$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa File: d498f1ad-6550-3118-8da5-441323aa3937.roa (raw, json) Hash identifier: j7rCBOxg66FXG0vGrrC7SOQrHNWFRDF870R3A8zfxaE= Subject key identifier: 91:67:8C:52:E7:1D:DF:84:28:C3:E5:74:5C:A6:96:0A:4C:CE:1B:85 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F94D303A3257EE1058E1DEB80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 20454 IP address blocks: 131.153.37.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:03:a3:25:7e:e1:05:8e:1d:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=6ebd550f-a48b-4c81-899a-eb951e82c08d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:c7:ff:ea:6e:e8:02:9a:49:87:30:1f:a6: cc:6a:3e:b9:37:81:c8:b6:41:44:a5:42:53:ac:6f: 03:5d:e5:ef:b0:ec:ef:c1:c2:16:30:5b:c5:75:c0: 23:e2:fe:93:53:1f:3d:a4:ca:26:eb:ec:ed:42:74: 70:35:a2:08:b5:a2:6a:f7:9b:e7:16:1f:67:ce:e0: 11:a9:4d:65:5d:45:4c:b2:28:5f:9d:8c:04:16:fc: 94:c1:86:63:96:c4:72:d9:72:96:a2:2a:47:b2:c6: 8a:6f:1a:07:70:35:fd:d0:f4:c6:f4:79:c8:5c:26: a8:7e:79:04:11:86:fa:68:a8:1f:6f:73:78:24:ff: 96:c0:70:73:33:a0:13:18:f1:8c:f9:79:bc:8f:c0: 39:2c:a5:b2:68:52:27:3b:31:ab:9a:b2:44:26:2b: a5:b0:b0:bb:1f:9f:55:a6:e6:e4:4c:58:bb:be:9c: fd:d1:18:9c:ee:de:f9:4f:ae:fb:23:61:1f:a5:a0: a4:51:f6:33:0e:06:8d:af:be:da:97:5c:5b:b7:96: 3f:d6:54:c1:0e:11:4f:42:42:7b:8a:ec:7b:b3:c9: fb:88:48:4d:04:ac:3f:d6:68:1b:c0:3c:fc:b5:34: 79:89:3d:d5:a3:7e:70:4f:33:4d:d9:ef:9b:21:c8: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:67:8C:52:E7:1D:DF:84:28:C3:E5:74:5C:A6:96:0A:4C:CE:1B:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d498f1ad-6550-3118-8da5-441323aa3937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:29:64:6b:41:aa:b8:c7:a4:40:fd:e4:b7:e1:3d:62:a9:f6: f0:14:c7:55:e3:3c:93:84:df:5c:d2:c7:0b:dc:e5:19:cb:89: 08:22:75:59:a8:25:da:fa:c5:e8:c1:af:41:7f:4c:ac:7b:1a: d1:3e:9e:8f:7e:28:b4:ef:9e:f6:e5:26:61:43:9b:83:32:e5: 49:f4:14:f3:7a:a5:56:12:c2:c6:fc:73:c9:5e:43:00:c9:dd: ec:5c:b3:49:ac:1b:01:45:bc:67:08:8b:41:30:94:0f:c0:bf: 56:8c:c7:81:8e:35:40:63:d9:87:b1:f5:9b:ed:19:94:c5:f0: 07:cd:3b:de:56:bf:7a:a5:ee:09:ac:68:ec:15:52:26:4a:25: 35:48:fc:50:51:fe:88:7f:44:6f:4f:c2:c8:16:44:b0:e0:1c: 0c:f7:8c:da:8c:09:20:a0:db:1f:b9:86:92:b2:f7:1c:cf:d6: 1e:d2:5c:b9:b9:81:19:07:53:62:cf:73:5b:f4:f3:cd:cb:bf: 00:87:d8:03:82:dd:a5:14:23:3d:94:a6:d8:75:a3:8d:a4:03: b2:f0:b3:3d:3d:55:21:57:14:02:fb:eb:1d:61:d2:df:ae:21: ae:9f:de:a3:d8:32:ab:50:3d:9d:f9:c6:a6:a8:58:70:e0:0a: c0:75:16:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0wOjJX7hBY4d64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk NmViZDU1MGYtYTQ4Yi00YzgxLTg5OWEtZWI5NTFlODJjMDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHzH/+pu6AKaSYcwH6bMaj65N4HItkFEpUJT rG8DXeXvsOzvwcIWMFvFdcAj4v6TUx89pMom6+ztQnRwNaIItaJq95vnFh9nzuAR qU1lXUVMsihfnYwEFvyUwYZjlsRy2XKWoipHssaKbxoHcDX90PTG9HnIXCaofnkE EYb6aKgfb3N4JP+WwHBzM6ATGPGM+Xm8j8A5LKWyaFInOzGrmrJEJiulsLC7H59V pubkTFi7vpz90Ric7t75T677I2EfpaCkUfYzDgaNr77al1xbt5Y/1lTBDhFPQkJ7 iux7s8n7iEhNBKw/1mgbwDz8tTR5iT3Vo35wTzNN2e+bIch1oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJFnjFLnHd+EKMPldFymlgpMzhuFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZDQ5OGYxYWQtNjU1MC0z MTE4LThkYTUtNDQxMzIzYWEzOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5klMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHkpZGtBqrjHpED95LfhPWKp9vAUx1XjPJOE31zSxwvc5RnLiQgidVmo Jdr6xejBr0F/TKx7GtE+no9+KLTvnvblJmFDm4My5Un0FPN6pVYSwsb8c8leQwDJ 3excs0msGwFFvGcIi0EwlA/Av1aMx4GONUBj2Yex9ZvtGZTF8AfNO95Wv3ql7gms aOwVUiZKJTVI/FBR/oh/RG9PwsgWRLDgHAz3jNqMCSCg2x+5hpKy9xzP1h7SXLm5 gRkHU2LPc1v0883LvwCH2AOC3aUUIz2Upth1o42kA7Lwsz09VSFXFAL76x1h0t+u Ia6f3qPYMqtQPZ35xqaoWHDgCsB1FrY= -----END CERTIFICATE-----Generated at Sun Oct 25 23:59:42 2026 by rpki-client