$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa File: 69872d89-79da-3819-8185-7de21929d884.roa (raw, json) Hash identifier: +guQ2u4y0ymzuJ9lN8A4/NAM3+qbHzQi58e0Q1gAAu8= Subject key identifier: 75:93:75:02:14:7C:E8:7F:6F:89:3D:6E:91:D8:77:B8:C5:33:52:DC Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E7204D2B75B2B43D769369300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 19437 IP address blocks: 131.153.238.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:d2:b7:5b:2b:43:d7:69:36:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=a22a3345-e83e-4403-9868-08d0f1e3f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ec:b9:dd:cd:19:1f:10:82:55:54:23:fc:56: 98:00:54:f9:87:1e:c9:e1:d4:52:c6:51:1e:c3:1e: b5:63:17:23:14:e8:fd:e8:d1:eb:90:6b:c3:c7:3f: 4e:db:21:3c:80:8f:4c:d5:cf:2d:3a:27:0c:e9:d3: 68:8a:6e:7c:15:16:de:6f:a5:76:b3:ec:5a:59:bd: ff:e1:32:82:3d:17:13:61:68:7d:3b:5b:d8:a7:fc: 67:ec:97:25:96:3d:e1:01:11:74:ef:db:96:01:61: ae:d7:a3:0b:f5:ec:f8:e8:59:8e:61:5e:0a:15:0b: 15:27:1b:47:a4:dd:4d:2d:b2:74:f8:45:be:96:38: 0a:30:2e:28:95:a9:20:fe:33:48:89:5b:f0:c3:1f: 90:85:b1:56:7e:4c:be:25:1b:13:f5:e8:9d:5f:2e: 3b:81:95:44:71:a8:fb:c5:18:e1:8e:f3:bd:b2:1a: e7:ad:3e:c6:ad:b6:86:b3:75:bc:46:39:5b:31:8f: 4c:4c:7a:b1:2b:17:08:38:9e:9c:ae:7a:5b:d0:e3: 08:75:c6:18:18:3a:45:e0:75:63:e4:74:3e:01:78: 55:42:a6:f7:c0:e4:2b:9f:12:9b:eb:d8:5e:bd:8e: 2b:81:ec:56:74:a3:08:fc:2a:24:7f:2b:8a:8e:90: 7a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:93:75:02:14:7C:E8:7F:6F:89:3D:6E:91:D8:77:B8:C5:33:52:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/69872d89-79da-3819-8185-7de21929d884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:62:a6:b2:94:9e:d1:ae:72:e2:33:a8:0b:bc:4f:20:10:7d: 06:a8:31:6e:76:b1:31:8f:57:14:6b:5c:6b:e7:e9:5c:45:27: e3:10:30:f0:07:47:06:dd:40:39:35:e7:bf:5d:94:aa:ac:0e: 14:3c:47:0b:94:69:a3:2c:aa:ea:fa:f1:9a:6c:0a:23:a7:96: 9e:d6:1d:35:86:6e:57:f1:07:d9:d4:63:cd:9c:df:4f:69:ae: 72:00:2b:34:05:f0:42:74:86:2b:66:4c:6d:aa:9f:c9:e9:02: 70:b8:de:6b:ad:9a:0c:78:9c:55:42:bf:da:33:a8:4b:c8:5d: 83:39:ef:c4:cf:b4:a5:02:46:88:45:3c:c8:db:fa:63:6c:00: f5:8d:38:0e:72:52:bc:9e:cd:86:e3:59:70:19:36:20:0e:c7: 4f:cb:5c:17:4a:8b:86:62:08:63:06:95:ca:1c:ea:77:7c:59: 08:4d:a4:4a:1b:89:4b:e2:4d:bf:5a:52:38:1e:c3:d5:d6:21: 8f:86:03:a6:ef:49:4b:5f:3d:53:8d:b1:45:fb:52:9a:1d:92: ef:94:4a:e2:54:aa:59:3f:a1:46:63:09:d9:d4:fc:15:6a:b8: ac:e8:d9:4c:a1:36:60:a4:d7:67:f1:06:f6:79:d9:34:ac:b8: d4:e7:2e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBNK3WytD12k2kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk YTIyYTMzNDUtZTgzZS00NDAzLTk4NjgtMDhkMGYxZTNmNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOy53c0ZHxCCVVQj/FaYAFT5hx7J4dRSxlEe wx61YxcjFOj96NHrkGvDxz9O2yE8gI9M1c8tOicM6dNoim58FRbeb6V2s+xaWb3/ 4TKCPRcTYWh9O1vYp/xn7Jcllj3hARF079uWAWGu16ML9ez46FmOYV4KFQsVJxtH pN1NLbJ0+EW+ljgKMC4olakg/jNIiVvwwx+QhbFWfky+JRsT9eidXy47gZVEcaj7 xRjhjvO9shrnrT7GrbaGs3W8RjlbMY9MTHqxKxcIOJ6crnpb0OMIdcYYGDpF4HVj 5HQ+AXhVQqb3wOQrnxKb69hevY4rgexWdKMI/CokfyuKjpB6awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWTdQIUfOh/b4k9bpHYd7jFM1LcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjk4NzJkODktNzlkYS0z ODE5LTgxODUtN2RlMjE5MjlkODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFiprKUntGucuIzqAu8TyAQfQaoMW52sTGPVxRrXGvn6VxFJ+MQMPAH RwbdQDk1579dlKqsDhQ8RwuUaaMsqur68ZpsCiOnlp7WHTWGblfxB9nUY82c309p rnIAKzQF8EJ0hitmTG2qn8npAnC43mutmgx4nFVCv9ozqEvIXYM578TPtKUCRohF PMjb+mNsAPWNOA5yUryezYbjWXAZNiAOx0/LXBdKi4ZiCGMGlcoc6nd8WQhNpEob iUviTb9aUjgew9XWIY+GA6bvSUtfPVONsUX7Upodku+USuJUqlk/oUZjCdnU/BVq uKzo2UyhNmCk12fxBvZ52TSsuNTnLnI= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:42 2026 by rpki-client