$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa File: ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa (raw, json) Hash identifier: ekj8Fuo9ZujfCsKF0tiN7xsG6KHuwUiLZ+MTlz9TcH0= Subject key identifier: 58:D9:36:66:91:0A:20:D1:F6:07:62:AF:4F:6A:CC:A6:D3:C9:17:50 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E54B496FCDE46B79D724A0BE0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 0 IP address blocks: 131.153.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:96:fc:de:46:b7:9d:72:4a:0b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=835dbd70-9fbf-4c45-8353-fca5254be817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:2f:6f:fc:7a:30:58:9f:72:ae:50:de:43:eb: 9a:f6:e6:bd:d7:55:6a:99:ca:cf:8a:75:05:14:63: 1a:5d:3b:86:b7:f0:ae:52:23:6c:37:46:20:6b:3f: 52:16:ac:5a:ab:cc:c7:53:78:0d:cf:64:6e:d1:a4: 68:42:0b:2c:ad:e7:85:ce:b1:28:44:56:09:24:23: 66:70:ab:13:e3:e7:2f:4e:33:01:64:6d:23:b5:3c: 3d:5e:55:86:7a:14:ed:f4:f3:bd:08:ba:1d:b3:bc: e6:01:9b:0c:74:f3:9a:74:14:64:5e:9a:b3:cc:08: 83:22:2c:ad:c8:23:5b:3a:10:33:36:5b:0c:fe:e3: 8f:31:e3:62:f1:07:25:c4:8b:7e:ea:e4:90:db:5d: b1:a5:99:9f:bd:a7:50:b8:34:a7:4b:0b:ce:6c:1e: 73:14:cb:7c:f7:5b:4c:08:2b:3e:e8:21:7e:c6:8f: 47:24:00:a7:84:47:ee:06:a0:2c:14:6f:63:3a:52: 72:7b:27:3d:80:85:d7:20:ce:d6:d5:05:e3:4e:bc: d0:21:dd:81:bb:33:be:21:97:17:74:89:3a:77:5d: 59:1c:e9:d3:4a:30:80:ec:b1:f5:89:f0:cf:07:15: 76:85:d2:b5:24:3d:23:33:ea:23:99:4c:39:5d:68: 30:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:D9:36:66:91:0A:20:D1:F6:07:62:AF:4F:6A:CC:A6:D3:C9:17:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:24:45:f1:cf:96:71:a9:69:c5:63:9b:3f:98:2f:e3:38:bf: 6f:cc:a7:35:3c:b7:a2:d8:e7:87:82:f6:b4:0a:a3:0f:51:fd: c3:d9:a6:17:3c:7e:63:6e:5f:d0:bc:08:34:b8:fa:7a:fe:88: cc:86:1f:c3:4c:91:f5:8f:b4:1d:87:a0:6b:b6:1d:be:64:50: c0:e2:d3:4b:db:dd:5c:3b:d8:93:7c:c9:ec:93:c9:26:39:e8: d7:71:27:48:f2:4e:20:a1:3d:30:a9:8e:bb:e5:e1:01:7b:7a: d9:cd:3d:df:64:49:5f:55:7c:28:c7:35:45:dd:99:37:8d:4e: fb:3d:ae:e0:ef:c7:1a:5f:6a:4f:87:78:f7:55:a6:33:56:78: 4f:21:89:e1:b3:01:79:b8:22:16:57:e6:7c:89:93:d1:a5:09: 4d:94:84:4a:68:02:3f:31:2c:a6:0d:90:26:b7:6c:d2:17:96: 9d:9b:94:eb:c1:f2:c8:bc:d4:43:ea:fa:2e:c1:91:7b:c7:e0: ee:71:95:f4:e9:7c:79:8b:64:4f:dd:bf:5c:01:0a:a5:9c:7d: 29:f0:e5:86:7f:cb:2a:b9:74:a9:fc:5d:e6:c1:35:d2:b0:5d: c1:22:1d:d3:ce:16:22:8c:6f:05:2a:b0:9a:5b:3a:a9:f3:18: 84:c1:69:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJb83ka3nXJKC+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk ODM1ZGJkNzAtOWZiZi00YzQ1LTgzNTMtZmNhNTI1NGJlODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzy9v/HowWJ9yrlDeQ+ua9ua911VqmcrPinUF FGMaXTuGt/CuUiNsN0Ygaz9SFqxaq8zHU3gNz2Ru0aRoQgssreeFzrEoRFYJJCNm cKsT4+cvTjMBZG0jtTw9XlWGehTt9PO9CLods7zmAZsMdPOadBRkXpqzzAiDIiyt yCNbOhAzNlsM/uOPMeNi8QclxIt+6uSQ212xpZmfvadQuDSnSwvObB5zFMt891tM CCs+6CF+xo9HJACnhEfuBqAsFG9jOlJyeyc9gIXXIM7W1QXjTrzQId2BuzO+IZcX dIk6d11ZHOnTSjCA7LH1ifDPBxV2hdK1JD0jM+ojmUw5XWgwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjZNmaRCiDR9gdir09qzKbTyRdQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGRjYWQ0ZDAtNTBmOS0z ZjYzLTk2NjAtN2I1YjkzMWJiYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMkRfHPlnGpacVjmz+YL+M4v2/MpzU8t6LY54eC9rQKow9R/cPZphc8 fmNuX9C8CDS4+nr+iMyGH8NMkfWPtB2HoGu2Hb5kUMDi00vb3Vw72JN8yeyTySY5 6NdxJ0jyTiChPTCpjrvl4QF7etnNPd9kSV9VfCjHNUXdmTeNTvs9ruDvxxpfak+H ePdVpjNWeE8hieGzAXm4IhZX5nyJk9GlCU2UhEpoAj8xLKYNkCa3bNIXlp2blOvB 8si81EPq+i7BkXvH4O5xlfTpfHmLZE/dv1wBCqWcfSnw5YZ/yyq5dKn8XebBNdKw XcEiHdPOFiKMbwUqsJpbOqnzGITBaXI= -----END CERTIFICATE-----Generated at Tue Jul 21 22:18:33 2026 by rpki-client