$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa File: 123cfc75-ee2c-3a64-af65-154a3f602d33.roa (raw, json) Hash identifier: kTumcICR/UXCzJoEVPaSj3/nHZVGGEyBqsdq0ccwtDk= Subject key identifier: 40:5B:30:A5:AD:0A:B7:7F:C7:B1:AD:B9:96:A8:52:39:A7:A8:05:61 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D3054FF5AFF44DBFF02D80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 19437 IP address blocks: 131.153.100.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:05:4f:f5:af:f4:4d:bf:f0:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=66d0812a-af2c-44e1-aef1-80c536bd6e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c9:fa:b7:7c:d2:a6:c6:fb:b4:74:38:04:25: 7f:16:b5:0f:62:b3:5f:ab:25:8f:1b:87:16:b2:a2: 59:d6:37:af:b0:1b:91:a6:c6:2c:87:f3:c8:2e:a7: 25:87:bf:6b:56:c6:90:0d:d0:2d:31:bc:5b:bf:7b: 47:f0:dc:3a:a2:b2:3a:08:e2:b9:37:a2:d4:d2:50: 6c:f5:4a:46:6e:70:88:57:90:73:aa:b2:ed:95:77: ae:df:c1:87:8d:d7:88:09:ab:55:b2:45:76:02:9f: 85:94:8e:62:72:91:62:d5:bc:02:68:1a:bd:e2:f3: 07:a4:58:ca:03:19:ad:2d:47:56:b6:66:c4:6c:41: 47:1c:91:f4:75:7e:92:92:73:c3:cd:fb:06:94:f7: 65:fb:20:04:36:14:eb:24:b8:bc:e5:5f:57:1f:12: 20:cd:ef:b8:d1:7c:3d:a9:d9:7b:46:9e:62:6d:dc: ad:89:89:f0:27:f7:7a:52:74:00:9d:f9:64:71:26: ff:c2:70:d0:c2:7c:8d:a8:7b:bf:7b:2c:44:7b:ce: 34:7e:27:2a:74:41:aa:8f:a5:20:60:72:97:f2:98: 0c:c5:04:b1:5c:90:d7:fc:09:99:27:e1:b8:c3:38: 92:ad:28:67:d6:e6:90:8b:20:b6:4d:df:14:06:c2: 9f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5B:30:A5:AD:0A:B7:7F:C7:B1:AD:B9:96:A8:52:39:A7:A8:05:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/123cfc75-ee2c-3a64-af65-154a3f602d33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:de:89:d8:4f:d4:8b:95:f8:1e:92:16:a0:5b:73:25:d7:ca: 90:60:21:97:34:bb:ca:8d:25:30:dc:d2:e5:76:92:7f:ba:71: 9e:55:8f:22:53:5f:96:7e:53:4f:82:96:6b:f2:b1:c6:3c:23: 8b:48:bc:8a:d0:37:a3:49:9a:71:03:8b:b9:b7:2e:0a:f3:36: d8:1d:5a:de:3e:18:f5:e6:6c:23:8e:7f:d0:10:03:2b:bb:90: d1:1d:c2:f9:9c:a8:24:4d:51:ef:f6:3e:e9:de:3f:a3:59:da: 4b:0b:fd:7d:32:85:c7:31:fd:e6:1f:9e:eb:a3:6d:51:72:cc: 59:4e:ef:73:07:ed:05:d8:d4:fb:d8:3a:87:06:d8:03:f6:0d: 0a:a5:eb:d8:cd:a4:2b:e4:cc:ce:49:7d:ab:61:96:c8:d5:2e: 43:4c:87:16:e8:72:ea:69:ca:e0:32:08:3f:73:8a:c8:79:b9: 9f:8a:35:cf:80:18:95:6f:52:d7:23:33:5b:c2:5b:59:f6:b7: 13:74:bc:6d:3c:5c:40:3c:da:d7:0c:bc:c5:ea:58:27:57:34: 03:06:af:72:fc:80:92:ce:ad:80:75:87:bc:93:5a:82:73:06: af:c5:5f:a3:81:7e:76:a7:82:88:13:0c:75:2b:f4:2b:fd:c4: d2:5d:75:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wVP9a/0Tb/wLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjZkMDgxMmEtYWYyYy00NGUxLWFlZjEtODBjNTM2YmQ2ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcn6t3zSpsb7tHQ4BCV/FrUPYrNfqyWPG4cW sqJZ1jevsBuRpsYsh/PILqclh79rVsaQDdAtMbxbv3tH8Nw6orI6COK5N6LU0lBs 9UpGbnCIV5BzqrLtlXeu38GHjdeICatVskV2Ap+FlI5icpFi1bwCaBq94vMHpFjK AxmtLUdWtmbEbEFHHJH0dX6SknPDzfsGlPdl+yAENhTrJLi85V9XHxIgze+40Xw9 qdl7Rp5ibdytiYnwJ/d6UnQAnflkcSb/wnDQwnyNqHu/eyxEe840ficqdEGqj6Ug YHKX8pgMxQSxXJDX/AmZJ+G4wziSrShn1uaQiyC2Td8UBsKfLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEBbMKWtCrd/x7GtuZaoUjmnqAVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTIzY2ZjNzUtZWUyYy0z YTY0LWFmNjUtMTU0YTNmNjAyZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3eidhP1IuV+B6SFqBbcyXXypBgIZc0u8qNJTDc0uV2kn+6cZ5VjyJT X5Z+U0+ClmvyscY8I4tIvIrQN6NJmnEDi7m3LgrzNtgdWt4+GPXmbCOOf9AQAyu7 kNEdwvmcqCRNUe/2PuneP6NZ2ksL/X0yhccx/eYfnuujbVFyzFlO73MH7QXY1PvY OocG2AP2DQql69jNpCvkzM5JfathlsjVLkNMhxbocuppyuAyCD9zish5uZ+KNc+A GJVvUtcjM1vCW1n2txN0vG08XEA82tcMvMXqWCdXNAMGr3L8gJLOrYB1h7yTWoJz Bq/FX6OBfnangogTDHUr9Cv9xNJddRg= -----END CERTIFICATE-----Generated at Tue Oct 27 18:51:42 2026 by rpki-client