$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa File: 53f05558-bdf3-3584-84db-3b70198450f8.roa (raw, json) Hash identifier: Sz6VtKV2iDLuzkaPiyg0yoU+zaFXOhOtsEQYf7rxJRU= Subject key identifier: F1:1A:FA:5C:1D:77:43:C9:C0:52:E9:94:3F:91:EA:E0:7D:B4:C0:E4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E54B496E2576A4F47EAF99480 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 131.153.240.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:96:e2:57:6a:4f:47:ea:f9:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=0de7fd7d-cdcc-4d65-b5c9-79f0ff9ea29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:28:3a:28:37:d9:f5:cd:b3:f8:ab:48:43:ea: be:4b:e6:d0:64:a4:97:04:45:0c:c6:6d:61:78:4b: e2:a2:53:2d:16:a4:7d:1a:52:60:30:57:96:70:93: 27:f5:2b:0a:96:1f:ee:ac:c4:b9:56:f9:59:31:bc: 9c:5f:af:31:57:03:7b:b2:c1:c2:48:a8:28:10:7e: b7:9c:00:26:d8:5f:75:cf:2f:5c:d1:e5:21:21:ec: 40:76:82:a5:ce:9d:e3:72:b4:e9:55:df:ff:c7:14: 12:b4:12:09:c9:90:b6:a3:10:f7:51:5e:66:d1:e7: 41:73:b5:f2:65:b6:18:81:ba:05:18:7d:c4:41:e4: 56:71:fc:14:fb:2b:63:79:d3:1c:fb:73:b8:d0:29: 11:cc:bd:c7:ef:e7:e9:e3:dd:3d:df:12:6e:a1:7f: 0b:fc:e5:16:0d:74:84:06:8c:72:e1:b8:dc:2a:f1: 17:2a:10:db:96:7c:77:77:30:b2:d5:d1:a0:1d:cb: 28:18:2b:0a:32:8d:93:e4:d7:ee:3d:09:4a:c9:6d: 46:b9:f2:5c:78:36:65:db:61:ff:45:80:de:c6:bb: af:01:f1:3b:ab:5f:0d:b4:25:78:fe:51:d7:3f:cf: 69:50:64:61:57:16:65:8e:ef:ca:a2:f6:72:54:6d: 74:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:1A:FA:5C:1D:77:43:C9:C0:52:E9:94:3F:91:EA:E0:7D:B4:C0:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/53f05558-bdf3-3584-84db-3b70198450f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:15:6c:83:af:85:a2:c4:4a:78:bc:75:d0:29:f8:18:51:4b: 10:9d:2b:d9:a3:23:6b:c4:6a:c7:96:c3:7e:b0:a1:f1:2e:e2: a6:89:47:ff:57:12:20:13:ff:b0:13:31:2e:80:53:74:61:91: ca:30:c1:11:96:4d:df:b2:1c:05:46:01:98:bf:c5:87:90:de: e7:9d:22:7a:43:2d:79:84:4e:4c:bc:37:06:e3:45:16:7b:95: 72:be:f2:85:74:57:58:09:c4:22:8d:23:fb:f6:e8:3d:55:ef: 64:f8:27:49:48:7b:8f:99:ba:eb:c7:4b:f2:7f:a9:0e:ce:99: 36:30:44:19:a5:e2:3a:52:74:bf:07:f5:70:b3:c8:3e:9a:9f: 9a:64:ce:ea:e4:02:3a:34:65:5a:4f:5b:3a:03:25:32:c0:58: 26:4c:4b:37:1b:3c:b6:2d:f0:69:0f:37:0a:16:72:af:d2:d4: 52:5d:07:b2:36:62:0b:22:af:37:f6:e0:0a:91:0c:6d:84:2b: 01:15:76:41:cc:9f:63:c4:46:3f:5d:cb:18:3c:f1:3c:50:91: 99:be:d9:68:09:0e:77:91:99:41:af:85:c8:1d:03:02:e0:00: 13:34:c2:67:46:d4:c1:97:03:7b:b1:7a:e9:02:cb:83:e2:c6: 60:9a:fe:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJbiV2pPR+r5lIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk MGRlN2ZkN2QtY2RjYy00ZDY1LWI1YzktNzlmMGZmOWVhMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSg6KDfZ9c2z+KtIQ+q+S+bQZKSXBEUMxm1h eEviolMtFqR9GlJgMFeWcJMn9SsKlh/urMS5VvlZMbycX68xVwN7ssHCSKgoEH63 nAAm2F91zy9c0eUhIexAdoKlzp3jcrTpVd//xxQStBIJyZC2oxD3UV5m0edBc7Xy ZbYYgboFGH3EQeRWcfwU+ytjedMc+3O40CkRzL3H7+fp49093xJuoX8L/OUWDXSE Boxy4bjcKvEXKhDblnx3dzCy1dGgHcsoGCsKMo2T5NfuPQlKyW1GufJceDZl22H/ RYDexruvAfE7q18NtCV4/lHXP89pUGRhVxZlju/KovZyVG10bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEa+lwdd0PJwFLplD+R6uB9tMDkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTNmMDU1NTgtYmRmMy0z NTg0LTg0ZGItM2I3MDE5ODQ1MGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsVbIOvhaLESni8ddAp+BhRSxCdK9mjI2vEaseWw36wofEu4qaJR/9X EiAT/7ATMS6AU3RhkcowwRGWTd+yHAVGAZi/xYeQ3uedInpDLXmETky8NwbjRRZ7 lXK+8oV0V1gJxCKNI/v26D1V72T4J0lIe4+ZuuvHS/J/qQ7OmTYwRBml4jpSdL8H 9XCzyD6an5pkzurkAjo0ZVpPWzoDJTLAWCZMSzcbPLYt8GkPNwoWcq/S1FJdB7I2 Ygsirzf24AqRDG2EKwEVdkHMn2PERj9dyxg88TxQkZm+2WgJDneRmUGvhcgdAwLg ABM0wmdG1MGXA3uxeukCy4PixmCa/mY= -----END CERTIFICATE-----Generated at Tue Jul 21 18:21:11 2026 by rpki-client