$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa File: 595fb046-9295-368f-8ffc-2a8deebe67e8.roa (raw, json) Hash identifier: s1OBFSWuToSr46OxAoPf16NvWPjWG0F+a9eCP0Vt6p8= Subject key identifier: 38:D9:B5:EA:75:D9:DC:79:8C:43:D6:51:8E:EB:28:D9:B7:1B:2A:C4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D305AE4E25CA6318277B00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 12189 IP address blocks: 131.153.108.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:05:ae:4e:25:ca:63:18:27:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=63738d65-d06e-4fb5-b054-a5c5fc52ff86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8d:4b:ea:5c:fa:2c:01:d0:61:e8:ea:e9:c0: b6:1c:7e:49:b2:e9:cc:3a:b1:d9:42:31:53:df:26: 33:97:57:e7:0f:f1:b5:69:cd:5f:00:63:aa:9b:07: 3a:b7:06:97:26:77:da:0b:31:58:c2:28:fe:2f:2b: 39:f7:a4:de:56:60:21:53:b7:01:c3:1d:28:fc:ba: b8:a2:1d:8b:32:80:08:a8:e1:ab:34:14:11:f2:ae: 20:09:2a:f1:3d:4d:07:0d:dc:f2:38:56:42:11:dd: fb:a7:58:46:fc:9a:31:86:85:86:31:54:0d:5a:c3: 6d:42:98:10:24:64:e2:71:49:c3:1e:a0:cf:34:1f: 22:62:de:2f:7f:1c:58:90:88:81:71:f0:89:71:e0: 53:e3:6b:80:db:fc:02:ba:10:16:6e:e2:a3:74:a4: b1:80:0e:a6:2e:fa:39:6b:c0:cc:a3:ea:66:7a:56: bf:81:d1:82:fe:bd:5a:fb:ce:bd:79:d2:9a:16:7d: 5d:9c:8b:2d:fd:86:03:4e:d9:6e:26:fa:f0:e2:5d: 77:dd:51:0e:f3:29:81:01:a4:dd:a6:b4:c2:ca:13: 19:43:ce:2f:d7:59:b5:5f:16:1e:f7:ea:54:b7:46: 14:ee:d0:07:d8:ca:9f:72:7a:59:2f:64:b8:dd:db: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:B5:EA:75:D9:DC:79:8C:43:D6:51:8E:EB:28:D9:B7:1B:2A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/595fb046-9295-368f-8ffc-2a8deebe67e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4f:37:2e:0f:4b:d1:97:04:47:d2:31:7c:c6:33:08:45:51: f7:17:05:61:8e:50:51:b0:f9:d6:65:16:ea:62:f6:66:c1:f9: a4:51:e0:7e:18:d2:c8:f8:4b:54:b1:c7:a2:27:f6:01:68:23: 43:95:69:b9:53:ea:21:d4:34:3f:0d:c5:02:40:2b:a4:b1:6f: 41:94:23:53:b0:9a:e4:31:da:54:27:75:79:ed:ef:38:88:10: 4f:8b:5b:e5:c4:c6:6b:a1:f9:4e:d6:51:6c:d7:0d:b8:02:6a: 29:84:a5:1d:0a:55:71:6d:87:13:2c:f1:20:1d:f6:f1:11:3b: af:a9:9f:0d:44:ac:18:5f:4f:86:7f:49:09:23:1e:b4:85:ab: cf:be:0a:f2:1a:0b:8b:6a:b1:30:45:cc:c8:2c:b9:61:16:01: 49:6e:84:f1:20:fa:99:a0:26:26:fc:64:63:f8:b0:38:2e:1b: ea:19:2b:af:c7:8a:ff:e3:b2:76:bd:31:a6:d0:c4:48:a5:84: 7b:33:e0:62:ef:f2:45:0c:b4:0b:2b:6b:63:11:fc:7b:2c:58: 28:d6:44:17:de:10:5b:96:e8:0e:60:85:1e:25:19:74:9c:3b: a3:01:a3:77:b4:71:2e:57:cb:31:45:85:4d:82:2d:63:f9:29: ea:ae:4f:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wWuTiXKYxgnewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NjM3MzhkNjUtZDA2ZS00ZmI1LWIwNTQtYTVjNWZjNTJmZjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl41L6lz6LAHQYejq6cC2HH5JsunMOrHZQjFT 3yYzl1fnD/G1ac1fAGOqmwc6twaXJnfaCzFYwij+Lys596TeVmAhU7cBwx0o/Lq4 oh2LMoAIqOGrNBQR8q4gCSrxPU0HDdzyOFZCEd37p1hG/JoxhoWGMVQNWsNtQpgQ JGTicUnDHqDPNB8iYt4vfxxYkIiBcfCJceBT42uA2/wCuhAWbuKjdKSxgA6mLvo5 a8DMo+pmela/gdGC/r1a+869edKaFn1dnIst/YYDTtluJvrw4l133VEO8ymBAaTd prTCyhMZQ84v11m1XxYe9+pUt0YU7tAH2MqfcnpZL2S43ds7nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjZtep12dx5jEPWUY7rKNm3GyrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTk1ZmIwNDYtOTI5NS0z NjhmLThmZmMtMmE4ZGVlYmU2N2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhPNy4PS9GXBEfSMXzGMwhFUfcXBWGOUFGw+dZlFupi9mbB+aRR4H4Y 0sj4S1Sxx6In9gFoI0OVablT6iHUND8NxQJAK6Sxb0GUI1OwmuQx2lQndXnt7ziI EE+LW+XExmuh+U7WUWzXDbgCaimEpR0KVXFthxMs8SAd9vERO6+pnw1ErBhfT4Z/ SQkjHrSFq8++CvIaC4tqsTBFzMgsuWEWAUluhPEg+pmgJib8ZGP4sDguG+oZK6/H iv/jsna9MabQxEilhHsz4GLv8kUMtAsra2MR/HssWCjWRBfeEFuW6A5ghR4lGXSc O6MBo3e0cS5XyzFFhU2CLWP5KequTxU= -----END CERTIFICATE-----Generated at Sun Oct 25 21:58:20 2026 by rpki-client