$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa File: e3e04aed-b26a-36b2-8c93-d3312cb16705.roa (raw, json) Hash identifier: iRZTMGtDA3Gg6TfYeHcR/53iYZptRT8I/5G364KEXEc= Subject key identifier: 41:B6:45:1C:B9:9A:40:BD:66:0A:4B:0C:B6:C2:1B:B5:7E:95:D1:F5 Certificate issuer: /CN=03e67bc8-299e-48ec-b739-e66ab6f422c7 Certificate serial: 010D0C9F4328584D86954A25DE9A795EBF632B80 Authority key identifier: 12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 6579 IP address blocks: 134.153.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:4a:25:de:9a:79:5e:bf:63:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e67bc8-299e-48ec-b739-e66ab6f422c7 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=85e1d44d-eb92-4984-bb12-d5a189f62201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:43:cf:e4:50:3a:c3:76:ab:17:62:d0:e0:bc: 8b:8e:ea:1b:0c:d9:92:ed:64:d1:4b:65:69:fa:00: 97:0a:dc:78:11:e9:e1:80:18:b9:01:ca:dd:9c:1a: 70:07:e9:0f:19:dc:9e:c5:ea:c4:d0:a3:6f:b1:7b: a8:7b:01:96:b2:34:95:1b:f7:5b:2d:5f:ad:00:7c: c4:51:a0:ec:83:cb:68:77:e6:b6:5b:39:8b:8c:0e: 42:6d:f1:fd:60:a9:93:f3:2d:ff:c6:9e:81:fb:56: 89:c2:0a:0c:3a:4c:0e:fa:98:04:89:7f:55:92:c3: a4:af:1f:1c:ef:ed:3c:3c:12:b2:94:d4:d8:70:8d: 99:b6:3d:dc:95:6a:29:e5:12:28:c9:d9:23:e9:ec: a7:57:9d:0c:02:2e:fd:71:5b:1c:b4:b7:14:5b:ac: ad:81:0b:1b:21:25:0e:c1:99:5a:aa:91:fc:87:e6: 4d:b2:35:cc:9b:20:9a:dc:9d:12:05:56:d0:0e:98: bc:10:83:1d:f8:32:7d:05:9f:0b:0a:d6:2e:35:7a: 26:ca:b1:8c:30:c2:cb:74:d8:74:19:65:91:87:5d: de:4e:44:33:ad:38:a4:c0:a7:78:a7:00:b5:3b:06: 66:29:62:7d:ba:95:c6:37:50:09:48:55:b6:ab:d9: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B6:45:1C:B9:9A:40:BD:66:0A:4B:0C:B6:C2:1B:B5:7E:95:D1:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/e3e04aed-b26a-36b2-8c93-d3312cb16705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7/03e67bc8-299e-48ec-b739-e66ab6f422c7.crl X509v3 Authority Key Identifier: keyid:12:F3:98:4A:8E:E5:7B:B0:60:BB:CA:19:51:CA:A4:C3:FB:DC:04:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/03e67bc8-299e-48ec-b739-e66ab6f422c7.cer sbgp-ipAddrBlock: critical IPv4: 134.153.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ab:c5:99:c7:f7:58:1a:a2:09:b8:70:2f:1f:84:72:6c:f4: 82:cd:6b:1a:5d:6a:5f:69:39:a5:0d:5b:75:1b:8b:32:f5:de: 6d:15:92:b8:10:67:39:61:b4:55:c7:67:11:9e:71:92:87:ac: f6:a1:53:f5:2a:f2:6e:a8:28:92:e4:13:68:fb:00:7c:ef:c4: ef:ba:d5:3a:f2:3d:1e:e4:b3:06:7c:27:db:7e:ef:85:7c:c8: 7e:59:66:13:5a:e3:60:72:ef:ac:a8:59:94:07:23:20:44:70: 73:c1:57:c4:4c:5d:73:1a:89:8d:1a:89:27:ff:4c:fa:34:ee: 65:a1:c5:70:6d:61:56:86:df:c1:44:b8:74:09:b3:d9:22:e7: 78:86:b3:77:c5:85:38:ee:42:d2:35:6a:a3:80:79:8d:2a:57: f6:35:81:99:71:5b:d1:7d:90:08:ba:52:f2:a2:ee:87:79:da: 22:33:1e:06:96:06:6e:e3:d4:57:9b:15:4e:b8:d4:28:9c:75: 0d:73:58:72:0c:ca:20:71:6c:57:40:2f:2a:80:16:69:aa:6e: 71:a3:37:c3:47:10:f8:2f:62:3f:40:45:c8:fb:33:5e:00:7e: a4:40:31:7c:ac:73:b6:94:a2:87:91:3a:14:8f:7e:d8:07:b4: a2:7e:d2:4b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2GlUol3pp5Xr9jK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNlNjdiYzgtMjk5ZS00OGVjLWI3MzktZTY2YWI2ZjQy MmM3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ODVlMWQ0NGQtZWI5Mi00OTg0LWJiMTItZDVhMTg5ZjYyMjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEPP5FA6w3arF2LQ4LyLjuobDNmS7WTRS2Vp +gCXCtx4EenhgBi5AcrdnBpwB+kPGdyexerE0KNvsXuoewGWsjSVG/dbLV+tAHzE UaDsg8tod+a2WzmLjA5CbfH9YKmT8y3/xp6B+1aJwgoMOkwO+pgEiX9VksOkrx8c 7+08PBKylNTYcI2Ztj3clWop5RIoydkj6eynV50MAi79cVsctLcUW6ytgQsbISUO wZlaqpH8h+ZNsjXMmyCa3J0SBVbQDpi8EIMd+DJ9BZ8LCtYuNXomyrGMMMLLdNh0 GWWRh13eTkQzrTikwKd4pwC1OwZmKWJ9upXGN1AJSFW2q9mygwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEG2RRy5mkC9ZgpLDLbCG7V+ldH1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2 N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZhYjZmNDIyYzcvZTNlMDRhZWQtYjI2YS0z NmIyLThjOTMtZDMzMTJjYjE2NzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMDNlNjdiYzgtMjk5ZS00OGVjLWI3 MzktZTY2YWI2ZjQyMmM3LzAzZTY3YmM4LTI5OWUtNDhlYy1iNzM5LWU2NmFiNmY0 MjJjNy5jcmwwHwYDVR0jBBgwFoAUEvOYSo7le7Bgu8oZUcqkw/vcBBowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wM2U2N2JjOC0yOTllLTQ4ZWMtYjczOS1lNjZh YjZmNDIyYzcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhpkwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAGqvFmcf3WBqiCbhwLx+Ecmz0gs1rGl1qX2k5pQ1bdRuLMvXebRWSuBBn OWG0VcdnEZ5xkoes9qFT9SrybqgokuQTaPsAfO/E77rVOvI9HuSzBnwn237vhXzI fllmE1rjYHLvrKhZlAcjIERwc8FXxExdcxqJjRqJJ/9M+jTuZaHFcG1hVobfwUS4 dAmz2SLneIazd8WFOO5C0jVqo4B5jSpX9jWBmXFb0X2QCLpS8qLuh3naIjMeBpYG buPUV5sVTrjUKJx1DXNYcgzKIHFsV0AvKoAWaapucaM3w0cQ+C9iP0BFyPszXgB+ pEAxfKxztpSih5E6FI9+2Ae0on7SSw== -----END CERTIFICATE-----Generated at Fri Apr 17 11:17:26 2026 by rpki-client