$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa File: 3c236add-de19-3e3d-ac81-5e2a5af3b064.roa (raw, json) Hash identifier: yYAXIAHAFDZybsXV//2OLHq3qpTIlJCpZg/xjNe3z+o= Subject key identifier: 43:32:C3:61:61:A8:54:84:DE:8A:39:E1:B5:5D:4C:43:9C:AD:BB:31 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E3499AF7604DE3524A08A2180 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa Signing time: Wed 17 Jun 2026 21:00:11 +0000 ROA not before: Wed 17 Jun 2026 21:00:11 +0000 ROA not after: Tue 15 Sep 2026 21:00:11 +0000 asID: 20454 IP address blocks: 131.153.204.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:34:99:af:76:04:de:35:24:a0:8a:21:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 17 21:00:11 2026 GMT Not After : Sep 15 21:00:11 2026 GMT Subject: CN=348fec7f-2049-40c2-96d0-2333306d2acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:79:44:a7:e4:cf:15:f2:bb:a1:01:56:93: 52:6f:f9:d6:85:8e:22:82:05:4f:8f:48:d9:77:a6: 8f:82:40:f2:d6:9f:b7:5d:eb:14:5f:d6:61:cb:fd: 85:4f:54:93:78:5c:60:6c:c3:71:ea:b6:a3:9c:ef: 12:ad:52:13:c8:17:3e:4f:95:66:2e:7b:4d:5c:2b: 20:70:ff:2c:5c:40:a4:ad:b0:22:41:d1:cc:b6:06: 36:46:6f:95:cf:8f:17:db:90:d4:3d:06:da:38:1f: 2a:88:82:ce:6a:17:95:48:22:78:48:e5:a0:7a:56: b4:1b:a8:e7:d8:da:20:1b:71:65:79:26:87:dd:a5: e6:1e:81:07:7b:cd:70:35:3a:39:d0:ce:e4:ef:54: 5c:16:f1:d3:e2:bf:68:35:fa:94:0b:1d:d1:0c:16: 12:44:3a:f0:72:00:f9:50:5a:a1:ff:78:21:03:e1: 94:0e:bc:2c:30:c2:e9:30:d7:fc:59:06:d8:dd:65: 28:53:01:35:74:dd:86:70:a7:aa:71:f5:7b:89:6f: 7d:12:95:a3:88:65:5c:42:1a:b7:b3:52:73:aa:57: fc:64:f2:4b:b4:81:bf:e3:96:38:08:5e:73:3e:2e: d5:91:b6:39:94:ba:5c:dc:76:d2:95:cd:98:2f:69: a9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:32:C3:61:61:A8:54:84:DE:8A:39:E1:B5:5D:4C:43:9C:AD:BB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:f2:dc:65:6d:0a:e8:35:0d:04:d3:d1:d6:89:f8:7c:af:b7: 91:a2:79:08:bc:38:3a:e9:5d:bb:69:6e:e2:e3:99:d5:e1:ac: bc:aa:d7:d4:2e:0e:d8:e6:fe:ad:43:c4:c1:7a:d0:0d:db:51: a5:bf:3a:6e:1c:0c:32:63:b1:d0:60:67:4f:c3:81:33:10:73: de:00:ba:ff:e7:0f:21:b7:50:3a:1d:7e:7b:72:3e:c6:be:23: 3d:f8:26:77:13:7f:da:12:99:ae:50:59:2d:ed:97:e6:b2:d9: 0c:9d:4d:22:12:b4:a6:de:f3:ef:e3:82:1f:a9:b7:14:6e:f6: 45:62:bb:a8:3b:63:90:ae:a0:08:3c:9b:6d:fd:d2:78:57:51: ce:d3:94:f8:8b:a2:37:dd:4e:3b:4a:cb:dd:15:03:3f:99:db: 0c:3b:24:e3:c1:71:f9:7f:ba:b6:4c:f5:33:fa:72:27:f1:bf: 73:fa:4b:86:ba:91:49:c6:bd:63:7e:48:4f:26:31:54:df:02: ce:3d:9f:e1:57:5c:47:1b:1f:a7:9a:0e:ed:b2:29:8d:c9:b5: 32:d7:d0:14:52:5b:cb:9b:13:9f:8c:0d:b5:e0:90:2a:dd:e4: a5:b1:b5:3e:94:55:9e:02:c0:f8:04:3f:ee:ac:82:8d:01:78: 05:e4:44:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE40ma92BN41JKCKIYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYxNzIxMDAxMVoXDTI2MDkxNTIxMDAxMVowLzEtMCsGA1UEAxMk MzQ4ZmVjN2YtMjA0OS00MGMyLTk2ZDAtMjMzMzMwNmQyYWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4x5RKfkzxXyu6EBVpNSb/nWhY4iggVPj0jZ d6aPgkDy1p+3XesUX9Zhy/2FT1STeFxgbMNx6rajnO8SrVITyBc+T5VmLntNXCsg cP8sXECkrbAiQdHMtgY2Rm+Vz48X25DUPQbaOB8qiILOaheVSCJ4SOWgela0G6jn 2NogG3FleSaH3aXmHoEHe81wNTo50M7k71RcFvHT4r9oNfqUCx3RDBYSRDrwcgD5 UFqh/3ghA+GUDrwsMMLpMNf8WQbY3WUoUwE1dN2GcKeqcfV7iW99EpWjiGVcQhq3 s1Jzqlf8ZPJLtIG/45Y4CF5zPi7VkbY5lLpc3HbSlc2YL2mp+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMyw2FhqFSE3oo54bVdTEOcrbsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2MyMzZhZGQtZGUxOS0z ZTNkLWFjODEtNWUyYTVhZjNiMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/y3GVtCug1DQTT0daJ+Hyvt5GieQi8ODrpXbtpbuLjmdXhrLyq19Qu Dtjm/q1DxMF60A3bUaW/Om4cDDJjsdBgZ0/DgTMQc94Auv/nDyG3UDodfntyPsa+ Iz34JncTf9oSma5QWS3tl+ay2QydTSIStKbe8+/jgh+ptxRu9kViu6g7Y5CuoAg8 m2390nhXUc7TlPiLojfdTjtKy90VAz+Z2ww7JOPBcfl/urZM9TP6cifxv3P6S4a6 kUnGvWN+SE8mMVTfAs49n+FXXEcbH6eaDu2yKY3JtTLX0BRSW8ubE5+MDbXgkCrd 5KWxtT6UVZ4CwPgEP+6sgo0BeAXkRJc= -----END CERTIFICATE-----Generated at Tue Jul 21 18:20:25 2026 by rpki-client