$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa File: f6f9a004-d208-326b-81c8-642c2ada7bb8.roa (raw, json) Hash identifier: syHoq0Y7wOIE3IJH+MLul/iDI5kQClKvED1tUY9O0wE= Subject key identifier: 29:E5:56:1E:83:81:15:B1:B9:5A:BF:07:D4:29:4E:19:B1:68:11:55 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584E8B24F773A96727340EDA2000 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa Signing time: Sat 18 Jul 2026 21:00:11 +0000 ROA not before: Sat 18 Jul 2026 21:00:11 +0000 ROA not after: Fri 16 Oct 2026 21:00:11 +0000 asID: 152879 IP address blocks: 131.153.230.0/24 maxlen: 32 131.153.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8b:24:f7:73:a9:67:27:34:0e:da:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jul 18 21:00:11 2026 GMT Not After : Oct 16 21:00:11 2026 GMT Subject: CN=0dd42bf6-40a6-48d7-81db-94943fd8d986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:8e:98:cd:0a:be:de:7f:cb:3f:d3:68:75: df:fc:ab:35:4a:59:17:ad:ee:44:ad:c4:94:eb:f2: 22:41:b5:3f:f5:07:7d:c1:28:ca:ca:83:1f:2d:ac: b6:06:e3:cb:38:16:c1:59:8c:06:20:76:1d:f1:1f: 50:89:8e:b3:bb:61:ea:fa:32:30:7e:d4:e8:4a:86: 16:d6:29:ff:4d:33:dd:66:77:a1:74:e1:41:26:0d: a3:3d:6e:b2:9b:f7:46:29:15:f0:a4:b7:24:33:f2: 4b:40:2d:17:23:c2:d5:f5:8d:30:96:47:10:9f:2c: ac:0b:b8:32:c6:c4:8c:77:33:32:c8:98:f4:c1:e7: f5:e4:71:7a:75:75:37:d6:69:8a:c0:5e:96:94:fb: 29:95:e9:fa:93:98:63:0a:8d:a2:9c:e9:b4:25:87: 93:e7:cb:03:6b:e2:d5:22:6c:78:64:7b:ba:3b:d2: 9f:d8:48:09:e9:e7:a0:47:29:35:ed:2a:f3:4e:78: 38:86:af:9b:d5:c4:7b:dd:8d:22:26:84:f3:fe:8d: da:a3:ac:12:cb:0b:85:97:a6:bd:76:7f:b9:f1:04: 70:af:9c:95:4b:1a:f8:44:4b:98:25:e3:37:91:97: 01:1a:f5:f2:e3:e1:34:58:df:d3:8f:8c:bc:76:ba: b5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E5:56:1E:83:81:15:B1:B9:5A:BF:07:D4:29:4E:19:B1:68:11:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.230.0/24 131.153.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:0a:5a:9b:23:c6:f0:6d:2f:4c:1a:15:ac:45:e4:ba:20:89: 0f:91:82:e5:c7:e2:b6:47:fd:20:dd:77:23:83:37:c6:2f:4c: 65:8b:7c:46:ee:ee:c5:8a:d4:3d:67:f2:25:66:73:8f:01:ff: a1:3c:17:fd:7b:a5:58:d0:61:a2:64:c8:80:4b:3f:55:40:bb: 31:77:6d:ca:0a:d3:fa:a0:c8:3c:13:a3:97:25:3e:f0:7a:83: b6:57:b8:18:26:ec:5e:32:c5:17:76:56:e9:3a:04:7e:26:ca: 53:e5:e0:f4:1a:bf:8c:d1:fd:75:e9:14:e0:82:36:a8:4d:6c: 95:68:94:2b:5f:bc:5b:05:07:3c:af:67:a3:07:e7:06:74:d0: f7:5c:e8:b4:de:f1:27:2b:ac:5f:17:e7:ff:a8:e9:cd:04:07: 8c:22:79:9b:62:c8:03:c2:dc:aa:71:b1:51:88:13:c4:ef:8e: e8:f2:de:af:f7:76:97:48:f6:96:cd:c7:39:37:75:f1:cd:ce: 6a:e3:c8:47:c2:26:f7:90:82:3b:12:71:7e:7d:5b:28:b6:e3: d2:7a:d0:c6:06:77:84:99:f5:c3:1c:2f:58:c6:35:50:61:29: 05:ff:1e:0f:50:8a:3c:24:d9:63:cc:4f:07:03:49:e0:e6:59: 51:51:c4:63 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE6LJPdzqWcnNA7aIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDcxODIxMDAxMVoXDTI2MTAxNjIxMDAxMVowLzEtMCsGA1UEAxMk MGRkNDJiZjYtNDBhNi00OGQ3LTgxZGItOTQ5NDNmZDhkOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIWOmM0Kvt5/yz/TaHXf/Ks1SlkXre5ErcSU 6/IiQbU/9Qd9wSjKyoMfLay2BuPLOBbBWYwGIHYd8R9QiY6zu2Hq+jIwftToSoYW 1in/TTPdZnehdOFBJg2jPW6ym/dGKRXwpLckM/JLQC0XI8LV9Y0wlkcQnyysC7gy xsSMdzMyyJj0wef15HF6dXU31mmKwF6WlPsplen6k5hjCo2inOm0JYeT58sDa+LV Imx4ZHu6O9Kf2EgJ6eegRyk17SrzTng4hq+b1cR73Y0iJoTz/o3ao6wSywuFl6a9 dn+58QRwr5yVSxr4REuYJeM3kZcBGvXy4+E0WN/Tj4y8drq1vwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCnlVh6DgRWxuVq/B9QpThmxaBFVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjZmOWEwMDQtZDIwOC0z MjZiLTgxYzgtNjQyYzJhZGE3YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg5nmAwQA g5n1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACsKWpsjxvBtL0waFaxF5LogiQ+RguXH4rZH/SDddyODN8Yv TGWLfEbu7sWK1D1n8iVmc48B/6E8F/17pVjQYaJkyIBLP1VAuzF3bcoK0/qgyDwT o5clPvB6g7ZXuBgm7F4yxRd2Vuk6BH4mylPl4PQav4zR/XXpFOCCNqhNbJVolCtf vFsFBzyvZ6MH5wZ00Pdc6LTe8ScrrF8X5/+o6c0EB4wieZtiyAPC3KpxsVGIE8Tv jujy3q/3dpdI9pbNxzk3dfHNzmrjyEfCJveQgjsScX59Wyi249J60MYGd4SZ9cMc L1jGNVBhKQX/Hg9Qijwk2WPMTwcDSeDmWVFRxGM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:17:58 2026 by rpki-client