$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa File: 3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa (raw, json) Hash identifier: 2w2snJdF8xzioggRa94FNjZueem2ufUKWx+DeEGqCHo= Subject key identifier: CD:ED:42:CE:62:7C:EF:51:94:BE:BE:E9:46:1C:C1:1E:B8:59:B2:64 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6EDA5DD11933913CC2545218 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 210266 IP address blocks: 131.153.90.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5d:d1:19:33:91:3c:c2:54:52:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=6e4eb163-b494-4bda-884f-8f625ab18182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:85:d7:af:e6:85:d5:cb:06:c6:48:14:cb:24: 1e:7f:78:3c:bc:fe:a3:15:62:af:a6:cf:f8:d6:5d: 7c:51:ac:cd:0f:1b:3f:52:8b:86:6e:fc:ad:8a:20: da:74:b9:f3:54:5d:fc:04:13:79:88:a0:14:2f:de: 18:e7:cf:84:9e:b1:ec:99:ea:3e:66:78:2d:a6:dd: e3:46:c1:1c:d8:94:2a:2a:36:94:ea:4a:0a:6a:5d: cb:c9:c3:75:bc:3b:e2:e4:61:ee:ee:c5:e4:7f:00: b1:02:c0:ff:c2:11:06:34:3f:b9:ad:a2:ca:1d:10: 56:d7:aa:40:6d:52:99:48:17:85:17:62:43:d0:30: 70:df:ce:bf:4b:80:5a:ef:cd:53:cc:8b:ee:1b:d5: c7:72:89:b4:06:e7:62:69:d5:cc:02:8a:90:b0:03: 92:29:40:1b:5f:fa:59:a5:e7:b0:94:dc:d5:c5:6c: 92:df:9e:b8:fb:36:90:7b:de:18:15:81:a3:5f:48: f5:02:75:93:27:a4:49:e8:96:48:bb:93:a7:a5:00: d1:1f:fb:20:8d:31:ab:25:30:27:9a:83:ed:46:db: 5f:ac:34:55:83:f5:19:e0:a9:e2:f0:db:65:6d:9d: c6:90:c0:eb:22:cc:c3:b0:aa:87:3f:9e:ed:b6:c6: cb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:ED:42:CE:62:7C:EF:51:94:BE:BE:E9:46:1C:C1:1E:B8:59:B2:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a135045-ff0a-32c9-be71-5f1bd079a5b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:c0:bb:3f:66:f7:20:59:81:31:4c:03:22:bd:f4:4d:92:73: d9:4e:02:32:c4:1a:43:15:ca:2f:b7:7d:63:aa:3e:8e:92:ae: 1a:b9:65:5a:c8:6b:f1:8e:9b:36:5c:b7:44:dd:61:d3:aa:51: 3c:b2:34:6e:7a:64:fa:d0:da:d4:eb:c7:87:fa:b4:8c:85:4b: cf:f6:60:71:1a:c9:62:e7:d5:68:70:45:0b:0d:97:3f:44:70: d3:1f:be:77:9c:4a:6d:5f:9f:82:6e:e8:20:08:d4:3a:06:d4: 3b:db:62:00:01:2f:a6:83:2a:6a:bd:e0:4d:32:9d:58:76:f4: 6b:bf:2c:ce:dc:4e:92:b2:12:96:c5:0e:0e:e2:3a:6a:6f:10: 55:d3:99:43:4e:e4:0c:ce:31:f9:e2:40:b5:f8:92:b0:e7:d1: 6c:eb:12:27:59:8b:45:df:5a:c4:8b:9a:a1:0a:00:d2:31:fd: 5b:8e:96:ea:af:30:76:3c:18:9c:fc:be:07:ea:d9:5c:a3:42: d0:65:ab:b4:3e:1a:27:e1:cb:0e:b2:e7:ec:41:cd:91:c2:01: ae:e6:d8:ae:eb:1d:7c:b3:74:8f:76:7d:7d:0e:db:8f:00:fa: 13:e2:a4:46:5f:d7:da:35:f9:bf:d1:86:f7:eb:a0:d7:fe:ab: 78:ec:dd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l3RGTORPMJUUhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NmU0ZWIxNjMtYjQ5NC00YmRhLTg4NGYtOGY2MjVhYjE4MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34XXr+aF1csGxkgUyyQef3g8vP6jFWKvps/4 1l18UazNDxs/UouGbvytiiDadLnzVF38BBN5iKAUL94Y58+EnrHsmeo+Zngtpt3j RsEc2JQqKjaU6koKal3LycN1vDvi5GHu7sXkfwCxAsD/whEGND+5raLKHRBW16pA bVKZSBeFF2JD0DBw386/S4Ba781TzIvuG9XHcom0BudiadXMAoqQsAOSKUAbX/pZ peewlNzVxWyS3564+zaQe94YFYGjX0j1AnWTJ6RJ6JZIu5OnpQDRH/sgjTGrJTAn moPtRttfrDRVg/UZ4Kni8NtlbZ3GkMDrIszDsKqHP57ttsbLTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3tQs5ifO9RlL6+6UYcwR64WbJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2ExMzUwNDUtZmYwYS0z MmM5LWJlNzEtNWYxYmQwNzlhNWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5laMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Auz9m9yBZgTFMAyK99E2Sc9lOAjLEGkMVyi+3fWOqPo6Srhq5ZVrI a/GOmzZct0TdYdOqUTyyNG56ZPrQ2tTrx4f6tIyFS8/2YHEayWLn1WhwRQsNlz9E cNMfvnecSm1fn4Ju6CAI1DoG1DvbYgABL6aDKmq94E0ynVh29Gu/LM7cTpKyEpbF Dg7iOmpvEFXTmUNO5AzOMfniQLX4krDn0WzrEidZi0XfWsSLmqEKANIx/VuOluqv MHY8GJz8vgfq2VyjQtBlq7Q+Gifhyw6y5+xBzZHCAa7m2K7rHXyzdI92fX0O248A +hPipEZf19o1+b/RhvfroNf+q3js3ZQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:39:46 2026 by rpki-client