$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json) Hash identifier: ngfYrHdHKUj7iJiq/zZy9+PnHp5gVIuuOL+LCMqTO+g= Subject key identifier: 48:F1:7B:5A:39:70:6A:87:B1:A7:29:8B:F5:F7:E5:7D:B4:CC:88:93 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E50848E54BAA701B9A5F4AB00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 12189 IP address blocks: 131.153.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:8e:54:ba:a7:01:b9:a5:f4:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=806c58ef-83e4-4e95-bcae-df54131a84ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2e:f8:5f:8f:c5:02:2e:4c:0e:d1:2d:03:38: 12:d3:7a:86:d9:b2:ae:58:2d:68:9a:45:d6:e4:16: 46:f7:be:16:19:c3:d7:25:a2:e1:0f:33:c2:55:df: 7a:d2:44:2d:2a:52:f3:31:07:c8:2c:bd:5c:aa:2e: 3d:77:36:99:1b:86:2b:c4:e7:63:a6:98:7b:49:5b: 2b:4f:47:1d:e1:8d:6d:74:9f:d8:cb:4e:d2:ff:4f: 87:16:11:0f:56:dd:81:85:1f:c1:a2:d9:6c:59:3e: 4f:8f:3a:75:be:45:1a:da:bd:fc:8a:2e:01:71:58: 9f:cd:eb:4d:29:a9:6b:a5:9a:fb:3e:de:17:44:2a: d3:42:50:fe:03:62:a4:b5:0a:8a:34:5b:7e:e4:c2: 0b:59:29:ef:18:6c:13:7d:64:b6:2a:13:82:20:de: 0c:c2:8b:d9:e7:0e:e7:9d:c8:ef:20:0b:6d:38:0c: 57:03:41:a5:2f:67:41:5d:23:e8:29:85:5c:c3:45: 66:1d:35:e8:b1:b7:aa:6b:d4:b4:a0:99:be:13:99: 36:bb:da:59:ad:ce:b5:f0:8d:3a:f2:79:42:03:3f: 11:91:b3:dc:84:3c:32:d0:89:21:59:c1:e0:1b:6d: cd:88:80:98:64:ce:d9:1b:fc:e0:d5:71:df:da:0e: f9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:F1:7B:5A:39:70:6A:87:B1:A7:29:8B:F5:F7:E5:7D:B4:CC:88:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:d9:ae:5b:54:62:3e:44:6c:44:28:08:33:15:98:76:9a:ab: 1e:6c:b5:e4:bd:5a:2d:d2:f4:fd:fa:1f:af:24:fc:bb:25:1e: f6:de:ae:72:b8:57:ec:97:66:2c:c6:1d:62:8d:0e:b5:53:bf: 37:19:d8:f7:d7:ac:e2:d1:8e:2a:6e:5c:12:00:b3:25:28:fe: 6a:ad:f0:3d:ce:88:3e:bd:6f:b6:59:ad:fc:96:90:2b:fb:f2: 06:8d:04:ab:00:3c:3b:6c:ec:a9:db:ff:9e:e0:23:81:1d:0b: f4:b9:0b:ca:a5:ba:cc:45:8f:f9:d0:ef:d3:d4:4e:19:55:31: 35:32:f3:24:56:1f:e7:cb:68:10:35:d7:3f:45:2f:a7:5a:e9: 7e:ed:a4:9a:cb:4b:b4:9e:72:66:6d:b2:b6:2d:d5:f6:b4:fb: 3d:ba:fe:bc:98:18:e6:02:e3:d3:a8:6b:5e:ce:2f:81:82:49: be:b6:7e:7a:11:ab:d4:3c:f0:df:c4:5b:3d:33:4f:dc:ca:7b: ee:4b:88:ad:39:08:7d:92:b9:af:e2:1e:13:94:93:55:86:ad: 53:0f:c9:36:04:6d:87:cf:dc:f8:4e:b2:79:80:12:8a:24:7f: aa:9c:06:7f:ad:0c:87:a6:d7:32:08:13:92:f6:33:10:15:8e: bd:63:0f:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhI5UuqcBuaX0qwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk ODA2YzU4ZWYtODNlNC00ZTk1LWJjYWUtZGY1NDEzMWE4NGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvy74X4/FAi5MDtEtAzgS03qG2bKuWC1omkXW 5BZG974WGcPXJaLhDzPCVd960kQtKlLzMQfILL1cqi49dzaZG4YrxOdjpph7SVsr T0cd4Y1tdJ/Yy07S/0+HFhEPVt2BhR/BotlsWT5Pjzp1vkUa2r38ii4BcVifzetN KalrpZr7Pt4XRCrTQlD+A2KktQqKNFt+5MILWSnvGGwTfWS2KhOCIN4MwovZ5w7n ncjvIAttOAxXA0GlL2dBXSPoKYVcw0VmHTXosbeqa9S0oJm+E5k2u9pZrc618I06 8nlCAz8RkbPchDwy0IkhWcHgG23NiICYZM7ZG/zg1XHf2g75kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjxe1o5cGqHsacpi/X35X20zIiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2E0OWViNjgtNjIxNi0z YWJjLTgyMmQtNjVmZWM0OWNkZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzZrltUYj5EbEQoCDMVmHaaqx5steS9Wi3S9P36H68k/LslHvbernK4 V+yXZizGHWKNDrVTvzcZ2PfXrOLRjipuXBIAsyUo/mqt8D3OiD69b7ZZrfyWkCv7 8gaNBKsAPDts7Knb/57gI4EdC/S5C8qlusxFj/nQ79PUThlVMTUy8yRWH+fLaBA1 1z9FL6da6X7tpJrLS7SecmZtsrYt1fa0+z26/ryYGOYC49Ooa17OL4GCSb62fnoR q9Q88N/EWz0zT9zKe+5LiK05CH2Sua/iHhOUk1WGrVMPyTYEbYfP3PhOsnmAEook f6qcBn+tDIem1zIIE5L2MxAVjr1jD7E= -----END CERTIFICATE-----Generated at Wed Jul 1 21:50:33 2026 by rpki-client