$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json) Hash identifier: 0252SA7q/KvQx2705efkssvrcONtCAeVIKmyjjAKPP4= Subject key identifier: 6B:A6:F6:16:22:D1:AF:54:79:3A:B9:D8:09:29:73:D0:74:DA:EA:7A Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E54B496EEC8C392731B448CC0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 19437 IP address blocks: 131.153.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:96:ee:c8:c3:92:73:1b:44:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=9fc2d82a-6bf0-41c1-bec2-cf0aa1fc87e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:aa:b4:f8:fb:bd:6a:c4:3e:5d:ba:12:b7:0f: db:5e:5c:fc:8b:4d:4f:9f:07:c2:96:40:72:ab:69: b1:74:97:fb:3f:3c:7c:6e:68:2d:10:95:a8:00:95: ce:05:df:5e:d0:ad:75:bd:4b:72:5a:51:92:5c:ab: dd:79:4d:36:19:43:f4:9c:9f:92:52:6e:53:cc:ed: 8c:08:fb:e3:36:88:ee:84:b3:f6:23:2d:0e:d4:36: 14:5e:27:06:7b:2d:6d:72:cb:b4:0a:ec:93:c6:77: b2:30:3e:46:97:24:3a:1e:59:3b:16:74:4f:9b:a8: 2f:ec:5a:85:bf:d7:08:e1:59:8a:4d:25:0b:6e:00: ca:e6:9b:c8:b5:df:50:af:ef:cf:a7:e0:24:0a:25: 05:b9:b0:12:2e:d9:c7:2c:35:a7:28:3c:f0:1b:89: 25:70:73:12:74:dc:08:51:43:5b:98:af:0d:94:0d: d0:1d:2d:ce:06:34:b6:d6:32:74:77:60:72:a6:e7: a2:9b:6f:81:b3:95:d6:58:0e:77:99:ac:50:0a:f7: fc:ad:b4:a4:04:95:f5:be:1e:c3:2f:32:62:52:8c: 21:c9:a8:1e:2a:b9:5c:2d:6d:e4:e0:89:26:e8:09: 89:70:53:66:74:4c:0d:03:48:3d:a5:f9:c2:a6:28: 5e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A6:F6:16:22:D1:AF:54:79:3A:B9:D8:09:29:73:D0:74:DA:EA:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:fa:39:34:fe:83:a1:7f:e0:b1:72:ed:5e:b9:3e:c3:7f:ed: f8:13:8a:e4:0d:5d:91:9c:9e:2a:a9:6c:30:0c:ad:5e:5a:16: a4:f4:04:cc:39:7d:e2:87:3f:d2:73:52:55:d0:37:14:0b:1e: f0:ce:88:3d:50:94:dc:eb:94:0f:82:d0:19:28:a2:05:a0:5f: 2c:49:d8:f8:b4:28:72:49:c7:a5:67:50:1d:03:54:5a:fd:c9: 41:76:bf:14:af:e1:1a:36:dc:30:3a:71:00:33:a2:dc:67:dc: 07:92:bd:cc:3b:21:a8:e7:02:af:e1:51:2c:9e:fc:3a:02:62: 22:58:7c:ab:a5:a1:bd:a1:57:2f:99:ce:13:23:8d:75:14:09: cc:07:57:02:dc:05:b7:18:b0:09:5b:0f:88:0e:e8:02:c0:d2: 9f:65:e0:18:e7:91:ed:a0:ac:57:f8:7a:48:6d:9d:7e:16:2b: a1:5b:65:fa:e5:15:7b:2e:f9:c5:31:ec:18:8a:76:cc:34:30: 08:63:ef:9e:04:af:a1:79:03:b4:37:37:dc:6f:61:5d:8f:2a: ae:87:b6:dd:c4:4a:84:ec:44:c9:ca:b6:59:20:69:62:5d:4b: 5b:29:92:aa:25:65:69:d6:f7:fa:08:e7:2d:73:d5:17:e4:ce: 67:10:52:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJbuyMOScxtEjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk OWZjMmQ4MmEtNmJmMC00MWMxLWJlYzItY2YwYWExZmM4N2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaq0+Pu9asQ+XboStw/bXlz8i01PnwfClkBy q2mxdJf7Pzx8bmgtEJWoAJXOBd9e0K11vUtyWlGSXKvdeU02GUP0nJ+SUm5TzO2M CPvjNojuhLP2Iy0O1DYUXicGey1tcsu0CuyTxneyMD5GlyQ6Hlk7FnRPm6gv7FqF v9cI4VmKTSULbgDK5pvItd9Qr+/Pp+AkCiUFubASLtnHLDWnKDzwG4klcHMSdNwI UUNbmK8NlA3QHS3OBjS21jJ0d2Bypueim2+Bs5XWWA53maxQCvf8rbSkBJX1vh7D LzJiUowhyageKrlcLW3k4Ikm6AmJcFNmdEwNA0g9pfnCpiheGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGum9hYi0a9UeTq52Akpc9B02up6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYzUyZGQtNzNlYS0z YzE0LTgxNGUtNzc1OGZjYTFmZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGD6OTT+g6F/4LFy7V65PsN/7fgTiuQNXZGcniqpbDAMrV5aFqT0BMw5 feKHP9JzUlXQNxQLHvDOiD1QlNzrlA+C0BkoogWgXyxJ2Pi0KHJJx6VnUB0DVFr9 yUF2vxSv4Ro23DA6cQAzotxn3AeSvcw7IajnAq/hUSye/DoCYiJYfKulob2hVy+Z zhMjjXUUCcwHVwLcBbcYsAlbD4gO6ALA0p9l4Bjnke2grFf4ekhtnX4WK6FbZfrl FXsu+cUx7BiKdsw0MAhj754Er6F5A7Q3N9xvYV2PKq6Htt3ESoTsRMnKtlkgaWJd S1spkqolZWnW9/oI5y1z1RfkzmcQUmY= -----END CERTIFICATE-----Generated at Tue Jul 21 22:16:56 2026 by rpki-client