$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4b8b59d4-bac5-3f85-a92b-d07ba73e9164.roa File: 4b8b59d4-bac5-3f85-a92b-d07ba73e9164.roa (raw, json) Hash identifier: u5QHt+VGNiBBQLbU7jzHayxxc44ttuE42pJtyezpW5Q= Subject key identifier: A4:D2:7C:8E:40:89:F4:50:54:AE:21:90:4C:02:1E:F7:3C:34:46:72 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D4E0780FCFC05CBF380 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4b8b59d4-bac5-3f85-a92b-d07ba73e9164.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Mon 13 May 2030 04:00:00 +0000 asID: 8075 IP address blocks: 131.253.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:4e:07:80:fc:fc:05:cb:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : May 13 04:00:00 2030 GMT Subject: CN=9fbcd8ab-cd97-4f93-85e5-c7a3430d6412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2a:d3:0d:8c:c6:02:9a:3b:4b:b7:55:57:86: 15:d9:ff:90:6b:7e:13:b8:b0:98:e0:50:5f:b7:8f: 5f:ba:56:74:fe:68:65:6d:7b:c7:a9:bc:82:60:87: 63:2e:73:19:da:02:51:e7:b9:c0:cc:65:53:81:9c: 78:b6:2c:dc:92:38:de:8b:91:cb:d2:ce:26:90:16: aa:2e:ba:6e:a9:2e:a1:ed:bf:fa:18:a4:7a:35:5f: f5:3d:55:c7:21:2a:3f:49:2c:93:f4:43:7d:44:e1: 1c:88:f1:a8:ec:37:47:c7:47:de:88:06:fb:a1:e9: 34:f0:b8:32:3c:71:1e:b5:e0:ef:ed:30:c7:62:d9: 71:13:63:60:13:b7:70:5b:b3:b1:87:79:ae:0c:13: 4e:de:a7:66:9c:29:35:08:c1:16:8f:b2:2d:2d:69: 92:42:db:d7:78:6e:5e:0d:77:b3:f3:cc:9d:7d:6b: 04:26:08:a8:ec:a1:4f:16:44:03:4f:6a:f9:af:f8: 7f:f2:64:85:4f:aa:fc:cc:41:6e:8a:0a:f1:61:4d: 87:1e:92:d5:80:a1:9a:d7:c4:62:26:0c:d3:24:66: 35:27:7e:28:23:08:0a:c5:69:52:af:23:7c:82:ae: dd:cf:f1:b9:d8:88:6c:ad:7b:da:b0:8b:6a:79:c4: 45:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:7C:8E:40:89:F4:50:54:AE:21:90:4C:02:1E:F7:3C:34:46:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4b8b59d4-bac5-3f85-a92b-d07ba73e9164.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:01:a8:32:a3:7d:c8:5f:dd:db:d1:d8:91:57:54:62:f2:79: e9:85:74:6e:b0:a7:bd:8d:db:11:4d:3c:8c:e8:fc:47:3c:5d: 11:e5:cb:04:39:01:42:95:22:9b:e2:79:73:15:2b:69:73:95: f1:c3:57:ad:1b:c2:89:89:2d:4a:d7:87:ae:9f:e1:97:61:48: 4d:f2:fa:fe:06:6e:5d:95:4f:36:c4:69:83:d9:db:40:92:3f: 56:da:f3:c1:a5:57:ca:d0:08:7a:b8:8a:3d:67:ac:73:94:fc: cb:a6:ca:50:af:2f:1a:f4:41:bb:47:1b:b5:e2:bb:42:e7:66: cc:b8:37:e1:88:53:38:07:a6:c1:45:a0:b5:d5:01:aa:74:ed: 06:92:45:3d:90:28:a9:6e:8e:da:49:99:0e:de:a1:b4:a4:26: a8:b3:d5:e7:2d:91:a6:2b:f3:44:d9:1e:60:72:c7:a6:2c:b2: bd:5b:17:3a:83:ee:c8:63:dc:56:bc:4d:52:4e:c9:19:53:d9: 49:6a:e2:e4:0c:f1:74:e0:c0:0d:d2:48:d8:6e:59:dc:c7:ef: db:4a:18:c0:8b:ce:8d:e7:6e:bf:9f:07:bc:9b:4c:9e:6f:c6: e3:35:cd:d1:10:ac:f4:e0:f9:43:49:2d:c3:8a:04:fa:cf:bb: 94:0d:d4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI11OB4D8/AXL84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDUxMzA0MDAwMFowLzEtMCsGA1UEAxMk OWZiY2Q4YWItY2Q5Ny00ZjkzLTg1ZTUtYzdhMzQzMGQ2NDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yrTDYzGApo7S7dVV4YV2f+Qa34TuLCY4FBf t49fulZ0/mhlbXvHqbyCYIdjLnMZ2gJR57nAzGVTgZx4tizckjjei5HL0s4mkBaq LrpuqS6h7b/6GKR6NV/1PVXHISo/SSyT9EN9ROEciPGo7DdHx0feiAb7oek08Lgy PHEeteDv7TDHYtlxE2NgE7dwW7Oxh3muDBNO3qdmnCk1CMEWj7ItLWmSQtvXeG5e DXez88ydfWsEJgio7KFPFkQDT2r5r/h/8mSFT6r8zEFuigrxYU2HHpLVgKGa18Ri JgzTJGY1J34oIwgKxWlSryN8gq7dz/G52IhsrXvasItqecRFrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTSfI5AifRQVK4hkEwCHvc8NEZyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvNGI4YjU5ZDQtYmFjNS0z Zjg1LWE5MmItZDA3YmE3M2U5MTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg/0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgBqDKjfchf3dvR2JFXVGLyeemFdG6wp72N2xFNPIzo/Ec8XRHlywQ5 AUKVIpvieXMVK2lzlfHDV60bwomJLUrXh66f4ZdhSE3y+v4Gbl2VTzbEaYPZ20CS P1ba88GlV8rQCHq4ij1nrHOU/MumylCvLxr0QbtHG7Xiu0LnZsy4N+GIUzgHpsFF oLXVAap07QaSRT2QKKlujtpJmQ7eobSkJqiz1ectkaYr80TZHmByx6Yssr1bFzqD 7shj3Fa8TVJOyRlT2Ulq4uQM8XTgwA3SSNhuWdzH79tKGMCLzo3nbr+fB7ybTJ5v xuM1zdEQrPTg+UNJLcOKBPrPu5QN1B8= -----END CERTIFICATE-----Generated at Sat Sep 5 01:49:17 2026 by rpki-client