$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa File: afe7951f-3eee-3510-b3e7-864b6506bda2.roa (raw, json) Hash identifier: BORmdy2+S26GBnraiXtQ8BNK+hwotxTbSJtXq8E7r4M= Subject key identifier: 64:67:9C:BA:C5:62:82:52:F4:E9:B7:A5:36:47:7C:D7:64:F8:2F:6A Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D8807A672221AFC2F80 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Wed 08 May 2030 04:00:00 +0000 asID: 8075 IP address blocks: 131.253.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:88:07:a6:72:22:1a:fc:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : May 8 04:00:00 2030 GMT Subject: CN=298b1628-53ed-4ba6-a9a7-8fa7c7b9102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:a5:a9:93:af:85:f5:0b:61:be:3d:a3:0e: fe:98:7d:0a:44:91:e8:2c:f8:a9:33:5b:01:90:32: 59:ff:20:e1:38:e1:ba:6b:13:71:74:4e:23:af:52: 3a:0a:a1:a0:9f:75:31:30:95:15:e0:5c:44:68:3b: 15:e1:54:93:60:96:fd:31:b6:0d:3e:f5:51:11:4f: af:ab:90:f8:eb:b1:b9:f9:b0:4b:78:4e:0d:c5:07: 47:9f:1e:1e:72:96:69:a8:50:d7:75:3d:48:f0:a4: 93:17:73:07:8e:bf:d3:8b:62:4a:00:3d:90:d4:c8: 6a:c5:45:b3:03:8f:e2:c2:e6:a6:0e:c9:e2:1d:36: 94:99:d6:e4:13:10:62:b2:1e:c0:91:59:d0:60:f8: 4b:a8:9b:57:7f:b5:20:13:7e:23:1e:db:ec:fe:e5: de:10:88:bf:3f:14:1b:6d:50:0b:de:6c:58:10:d7: 76:a0:d1:a4:1a:2b:0b:0e:c2:3a:4a:61:c1:a4:df: d8:b0:fd:59:37:12:6e:ce:8d:b5:b4:ff:75:6e:b1: c9:b5:9a:32:51:80:a2:34:41:5b:b1:ec:c4:28:08: 82:8c:9d:06:99:99:1e:fc:e5:7a:e4:63:3b:24:bd: b1:30:77:90:38:4a:b4:20:3f:1b:ef:74:76:1a:50: fb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:67:9C:BA:C5:62:82:52:F4:E9:B7:A5:36:47:7C:D7:64:F8:2F:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/afe7951f-3eee-3510-b3e7-864b6506bda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:44:8a:be:f7:65:54:ac:c4:4c:14:ef:99:5a:2b:23:e1:a9: 9b:7f:e7:5b:35:79:4c:ed:94:54:cd:71:6d:d0:9e:3e:d6:87: d4:21:71:7d:43:52:85:53:d8:24:39:74:61:13:fa:76:41:d1: 76:97:7a:56:55:e4:85:6e:44:0e:1a:cc:6a:d5:a4:70:eb:6d: b9:bc:48:e8:3f:cf:c7:8e:e6:fc:56:7a:8a:7b:d4:11:f8:c4: 5b:f9:11:99:15:32:02:9b:e2:44:02:ee:d4:71:59:9c:e6:36: 10:e8:61:43:ff:d6:5e:f3:44:ec:cb:30:2a:5f:57:7a:83:e1: 80:34:e2:b7:d3:d5:05:28:e4:b1:0b:d1:c7:2e:77:76:87:98: 58:d2:d6:c6:10:13:d5:bd:69:bd:3d:bb:ef:8c:c8:ca:86:47: 7d:44:d1:5f:fd:b0:2f:7f:2b:46:2c:26:e2:58:ab:40:32:84: 16:01:0c:2a:8c:37:6c:ef:8b:e7:2c:61:d5:4f:82:5b:de:82: 1f:4e:e4:04:99:c5:48:de:c3:08:f7:02:cf:51:96:ad:21:38: 3f:10:ef:74:86:86:2a:23:75:74:da:2d:e2:81:24:25:31:9e: 44:c0:37:15:a2:7a:b8:7b:f8:56:b9:4f:d2:76:6e:67:04:eb: 08:5e:64:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI12IB6ZyIhr8L4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDUwODA0MDAwMFowLzEtMCsGA1UEAxMk Mjk4YjE2MjgtNTNlZC00YmE2LWE5YTctOGZhN2M3YjkxMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha2lqZOvhfULYb49ow7+mH0KRJHoLPipM1sB kDJZ/yDhOOG6axNxdE4jr1I6CqGgn3UxMJUV4FxEaDsV4VSTYJb9MbYNPvVREU+v q5D467G5+bBLeE4NxQdHnx4ecpZpqFDXdT1I8KSTF3MHjr/Ti2JKAD2Q1MhqxUWz A4/iwuamDsniHTaUmdbkExBish7AkVnQYPhLqJtXf7UgE34jHtvs/uXeEIi/PxQb bVAL3mxYENd2oNGkGisLDsI6SmHBpN/YsP1ZNxJuzo21tP91brHJtZoyUYCiNEFb sezEKAiCjJ0GmZke/OV65GM7JL2xMHeQOEq0ID8b73R2GlD7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRnnLrFYoJS9Om3pTZHfNdk+C9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvYWZlNzk1MWYtM2VlZS0z NTEwLWIzZTctODY0YjY1MDZiZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg/0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJEir73ZVSsxEwU75laKyPhqZt/51s1eUztlFTNcW3Qnj7Wh9QhcX1D UoVT2CQ5dGET+nZB0XaXelZV5IVuRA4azGrVpHDrbbm8SOg/z8eO5vxWeop71BH4 xFv5EZkVMgKb4kQC7tRxWZzmNhDoYUP/1l7zROzLMCpfV3qD4YA04rfT1QUo5LEL 0ccud3aHmFjS1sYQE9W9ab09u++MyMqGR31E0V/9sC9/K0YsJuJYq0AyhBYBDCqM N2zvi+csYdVPglvegh9O5ASZxUjewwj3As9Rlq0hOD8Q73SGhiojdXTaLeKBJCUx nkTANxWierh7+Fa5T9J2bmcE6wheZMo= -----END CERTIFICATE-----Generated at Fri Sep 4 23:05:27 2026 by rpki-client