$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa File: cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa (raw, json) Hash identifier: k6ezar2s2N19UNYgweLGQiUvTLerKeg5Q/bobT2oU9c= Subject key identifier: CF:EE:9E:3A:D8:E6:FA:B4:5C:0E:35:5B:C6:65:78:65:2B:14:3E:B9 Certificate issuer: /CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Certificate serial: 010D0C9F4328584EE4235D5967276034FE1FA240 Authority key identifier: B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa Signing time: Wed 19 Aug 2026 18:04:04 +0000 ROA not before: Wed 19 Aug 2026 18:04:04 +0000 ROA not after: Thu 23 May 2030 04:00:00 +0000 asID: 8075 IP address blocks: 131.253.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:5d:59:67:27:60:34:fe:1f:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fde1e3d1-d8da-4fa9-8068-1b641cab743d Validity Not Before: Aug 19 18:04:04 2026 GMT Not After : May 23 04:00:00 2030 GMT Subject: CN=880a3b2b-ad43-42c6-bcb5-e6da2761c2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8b:60:79:f8:30:68:37:df:f0:cc:53:b5:7d: b6:e0:62:45:03:73:0c:95:07:ea:c7:52:e3:2b:31: 51:ef:e0:af:62:92:6c:9e:b9:c5:12:7e:3a:75:0f: 08:83:62:e1:62:ff:31:f2:9d:14:0c:5b:b2:37:07: da:0a:8f:42:f5:f3:8a:35:a2:4b:9b:b0:3b:f1:fd: ab:a0:d8:99:92:d2:aa:90:b6:6d:c0:db:c0:f8:64: 97:4d:7d:12:a4:c1:3e:01:ea:70:fe:5c:87:d0:2f: c4:07:8e:ea:c3:21:06:14:18:68:16:74:71:b3:8c: 27:16:67:1e:58:26:a1:49:0a:bb:6c:75:ef:14:7f: 3c:e0:7e:0f:e5:ea:7c:e8:f2:ac:f9:59:b5:eb:8b: a3:2c:e2:8a:60:e1:3d:25:73:22:ef:d8:5e:f0:4f: a6:d1:66:ec:00:95:6c:47:8a:7a:29:c1:0d:4d:c0: 5a:e0:dd:4a:dd:36:75:66:66:de:ad:df:a8:a1:ec: 4f:89:2d:13:fa:de:49:73:4d:7a:8b:31:c5:14:00: bd:71:bc:e3:49:af:09:94:63:db:b8:82:12:9c:d5: 21:45:1d:ec:72:01:e1:8c:a7:a9:32:e2:ee:0e:f5: 6f:a0:b7:a5:13:f4:c5:15:79:11:c7:b8:71:e9:3a: 7a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EE:9E:3A:D8:E6:FA:B4:5C:0E:35:5B:C6:65:78:65:2B:14:3E:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/cd1de1f0-bfee-34ef-8928-7c7400e0794b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d/fde1e3d1-d8da-4fa9-8068-1b641cab743d.crl X509v3 Authority Key Identifier: keyid:B9:A3:D0:91:56:02:8B:C1:F2:F2:77:41:2D:82:1B:CE:D2:BF:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fde1e3d1-d8da-4fa9-8068-1b641cab743d.cer sbgp-ipAddrBlock: critical IPv4: 131.253.