$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa File: 3a49eb68-6216-3abc-822d-65fec49cdd7d.roa (raw, json) Hash identifier: 9tE1yeYaoF+Qv5XuWc8fzTg5WthiB1Tl5fH0o0YKeRI= Subject key identifier: 70:8C:FC:AC:24:DA:8E:C2:A4:12:6E:D1:C3:4B:7E:37:28:DC:93:76 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D703FCF174E9858079E0EDD60 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 12189 IP address blocks: 131.153.124.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:cf:17:4e:98:58:07:9e:0e:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=f28b8154-152d-4a9f-bbca-08ae987c3138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:fb:1f:10:e9:f9:3d:b0:8d:f3:47:fb:7b:c6: cc:2d:8d:f2:ec:06:00:10:a0:5b:9a:70:68:2e:9c: c7:1b:72:4c:c0:d4:fe:88:5d:d9:67:09:4e:f1:48: c7:9b:e3:d0:21:67:ce:3a:f2:90:8e:38:e8:04:65: 23:4d:74:00:97:d5:a6:08:47:98:8a:8c:7a:fd:bb: 34:52:cd:83:db:e3:02:08:08:78:0b:0a:95:ac:00: 95:9f:96:5d:f5:1e:8b:73:d8:a6:51:f7:55:f8:9b: 21:dd:fd:8e:a3:e0:25:4b:90:a0:7d:20:62:c9:95: 44:34:71:8f:89:9d:b3:6e:a2:86:e8:6a:ce:4f:72: 49:ef:3b:6e:a5:74:de:9d:1e:74:11:56:46:aa:e1: c7:4e:bd:fc:ac:8d:79:c2:94:e3:de:54:a6:d3:86: 8c:d5:06:35:d6:47:d7:e9:0b:4b:f3:72:88:50:93: c5:48:cd:82:42:a3:1a:5b:3a:14:72:88:c7:b5:b8: e9:87:63:84:2c:64:98:7d:a6:35:50:6c:e3:1c:01: a9:d4:36:da:76:4e:9b:93:e7:5b:d2:d8:7d:ee:9f: 50:39:91:3b:9b:3b:99:46:f8:6c:a9:c4:11:3b:f4: 4d:46:e4:38:f3:b1:d0:d9:87:75:3a:95:dc:1d:b6: de:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8C:FC:AC:24:DA:8E:C2:A4:12:6E:D1:C3:4B:7E:37:28:DC:93:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3a49eb68-6216-3abc-822d-65fec49cdd7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:00:1a:a4:1b:52:98:e8:bc:47:df:46:c1:aa:04:18:de:75: e6:d1:6e:35:71:e2:a0:68:8f:d5:9b:24:75:34:59:b8:7b:ac: d9:07:e4:5d:09:25:f4:07:08:92:c6:30:62:a3:07:28:57:75: 6e:46:9b:43:b6:e2:43:62:96:0a:7d:de:ca:a9:d3:75:88:04: d9:8a:52:38:96:62:06:b8:94:2e:97:db:a3:cd:e6:1b:12:4d: e7:75:02:07:84:bf:41:da:db:77:34:0d:e2:86:35:a6:97:15: f1:e1:b8:5e:5a:82:26:7f:86:c8:0c:18:63:c7:bc:69:48:7b: 83:7b:33:d7:1f:24:50:bb:18:eb:5e:13:9f:37:87:c7:eb:f2: 07:ac:71:fb:a2:19:38:80:97:87:1b:6f:f8:92:01:09:38:b9: ed:af:88:90:db:10:2b:89:2d:83:65:82:7f:d0:89:85:90:2a: 82:89:73:a8:95:b7:80:95:b2:3e:7d:06:29:b6:9a:8a:cd:fd: ef:bf:80:14:77:ff:62:ee:bd:d9:0e:77:48:99:ca:23:16:c9: 68:f9:50:38:06:20:9a:72:ca:f6:de:0c:b9:5d:61:11:98:ac: 0d:20:3e:18:c5:ea:e4:1b:3e:7c:6d:8b:3f:a0:ba:a0:e5:9a: fc:6f:ba:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP88XTphYB54O3WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ZjI4YjgxNTQtMTUyZC00YTlmLWJiY2EtMDhhZTk4N2MzMTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PsfEOn5PbCN80f7e8bMLY3y7AYAEKBbmnBo LpzHG3JMwNT+iF3ZZwlO8UjHm+PQIWfOOvKQjjjoBGUjTXQAl9WmCEeYiox6/bs0 Us2D2+MCCAh4CwqVrACVn5Zd9R6Lc9imUfdV+Jsh3f2Oo+AlS5CgfSBiyZVENHGP iZ2zbqKG6GrOT3JJ7ztupXTenR50EVZGquHHTr38rI15wpTj3lSm04aM1QY11kfX 6QtL83KIUJPFSM2CQqMaWzoUcojHtbjph2OELGSYfaY1UGzjHAGp1Dbadk6bk+db 0th97p9QOZE7mzuZRvhsqcQRO/RNRuQ487HQ2Yd1OpXcHbbeywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCM/Kwk2o7CpBJu0cNLfjco3JN2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2E0OWViNjgtNjIxNi0z YWJjLTgyMmQtNjVmZWM0OWNkZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4AGqQbUpjovEffRsGqBBjedebRbjVx4qBoj9WbJHU0Wbh7rNkH5F0J JfQHCJLGMGKjByhXdW5Gm0O24kNilgp93sqp03WIBNmKUjiWYga4lC6X26PN5hsS Ted1AgeEv0Ha23c0DeKGNaaXFfHhuF5agiZ/hsgMGGPHvGlIe4N7M9cfJFC7GOte E583h8fr8gescfuiGTiAl4cbb/iSAQk4ue2viJDbECuJLYNlgn/QiYWQKoKJc6iV t4CVsj59Bim2morN/e+/gBR3/2LuvdkOd0iZyiMWyWj5UDgGIJpyyvbeDLldYRGY rA0gPhjF6uQbPnxtiz+guqDlmvxvurc= -----END CERTIFICATE-----Generated at Fri Apr 17 13:24:32 2026 by rpki-client