$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa File: d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa (raw, json) Hash identifier: oq2x9otEcHNfCrsBA89XZcN8OcawkNo5JWjvhn3sqag= Subject key identifier: 94:DE:D7:42:CD:72:48:37:52:7B:7E:C1:1C:94:DC:69:DD:98:6D:B2 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D30457AC2699193D341380 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 19437 IP address blocks: 131.153.70.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:04:57:ac:26:99:19:3d:34:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=37ef594d-2af3-43f7-b61d-2486a4c044ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1c:fb:4c:8f:d4:e5:03:1b:50:84:5c:fd:ab: b8:3b:43:88:d7:37:32:3d:59:17:2d:61:30:a1:0c: 0e:fd:8c:23:fb:f5:ed:b3:6a:cd:16:a4:a1:eb:cb: cd:59:95:01:61:f2:4a:fb:3e:16:fa:15:6d:ad:78: 01:5e:a9:de:5e:2d:34:71:bc:b0:f4:f9:f3:f1:4b: ce:3c:1b:49:6f:45:a2:c6:f0:9a:30:d9:6b:da:d9: 63:42:f1:67:d6:52:ad:a3:09:97:3f:bb:29:15:d9: b6:74:da:81:78:b8:b7:05:40:61:a9:fe:33:ac:b3: e0:54:cb:16:18:8c:ed:99:79:cb:e1:5b:ff:54:00: 1d:bc:cc:6d:0d:5b:62:09:62:c6:33:21:97:27:24: a0:6d:03:05:ef:41:a1:88:d1:f4:09:83:86:9a:5e: 22:7f:5e:f8:e2:82:8f:62:a7:2c:df:ca:07:d9:a8: cf:24:8a:88:c7:99:2f:5b:2a:96:a1:2f:78:85:2c: 49:5c:7f:c4:95:2a:73:87:aa:74:72:d6:21:29:90: c7:2e:01:a4:6b:fc:be:c7:26:dd:4e:bb:23:d0:e2: cd:e1:d6:d1:b4:bc:c0:dc:54:49:56:ac:aa:be:2b: 94:78:a1:03:ef:9c:a0:17:a2:bd:52:63:be:2a:cf: 86:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DE:D7:42:CD:72:48:37:52:7B:7E:C1:1C:94:DC:69:DD:98:6D:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d250c973-f3c8-37df-b477-e3c49ad0a5c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1f:7f:8d:79:ca:2d:cb:c0:aa:61:74:07:3a:2a:91:82:27: cd:e2:ed:c4:e5:8e:ef:7a:10:af:a6:d6:d2:5b:87:5b:b6:65: df:db:51:85:4d:c0:f8:12:1e:5e:6b:42:a0:ce:ce:58:2d:0f: c3:6a:01:0a:5a:a4:b9:30:4f:9b:a9:fe:75:8f:67:f4:d6:a7: d5:23:15:0e:0f:51:51:e7:3e:de:d6:55:3e:23:48:86:4a:5b: 86:85:99:bb:64:1b:40:3e:6f:6a:5b:f9:19:ee:b1:89:54:0d: 1d:bb:24:41:40:32:47:5e:d3:bd:03:9e:e1:cb:ae:68:f1:67: a7:58:b9:43:6d:0c:d6:fe:f1:2f:17:3d:01:5c:e1:74:74:18: 15:d9:c5:47:e6:80:9f:45:15:a0:e8:0c:4d:c3:d2:7a:30:44: 16:d1:9f:91:23:6f:97:62:92:84:14:94:bd:56:94:61:80:04: 75:57:fa:52:f4:bd:5d:22:5f:3e:b7:f2:8f:5f:67:6d:74:68: 78:06:ba:cc:1c:b5:4a:1e:ff:99:1a:e7:ef:26:93:69:2e:9d: c1:96:51:88:e4:8b:8b:77:4c:0e:fc:5c:dd:7a:d9:de:8a:d3: 79:d7:c5:2e:2e:b0:53:6d:a9:e8:ef:ee:81:97:64:16:45:e0: 11:dc:c6:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wRXrCaZGT00E4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MzdlZjU5NGQtMmFmMy00M2Y3LWI2MWQtMjQ4NmE0YzA0NGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRz7TI/U5QMbUIRc/au4O0OI1zcyPVkXLWEw oQwO/Ywj+/Xts2rNFqSh68vNWZUBYfJK+z4W+hVtrXgBXqneXi00cbyw9Pnz8UvO PBtJb0WixvCaMNlr2tljQvFn1lKtowmXP7spFdm2dNqBeLi3BUBhqf4zrLPgVMsW GIztmXnL4Vv/VAAdvMxtDVtiCWLGMyGXJySgbQMF70GhiNH0CYOGml4if1744oKP Yqcs38oH2ajPJIqIx5kvWyqWoS94hSxJXH/ElSpzh6p0ctYhKZDHLgGka/y+xybd Trsj0OLN4dbRtLzA3FRJVqyqviuUeKED75ygF6K9UmO+Ks+GFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTe10LNckg3Unt+wRyU3GndmG2yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDI1MGM5NzMtZjNjOC0z N2RmLWI0NzctZTNjNDlhZDBhNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEff415yi3LwKphdAc6KpGCJ83i7cTlju96EK+m1tJbh1u2Zd/bUYVN wPgSHl5rQqDOzlgtD8NqAQpapLkwT5up/nWPZ/TWp9UjFQ4PUVHnPt7WVT4jSIZK W4aFmbtkG0A+b2pb+RnusYlUDR27JEFAMkde070DnuHLrmjxZ6dYuUNtDNb+8S8X PQFc4XR0GBXZxUfmgJ9FFaDoDE3D0nowRBbRn5Ejb5dikoQUlL1WlGGABHVX+lL0 vV0iXz638o9fZ210aHgGuswctUoe/5ka5+8mk2kuncGWUYjki4t3TA78XN162d6K 03nXxS4usFNtqejv7oGXZBZF4BHcxo4= -----END CERTIFICATE-----Generated at Mon Oct 26 01:55:49 2026 by rpki-client