$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa File: fd024f7b-7f82-397a-b676-0e4b1349bccf.roa (raw, json) Hash identifier: nglfVah/0alSQX31+vI/CKOzEAd5jI/2e+aRvDAk5NA= Subject key identifier: 07:ED:D6:3B:A9:0E:0D:4E:92:0D:0D:35:7C:22:89:BE:32:8D:A5:62 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F9A6862C0583091E354447798 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 0 IP address blocks: 131.153.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:62:c0:58:30:91:e3:54:44:77:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=3a840ef2-9af5-4176-a35c-60c999a28fde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:8d:a4:4c:be:18:f3:74:48:4a:9a:00:28: 30:67:07:14:88:f5:d5:b4:c9:61:dd:6e:d7:f2:1c: a8:8c:d4:c2:08:1b:e8:6d:3f:dd:11:fd:3f:53:f7: c2:02:f2:44:6e:78:e0:84:17:cc:ce:52:b5:dc:65: 15:f8:45:77:0e:dd:ff:69:21:7e:7d:22:0c:45:ea: 6a:40:6a:c1:23:e7:10:aa:fa:98:f4:f2:6b:61:bd: e1:db:dc:bd:ab:b1:e9:7c:a6:75:9d:c0:4d:90:e7: a0:58:d6:1a:a6:5e:fd:94:4e:15:d9:c0:1e:33:fb: a0:55:13:10:e1:c9:8a:00:bf:c5:0f:cd:da:5c:be: b5:16:f5:b8:44:62:83:02:24:fa:ff:ad:e0:5e:4d: 04:5c:de:bb:a1:e3:81:9b:db:0f:28:f6:10:00:4f: e8:71:88:ce:fa:6f:6f:27:ff:bd:0e:d7:ca:50:13: 20:da:2c:57:1c:1a:7e:6e:b1:c7:49:f2:f6:00:86: 02:ba:ac:3d:e5:2f:ec:32:47:6b:c1:fc:b3:cc:d8: dd:2b:72:32:3b:d0:99:bd:b6:45:01:04:d0:80:17: fb:16:54:e4:17:69:6f:d9:81:70:3d:d4:71:04:ca: 00:08:bb:2c:c2:17:a7:70:95:77:7a:84:da:f1:9f: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:ED:D6:3B:A9:0E:0D:4E:92:0D:0D:35:7C:22:89:BE:32:8D:A5:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/fd024f7b-7f82-397a-b676-0e4b1349bccf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:fd:ea:84:26:b7:0f:d8:b6:47:62:7f:60:ec:f1:3c:1d:f0: d4:fc:b7:0f:bc:88:d9:77:96:b1:cf:8a:36:f9:b7:a6:ea:7d: 95:0a:d2:a5:24:8b:4c:e0:53:e3:ac:b1:50:a1:b5:90:f0:b6: 69:97:21:61:9b:d8:db:88:1c:4a:f7:d5:7a:55:7c:26:17:71: fc:d6:f5:91:77:c1:6f:cc:48:ba:04:85:03:3e:e4:30:35:74: b1:17:13:2e:53:ce:39:30:d9:55:b1:fa:1a:16:5d:0c:a5:b2: ed:0c:80:79:02:55:29:36:01:df:93:88:1f:a2:e8:67:3f:a6: ab:e4:cc:05:a1:55:ef:79:1a:17:59:7f:18:cb:9d:5f:aa:b9: 1e:2a:00:71:36:fc:dd:3b:52:a2:fb:99:b3:22:ad:c7:4e:44: 49:fe:4d:88:86:40:22:03:2a:05:0b:a3:66:c6:bc:f4:70:f6: bb:d1:ec:8f:cf:ce:b1:dc:40:b4:c0:2e:4b:b7:f0:cb:c5:8d: 6c:a7:0c:18:31:cd:56:94:19:28:16:51:0c:9f:67:35:0d:11: 6c:f5:71:10:d0:3c:91:b8:be:ac:f6:3a:49:fe:a5:5b:b1:2a: 64:15:9c:ef:37:16:10:a2:e4:71:97:d6:e2:49:7a:af:2f:77: 02:33:45:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGLAWDCR41REd5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2E4NDBlZjItOWFmNS00MTc2LWEzNWMtNjBjOTk5YTI4ZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSWNpEy+GPN0SEqaACgwZwcUiPXVtMlh3W7X 8hyojNTCCBvobT/dEf0/U/fCAvJEbnjghBfMzlK13GUV+EV3Dt3/aSF+fSIMRepq QGrBI+cQqvqY9PJrYb3h29y9q7HpfKZ1ncBNkOegWNYapl79lE4V2cAeM/ugVRMQ 4cmKAL/FD83aXL61FvW4RGKDAiT6/63gXk0EXN67oeOBm9sPKPYQAE/ocYjO+m9v J/+9DtfKUBMg2ixXHBp+brHHSfL2AIYCuqw95S/sMkdrwfyzzNjdK3IyO9CZvbZF AQTQgBf7FlTkF2lv2YFwPdRxBMoACLsswhencJV3eoTa8Z/82wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAft1jupDg1Okg0NNXwiib4yjaViMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZmQwMjRmN2ItN2Y4Mi0z OTdhLWI2NzYtMGU0YjEzNDliY2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5lAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAL96oQmtw/Ytkdif2Ds8Twd8NT8tw+8iNl3lrHPijb5t6bqfZUK0qUk i0zgU+OssVChtZDwtmmXIWGb2NuIHEr31XpVfCYXcfzW9ZF3wW/MSLoEhQM+5DA1 dLEXEy5Tzjkw2VWx+hoWXQylsu0MgHkCVSk2Ad+TiB+i6Gc/pqvkzAWhVe95GhdZ fxjLnV+quR4qAHE2/N07UqL7mbMircdOREn+TYiGQCIDKgULo2bGvPRw9rvR7I/P zrHcQLTALku38MvFjWynDBgxzVaUGSgWUQyfZzUNEWz1cRDQPJG4vqz2Okn+pVux KmQVnO83FhCi5HGX1uJJeq8vdwIzRSg= -----END CERTIFICATE-----Generated at Mon Oct 26 17:53:07 2026 by rpki-client