$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json) Hash identifier: 9bjepn2nwWf/VRK7pP8FCGh5af43dQepBWhAGk+0pEA= Subject key identifier: E9:31:8D:53:9B:5C:A4:FE:0D:1F:EC:C7:E1:AA:EB:70:9E:51:49:FC Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F9A68675A5AB5982279BBC140 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 19437 IP address blocks: 131.153.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:67:5a:5a:b5:98:22:79:bb:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=ab1b3a90-978b-4515-96a8-505858006c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5c:cd:5b:2a:33:f6:c0:0e:06:98:4a:9f:ef: 29:51:19:df:4c:2a:fc:e0:20:02:9a:aa:6a:bf:27: 9c:2d:fe:c8:c8:f1:51:19:65:2f:29:b3:f5:02:6e: 57:e2:b0:2a:90:fa:7f:36:aa:db:8d:2e:64:09:54: 55:b8:75:50:cb:5c:ce:7f:ef:3e:73:80:18:05:2c: 0b:2a:73:13:52:38:80:db:6d:7a:d1:c4:f1:3e:b6: b9:b8:4b:55:1b:9c:e8:38:e4:98:4f:7a:06:a0:94: 63:a2:42:18:c7:67:2d:c0:86:04:6c:fb:96:3a:fa: 9b:7f:e2:ee:2d:3c:10:6c:33:1c:25:d9:ae:0c:59: 85:70:b9:2c:e5:81:19:d8:57:61:91:f0:e0:2a:22: df:fb:9e:df:e0:ab:15:d3:44:1a:ed:0b:b2:a4:bc: 4a:a3:8a:cc:01:26:7c:4e:48:8c:bb:07:02:83:1e: c5:f6:17:27:f0:94:0b:eb:bd:84:36:e5:65:60:fe: e2:08:b8:a8:ed:59:5c:51:38:90:0f:ca:f3:c6:5d: c6:11:37:00:27:2d:3d:6e:60:74:04:bb:7b:0e:a2: c6:0b:3f:66:8d:16:14:99:a3:99:29:6d:a6:29:b8: e1:21:15:b4:21:8c:79:f9:f2:2c:a0:6e:18:13:60: a0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:31:8D:53:9B:5C:A4:FE:0D:1F:EC:C7:E1:AA:EB:70:9E:51:49:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9b:4e:83:8d:2a:fc:a1:71:2c:58:04:f4:2b:23:e5:43:5c: 33:3b:52:e1:98:9f:2d:c3:21:a1:80:a5:35:04:c6:2e:7e:44: 00:75:c6:af:ec:a2:9d:f9:79:d5:67:e9:64:4b:00:2d:dc:38: b7:42:02:51:71:af:7c:87:a9:e9:6e:aa:cf:d5:86:3d:6b:80: cd:21:24:fa:87:29:d4:cd:ab:02:b7:80:de:40:78:7a:50:bb: 8c:f0:e4:56:eb:d5:5a:5c:8e:35:5a:e2:81:4d:4d:02:a2:5c: cc:f4:9a:21:6e:49:9c:7b:b1:da:d8:81:51:f6:fd:4d:95:7c: 6d:d9:3e:fa:75:32:4d:07:b9:d3:49:bb:10:ab:81:bf:99:03: dc:a4:62:94:0f:ec:d4:1c:35:4a:34:8d:2b:ed:bf:c1:cb:1a: 2a:8b:4d:b1:40:b7:11:21:b0:3b:e9:8f:15:16:da:43:21:f0: d7:2c:74:18:a8:9f:70:ff:71:6b:cb:30:d4:6e:49:06:52:3a: 90:70:8b:1b:35:92:23:02:e0:cb:f9:ad:8b:77:44:b2:da:29: 16:46:92:ef:12:d2:87:4e:9f:8f:1f:72:4b:10:d9:84:30:8d: 58:35:35:8e:64:f8:0d:8a:a2:45:9a:86:70:7a:6b:d7:9e:7f: 37:40:bf:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGdaWrWYInm7wUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YWIxYjNhOTAtOTc4Yi00NTE1LTk2YTgtNTA1ODU4MDA2YzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVzNWyoz9sAOBphKn+8pURnfTCr84CACmqpq vyecLf7IyPFRGWUvKbP1Am5X4rAqkPp/NqrbjS5kCVRVuHVQy1zOf+8+c4AYBSwL KnMTUjiA22160cTxPra5uEtVG5zoOOSYT3oGoJRjokIYx2ctwIYEbPuWOvqbf+Lu LTwQbDMcJdmuDFmFcLks5YEZ2FdhkfDgKiLf+57f4KsV00Qa7QuypLxKo4rMASZ8 TkiMuwcCgx7F9hcn8JQL672ENuVlYP7iCLio7VlcUTiQD8rzxl3GETcAJy09bmB0 BLt7DqLGCz9mjRYUmaOZKW2mKbjhIRW0IYx5+fIsoG4YE2CgdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkxjVObXKT+DR/sx+Gq63CeUUn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYzUyZGQtNzNlYS0z YzE0LTgxNGUtNzc1OGZjYTFmZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGbToONKvyhcSxYBPQrI+VDXDM7UuGYny3DIaGApTUExi5+RAB1xq/s op35edVn6WRLAC3cOLdCAlFxr3yHqeluqs/Vhj1rgM0hJPqHKdTNqwK3gN5AeHpQ u4zw5Fbr1VpcjjVa4oFNTQKiXMz0miFuSZx7sdrYgVH2/U2VfG3ZPvp1Mk0HudNJ uxCrgb+ZA9ykYpQP7NQcNUo0jSvtv8HLGiqLTbFAtxEhsDvpjxUW2kMh8NcsdBio n3D/cWvLMNRuSQZSOpBwixs1kiMC4Mv5rYt3RLLaKRZGku8S0odOn48fcksQ2YQw jVg1NY5k+A2KokWahnB6a9eefzdAv04= -----END CERTIFICATE-----Generated at Tue Oct 27 20:29:41 2026 by rpki-client