$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa File: 8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json) Hash identifier: dYAOHwA9hYG0imLPsD/4VmEy3gMtIn7Ju609QU0E4G0= Subject key identifier: 24:4D:B3:AD:44:0E:5F:E9:1F:F1:31:27:1B:69:88:04:E7:DE:EC:62 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EF18200AAB3A192DE87363200 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 12189 IP address blocks: 131.153.116.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:00:aa:b3:a1:92:de:87:36:32:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=2820d3a7-c882-4016-8e69-ebb2c04da1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:68:a3:b7:5b:3f:f0:d8:4b:70:14:1b:11: b5:07:78:50:ac:c8:ab:34:18:2d:ca:e8:5e:55:8a: 21:cb:5d:96:62:da:93:30:12:d7:68:59:83:43:16: b3:cd:94:1b:14:35:47:a9:08:8a:c8:34:c9:a2:62: 5f:22:ea:40:c4:65:a6:6a:42:ea:3b:2a:ab:40:56: 8b:a0:fd:b1:a0:00:db:f8:70:68:20:0c:46:a3:d0: b7:a6:4d:28:4f:d9:99:a9:46:57:1f:4d:b7:ad:8c: 07:fd:24:14:ac:14:15:68:3f:70:14:e2:53:92:09: 12:ca:d6:a4:17:9f:ee:45:1b:25:52:e2:c8:bd:58: d8:a3:41:24:a3:14:46:dd:a9:df:1a:58:03:95:6a: 24:55:8d:a9:32:12:d0:4f:4e:32:03:94:7e:d5:ee: 73:c8:90:60:69:c7:94:25:16:9b:d5:8c:7d:b7:9f: 10:85:50:b8:66:1a:34:f1:24:8d:a8:ca:83:21:00: f2:87:c2:c5:1e:a7:70:47:31:9a:e1:e7:4d:2f:07: 2c:2f:73:54:39:8a:dd:ab:31:1a:aa:9a:60:9d:2a: 80:e5:2f:70:b3:8d:d5:99:6b:9b:8b:f7:5e:4f:81: 6b:6e:56:67:de:9e:f5:e3:64:e9:9b:a4:cf:a9:5f: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:4D:B3:AD:44:0E:5F:E9:1F:F1:31:27:1B:69:88:04:E7:DE:EC:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:67:0e:1d:dd:92:44:ce:3c:a7:ac:c0:22:8a:fb:66:24:ea: b4:f7:76:6e:66:32:b8:1b:d4:22:7a:e7:cd:51:1e:6c:46:06: 60:d2:4c:08:90:5f:93:bf:3e:04:03:24:0f:17:4e:e0:39:ce: c2:89:be:d3:5a:87:88:70:cd:62:5e:e9:b1:a3:d8:d4:28:25: 96:b6:e3:1a:aa:42:c7:7e:b7:32:55:d9:3b:d4:de:ce:5e:75: ff:f1:01:1c:23:07:52:c2:03:a1:75:cc:92:f7:c9:ba:96:77: ea:e5:8b:47:95:d1:bd:58:ee:23:64:2e:2b:86:c9:1e:cb:26: 5e:a6:7e:8f:7d:05:a6:92:93:27:d5:c4:1e:d3:d6:26:1a:47: 17:36:36:ee:8b:35:cb:05:bf:c5:c7:de:61:09:0c:5a:ce:8d: 7f:00:7e:0a:9c:ae:24:b6:3e:2c:67:c2:82:3d:b0:ef:f4:fd: 81:14:0c:f4:2d:16:0f:be:b4:ba:87:c8:ed:2e:29:d8:6d:da: ef:49:36:d8:37:1c:f7:54:f7:96:4a:d3:cf:c2:4c:51:ca:16: 83:19:4d:61:ef:5f:c3:f7:80:0d:c8:91:58:5a:b3:f5:b1:e9: ca:b0:7e:cb:1e:29:80:bb:a3:2a:d6:01:3c:cd:73:03:3a:b5: 86:36:2a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggCqs6GS3oc2MgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MjgyMGQzYTctYzg4Mi00MDE2LThlNjktZWJiMmMwNGRhMWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf9oo7dbP/DYS3AUGxG1B3hQrMirNBgtyuhe VYohy12WYtqTMBLXaFmDQxazzZQbFDVHqQiKyDTJomJfIupAxGWmakLqOyqrQFaL oP2xoADb+HBoIAxGo9C3pk0oT9mZqUZXH023rYwH/SQUrBQVaD9wFOJTkgkSytak F5/uRRslUuLIvVjYo0EkoxRG3anfGlgDlWokVY2pMhLQT04yA5R+1e5zyJBgaceU JRab1Yx9t58QhVC4Zho08SSNqMqDIQDyh8LFHqdwRzGa4edNLwcsL3NUOYrdqzEa qppgnSqA5S9ws43VmWubi/deT4FrblZn3p7142Tpm6TPqV+IEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRNs61EDl/pH/ExJxtpiATn3uxiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9nDh3dkkTOPKeswCKK+2Yk6rT3dm5mMrgb1CJ6581RHmxGBmDSTAiQ X5O/PgQDJA8XTuA5zsKJvtNah4hwzWJe6bGj2NQoJZa24xqqQsd+tzJV2TvU3s5e df/xARwjB1LCA6F1zJL3ybqWd+rli0eV0b1Y7iNkLiuGyR7LJl6mfo99BaaSkyfV xB7T1iYaRxc2Nu6LNcsFv8XH3mEJDFrOjX8AfgqcriS2PixnwoI9sO/0/YEUDPQt Fg++tLqHyO0uKdht2u9JNtg3HPdU95ZK08/CTFHKFoMZTWHvX8P3gA3IkVhas/Wx 6cqwfsseKYC7oyrWATzNcwM6tYY2KkY= -----END CERTIFICATE-----Generated at Sat Sep 5 06:50:43 2026 by rpki-client