$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa File: 3c236add-de19-3e3d-ac81-5e2a5af3b064.roa (raw, json) Hash identifier: CWr7ReGopGdrtbTf0gNmo/5Led4ztYX/gEmlCzwNIo8= Subject key identifier: 4F:05:44:10:BE:82:E9:24:3E:05:7B:52:C3:04:F8:56:71:C3:F7:4C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D5454E6232579042F5841E680 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa Signing time: Sun 29 Mar 2026 13:00:30 +0000 ROA not before: Sun 29 Mar 2026 13:00:30 +0000 ROA not after: Sat 27 Jun 2026 13:00:30 +0000 asID: 20454 IP address blocks: 131.153.204.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:54:54:e6:23:25:79:04:2f:58:41:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 29 13:00:30 2026 GMT Not After : Jun 27 13:00:30 2026 GMT Subject: CN=64f2ac4f-fbcd-4fe3-b8d4-3a24d1500cd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:21:a1:8c:ea:00:ed:f3:20:8b:e8:91:96: d5:b9:94:10:88:70:57:1f:c9:bb:44:ea:55:ff:8e: 3d:c4:84:b9:b2:2c:1e:02:a9:be:1c:37:8c:3b:94: bd:b8:e1:8e:e1:31:82:4a:3a:05:d1:bc:87:ca:57: 33:6d:8e:75:9b:94:e5:d8:0b:c0:a3:b2:23:45:27: fe:53:59:0f:cd:02:34:bf:7d:c6:21:63:31:1e:86: 11:80:4b:07:85:03:4c:06:1a:67:14:4b:df:8f:2a: fe:c3:26:67:0b:5c:b8:70:59:d9:88:0d:cc:86:5f: e9:9b:d8:29:6a:ff:e7:6f:14:5b:15:09:00:13:09: 74:8d:be:01:c7:af:97:83:df:c5:23:fe:93:79:3c: 2a:61:a6:51:c5:b2:ea:07:e6:65:4f:36:24:db:69: ae:70:f4:11:4a:ff:85:e8:37:62:a2:8b:4a:54:37: 09:68:24:1a:a3:30:36:f0:74:c4:a0:bb:44:e2:99: 3b:d6:92:18:37:6d:36:96:83:9c:c5:24:1b:d7:3d: 11:3b:23:66:94:83:1d:50:19:72:06:27:5c:7b:6e: 2d:64:c4:34:84:44:bc:7c:39:2a:30:1f:a2:98:ad: 63:03:32:97:65:e0:54:26:6e:e0:7c:34:b9:bf:26: 5b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:05:44:10:BE:82:E9:24:3E:05:7B:52:C3:04:F8:56:71:C3:F7:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3c236add-de19-3e3d-ac81-5e2a5af3b064.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:5a:6a:de:f5:08:26:b1:83:90:f3:f8:8f:20:24:3d:56:ae: d4:e1:ee:39:d4:ee:9b:0a:44:56:92:d6:ef:68:e6:49:36:4f: 45:91:55:2c:3b:d1:e9:5a:a1:dc:52:34:3d:be:57:f9:d5:00: a0:01:b7:06:31:56:60:b0:8d:f2:08:95:ad:6b:99:d0:a8:5e: 87:ff:12:1c:ca:ee:6f:2c:be:bc:72:a5:47:2c:3b:fe:62:17: f6:52:d6:af:e8:e8:57:79:4a:11:80:49:dd:a4:db:3c:f2:fe: 21:c4:31:23:e0:44:12:7d:3f:99:9f:10:56:a1:71:b7:f1:1b: 0c:d9:93:32:8b:12:fb:86:4d:76:c9:ec:e5:fe:ad:29:76:de: ec:91:f5:e6:50:63:26:ce:90:d9:fb:1e:9e:f2:4f:a7:76:73: 70:12:36:48:6f:ed:4c:1f:ad:0e:18:1e:1d:31:38:1b:cd:14: 50:fc:78:e7:5e:9b:4c:f5:ad:72:4f:09:a5:ea:69:29:f4:1e: ef:00:89:6b:97:8a:07:a5:77:94:12:79:43:ae:5e:53:fe:a5: f7:5b:2d:ad:d7:4b:b9:fd:e0:73:25:ac:ea:8c:79:02:8e:b1: 81:3a:6e:95:49:1a:10:5c:94:a0:ba:5b:85:88:6a:a6:6c:81: b3:98:21:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1UVOYjJXkEL1hB5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDMyOTEzMDAzMFoXDTI2MDYyNzEzMDAzMFowLzEtMCsGA1UEAxMk NjRmMmFjNGYtZmJjZC00ZmUzLWI4ZDQtM2EyNGQxNTAwY2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZUhoYzqAO3zIIvokZbVuZQQiHBXH8m7ROpV /449xIS5siweAqm+HDeMO5S9uOGO4TGCSjoF0byHylczbY51m5Tl2AvAo7IjRSf+ U1kPzQI0v33GIWMxHoYRgEsHhQNMBhpnFEvfjyr+wyZnC1y4cFnZiA3Mhl/pm9gp av/nbxRbFQkAEwl0jb4Bx6+Xg9/FI/6TeTwqYaZRxbLqB+ZlTzYk22mucPQRSv+F 6DdiootKVDcJaCQaozA28HTEoLtE4pk71pIYN202loOcxSQb1z0ROyNmlIMdUBly Bidce24tZMQ0hES8fDkqMB+imK1jAzKXZeBUJm7gfDS5vyZbcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8FRBC+gukkPgV7UsME+FZxw/dMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2MyMzZhZGQtZGUxOS0z ZTNkLWFjODEtNWUyYTVhZjNiMDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI1aat71CCaxg5Dz+I8gJD1WrtTh7jnU7psKRFaS1u9o5kk2T0WRVSw7 0elaodxSND2+V/nVAKABtwYxVmCwjfIIla1rmdCoXof/EhzK7m8svrxypUcsO/5i F/ZS1q/o6Fd5ShGASd2k2zzy/iHEMSPgRBJ9P5mfEFahcbfxGwzZkzKLEvuGTXbJ 7OX+rSl23uyR9eZQYybOkNn7Hp7yT6d2c3ASNkhv7UwfrQ4YHh0xOBvNFFD8eOde m0z1rXJPCaXqaSn0Hu8AiWuXigeld5QSeUOuXlP+pfdbLa3XS7n94HMlrOqMeQKO sYE6bpVJGhBclKC6W4WIaqZsgbOYIVU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:19:01 2026 by rpki-client