$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa File: d00dfcb1-8997-3cd3-af05-0800d9a48025.roa (raw, json) Hash identifier: oPbp5aM7bxm/3526Zk8rSxRdLqLR6bPUXGM+PXp2oF4= Subject key identifier: 57:7F:D2:23:69:AF:CF:5B:6F:90:23:BF:5C:46:E2:7C:FF:76:94:4A Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E4F1F3402DF5443E723CC8580 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 20454 IP address blocks: 131.153.45.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:34:02:df:54:43:e7:23:cc:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=fdbce7ca-886c-47b0-9f20-f6ae477a4d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:f0:5e:47:88:74:26:08:4b:3a:91:d9:0b:23: 08:53:eb:68:cf:23:3a:47:79:cb:34:03:a6:a6:b2: 52:24:db:fc:5f:0e:01:1c:c4:1e:c9:a7:87:96:e3: 0b:82:01:08:22:4c:15:4a:fd:5d:20:d1:08:c3:6d: cc:27:ed:e0:d4:44:5f:9f:b9:c6:c0:42:38:f0:06: 05:08:5c:28:f4:1b:a8:2e:9d:08:42:56:68:d2:87: 0f:0b:b0:0d:b2:3b:c1:0d:24:87:5c:c7:8f:cf:46: be:a0:d2:e2:87:4b:fa:75:6b:ec:92:ee:e1:3d:bc: ab:49:4a:51:59:0a:23:98:d9:7b:cd:71:9e:e9:67: e1:8e:28:93:5e:3d:b1:97:e7:12:63:8f:d5:77:2f: 0d:42:87:80:e8:9b:93:81:df:bc:99:74:38:e7:97: da:1b:62:62:66:7b:eb:d5:1f:2d:80:fb:12:43:b8: b7:44:e4:bf:67:5b:24:07:f8:64:d9:ac:b5:72:ef: 77:d1:d9:35:a8:b5:7d:18:0a:17:70:0d:44:05:a6: c1:cc:83:e9:d8:8e:e5:9c:4d:6a:ba:00:02:aa:4c: 9b:cd:60:db:37:04:be:8d:47:f3:99:1a:f1:67:57: 27:ce:47:62:61:99:1a:2c:45:e4:61:ac:cd:f9:fb: 49:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:7F:D2:23:69:AF:CF:5B:6F:90:23:BF:5C:46:E2:7C:FF:76:94:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d00dfcb1-8997-3cd3-af05-0800d9a48025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:cc:e2:0d:d0:75:df:dd:70:55:0d:a6:43:93:90:3a:60:f3: 99:9b:44:3a:87:7d:b6:29:bc:80:0b:53:71:1b:36:5c:6c:8e: 31:af:0a:88:16:f2:30:eb:8f:3a:fd:0d:70:b8:9b:30:79:dd: 96:53:b3:1f:b8:62:a3:74:7c:d0:13:b8:5b:b5:ba:ed:10:21: da:99:ed:02:13:1d:47:25:ef:75:aa:c1:cc:22:70:8a:5b:18: 9b:10:e2:c3:99:99:0a:8b:5a:e4:fb:20:4a:44:72:8e:42:f4: fd:bb:09:fd:21:9d:08:94:92:e4:20:86:5d:56:3e:0d:68:64: 32:08:27:f6:20:cf:67:e0:de:3f:1e:ce:79:a8:9e:18:72:b5: 68:dc:9c:8b:01:96:81:b5:2a:56:59:08:3e:24:63:12:2e:0b: 81:7e:33:50:5c:d9:2a:63:54:fa:4f:05:5c:d6:14:e9:d1:01: 7b:64:f8:29:58:ea:7c:23:81:98:56:6f:a8:a0:ab:55:97:70: 1d:13:68:28:43:50:45:93:c2:bf:42:a0:93:cd:d2:b3:88:d2: a6:d2:64:9a:03:de:c3:0e:4b:9f:25:27:6d:64:8a:f4:18:ab: a8:93:2a:97:33:65:59:d9:40:87:9c:43:40:10:c6:9a:8e:18: 03:7f:38:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzQC31RD5yPMhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZmRiY2U3Y2EtODg2Yy00N2IwLTlmMjAtZjZhZTQ3N2E0ZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPBeR4h0JghLOpHZCyMIU+tozyM6R3nLNAOm prJSJNv8Xw4BHMQeyaeHluMLggEIIkwVSv1dINEIw23MJ+3g1ERfn7nGwEI48AYF CFwo9BuoLp0IQlZo0ocPC7ANsjvBDSSHXMePz0a+oNLih0v6dWvsku7hPbyrSUpR WQojmNl7zXGe6WfhjiiTXj2xl+cSY4/Vdy8NQoeA6JuTgd+8mXQ455faG2JiZnvr 1R8tgPsSQ7i3ROS/Z1skB/hk2ay1cu930dk1qLV9GAoXcA1EBabBzIPp2I7lnE1q ugACqkybzWDbNwS+jUfzmRrxZ1cnzkdiYZkaLEXkYazN+ftJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFd/0iNpr89bb5Ajv1xG4nz/dpRKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDAwZGZjYjEtODk5Ny0z Y2QzLWFmMDUtMDgwMGQ5YTQ4MDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ktMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDM4g3Qdd/dcFUNpkOTkDpg85mbRDqHfbYpvIALU3EbNlxsjjGvCogW 8jDrjzr9DXC4mzB53ZZTsx+4YqN0fNATuFu1uu0QIdqZ7QITHUcl73WqwcwicIpb GJsQ4sOZmQqLWuT7IEpEco5C9P27Cf0hnQiUkuQghl1WPg1oZDIIJ/Ygz2fg3j8e znmonhhytWjcnIsBloG1KlZZCD4kYxIuC4F+M1Bc2SpjVPpPBVzWFOnRAXtk+ClY 6nwjgZhWb6igq1WXcB0TaChDUEWTwr9CoJPN0rOI0qbSZJoD3sMOS58lJ21kivQY q6iTKpczZVnZQIecQ0AQxpqOGAN/OMk= -----END CERTIFICATE-----Generated at Tue Jul 21 18:20:26 2026 by rpki-client