$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa File: 845a3255-66a8-34dc-a162-c938627caa3a.roa (raw, json) Hash identifier: 2ApyGOhzIQifCQvwtCgGE8NZ70FUwggKV9GPEJdi+Do= Subject key identifier: DE:72:ED:65:43:5E:84:C1:43:53:18:C6:0D:C9:1F:C0:E6:CF:A3:3C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E508492591626416EEEFA3980 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa Signing time: Sat 27 Jun 2026 21:00:12 +0000 ROA not before: Sat 27 Jun 2026 21:00:12 +0000 ROA not after: Fri 25 Sep 2026 21:00:12 +0000 asID: 11572 IP address blocks: 131.153.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:50:84:92:59:16:26:41:6e:ee:fa:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 21:00:12 2026 GMT Not After : Sep 25 21:00:12 2026 GMT Subject: CN=b27c1e35-6bfc-4cbc-80ad-875a45153611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5f:73:4b:22:b0:83:78:cd:5a:f4:9b:b6:96: db:e4:af:b8:df:d9:df:12:7e:40:8d:7d:ae:9e:b8: 82:9d:c4:72:e9:37:f5:01:31:de:28:32:ba:98:6a: 4f:09:97:0c:c6:00:5e:34:7a:56:fd:ca:8c:88:00: 93:07:f4:d8:eb:02:60:ee:ca:bc:71:5e:6a:b3:a4: 06:c4:c6:57:7a:72:6e:d8:4b:9d:de:2f:60:82:6e: 14:69:0d:27:a1:ee:fa:30:c6:6f:9a:76:70:39:47: b2:e2:20:28:c0:b4:fb:56:86:af:0e:b8:46:d7:cc: 21:38:81:a0:63:e2:5f:bb:24:b3:58:0f:0a:a5:86: 07:e8:7b:cd:45:71:08:44:8a:ee:02:0b:d1:24:f6: a6:89:32:5c:4f:07:5b:3e:3a:c1:ed:34:90:6d:99: 1c:8a:ab:92:54:6b:55:1e:7b:1b:7c:66:d5:9a:e9: 61:3e:05:b3:78:0a:6a:d1:09:c3:11:5f:df:1d:63: 6f:98:dd:45:39:c6:46:ba:4a:86:ee:8b:60:fc:30: 1c:ff:ce:b1:c4:49:76:50:39:da:87:32:4b:03:81: 24:03:e6:00:37:c5:f5:15:3b:81:bd:e4:ef:39:23: 4d:88:36:9c:9e:c7:67:1e:81:7a:ed:53:cc:d8:ba: a3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:72:ED:65:43:5E:84:C1:43:53:18:C6:0D:C9:1F:C0:E6:CF:A3:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/845a3255-66a8-34dc-a162-c938627caa3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:81:a7:41:09:24:38:57:b9:02:f8:99:88:0b:ab:f9:67:68: d7:a2:a0:f2:92:19:ed:74:63:a6:2c:01:50:0a:e7:06:2f:31: 6c:7c:da:0a:7a:ab:6c:ec:11:bd:87:32:f6:ba:68:5b:6c:2e: 50:3b:f4:6d:5b:a2:f3:2d:4d:6e:35:39:b7:ca:41:e8:56:7e: 31:ba:11:78:1f:31:9d:5c:65:06:02:9b:a5:0a:7b:d1:d5:57: b6:da:b6:1b:9c:59:2d:93:1b:f7:ad:00:01:e7:aa:02:07:69: 62:11:1c:5c:92:82:64:66:0d:26:11:91:a0:fe:58:13:7c:ad: 7c:08:ad:3d:6f:ad:0a:ba:d7:e6:1a:4b:3d:a6:9d:88:49:c6: 29:33:18:59:1f:be:94:4a:4d:1f:d3:f2:f2:61:a0:d4:c4:22: 63:8c:b1:0e:21:c8:c2:ba:a6:dc:a6:1e:c3:cc:24:4c:ee:d9: d8:e0:e7:7a:98:74:64:af:52:9c:78:02:a0:88:92:16:96:80: 9d:4e:04:9e:f0:34:e2:65:38:1f:64:da:a1:fb:05:4e:46:b1: bb:ac:31:dc:df:6f:4e:d3:30:6e:d3:0e:e6:6e:3b:aa:20:ff: 1d:a8:37:fe:10:ac:87:2c:85:a6:f5:0f:b3:4d:29:e5:8c:f8: c7:c0:66:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5QhJJZFiZBbu76OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzIxMDAxMloXDTI2MDkyNTIxMDAxMlowLzEtMCsGA1UEAxMk YjI3YzFlMzUtNmJmYy00Y2JjLTgwYWQtODc1YTQ1MTUzNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl9zSyKwg3jNWvSbtpbb5K+439nfEn5AjX2u nriCncRy6Tf1ATHeKDK6mGpPCZcMxgBeNHpW/cqMiACTB/TY6wJg7sq8cV5qs6QG xMZXenJu2Eud3i9ggm4UaQ0noe76MMZvmnZwOUey4iAowLT7VoavDrhG18whOIGg Y+JfuySzWA8KpYYH6HvNRXEIRIruAgvRJPamiTJcTwdbPjrB7TSQbZkciquSVGtV HnsbfGbVmulhPgWzeApq0QnDEV/fHWNvmN1FOcZGukqG7otg/DAc/86xxEl2UDna hzJLA4EkA+YAN8X1FTuBveTvOSNNiDacnsdnHoF67VPM2LqjwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5y7WVDXoTBQ1MYxg3JH8Dmz6M8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvODQ1YTMyNTUtNjZhOC0z NGRjLWExNjItYzkzODYyN2NhYTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5kYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWBp0EJJDhXuQL4mYgLq/lnaNeioPKSGe10Y6YsAVAK5wYvMWx82gp6 q2zsEb2HMva6aFtsLlA79G1bovMtTW41ObfKQehWfjG6EXgfMZ1cZQYCm6UKe9HV V7bathucWS2TG/etAAHnqgIHaWIRHFySgmRmDSYRkaD+WBN8rXwIrT1vrQq61+Ya Sz2mnYhJxikzGFkfvpRKTR/T8vJhoNTEImOMsQ4hyMK6ptymHsPMJEzu2djg53qY dGSvUpx4AqCIkhaWgJ1OBJ7wNOJlOB9k2qH7BU5GsbusMdzfb07TMG7TDuZuO6og /x2oN/4QrIcshab1D7NNKeWM+MfAZmY= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:34 2026 by rpki-client