$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa File: 7af57255-95e9-35f8-a3b4-964cc0e6608e.roa (raw, json) Hash identifier: SxpGiAYoVPfAmb4fmhtEqH6ewzjq+GosW/5wFM4sg3s= Subject key identifier: 4D:F9:15:9A:5D:74:21:71:20:EF:46:2C:0D:B0:60:67:83:9F:65:86 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E50848EFBB2F9C9B97B895380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 12189 IP address blocks: 131.153.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:8e:fb:b2:f9:c9:b9:7b:89:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=0b9d0ceb-e532-415e-8c95-38ac30fba6ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a3:01:da:64:96:57:ad:9c:9f:00:a2:88:f8: a5:f3:16:85:bd:c6:d4:9c:89:d4:23:8d:6d:ce:a9: 18:35:ca:29:ec:bd:df:cd:b5:80:1c:8f:e7:90:c4: 60:9d:ef:03:f2:71:91:38:dd:0b:35:35:96:58:c4: 93:01:49:35:ae:33:73:32:7b:9b:45:85:5e:4d:8e: c2:99:c1:4a:e5:99:c7:bd:88:40:53:63:43:03:54: 29:a9:09:40:f3:04:53:a3:c2:09:dc:76:f7:10:b6: c9:8a:1a:44:fb:2f:07:c7:e5:dc:54:e2:31:8d:28: dd:49:95:70:90:57:3a:df:52:b4:9e:54:f1:3e:16: 75:72:fe:86:86:99:5b:3b:9f:17:cb:42:25:78:e4: d0:32:67:f3:6c:28:7d:38:22:5c:3e:f5:aa:45:08: 8a:57:6d:34:e1:0d:31:6f:f2:18:b0:c6:ae:e5:79: f0:a4:db:fe:bd:e4:9a:eb:50:8a:7c:d5:6b:5f:c8: c1:47:52:69:b0:72:d4:3f:d0:47:f0:20:13:09:d0: 1f:84:aa:da:1f:d6:44:cb:ec:70:ed:f2:3e:25:0c: 7a:79:d9:19:da:08:cc:52:43:fe:35:0f:87:46:22: ca:8d:3d:98:5b:72:ab:ca:66:90:15:af:96:26:2a: 63:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:F9:15:9A:5D:74:21:71:20:EF:46:2C:0D:B0:60:67:83:9F:65:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/7af57255-95e9-35f8-a3b4-964cc0e6608e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:64:20:0c:a8:7e:2d:37:37:11:e5:c2:8f:f7:d8:5c:f0:4f: c8:3c:c7:24:b7:df:c3:6b:73:24:c5:0c:60:54:6b:75:03:f0: 64:92:8d:cd:9f:bb:bf:87:ac:3c:e0:09:cb:ab:3b:ce:0a:bc: 75:ef:48:4b:51:a3:f3:46:ea:13:92:87:3d:79:ef:ee:80:49: ff:ca:50:02:31:90:1d:c9:48:32:10:4a:e1:7c:12:20:aa:1b: 36:84:b0:07:48:90:c6:e0:c4:d4:6d:1b:f3:37:f1:34:bb:08: 8a:b4:5e:f4:a8:80:e3:1e:7c:aa:58:df:07:4f:60:e6:51:37: cb:54:b7:c3:df:75:34:4b:5a:c8:cd:8c:64:28:44:55:6d:bc: 09:1e:f6:1e:46:ef:bc:74:89:50:4f:fe:5d:58:fe:a3:6c:35: 28:e3:dd:0d:05:93:69:b6:e4:af:f2:73:b8:d7:f3:92:4e:96: 09:77:e7:64:59:17:e4:e4:18:04:2c:29:cb:c2:0c:f3:34:86: ce:7b:41:af:23:10:3c:53:79:90:b4:31:bb:b3:28:3e:89:d1: 24:93:d7:7e:61:c2:40:0f:80:1a:0e:25:7b:87:ba:72:4c:a3: a5:05:81:36:4e:12:72:75:eb:79:d8:a3:bd:49:d2:4c:99:40: f6:f5:b3:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhI77svnJuXuJU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk MGI5ZDBjZWItZTUzMi00MTVlLThjOTUtMzhhYzMwZmJhNmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aMB2mSWV62cnwCiiPil8xaFvcbUnInUI41t zqkYNcop7L3fzbWAHI/nkMRgne8D8nGRON0LNTWWWMSTAUk1rjNzMnubRYVeTY7C mcFK5ZnHvYhAU2NDA1QpqQlA8wRTo8IJ3Hb3ELbJihpE+y8Hx+XcVOIxjSjdSZVw kFc631K0nlTxPhZ1cv6GhplbO58Xy0IleOTQMmfzbCh9OCJcPvWqRQiKV2004Q0x b/IYsMau5XnwpNv+veSa61CKfNVrX8jBR1JpsHLUP9BH8CATCdAfhKraH9ZEy+xw 7fI+JQx6edkZ2gjMUkP+NQ+HRiLKjT2YW3KrymaQFa+WJipjtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE35FZpddCFxIO9GLA2wYGeDn2WGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvN2FmNTcyNTUtOTVlOS0z NWY4LWEzYjQtOTY0Y2MwZTY2MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJkIAyofi03NxHlwo/32FzwT8g8xyS338NrcyTFDGBUa3UD8GSSjc2f u7+HrDzgCcurO84KvHXvSEtRo/NG6hOShz157+6ASf/KUAIxkB3JSDIQSuF8EiCq GzaEsAdIkMbgxNRtG/M38TS7CIq0XvSogOMefKpY3wdPYOZRN8tUt8PfdTRLWsjN jGQoRFVtvAke9h5G77x0iVBP/l1Y/qNsNSjj3Q0Fk2m25K/yc7jX85JOlgl352RZ F+TkGAQsKcvCDPM0hs57Qa8jEDxTeZC0MbuzKD6J0SST135hwkAPgBoOJXuHunJM o6UFgTZOEnJ163nYo71J0kyZQPb1s6k= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:37 2026 by rpki-client