$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa File: 592675de-1b35-3401-9682-044785d5e65a.roa (raw, json) Hash identifier: S/i9DpeMYZnHIWvZtx6VQpF4qp4axg6x/6p5BdALy5k= Subject key identifier: DE:5E:22:BE:25:CC:C8:6D:28:58:6E:78:F2:CD:0A:62:7C:03:E4:10 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E50848EB6CDD0525F0CE2E220 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 46385 IP address blocks: 131.153.165.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:8e:b6:cd:d0:52:5f:0c:e2:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=a1388de7-7b2b-48ce-95e6-94d98d084896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:67:bd:17:31:e9:cf:7b:a1:4e:48:b0:74:8b: 35:57:c8:e5:43:3b:dd:db:ba:50:83:48:f9:c9:9a: 6a:09:61:d2:55:3e:05:34:6f:d2:13:d6:fe:0b:f9: 52:49:c7:91:b5:b6:93:1f:1d:05:59:f9:2f:68:90: 43:e9:5b:6e:fa:34:e2:32:c6:f0:14:c2:78:63:54: cf:6b:6e:54:72:e9:15:c4:c6:31:b9:52:16:87:2c: cd:0f:1b:78:7c:99:fd:f9:24:81:64:b7:d0:9a:a0: 1d:78:7b:81:be:d4:dc:be:1b:82:fe:04:4e:80:f7: 6c:d5:ec:70:a0:e8:0e:b4:00:d5:4c:24:5a:f4:d1: 51:8e:09:cf:b2:34:a4:bd:a9:89:d6:07:0f:2c:36: d5:48:a1:6a:79:a4:8c:39:be:d8:7c:76:45:e2:e2: f9:a8:e4:97:57:29:fa:14:99:ca:fa:50:de:1c:b2: d6:95:4f:9d:25:46:06:28:20:2f:d6:13:74:bb:cb: 69:4f:03:0e:10:52:f6:49:e6:18:ce:24:bc:43:a0: a8:f6:7a:1d:44:06:6d:c8:64:51:4e:ad:ed:cb:d3: 0a:1c:14:34:de:13:3a:8e:dc:0f:03:32:78:72:c0: 84:be:7a:24:7c:6c:f7:85:17:a3:97:13:fc:e2:8b: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5E:22:BE:25:CC:C8:6D:28:58:6E:78:F2:CD:0A:62:7C:03:E4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/592675de-1b35-3401-9682-044785d5e65a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:74:c0:8c:ee:1f:14:82:36:37:95:d5:2c:a0:1b:8f:b6:fd: 39:ea:13:ad:3a:42:80:4c:bd:96:8b:84:f1:96:01:bc:f3:ef: e1:85:d0:a1:ca:31:4c:88:54:54:7b:ab:81:91:46:52:7b:38: 3f:17:c8:64:b3:a3:e3:0b:3c:0d:7a:77:16:56:bb:56:79:42: 8c:91:93:fa:9a:2c:5e:50:27:41:91:89:ed:ef:ee:4d:e5:43: c9:83:3f:9e:02:8b:c0:f6:0c:17:6d:d2:dd:a0:1d:33:92:2a: 72:54:74:2c:c4:68:ff:40:46:6b:d8:f7:73:79:b2:f0:be:89: 67:f7:1e:1f:81:5f:b7:01:ed:9b:69:cf:7d:0f:cd:4a:6c:3a: 07:7c:cf:17:7a:27:7c:e5:63:25:f3:92:59:cd:8d:cf:e7:37: 70:15:49:0a:43:14:cf:63:d9:b1:00:16:a7:59:fd:f3:0a:37: e4:d7:9a:ba:19:04:df:de:5d:4e:07:34:53:df:0a:30:6b:e0: 08:5d:52:00:17:a4:ad:cc:d1:3b:44:e0:13:e4:f7:ff:7c:b7: f9:69:8e:28:4b:af:a5:9c:82:79:2b:75:2e:75:03:0f:9f:20: 87:3b:0c:fa:44:d5:33:1f:d9:f7:81:06:02:08:aa:1f:8f:11: 77:3f:85:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhI62zdBSXwzi4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk YTEzODhkZTctN2IyYi00OGNlLTk1ZTYtOTRkOThkMDg0ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWe9FzHpz3uhTkiwdIs1V8jlQzvd27pQg0j5 yZpqCWHSVT4FNG/SE9b+C/lSSceRtbaTHx0FWfkvaJBD6Vtu+jTiMsbwFMJ4Y1TP a25UcukVxMYxuVIWhyzNDxt4fJn9+SSBZLfQmqAdeHuBvtTcvhuC/gROgPds1exw oOgOtADVTCRa9NFRjgnPsjSkvamJ1gcPLDbVSKFqeaSMOb7YfHZF4uL5qOSXVyn6 FJnK+lDeHLLWlU+dJUYGKCAv1hN0u8tpTwMOEFL2SeYYziS8Q6Co9nodRAZtyGRR Tq3ty9MKHBQ03hM6jtwPAzJ4csCEvnokfGz3hRejlxP84osrWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5eIr4lzMhtKFhuePLNCmJ8A+QQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTkyNjc1ZGUtMWIzNS0z NDAxLTk2ODItMDQ0Nzg1ZDVlNjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABV0wIzuHxSCNjeV1SygG4+2/TnqE606QoBMvZaLhPGWAbzz7+GF0KHK MUyIVFR7q4GRRlJ7OD8XyGSzo+MLPA16dxZWu1Z5QoyRk/qaLF5QJ0GRie3v7k3l Q8mDP54Ci8D2DBdt0t2gHTOSKnJUdCzEaP9ARmvY93N5svC+iWf3Hh+BX7cB7Ztp z30PzUpsOgd8zxd6J3zlYyXzklnNjc/nN3AVSQpDFM9j2bEAFqdZ/fMKN+TXmroZ BN/eXU4HNFPfCjBr4AhdUgAXpK3M0TtE4BPk9/98t/lpjihLr6WcgnkrdS51Aw+f IIc7DPpE1TMf2feBBgIIqh+PEXc/hRA= -----END CERTIFICATE-----Generated at Wed Jul 1 21:50:41 2026 by rpki-client