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:e9:11:fa:31:33:94:11:97:74:68:ec:e8:fb:f4:83:85:1c: 83:76:20:6d:34:08:84:ce:60:dc:8e:d0:03:ea:51:65:d8:93: 6c:3e:88:55:72:b0:64:ff:31:a6:e9:0c:04:80:01:67:93:cd: f2:5b:05:bb:37:6d:fc:ff:10:91:4b:9b:44:43:54:35:ca:8b: 61:07:b0:74:2f:19:ac:e5:6f:e9:24:70:e3:a5:f9:33:0c:a3: 34:d1:59:3b:bd:e4:19:46:cc:16:9f:3a:c8:29:51:99:55:61: 50:7c:bb:be:56:c4:7c:c0:b7:fb:31:62:7b:bb:a7:b5:0e:89: 16:8d:94:da:5f:be:ff:61:0c:9f:b6:6d:aa:92:78:49:a0:a7: 80:d0:63:66:41:44:a6:c4:2c:b2:ce:97:e3:bd:ec:80:21:71: a0:25:3d:08:8b:bd:34:5f:f5:98:95:72:95:f2:a9:79:d9:87: f2:7a:6d:07:de:77:f6:d8:4b:1d:c3:bb:f4:1b:ec:7d:ee:41: 16:5b:d5:ab:c2:97:1c:d4:7d:b3:f2:49:b0:ce:aa:10:13:59: 92:29:01:20:44:b8:2d:07:fd:e6:4f:7e:90:c5:68:3c:b4:48: a9:a1:a9:95:d3:a1:85:e6:ef:26:04:7c:2a:73:54:cd:c1:be: de:2c:c0:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7kI11ZZydgNP4fokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRlMWUzZDEtZDhkYS00ZmE5LTgwNjgtMWI2NDFjYWI3 NDNkMB4XDTI2MDgxOTE4MDQwNFoXDTMwMDUyMzA0MDAwMFowLzEtMCsGA1UEAxMk ODgwYTNiMmItYWQ0My00MmM2LWJjYjUtZTZkYTI3NjFjMmEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYtgefgwaDff8MxTtX224GJFA3MMlQfqx1Lj KzFR7+CvYpJsnrnFEn46dQ8Ig2LhYv8x8p0UDFuyNwfaCo9C9fOKNaJLm7A78f2r oNiZktKqkLZtwNvA+GSXTX0SpME+Aepw/lyH0C/EB47qwyEGFBhoFnRxs4wnFmce WCahSQq7bHXvFH884H4P5ep86PKs+Vm164ujLOKKYOE9JXMi79he8E+m0WbsAJVs R4p6KcENTcBa4N1K3TZ1Zmberd+ooexPiS0T+t5Jc016izHFFAC9cbzjSa8JlGPb uIISnNUhRR3scgHhjKepMuLuDvVvoLelE/TFFXkRx7hx6Tp6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/unjrY5vq0XA41W8ZleGUrFD65MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUx ZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0MWNhYjc0M2QvY2QxZGUxZjAtYmZlZS0z NGVmLTg5MjgtN2M3NDAwZTA3OTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmRlMWUzZDEtZDhkYS00ZmE5LTgw NjgtMWI2NDFjYWI3NDNkL2ZkZTFlM2QxLWQ4ZGEtNGZhOS04MDY4LTFiNjQxY2Fi NzQzZC5jcmwwHwYDVR0jBBgwFoAUuaPQkVYCi8Hy8ndBLYIbztK/20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZGUxZTNkMS1kOGRhLTRmYTktODA2OC0xYjY0 MWNhYjc0M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg/0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTpEfoxM5QRl3Ro7Oj79IOFHIN2IG00CITOYNyO0APqUWXYk2w+iFVy sGT/MabpDASAAWeTzfJbBbs3bfz/EJFLm0RDVDXKi2EHsHQvGazlb+kkcOOl+TMM ozTRWTu95BlGzBafOsgpUZlVYVB8u75WxHzAt/sxYnu7p7UOiRaNlNpfvv9hDJ+2 baqSeEmgp4DQY2ZBRKbELLLOl+O97IAhcaAlPQiLvTRf9ZiVcpXyqXnZh/J6bQfe d/bYSx3Du/Qb7H3uQRZb1avClxzUfbPySbDOqhATWZIpASBEuC0H/eZPfpDFaDy0 SKmhqZXToYXm7yYEfCpzVM3Bvt4swKY= -----END CERTIFICATE-----Generated at Sun Sep 13 14:22:19 2026 by rpki-client