$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json) Hash identifier: qOtNF0z3xaQdu9r7hlmiIhG9NlbTjHoK8JhE4VA4ZhE= Subject key identifier: F5:09:4D:E0:BA:24:AE:AB:2B:7E:13:C7:D7:7E:64:8A:75:D8:A2:28 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D3401B656E8F25C82CCF00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 11572 IP address blocks: 131.153.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:40:1b:65:6e:8f:25:c8:2c:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=aca43a99-035a-4d5e-94fd-4e587b3aba9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:ad:e4:c1:61:ff:13:7d:af:e0:c0:31:16: a6:a2:f3:2f:5e:ea:b7:0a:88:46:5d:7e:0f:86:d8: 15:ea:09:d4:92:06:8e:d4:bb:32:9c:1a:0d:5b:59: 28:80:3e:67:ef:82:36:9f:30:ae:4a:0f:ea:84:74: e4:34:94:5f:f8:47:e8:c8:35:bd:99:4d:40:16:1d: 5a:d8:c1:32:3e:82:ac:dc:88:9e:77:b6:48:fd:ac: d2:21:f3:35:49:8e:35:70:4f:72:27:8c:1d:6f:9c: a7:2e:52:42:fe:d1:b1:51:53:40:bc:52:40:fd:de: e1:04:55:7a:a0:b1:59:c9:ef:96:93:d6:8b:a7:0f: 45:17:22:24:8f:9d:43:e7:98:a3:71:62:0c:02:74: 16:b8:4d:66:61:83:21:fa:ba:f0:52:f9:e1:02:9f: 7b:85:e1:60:b6:0f:af:69:a7:1b:86:b6:b0:81:f2: 50:7c:10:71:3b:4c:72:ef:b7:ab:5b:51:1d:5b:bd: 92:4f:e8:fe:06:df:a3:31:d4:34:78:ad:46:79:a0: 0c:4b:b8:68:f3:40:23:4e:04:71:4d:8a:ba:c6:e2: b7:d4:d7:57:ef:d8:c7:a0:87:c7:a7:9b:75:51:dc: dd:9b:e0:53:c1:a9:6e:92:a9:e1:2f:c6:dd:5b:05: ea:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:4D:E0:BA:24:AE:AB:2B:7E:13:C7:D7:7E:64:8A:75:D8:A2:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4b:a2:8a:94:de:b0:79:eb:90:a2:11:37:11:d4:99:08:e3: 7b:bf:05:67:23:6d:72:da:eb:45:80:d8:0f:e4:eb:11:84:67: f0:3c:f4:c3:dd:79:ec:1e:9c:cf:23:a0:6d:78:19:08:fb:3c: 39:e8:21:d5:52:9e:66:bf:8e:9d:d8:e6:b1:81:db:d2:fa:48: a2:75:e2:bd:24:e7:2e:a3:7c:f2:c4:2a:47:47:3c:f2:fb:4a: 37:64:bf:70:e8:9f:59:7b:5f:55:eb:a3:84:5e:8e:75:0c:51: ac:79:c1:e3:0c:2d:00:c1:c8:19:9e:8c:5f:91:38:5a:94:3e: 0c:ca:bd:87:0d:7d:43:7f:06:ce:cd:0c:2a:52:75:db:ab:8b: 9d:2b:f3:8f:49:e3:1f:16:f5:04:75:96:8b:fb:19:78:0c:ee: bc:61:d4:ee:ba:62:5e:f1:f0:60:61:95:45:58:ae:01:5c:d2: 1c:ab:52:93:95:d8:e1:70:da:3d:e6:26:c2:b0:9a:6a:a6:da: 15:c3:46:db:bb:da:75:12:fe:ab:f3:b9:a2:a0:a7:e2:2e:9f: 6b:9e:91:14:aa:2e:de:d0:be:f2:c2:c0:db:1f:9c:52:99:83: 70:e6:49:e2:a5:fe:be:47:14:d7:b7:25:d5:30:fe:ab:07:42: 81:92:09:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U00AbZW6PJcgszwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk YWNhNDNhOTktMDM1YS00ZDVlLTk0ZmQtNGU1ODdiM2FiYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1et5MFh/xN9r+DAMRamovMvXuq3CohGXX4P htgV6gnUkgaO1LsynBoNW1kogD5n74I2nzCuSg/qhHTkNJRf+EfoyDW9mU1AFh1a 2MEyPoKs3Iied7ZI/azSIfM1SY41cE9yJ4wdb5ynLlJC/tGxUVNAvFJA/d7hBFV6 oLFZye+Wk9aLpw9FFyIkj51D55ijcWIMAnQWuE1mYYMh+rrwUvnhAp97heFgtg+v aacbhrawgfJQfBBxO0xy77erW1EdW72ST+j+Bt+jMdQ0eK1GeaAMS7ho80AjTgRx TYq6xuK31NdX79jHoIfHp5t1Udzdm+BTwalukqnhL8bdWwXqIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUJTeC6JK6rK34Tx9d+ZIp12KIoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChLooqU3rB565CiETcR1JkI43u/BWcjbXLa60WA2A/k6xGEZ/A89MPd eewenM8joG14GQj7PDnoIdVSnma/jp3Y5rGB29L6SKJ14r0k5y6jfPLEKkdHPPL7 Sjdkv3Don1l7X1Xro4RejnUMUax5weMMLQDByBmejF+ROFqUPgzKvYcNfUN/Bs7N DCpSdduri50r849J4x8W9QR1lov7GXgM7rxh1O66Yl7x8GBhlUVYrgFc0hyrUpOV 2OFw2j3mJsKwmmqm2hXDRtu72nUS/qvzuaKgp+Iun2uekRSqLt7QvvLCwNsfnFKZ g3DmSeKl/r5HFNe3JdUw/qsHQoGSCXY= -----END CERTIFICATE-----Generated at Mon Oct 26 17:12:57 2026 by rpki-client