$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa File: 4fe59b19-c5ad-3d24-8706-946768c99623.roa (raw, json) Hash identifier: PEVgR2uknoH3du8Q8IEKkBllssgoVbanQQdD7Jx1VIE= Subject key identifier: 98:46:54:93:09:0D:79:95:E5:62:7A:8C:25:D3:8D:47:F4:4B:30:E9 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E4F1F3739CAD55202F1690440 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 209485 IP address blocks: 131.153.117.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:37:39:ca:d5:52:02:f1:69:04:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=cb4e91e6-21c9-4432-9872-008547814989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6b:63:13:b5:0b:b8:e1:b9:de:9d:0f:1e:d1: c7:bf:1e:61:6a:cb:89:8a:b1:fc:6d:c7:c0:b1:b8: ea:5d:ed:03:f2:93:04:45:27:92:d6:12:f2:86:15: 0f:50:42:a5:7c:7b:bc:bf:ea:6a:eb:67:ea:46:b6: a5:6d:91:82:95:80:76:40:53:61:79:b9:81:d3:4b: 1d:3e:08:9d:9f:1b:37:df:c9:49:c7:60:7d:a2:c2: 4e:3a:f1:3a:ff:fe:74:ec:7f:16:b6:79:e4:fd:2b: 53:cd:17:e5:65:93:4f:13:8f:0c:ed:3c:6b:2d:98: 6c:bc:57:36:5f:2f:73:f5:d6:87:56:8e:d6:b5:9d: df:44:05:63:5d:b3:ad:a9:f1:16:90:91:f5:7e:1a: 30:33:24:25:98:c5:62:e6:19:15:f7:b5:52:3a:87: fe:ab:ae:c4:43:e0:86:9f:ee:52:7c:56:d8:1d:34: b3:d0:22:88:78:29:90:53:95:f0:79:a9:25:e2:4a: c6:9b:65:f1:54:32:ac:d0:a7:29:23:12:0f:83:b7: 36:77:94:12:7e:29:fa:67:e6:6b:4d:11:27:3b:75: a1:74:9e:29:aa:9c:25:60:1c:16:e4:ef:19:6f:57: fd:9b:09:b2:d0:f7:33:ec:5a:00:c3:63:e8:f6:b7: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:46:54:93:09:0D:79:95:E5:62:7A:8C:25:D3:8D:47:F4:4B:30:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/4fe59b19-c5ad-3d24-8706-946768c99623.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:bc:11:4c:9e:a6:a0:9a:88:0a:72:7a:93:54:a3:3a:54:87: 72:3e:b6:a8:5d:cb:2e:5c:d3:0a:cd:1d:8b:e2:4c:09:9a:e5: c5:4c:e1:ca:be:28:13:ca:87:f9:0f:a1:42:c8:1f:02:c8:83: 5d:ee:f4:63:95:48:35:d7:12:6d:c0:c8:b2:49:09:1a:72:73: 0b:f0:6b:34:df:74:51:32:76:fb:6b:b5:76:f9:76:aa:09:b5: 2f:7f:55:cc:71:2b:0c:5a:32:d5:88:db:51:12:06:83:16:69: b9:a1:8c:0f:3b:c9:c3:26:e7:53:3c:b9:a2:1d:d2:64:46:c1: 1c:b6:29:89:62:09:1d:c7:1b:01:e6:05:5a:c4:ae:a7:82:68: 36:dd:f7:e6:6a:0e:d8:6f:a9:b4:19:28:7e:68:ac:d0:28:c4: e3:9b:cd:84:33:1e:e8:c3:f5:2b:e9:70:20:a3:2c:43:72:4d: 66:bb:c0:aa:23:a9:ce:8e:ec:3f:28:b0:ad:dd:b6:e6:22:30: 66:cf:71:7e:05:9f:6e:7d:02:56:ca:dd:3c:88:4d:8e:84:fa: 81:6a:71:da:99:24:a0:68:fc:70:69:9c:e8:b2:c8:99:ce:d5: 5c:ff:0b:bd:f8:f0:34:02:d7:f5:41:ce:db:ad:2c:20:04:3a: d2:8a:27:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzc5ytVSAvFpBEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk Y2I0ZTkxZTYtMjFjOS00NDMyLTk4NzItMDA4NTQ3ODE0OTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWtjE7ULuOG53p0PHtHHvx5hasuJirH8bcfA sbjqXe0D8pMERSeS1hLyhhUPUEKlfHu8v+pq62fqRralbZGClYB2QFNhebmB00sd Pgidnxs338lJx2B9osJOOvE6//507H8Wtnnk/StTzRflZZNPE48M7TxrLZhsvFc2 Xy9z9daHVo7WtZ3fRAVjXbOtqfEWkJH1fhowMyQlmMVi5hkV97VSOof+q67EQ+CG n+5SfFbYHTSz0CKIeCmQU5Xweakl4krGm2XxVDKs0KcpIxIPg7c2d5QSfin6Z+Zr TREnO3WhdJ4pqpwlYBwW5O8Zb1f9mwmy0Pcz7FoAw2Po9resBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhGVJMJDXmV5WJ6jCXTjUf0SzDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNGZlNTliMTktYzVhZC0z ZDI0LTg3MDYtOTQ2NzY4Yzk5NjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5l1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC8EUyepqCaiApyepNUozpUh3I+tqhdyy5c0wrNHYviTAma5cVM4cq+ KBPKh/kPoULIHwLIg13u9GOVSDXXEm3AyLJJCRpycwvwazTfdFEydvtrtXb5dqoJ tS9/VcxxKwxaMtWI21ESBoMWabmhjA87ycMm51M8uaId0mRGwRy2KYliCR3HGwHm BVrErqeCaDbd9+ZqDthvqbQZKH5orNAoxOObzYQzHujD9SvpcCCjLENyTWa7wKoj qc6O7D8osK3dtuYiMGbPcX4Fn259AlbK3TyITY6E+oFqcdqZJKBo/HBpnOiyyJnO 1Vz/C7348DQC1/VBztutLCAEOtKKJyo= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:42 2026 by rpki-client