$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a9a20e90-b7e2-3d91-ac7b-483c904844fa.roa File: a9a20e90-b7e2-3d91-ac7b-483c904844fa.roa (raw, json) Hash identifier: /1GQu5sjb5UT47AsmR90rgvy2kD795Qm8k+Cn3A8ihE= Subject key identifier: FA:23:BD:C4:9C:98:DA:0A:D7:6B:D5:9C:0D:BE:0F:42:D8:07:59:90 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235CE4539B66F78E408600 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a9a20e90-b7e2-3d91-ac7b-483c904844fa.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Thu 06 Jun 2030 04:00:00 +0000 asID: 8068 IP address blocks: 131.253.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5c:e4:53:9b:66:f7:8e:40:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : Jun 6 04:00:00 2030 GMT Subject: CN=91fa8411-ffdf-4818-932d-b8f90b5fd7a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:c9:68:db:e3:90:09:47:23:76:de:b6:59:e8: 67:c3:97:1e:e5:62:10:e7:0b:2c:5a:cb:d4:95:dc: 02:ba:ed:f7:b6:d3:4b:d4:4f:0c:00:9f:10:a7:c8: 8b:54:74:9e:4e:fe:e8:db:92:3e:bc:f4:6f:56:f9: 57:6d:fd:9f:ea:14:94:49:ab:df:8b:34:2a:3a:56: 56:83:f3:94:74:3e:e5:17:c0:90:3b:2f:ba:50:11: 3e:50:60:a1:fe:94:4d:99:74:4d:3b:d0:ca:92:6f: 9d:d8:92:68:ae:07:90:45:5f:b3:d4:12:08:99:b0: ef:c9:86:d3:f8:de:3f:5b:a0:80:95:c5:d7:98:17: 59:bd:32:2a:63:2c:98:3e:12:46:37:0e:70:b1:5d: e5:3e:07:9e:7b:72:e2:35:c9:95:a6:9f:09:cc:57: f2:3e:0b:35:5b:92:76:f4:b0:29:22:d8:93:7d:50: 89:d0:a4:5a:b7:ef:51:ac:b2:6a:ac:5c:3a:e4:81: 1c:f4:44:48:7b:a5:ff:66:a5:d7:e2:13:53:60:4a: 02:0a:83:5e:4f:7b:99:ce:4a:a5:23:49:02:6b:4b: 05:e2:8f:87:c7:32:7e:db:e6:7a:96:97:be:07:f2: 7c:8a:e3:a4:46:8e:d0:33:61:88:41:dc:cb:ac:38: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:23:BD:C4:9C:98:DA:0A:D7:6B:D5:9C:0D:BE:0F:42:D8:07:59:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/a9a20e90-b7e2-3d91-ac7b-483c904844fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:94:76:d9:77:8a:b7:20:e5:74:b8:59:eb:4c:ad:e7:e4:d7: 94:dc:35:36:5f:c5:15:6e:a6:e2:1b:f5:00:2f:3c:df:ec:47: 7e:86:13:e5:b7:b1:d7:a2:b9:3b:fd:c7:9b:4d:a0:2b:02:b0: 31:c0:1d:f5:dc:52:7b:a4:64:66:e2:37:67:23:4d:d6:b3:ab: db:68:a1:64:c7:a2:81:e4:a7:b8:f7:d9:7e:02:20:46:82:6f: 68:cc:24:e5:60:a5:89:d7:be:d7:f7:36:e6:ec:c9:29:cf:79: 18:37:8f:21:21:14:80:74:b7:4a:93:df:d7:7f:37:2d:e3:45: d1:58:a9:78:98:9e:8e:f2:36:b3:69:fe:6b:33:c9:49:27:04: 17:21:5d:24:e4:1c:fd:c3:a0:b3:7f:a6:f8:99:a8:aa:86:00: 7d:4f:e9:0a:3e:c3:be:52:88:bd:e4:45:3d:0c:11:2d:6b:8f: bc:3b:94:ed:df:cd:61:30:e5:91:89:e0:37:8a:75:ff:16:ac: fb:b2:52:79:1f:a5:64:1a:76:a8:e1:e1:63:fa:22:f2:66:17: 0e:cc:c3:ca:3e:9d:66:f6:bf:57:d0:9a:4f:e8:46:1b:b9:59: 4c:bb:9f:af:ba:c9:34:39:cd:49:e2:8b:ab:7e:2b:53:44:54: fb:56:a2:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI1zkU5tm945AhgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDYwNjA0MDAwMFowLzEtMCsGA1UEAxMk OTFmYTg0MTEtZmZkZi00ODE4LTkzMmQtYjhmOTBiNWZkN2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8lo2+OQCUcjdt62Wehnw5ce5WIQ5wssWsvU ldwCuu33ttNL1E8MAJ8Qp8iLVHSeTv7o25I+vPRvVvlXbf2f6hSUSavfizQqOlZW g/OUdD7lF8CQOy+6UBE+UGCh/pRNmXRNO9DKkm+d2JJorgeQRV+z1BIImbDvyYbT +N4/W6CAlcXXmBdZvTIqYyyYPhJGNw5wsV3lPgeee3LiNcmVpp8JzFfyPgs1W5J2 9LApItiTfVCJ0KRat+9RrLJqrFw65IEc9ERIe6X/ZqXX4hNTYEoCCoNeT3uZzkql I0kCa0sF4o+HxzJ+2+Z6lpe+B/J8iuOkRo7QM2GIQdzLrDivpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPojvcScmNoK12vVnA2+D0LYB1mQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvYTlhMjBlOTAtYjdlMi0z ZDkxLWFjN2ItNDgzYzkwNDg0NGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg/0hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Udtl3ircg5XS4WetMrefk15TcNTZfxRVupuIb9QAvPN/sR36GE+W3 sdeiuTv9x5tNoCsCsDHAHfXcUnukZGbiN2cjTdazq9tooWTHooHkp7j32X4CIEaC b2jMJOVgpYnXvtf3NubsySnPeRg3jyEhFIB0t0qT39d/Ny3jRdFYqXiYno7yNrNp /mszyUknBBchXSTkHP3DoLN/pviZqKqGAH1P6Qo+w75SiL3kRT0MES1rj7w7lO3f zWEw5ZGJ4DeKdf8WrPuyUnkfpWQadqjh4WP6IvJmFw7Mw8o+nWb2v1fQmk/oRhu5 WUy7n6+6yTQ5zUnii6t+K1NEVPtWolM= -----END CERTIFICATE-----Generated at Sun Sep 13 15:01:14 2026 by rpki-client