$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/8bfbc767-a9c8-3588-871d-ca6760ad5565.roa File: 8bfbc767-a9c8-3588-871d-ca6760ad5565.roa (raw, json) Hash identifier: JqGRwMpkiX9hBSTheg/mKT2OMI80wOuG6zJDJcgxTqE= Subject key identifier: F6:99:4D:F9:15:CE:EB:AD:4C:AF:E3:9F:05:BE:03:E7:AB:96:FE:B7 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D28196EDA12D30A2300 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/8bfbc767-a9c8-3588-871d-ca6760ad5565.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Fri 14 Jun 2030 04:00:00 +0000 asID: 8070 IP address blocks: 131.253.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:28:19:6e:da:12:d3:0a:23:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Jun 14 04:00:00 2030 GMT Subject: CN=42e13384-1666-4f06-84f7-d5b2e8b77228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:cf:42:c4:c9:b5:fa:ba:9c:9f:c2:8e:e2: 8f:3e:93:69:3a:85:04:e8:07:67:49:cd:6f:30:a6: b3:96:79:1b:80:67:5d:8e:66:ba:2c:85:fc:3f:dc: 47:f1:60:bf:b6:46:7b:7b:e6:16:47:90:b8:76:f5: 52:e6:1b:4f:9a:34:31:b0:53:ac:43:19:a2:2f:17: a8:d9:bd:3c:34:9b:41:86:d4:87:fb:39:f7:93:62: 2a:e5:ec:20:6a:f0:12:3d:17:ce:ba:d6:8c:90:fd: c1:49:a1:ed:23:3f:f7:04:37:32:d4:f3:54:79:a6: 6d:0c:9d:76:17:36:b3:63:d1:37:32:64:92:63:70: 25:99:ea:77:cb:81:31:7f:af:3f:b4:bf:ff:3b:b8: 9d:13:be:6d:20:b1:f6:5c:e4:ab:19:1c:34:90:e7: 2a:80:ad:9d:08:80:9a:6c:9e:0a:5e:46:cb:7e:e2: 74:aa:38:09:e5:7d:8b:64:70:07:c2:c1:04:67:79: ac:74:50:9c:1c:c0:f8:24:0b:68:fb:93:29:c2:af: af:b6:aa:a2:48:d2:4c:06:02:2b:c8:17:cc:91:06: 0f:e9:53:f3:30:42:1e:96:26:26:89:87:31:3d:1d: a7:9d:32:76:92:4c:71:83:2b:2c:e6:75:4b:8f:54: c1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:99:4D:F9:15:CE:EB:AD:4C:AF:E3:9F:05:BE:03:E7:AB:96:FE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/8bfbc767-a9c8-3588-871d-ca6760ad5565.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:74:af:c2:c4:fc:f1:de:a6:b1:56:43:52:75:56:8d:5d:55: 22:09:86:57:89:ad:72:57:bf:fc:23:82:8f:89:8c:02:c9:7a: f9:9a:78:a1:41:b1:d1:97:66:48:8c:c8:a5:2c:b3:57:f6:d9: 54:37:ba:47:14:93:25:30:29:30:84:cd:6a:02:43:e0:79:61: 29:d4:04:5a:aa:63:ad:69:f3:0f:f9:67:5f:61:84:50:82:fa: 19:96:ea:39:d3:ea:08:40:88:e3:21:1d:9b:a7:ad:96:8b:28: 66:a7:11:94:4f:3b:47:54:c1:cd:29:77:7a:05:2e:23:9b:17: 5c:b0:e0:df:ba:68:73:1c:82:02:5b:db:3b:bc:30:56:d5:c7: 91:e4:53:0b:8b:12:c0:b0:d2:23:96:5e:3c:a8:4c:bd:de:db: 56:18:d7:5e:0b:e3:8f:7d:a2:cf:bf:0a:5c:e3:1e:f7:7f:41: 95:c9:98:cc:65:c7:dc:a9:64:b3:5b:0a:8e:78:2d:67:20:6f: 42:e7:31:07:ab:70:d7:c8:d8:f1:15:ee:92:5d:05:d8:ae:c2: d6:6a:62:01:7f:37:dc:2e:1f:0f:99:f5:6b:8d:ef:fe:db:7a: 59:55:ca:e5:f2:aa:60:79:61:47:fd:30:5a:c0:43:0c:6e:87: 68:d2:97:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI10oGW7aEtMKIwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDYxNDA0MDAwMFowLzEtMCsGA1UEAxMk NDJlMTMzODQtMTY2Ni00ZjA2LTg0ZjctZDViMmU4Yjc3MjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFHPQsTJtfq6nJ/CjuKPPpNpOoUE6AdnSc1v MKazlnkbgGddjma6LIX8P9xH8WC/tkZ7e+YWR5C4dvVS5htPmjQxsFOsQxmiLxeo 2b08NJtBhtSH+zn3k2Iq5ewgavASPRfOutaMkP3BSaHtIz/3BDcy1PNUeaZtDJ12 FzazY9E3MmSSY3Almep3y4Exf68/tL//O7idE75tILH2XOSrGRw0kOcqgK2dCICa bJ4KXkbLfuJ0qjgJ5X2LZHAHwsEEZ3msdFCcHMD4JAto+5Mpwq+vtqqiSNJMBgIr yBfMkQYP6VPzMEIeliYmiYcxPR2nnTJ2kkxxgyss5nVLj1TB0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaZTfkVzuutTK/jnwW+A+erlv63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvOGJmYmM3NjctYTljOC0z NTg4LTg3MWQtY2E2NzYwYWQ1NTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg/14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC10r8LE/PHeprFWQ1J1Vo1dVSIJhleJrXJXv/wjgo+JjALJevmaeKFB sdGXZkiMyKUss1f22VQ3ukcUkyUwKTCEzWoCQ+B5YSnUBFqqY61p8w/5Z19hhFCC +hmW6jnT6ghAiOMhHZunrZaLKGanEZRPO0dUwc0pd3oFLiObF1yw4N+6aHMcggJb 2zu8MFbVx5HkUwuLEsCw0iOWXjyoTL3e21YY114L4499os+/ClzjHvd/QZXJmMxl x9ypZLNbCo54LWcgb0LnMQercNfI2PEV7pJdBdiuwtZqYgF/N9wuHw+Z9WuN7/7b ellVyuXyqmB5YUf9MFrAQwxuh2jSlzk= -----END CERTIFICATE-----Generated at Sun Sep 13 12:55:28 2026 by rpki-client