$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json) Hash identifier: MlUylcwcFy1HMKRgxWkou1p82Cf8F+aOkcNSyglNqFw= Subject key identifier: C8:6B:B8:A8:96:8D:43:9C:7A:9B:53:AC:78:6A:2C:F1:D3:EE:9D:D4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584EF7176265FCF71DF81DA72900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 19437 IP address blocks: 131.153.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:62:65:fc:f7:1d:f8:1d:a7:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=b4dbbf35-aea1-445b-a389-1ae0d8b0f6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:ce:36:ee:91:6c:4a:c8:ed:6d:36:7d:75: ff:2a:a8:fe:6e:d9:ad:97:77:e2:9e:b0:d1:af:15: 90:6b:e4:cb:78:45:3d:de:df:44:1c:75:cd:a2:47: e0:d1:df:18:4d:e4:8a:c5:a7:2b:12:ff:96:6c:f5: 4b:36:64:75:ab:1b:94:a0:7f:d3:ac:fc:18:b8:ca: 80:78:d6:e5:78:66:80:4e:92:04:71:17:81:44:ca: 61:5e:a8:a3:88:00:b5:f9:72:be:d3:93:8d:19:ac: c1:cd:b1:07:59:43:a7:d7:75:63:bf:2a:51:f9:80: a1:15:9e:67:88:3f:2d:94:26:f3:50:59:3c:fe:18: a9:1c:43:74:ed:e1:02:54:84:c4:83:49:e1:4a:04: ae:91:67:c9:06:cf:1c:86:c3:81:36:95:7c:97:ae: e7:e3:15:5e:b5:6e:c4:c7:66:8b:38:73:9d:e7:71: 2c:8d:23:b2:75:12:fc:1e:76:d7:2e:a5:30:85:5b: 7f:52:59:bc:0c:9f:51:a7:9f:43:da:52:81:e4:79: fb:4a:1a:b9:f9:27:95:1d:a0:08:e7:a2:96:49:1b: 65:8f:48:d6:93:d5:f8:01:dc:52:a1:2d:05:21:8a: ec:f7:d7:24:c9:3a:09:61:65:b7:e5:e1:a2:18:f4: 5d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6B:B8:A8:96:8D:43:9C:7A:9B:53:AC:78:6A:2C:F1:D3:EE:9D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:ef:46:1a:4e:76:bd:ef:4b:5b:bc:86:bd:3d:5c:2f:75:a7: 57:14:ba:e1:78:70:c4:4e:08:cf:35:fc:b6:45:15:bb:e5:17: 8a:8e:03:9e:33:89:18:33:28:f4:f6:ae:ba:ba:80:79:d5:40: ef:be:b3:0b:84:cc:9b:b5:c6:84:75:27:aa:79:0d:e5:7e:7f: 37:0c:4a:92:95:06:73:55:3a:ec:b2:c0:76:01:14:c6:45:f7: f7:42:ba:97:1d:2b:c8:cd:bc:7d:f3:8d:bb:14:22:0c:05:f5: 98:df:ac:07:81:8c:a7:d9:c4:e1:bc:84:8a:00:cd:fb:e7:1a: 95:16:b1:0d:e2:6a:da:ea:ee:6a:6c:c5:0f:72:4a:21:9a:82: 24:ee:c6:e1:ba:c3:03:41:73:59:db:7c:bd:39:72:80:08:e7: 63:07:d7:b9:c0:14:8a:b4:5e:a7:d7:79:96:a7:01:3d:18:be: e1:d4:28:64:ec:59:89:b9:b0:1e:da:bc:d6:5c:cb:df:56:ea: 63:f9:08:a6:2b:bf:82:ba:b7:bb:b5:b4:2d:03:a2:77:6f:3f: 16:bb:f1:66:fd:29:67:d1:02:df:46:08:ed:e1:bc:00:c5:8f: ca:20:5e:67:55:d5:3a:cf:9f:78:7b:6d:c7:42:00:5c:68:c1: 0d:e5:cf:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2Jl/Pcd+B2nKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YjRkYmJmMzUtYWVhMS00NDViLWEzODktMWFlMGQ4YjBmNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZPONu6RbErI7W02fXX/Kqj+btmtl3finrDR rxWQa+TLeEU93t9EHHXNokfg0d8YTeSKxacrEv+WbPVLNmR1qxuUoH/TrPwYuMqA eNbleGaATpIEcReBRMphXqijiAC1+XK+05ONGazBzbEHWUOn13VjvypR+YChFZ5n iD8tlCbzUFk8/hipHEN07eECVITEg0nhSgSukWfJBs8chsOBNpV8l67n4xVetW7E x2aLOHOd53EsjSOydRL8HnbXLqUwhVt/Ulm8DJ9Rp59D2lKB5Hn7Shq5+SeVHaAI 56KWSRtlj0jWk9X4AdxSoS0FIYrs99ckyToJYWW35eGiGPRd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhruKiWjUOceptTrHhqLPHT7p3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYzUyZGQtNzNlYS0z YzE0LTgxNGUtNzc1OGZjYTFmZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALvRhpOdr3vS1u8hr09XC91p1cUuuF4cMROCM81/LZFFbvlF4qOA54z iRgzKPT2rrq6gHnVQO++swuEzJu1xoR1J6p5DeV+fzcMSpKVBnNVOuyywHYBFMZF 9/dCupcdK8jNvH3zjbsUIgwF9ZjfrAeBjKfZxOG8hIoAzfvnGpUWsQ3iatrq7mps xQ9ySiGagiTuxuG6wwNBc1nbfL05coAI52MH17nAFIq0XqfXeZanAT0YvuHUKGTs WYm5sB7avNZcy99W6mP5CKYrv4K6t7u1tC0DondvPxa78Wb9KWfRAt9GCO3hvADF j8ogXmdV1TrPn3h7bcdCAFxowQ3lz6w= -----END CERTIFICATE-----Generated at Sat Sep 5 04:58:19 2026 by rpki-client