$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa File: c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa (raw, json) Hash identifier: /GWZY3oTQySnROzkuMBgn+28/2FByJTvISfTPUk8KE4= Subject key identifier: 26:04:01:44:4A:43:52:AC:52:4E:A7:F4:3C:47:2C:1F:A3:44:0C:1F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D30447F782A4B5BEE01D00 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 11572 IP address blocks: 131.153.65.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:04:47:f7:82:a4:b5:be:e0:1d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=f7fabf89-7f33-42af-8dd8-8ad6f39f19a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0a:f9:21:cc:73:34:95:45:39:b4:b7:10:d0: 7c:6d:47:a2:f7:77:7a:58:cf:b6:d2:0b:01:c9:9e: 36:79:8d:79:be:cb:33:1c:3c:24:b1:e3:f6:62:a4: e4:51:69:63:3d:9d:9c:2a:3c:ac:f1:3d:fe:4d:fd: 81:a9:bf:eb:b1:62:f9:2e:37:a8:2d:e5:14:1a:3a: 94:1d:75:ae:22:f5:4e:9c:1a:1a:1a:ae:55:db:08: da:99:e9:2f:7e:55:f8:15:ac:c9:81:79:c0:0b:90: 0f:56:5a:1d:c6:75:82:37:f6:42:98:7a:f9:1f:d6: da:60:b1:51:79:8b:49:52:e3:1a:c2:7d:5b:60:bc: 45:db:64:4b:b4:50:96:b3:2c:97:31:9a:7a:72:c4: 5c:56:20:4e:44:be:c0:92:e5:d3:0a:bb:e5:b4:d2: 83:52:76:19:de:b1:fe:b4:c0:bc:01:54:6b:48:0f: ad:44:70:67:20:ac:ee:8d:80:94:6f:1f:b8:9e:d0: 29:b2:39:3f:54:e0:68:01:9e:53:36:f2:ac:0d:44: eb:06:0f:b4:00:50:22:9a:fa:a1:57:82:8e:54:27: 03:87:53:f8:3c:df:ad:12:ea:c0:5f:a5:b8:77:a6: 28:d0:6c:a1:46:7f:51:da:20:50:27:1e:ba:86:54: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:04:01:44:4A:43:52:AC:52:4E:A7:F4:3C:47:2C:1F:A3:44:0C:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c358e116-64f9-3c27-b0c6-80f1a6292b9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:19:3c:ee:2d:95:45:f6:53:fb:bf:24:74:c6:01:8c:e0:10: 57:77:40:df:77:ab:c0:38:c6:06:01:eb:c6:f0:77:25:0a:3c: a2:5f:3f:ca:aa:29:9f:43:c2:16:12:68:a3:71:e3:d4:dd:8c: 96:a9:43:0b:cd:f8:ce:e8:1b:28:71:ac:8c:a9:5c:9e:1b:ff: 05:96:79:e6:ef:b6:ac:97:ca:01:77:14:f9:9c:a0:af:fe:ee: f6:b0:ee:01:76:59:62:2e:35:16:f0:0b:7e:2d:72:14:5c:84: fc:28:e6:b6:21:cf:55:bf:41:8d:96:27:01:3f:b5:10:2d:3f: 9a:9b:07:2b:1c:56:09:a1:9c:39:dd:99:c0:aa:bd:0f:5b:79: ab:17:65:5c:3b:01:fa:b0:28:42:22:b9:1c:9f:2b:b1:e9:62: 65:14:99:9d:79:24:70:97:74:21:af:0c:8a:22:0c:b6:e4:0c: 5d:30:30:1c:11:85:a5:96:ec:fa:a5:3f:18:81:2b:6e:a0:09: 7b:d7:c3:a8:72:e4:66:60:d8:7a:0e:64:8d:91:59:b7:fb:c8: ad:ce:4b:af:25:a0:ae:aa:1d:b5:48:a6:79:31:8d:c8:55:3b: e0:cf:d1:3e:70:5d:73:ea:bc:d8:3f:9f:57:3b:63:f3:51:d6: 4c:bd:3b:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wRH94Kktb7gHQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZjdmYWJmODktN2YzMy00MmFmLThkZDgtOGFkNmYzOWYxOWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngr5IcxzNJVFObS3ENB8bUei93d6WM+20gsB yZ42eY15vsszHDwkseP2YqTkUWljPZ2cKjys8T3+Tf2Bqb/rsWL5LjeoLeUUGjqU HXWuIvVOnBoaGq5V2wjamekvflX4FazJgXnAC5APVlodxnWCN/ZCmHr5H9baYLFR eYtJUuMawn1bYLxF22RLtFCWsyyXMZp6csRcViBORL7AkuXTCrvltNKDUnYZ3rH+ tMC8AVRrSA+tRHBnIKzujYCUbx+4ntApsjk/VOBoAZ5TNvKsDUTrBg+0AFAimvqh V4KOVCcDh1P4PN+tEurAX6W4d6Yo0GyhRn9R2iBQJx66hlQoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYEAURKQ1KsUk6n9DxHLB+jRAwfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzM1OGUxMTYtNjRmOS0z YzI3LWIwYzYtODBmMWE2MjkyYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQZPO4tlUX2U/u/JHTGAYzgEFd3QN93q8A4xgYB68bwdyUKPKJfP8qq KZ9DwhYSaKNx49TdjJapQwvN+M7oGyhxrIypXJ4b/wWWeebvtqyXygF3FPmcoK/+ 7vaw7gF2WWIuNRbwC34tchRchPwo5rYhz1W/QY2WJwE/tRAtP5qbByscVgmhnDnd mcCqvQ9beasXZVw7AfqwKEIiuRyfK7HpYmUUmZ15JHCXdCGvDIoiDLbkDF0wMBwR haWW7PqlPxiBK26gCXvXw6hy5GZg2HoOZI2RWbf7yK3OS68loK6qHbVIpnkxjchV O+DP0T5wXXPqvNg/n1c7Y/NR1ky9O/g= -----END CERTIFICATE-----Generated at Mon Oct 26 03:36:18 2026 by rpki-client