:2c:bc:88:08:98:d4:74:8d:63:51:98:07:93: 00:f8:72:f1:80:6e:51:de:b1:96:2c:98:e7:55:50: 80:1d:15:10:ec:6c:7f:c5:db:7d:1b:1c:d4:fd:df: c2:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8B:4C:F5:F4:6B:AC:82:87:9E:D3:FA:B3:E2:F7:6B:C2:9A:98:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:17:1e:b8:56:1f:65:f1:78:55:f5:80:49:b8:8f:ce:fe: be:e8:f8:48:1a:17:66:a4:75:39:2b:41:10:20:6e:91:ae:7c: 48:52:19:a4:e7:92:22:f5:c5:84:01:a0:78:b2:2e:20:f4:0d: f4:9b:81:dd:11:1e:fb:e8:11:bd:99:69:a0:e4:a0:2b:12:53: 0f:b2:91:85:e8:f8:f1:3e:3f:94:69:e3:84:f3:f3:9a:61:06: 39:55:62:43:43:82:ae:55:17:b6:a9:2b:84:b5:50:34:5a:65: 1a:76:14:98:fe:52:c7:58:70:0d:21:ac:e0:d3:25:93:d8:a2: 4e:a4:92:3e:63:a2:d0:28:ea:23:24:5b:81:2a:50:b0:73:57: 80:4b:24:4e:51:d1:b9:6d:76:30:df:b2:a6:49:41:35:bd:c6: e5:6d:29:f0:e4:c0:b2:a0:4e:32:e2:f9:7b:0c:f7:09:06:71: 73:d3:cf:fb:c4:99:2f:51:7a:bf:0e:5e:6a:81:f9:e5:26:cf: f7:bf:12:f0:bc:6c:e9:72:df:8e:af:5c:e6:b1:5f:cb:c6:d4: fe:2a:38:00:a4:e0:50:00:88:9a:a4:bf:a9:5e:55:76:cd:5d: 41:44:34:45:0a:2e:cc:d5:dd:b5:d0:a6:08:7e:60:2b:0a:62: 23:14:ae:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0z+yP0kV1EuDHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MjIyYzBhNjEtNmEyMy00OTMxLWIyMGYtN2YwOWIyZjdkZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm16IaYe8nXfnb27uXLh3lwAsyV6VU6YxJQHS 8yzJTp3lVVSfHQofI30i1jRnCL1n20ql8SibDYsiiSZybnEokzGffEXCC3ymtPNv Qe7QuzLTtmpzkJNpVMcRxj6F+c9qw2DoGPTO8h4xb/SbQc9vG0mik6J4bD0GiB9/ XGtobZnNwoppzWaknTSIlpEtHwQMpWpsp6kLwltE/rjE/6wlRGOdJmWsNaa+0Vep Hsyw1unkG5EGsWJGqt9ejzxalWLwc5ZKV1q8Qe+FW/TxM6qUIHVw2Cy8iAiY1HSN Y1GYB5MA+HLxgG5R3rGWLJjnVVCAHRUQ7Gx/xdt9GxzU/d/CGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGLTPX0a6yCh57T+rPi92vCmpgqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNWYzNDAyZTUtY2Q5Mi0z M2I2LTgxMmMtMDg5MmMwYjhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI95Fx64Vh9l8XhV9YBJuI/O/r7o+EgaF2akdTkrQRAgbpGufEhSGaTn kiL1xYQBoHiyLiD0DfSbgd0RHvvoEb2ZaaDkoCsSUw+ykYXo+PE+P5Rp44Tz85ph BjlVYkNDgq5VF7apK4S1UDRaZRp2FJj+UsdYcA0hrODTJZPYok6kkj5jotAo6iMk W4EqULBzV4BLJE5R0bltdjDfsqZJQTW9xuVtKfDkwLKgTjLi+XsM9wkGcXPTz/vE mS9Rer8OXmqB+eUmz/e/EvC8bOly346vXOaxX8vG1P4qOACk4FAAiJqkv6leVXbN XUFENEUKLszV3bXQpgh+YCsKYiMUrn0= -----END CERTIFICATE-----Generated at Sun Oct 25 11:52:59 2026 by rpki-client