$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa File: 595fb046-9295-368f-8ffc-2a8deebe67e8.roa (raw, json) Hash identifier: L6GFDBklC3Q2x3fHURklSEsiNhyUoCetlcDtpcmykoI= Subject key identifier: 66:04:16:FF:CB:B1:13:78:70:18:F5:26:DC:39:14:36:43:EE:FC:50 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EF182008E85396CCE07646780 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 12189 IP address blocks: 131.153.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:00:8e:85:39:6c:ce:07:64:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=3eafc3ec-36ca-42bc-ad5c-bcfaff06b3f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:de:b1:be:3b:c8:04:62:9e:e9:32:3a:03:36: 36:76:ee:0c:e1:57:8f:9f:ee:2c:c9:f6:aa:88:76: 67:ba:10:f1:d4:2f:a0:67:ea:bd:15:92:42:75:ae: b9:1c:3a:b6:f3:f5:8b:82:11:c4:17:ba:64:46:84: ef:c3:f0:e8:13:6a:70:43:1e:ef:32:34:28:65:06: 42:6a:c6:d6:25:a2:0b:b4:5c:75:a4:79:f8:d6:94: b7:cd:25:06:79:52:7c:3b:89:38:d2:3a:96:56:ad: 50:de:00:73:fb:60:e9:4c:ab:7e:c6:bd:e5:2e:b5: 77:ca:6e:4e:3b:39:52:09:43:de:06:ef:68:04:73: 4b:42:1f:d0:4d:56:d9:d5:1f:41:8a:05:de:6b:0e: ab:16:51:19:86:1d:f9:75:b6:38:d4:dc:65:39:1c: f1:98:3e:ed:0a:0e:98:01:c1:78:3e:72:9f:ef:45: 2c:ea:f2:ec:34:dd:39:c0:89:c9:e6:b2:d9:52:2b: 16:96:f6:cb:c7:f0:d0:2a:3a:1e:53:30:56:7b:9c: fb:63:2b:6a:f6:6d:4a:59:db:77:08:b2:be:d6:d2: d9:9e:52:d3:e0:0e:1e:3f:6c:93:ee:1d:cf:aa:fc: 2f:4d:fb:b6:c8:d5:c3:d8:3a:f3:b5:05:cd:63:6b: 58:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:04:16:FF:CB:B1:13:78:70:18:F5:26:DC:39:14:36:43:EE:FC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bd:86:66:4a:60:cc:95:42:dc:22:c2:f7:0c:6d:6d:9e:18: 1d:08:28:65:d0:50:14:b7:dc:6b:bc:d7:46:f1:4d:9a:0e:35: da:74:a7:e2:82:98:e4:2a:57:6e:40:70:90:4c:79:6a:a1:85: 83:52:64:16:2f:03:4d:f0:f2:97:25:9e:b7:7c:53:25:a6:d6: cd:ea:9f:43:e6:57:4e:42:0d:4d:05:d8:37:b6:bb:20:36:ac: 4a:85:a2:6d:ad:5a:c9:82:e7:d9:9b:09:26:40:05:94:a8:72: da:1d:df:a8:9f:c6:2a:0c:4a:bd:08:03:51:32:e1:10:7d:e4: 95:08:b3:d7:43:fb:e4:37:0d:5c:11:bc:6a:46:62:8f:90:f3: a2:3c:2c:49:b8:d9:5f:be:ef:58:dd:c6:93:36:bb:39:bc:1e: 1d:92:d3:e2:35:62:22:fe:89:80:a9:48:12:00:6b:8f:97:7d: dd:74:bb:e1:de:69:c5:f9:16:90:01:4d:26:4f:5d:d1:aa:a6: 2a:7e:34:8b:e2:a5:85:55:5a:d2:32:33:7f:f5:da:1d:4a:7e: 65:f5:f7:0c:fe:88:90:7f:0e:69:eb:1e:25:55:80:75:58:d4: fc:47:bf:38:ca:ca:65:bd:6d:de:c6:c4:ca:ce:68:df:0c:81: 3b:3f:5a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggCOhTlszgdkZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk M2VhZmMzZWMtMzZjYS00MmJjLWFkNWMtYmNmYWZmMDZiM2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt6xvjvIBGKe6TI6AzY2du4M4VePn+4syfaq iHZnuhDx1C+gZ+q9FZJCda65HDq28/WLghHEF7pkRoTvw/DoE2pwQx7vMjQoZQZC asbWJaILtFx1pHn41pS3zSUGeVJ8O4k40jqWVq1Q3gBz+2DpTKt+xr3lLrV3ym5O OzlSCUPeBu9oBHNLQh/QTVbZ1R9BigXeaw6rFlEZhh35dbY41NxlORzxmD7tCg6Y AcF4PnKf70Us6vLsNN05wInJ5rLZUisWlvbLx/DQKjoeUzBWe5z7Yytq9m1KWdt3 CLK+1tLZnlLT4A4eP2yT7h3PqvwvTfu2yNXD2DrztQXNY2tYIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYEFv/LsRN4cBj1Jtw5FDZD7vxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTk1ZmIwNDYtOTI5NS0z NjhmLThmZmMtMmE4ZGVlYmU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa9hmZKYMyVQtwiwvcMbW2eGB0IKGXQUBS33Gu810bxTZoONdp0p+KC mOQqV25AcJBMeWqhhYNSZBYvA03w8pclnrd8UyWm1s3qn0PmV05CDU0F2De2uyA2 rEqFom2tWsmC59mbCSZABZSoctod36ifxioMSr0IA1Ey4RB95JUIs9dD++Q3DVwR vGpGYo+Q86I8LEm42V++71jdxpM2uzm8Hh2S0+I1YiL+iYCpSBIAa4+Xfd10u+He acX5FpABTSZPXdGqpip+NIvipYVVWtIyM3/12h1KfmX19wz+iJB/DmnrHiVVgHVY 1PxHvzjKymW9bd7GxMrOaN8MgTs/WuM= -----END CERTIFICATE-----Generated at Sat Sep 5 06:47:58 2026 by rpki-client