$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a4aefe7f-cf59-3b6b-95b4-466c4989bec9.roa File: a4aefe7f-cf59-3b6b-95b4-466c4989bec9.roa (raw, json) Hash identifier: q3mHuV7KW62Oa8vb6clR639wxWSMzlbZG0ohqcv7BBQ= Subject key identifier: 61:5C:98:D2:6B:C1:70:33:13:B9:F6:28:5A:59:02:02:2E:BB:B8:22 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D70BF80196F43A42400 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a4aefe7f-cf59-3b6b-95b4-466c4989bec9.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Sat 11 May 2030 04:00:00 +0000 asID: 8075 IP address blocks: 131.253.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:70:bf:80:19:6f:43:a4:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : May 11 04:00:00 2030 GMT Subject: CN=50ef8429-9c33-4b35-aa1e-712355fe07a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:f8:cf:77:25:96:21:02:d2:71:3a:97:91: 5c:93:09:f7:2b:b1:62:eb:49:5d:25:c6:9c:6e:96: c9:d9:74:17:cb:87:88:c3:d9:62:31:be:92:1e:88: 5e:cc:a3:30:86:b9:24:f0:6a:9e:21:bb:7f:16:68: 37:8d:59:e2:07:03:0e:03:eb:93:27:e1:98:d6:29: 24:2d:e6:f3:19:bb:bf:3a:22:18:97:70:3f:c7:17: df:19:09:64:bd:4a:e1:23:36:27:b7:38:4e:ed:43: 82:a9:72:9b:e9:5b:7d:7a:78:ba:6e:e9:7b:83:29: 19:7f:b1:8c:9d:bd:18:12:44:89:ca:81:17:dc:f2: fa:43:fd:60:26:68:f8:18:80:ba:7b:3b:f2:13:8b: 3b:9f:5a:75:71:19:41:3f:12:80:f6:7d:0a:e1:83: 55:36:31:da:3c:6a:e3:d0:0f:c6:75:a7:23:0c:ed: 07:7a:dc:df:4e:4f:e1:db:9a:2a:fa:6a:a2:fd:d7: a8:4f:ab:39:93:21:a1:f9:a1:44:ff:40:e2:55:ef: 6e:3c:e2:79:ce:55:13:a2:79:91:08:5d:d1:d0:66: 71:c6:fd:7a:88:a1:95:88:c1:d8:f8:64:c2:a1:3b: 3d:aa:02:28:b6:75:8d:37:69:20:53:0d:5b:d4:01: 89:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:98:D2:6B:C1:70:33:13:B9:F6:28:5A:59:02:02:2E:BB:B8:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a4aefe7f-cf59-3b6b-95b4-466c4989bec9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:22:a3:01:21:f5:f0:4e:38:0e:69:ab:0a:af:7e:73:02:e2: 03:03:ac:83:3b:e6:c8:0e:0a:d5:06:3d:e2:90:90:11:ef:9e: 83:cb:81:da:57:fa:1a:be:05:4f:70:6a:25:3c:76:08:b6:44: 65:e4:5b:9c:92:3a:49:2a:bb:ba:7a:b5:a7:87:96:f5:31:aa: a5:73:c4:1c:86:44:56:0c:6a:04:42:55:b5:e4:76:2d:29:e3: fd:70:d5:f0:64:de:4b:a2:81:5e:ed:50:f8:94:7e:fa:21:68: 50:ac:66:c5:5d:9c:ae:a1:3f:5c:b9:ba:7d:61:82:9c:03:9c: 6b:d5:50:2a:f1:7c:81:4b:b5:f6:dd:ec:3f:8e:1a:44:d2:78: 67:bc:f3:c0:0e:76:57:10:36:df:e5:20:9f:36:fd:cb:3f:78: 84:2f:fd:49:28:76:8a:40:21:f3:0c:f6:f9:9f:bf:ff:ef:89: 21:c6:12:59:d6:c6:94:5f:00:16:94:83:93:63:03:ad:97:64: 6b:d0:4f:92:5a:62:92:cf:56:19:c7:83:34:1c:b6:42:cd:fe: 86:30:d3:a8:04:79:da:49:8c:27:db:d9:a5:60:ff:b2:55:c6: 9f:9e:5a:0d:f3:8e:db:8e:2e:bf:c6:7b:c5:90:d5:f6:1c:9b: 97:a3:de:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI11wv4AZb0OkJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk NTBlZjg0MjktOWMzMy00YjM1LWFhMWUtNzEyMzU1ZmUwN2ExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo74z3clliEC0nE6l5Fckwn3K7Fi60ldJcac bpbJ2XQXy4eIw9liMb6SHohezKMwhrkk8GqeIbt/Fmg3jVniBwMOA+uTJ+GY1ikk LebzGbu/OiIYl3A/xxffGQlkvUrhIzYntzhO7UOCqXKb6Vt9eni6bul7gykZf7GM nb0YEkSJyoEX3PL6Q/1gJmj4GIC6ezvyE4s7n1p1cRlBPxKA9n0K4YNVNjHaPGrj 0A/GdacjDO0HetzfTk/h25oq+mqi/deoT6s5kyGh+aFE/0DiVe9uPOJ5zlUTonmR CF3R0GZxxv16iKGViMHY+GTCoTs9qgIotnWNN2kgUw1b1AGJ8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFcmNJrwXAzE7n2KFpZAgIuu7giMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvYTRhZWZlN2YtY2Y1OS0z YjZiLTk1YjQtNDY2YzQ5ODliZWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg/0YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEiowEh9fBOOA5pqwqvfnMC4gMDrIM75sgOCtUGPeKQkBHvnoPLgdpX +hq+BU9waiU8dgi2RGXkW5ySOkkqu7p6taeHlvUxqqVzxByGRFYMagRCVbXkdi0p 4/1w1fBk3kuigV7tUPiUfvohaFCsZsVdnK6hP1y5un1hgpwDnGvVUCrxfIFLtfbd 7D+OGkTSeGe888AOdlcQNt/lIJ82/cs/eIQv/UkodopAIfMM9vmfv//viSHGElnW xpRfABaUg5NjA62XZGvQT5JaYpLPVhnHgzQctkLN/oYw06gEedpJjCfb2aVg/7JV xp+eWg3zjtuOLr/Ge8WQ1fYcm5ej3lg= -----END CERTIFICATE-----Generated at Sun Sep 13 15:01:41 2026 by rpki-client