$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa File: 1823aeee-620e-331b-bd1e-36eec1af6cfa.roa (raw, json) Hash identifier: gzFvvKUtd1hp6q9P7e2Cl4VdZJVy4ldYwpMjlSFTOBE= Subject key identifier: 29:26:0C:7C:10:06:D0:15:EE:0C:05:6C:74:AB:45:60:27:12:21:C6 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E4F1F366AB606C722A2822C80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 131.153.42.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:36:6a:b6:06:c7:22:a2:82:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=6f954932-716a-4c9b-8e1e-2503f927a313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:15:a4:bc:41:e6:4f:39:cf:8e:7a:e0:c4:0e: 01:ac:60:a2:8d:a5:dc:3a:a1:b3:c8:c5:2b:5f:f3: 1a:4c:25:6b:9b:a9:02:3b:b5:3e:94:de:9f:80:37: 3b:c8:f3:b8:cd:c4:49:87:c3:6a:84:40:96:0b:6e: 0c:37:45:af:76:8d:6d:e8:c5:d0:69:40:83:fd:0c: 26:0c:89:01:32:ee:34:33:40:a5:0a:07:9a:ac:74: 32:a4:8a:2f:29:ff:59:6e:a8:94:61:10:cb:6b:49: 67:d8:63:90:e1:0c:ba:9c:07:aa:23:f4:3e:bc:fe: 43:49:ad:c5:6d:0d:41:7a:c5:fe:be:c4:31:a6:37: 4b:5c:88:1a:45:c4:30:2b:e9:ef:ce:c2:41:97:4f: cc:7d:87:b9:d0:49:f0:34:ed:a6:13:9f:bb:a9:7a: e3:b0:b4:06:30:96:e9:13:9a:c7:b0:12:94:2e:de: a1:71:97:a8:0f:ca:ce:7d:9f:85:90:1c:f7:39:81: 2b:4e:37:b0:2e:00:c8:25:61:13:e1:ab:35:73:ab: 9c:05:f9:99:88:c4:48:73:1b:be:29:52:d4:d1:fa: 8f:ec:4d:4c:4e:27:27:92:92:55:7c:9a:a7:56:65: 83:33:de:52:58:7d:42:f7:8a:3a:e1:bb:07:3b:7e: ae:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:0C:7C:10:06:D0:15:EE:0C:05:6C:74:AB:45:60:27:12:21:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/1823aeee-620e-331b-bd1e-36eec1af6cfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:10:6a:20:ce:95:9c:88:cc:a8:40:ba:c5:1d:36:4b:43:ef: 80:9a:bc:03:87:a1:85:a8:c9:5b:41:25:ad:30:ca:cd:ee:64: 49:7e:b8:80:ff:09:24:58:54:d5:f7:99:29:18:fa:5b:d8:a9: 77:e2:8a:63:39:05:1a:ef:8e:1e:c6:45:0c:6e:75:62:88:e1: 62:64:e0:47:b6:4e:88:e2:fe:24:2c:b8:bb:6a:46:bf:f5:28: 63:4a:35:ca:e6:d4:95:89:e9:af:56:fe:b2:4f:27:60:4a:e7: 3e:1b:db:d6:8a:b5:07:3a:29:cd:87:0d:6f:93:05:86:ff:38: d9:7f:28:2d:f0:79:42:86:d4:04:ef:bb:c8:c0:72:24:c9:bd: b1:ac:5e:ce:54:d5:65:36:69:25:03:43:96:e6:13:7c:67:43: 52:19:1c:a2:d0:2f:80:fd:b9:f4:03:e6:ce:81:9c:b7:c0:ce: 2c:cc:4a:71:28:4d:b7:23:9a:fb:47:31:65:09:d1:f6:ba:08: 75:d9:38:bc:dd:44:4a:f0:dc:c2:a2:cb:a8:42:41:95:a5:93: a3:c1:54:eb:3b:30:fa:db:98:40:64:25:3b:95:bd:08:2c:4a: c2:6f:39:12:84:12:ae:5a:d4:bb:97:b7:fc:e9:f0:c1:35:47: 5e:ae:d0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzZqtgbHIqKCLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk NmY5NTQ5MzItNzE2YS00YzliLThlMWUtMjUwM2Y5MjdhMzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBWkvEHmTznPjnrgxA4BrGCijaXcOqGzyMUr X/MaTCVrm6kCO7U+lN6fgDc7yPO4zcRJh8NqhECWC24MN0Wvdo1t6MXQaUCD/Qwm DIkBMu40M0ClCgearHQypIovKf9ZbqiUYRDLa0ln2GOQ4Qy6nAeqI/Q+vP5DSa3F bQ1BesX+vsQxpjdLXIgaRcQwK+nvzsJBl0/MfYe50EnwNO2mE5+7qXrjsLQGMJbp E5rHsBKULt6hcZeoD8rOfZ+FkBz3OYErTjewLgDIJWET4as1c6ucBfmZiMRIcxu+ KVLU0fqP7E1MTicnkpJVfJqnVmWDM95SWH1C94o64bsHO36uQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkmDHwQBtAV7gwFbHSrRWAnEiHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMTgyM2FlZWUtNjIwZS0z MzFiLWJkMWUtMzZlZWMxYWY2Y2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5kqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIQaiDOlZyIzKhAusUdNktD74CavAOHoYWoyVtBJa0wys3uZEl+uID/ CSRYVNX3mSkY+lvYqXfiimM5BRrvjh7GRQxudWKI4WJk4Ee2Toji/iQsuLtqRr/1 KGNKNcrm1JWJ6a9W/rJPJ2BK5z4b29aKtQc6Kc2HDW+TBYb/ONl/KC3weUKG1ATv u8jAciTJvbGsXs5U1WU2aSUDQ5bmE3xnQ1IZHKLQL4D9ufQD5s6BnLfAzizMSnEo TbcjmvtHMWUJ0fa6CHXZOLzdRErw3MKiy6hCQZWlk6PBVOs7MPrbmEBkJTuVvQgs SsJvORKEEq5a1LuXt/zp8ME1R16u0Mo= -----END CERTIFICATE-----Generated at Tue Jul 21 18:18:56 2026 by rpki-client