$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa File: 4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa (raw, json) Hash identifier: oNOkrvH54qLB351kgiDC+vMAVrcnPyXPOTkK9wEcSXw= Subject key identifier: 53:8F:64:27:39:1E:0F:A6:F4:3F:A7:F4:AC:0B:FF:EF:B8:00:89:8F Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D421BD321642C38AE80 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Mon 10 Jun 2030 04:00:00 +0000 asID: 23468 IP address blocks: 131.253.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:42:1b:d3:21:64:2c:38:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Jun 10 04:00:00 2030 GMT Subject: CN=5e068ffa-ea9d-4983-aefc-0474b5f17df3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:72:db:14:1d:23:43:a8:db:03:b2:fb:fc: 17:0a:01:8c:7d:0d:ec:91:c5:ad:87:73:b0:6f:f4: a3:46:9e:27:37:15:be:b7:a9:a7:e2:cd:d3:83:41: cf:32:c9:0f:09:a8:50:c2:8d:03:3f:b5:34:52:c4: 66:d9:53:43:56:d2:32:40:cc:aa:09:bc:06:d9:b1: 95:fa:cd:d0:0b:84:65:d8:83:be:f5:2d:67:0d:0d: 02:7a:b8:2c:f6:f9:67:1a:d2:66:c8:4d:4b:79:18: 16:83:38:55:a7:39:7a:d0:31:1c:a7:d5:ff:68:03: 4b:49:4b:b6:95:81:9f:85:1b:12:39:b5:d1:5a:84: 41:32:c3:31:d7:b3:93:15:dc:a7:c2:47:31:98:5e: ad:da:61:65:1f:79:5c:69:97:91:fa:0f:e4:d8:a6: bc:5e:d6:ed:e6:ac:49:a7:a8:42:eb:bf:ab:6f:35: 11:be:93:cb:fa:f6:5e:d5:d1:a4:6c:e8:ce:60:ed: 1c:54:ff:68:cc:eb:fb:00:43:03:95:6b:e1:85:34: 0e:44:a8:ac:27:db:d2:b2:14:3d:e1:0b:a5:7a:35: 62:d0:4c:38:0b:2f:fd:1a:e7:da:9d:2f:bd:bd:da: 88:f6:c6:89:8b:2d:02:fb:28:a2:fb:48:c6:a0:e2: 34:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8F:64:27:39:1E:0F:A6:F4:3F:A7:F4:AC:0B:FF:EF:B8:00:89:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/4eb7a05c-ceed-30c7-bd82-edb0c78e7e05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c7:5d:88:b6:f9:d8:09:03:fb:6d:b3:55:53:65:4f:d0:7e: 5d:32:00:68:44:5c:ab:03:a0:d4:ec:3e:36:0c:94:b9:c5:b7: ed:6a:da:02:bd:bc:0a:6f:69:56:f0:db:6e:e9:c5:91:95:58: 21:d0:c9:48:2b:bd:da:2a:c0:1f:8e:db:e0:01:6e:b2:ca:e9: 01:85:76:66:7b:67:c9:c3:df:c8:6c:f7:e0:35:39:c4:ca:8e: 2a:14:16:0f:f7:40:95:89:d4:9a:bb:6d:51:1c:e2:d5:cb:0f: cd:82:ad:01:ec:91:54:93:e3:8c:26:c6:8d:c0:43:16:21:37: 04:19:e2:62:5c:40:e3:fe:5c:f0:2f:fb:95:46:60:50:69:91: e8:28:9c:3c:0c:24:30:83:21:c0:68:39:4b:1c:a5:f8:18:65: 26:2c:74:47:5f:b4:a5:01:06:bc:85:78:a0:8c:f9:85:d5:45: 5f:ca:77:1a:26:5b:a3:2f:72:fb:a2:a2:4e:7a:0b:55:9b:fa: 71:f5:ca:f6:ec:ae:a2:aa:fd:19:f6:19:0a:f6:8e:c5:e7:c0: 97:b5:58:0d:dc:95:ed:86:57:43:28:ba:5a:3d:a7:58:f7:99: 75:44:2e:c5:60:b7:3f:0c:f7:03:97:46:6b:ba:ea:ed:1d:7a: 73:f1:b8:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI11CG9MhZCw4roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDYxMDA0MDAwMFowLzEtMCsGA1UEAxMk NWUwNjhmZmEtZWE5ZC00OTgzLWFlZmMtMDQ3NGI1ZjE3ZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvdy2xQdI0Oo2wOy+/wXCgGMfQ3skcWth3Ow b/SjRp4nNxW+t6mn4s3Tg0HPMskPCahQwo0DP7U0UsRm2VNDVtIyQMyqCbwG2bGV +s3QC4Rl2IO+9S1nDQ0Cergs9vlnGtJmyE1LeRgWgzhVpzl60DEcp9X/aANLSUu2 lYGfhRsSObXRWoRBMsMx17OTFdynwkcxmF6t2mFlH3lcaZeR+g/k2Ka8Xtbt5qxJ p6hC67+rbzURvpPL+vZe1dGkbOjOYO0cVP9ozOv7AEMDlWvhhTQORKisJ9vSshQ9 4QulejVi0Ew4Cy/9GufanS+9vdqI9saJiy0C+yii+0jGoOI0lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOPZCc5Hg+m9D+n9KwL/++4AImPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvNGViN2EwNWMtY2VlZC0z MGM3LWJkODItZWRiMGM3OGU3ZTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg/0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvHXYi2+dgJA/tts1VTZU/Qfl0yAGhEXKsDoNTsPjYMlLnFt+1q2gK9 vApvaVbw227pxZGVWCHQyUgrvdoqwB+O2+ABbrLK6QGFdmZ7Z8nD38hs9+A1OcTK jioUFg/3QJWJ1Jq7bVEc4tXLD82CrQHskVST44wmxo3AQxYhNwQZ4mJcQOP+XPAv +5VGYFBpkegonDwMJDCDIcBoOUscpfgYZSYsdEdftKUBBryFeKCM+YXVRV/Kdxom W6Mvcvuiok56C1Wb+nH1yvbsrqKq/Rn2GQr2jsXnwJe1WA3cle2GV0Moulo9p1j3 mXVELsVgtz8M9wOXRmu66u0denPxuKk= -----END CERTIFICATE-----Generated at Sun Sep 13 15:47:33 2026 by rpki-client