$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa File: 5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa (raw, json) Hash identifier: fDuGZl0HBXvgFEPSBdtduHbWJwtk/++RBm3Z5gthFmU= Subject key identifier: 6C:D7:10:6D:0C:3F:C6:CD:24:28:A6:42:D6:21:08:70:A4:AB:E6:0C Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D703FD3BA85F3DF5FA589B540 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 19437 IP address blocks: 131.153.144.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d3:ba:85:f3:df:5f:a5:89:b5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=1c0426a7-950f-48e3-a7d4-7c5a289a7420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:48:c1:97:ab:1c:43:90:b0:21:86:84:6a: 7c:59:f6:4d:c2:a6:7b:09:de:de:f6:55:6e:1c:4e: f6:70:ad:4e:75:49:0a:53:89:eb:63:1b:55:fb:54: fe:d3:f7:ee:cc:f0:91:43:98:af:f6:a7:5c:bd:17: 96:65:40:42:63:5f:51:3c:79:95:33:87:cc:f1:28: ca:b7:ca:ef:5c:79:e3:bc:a8:ee:f9:99:3f:b1:57: 36:50:38:5b:73:40:63:49:d7:ff:32:8f:b2:23:eb: 0e:a6:58:c9:77:57:c2:33:1a:64:0f:81:90:99:b3: 59:04:91:eb:c7:03:14:f6:a4:60:33:cc:f7:ce:3d: 24:8d:47:43:b5:38:0a:99:93:5b:4d:21:b0:9f:fb: 8e:c2:75:48:82:f7:b9:4c:34:e5:97:c6:b3:9e:fc: 77:bb:05:1a:04:2c:09:91:d2:3a:98:96:ef:14:61: 6e:a9:1b:12:c1:b8:31:f0:c0:70:3a:68:2a:cb:95: f8:a3:e3:0a:99:35:e7:52:f9:c8:6a:6b:7f:5e:eb: 57:c2:4b:8d:63:db:72:5c:2a:8a:d4:57:f6:7d:97: 39:c5:d2:6d:96:7f:f0:c5:42:87:de:54:21:c1:70: 23:05:90:80:67:00:cd:c9:f3:c4:82:c5:af:35:54: 1d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D7:10:6D:0C:3F:C6:CD:24:28:A6:42:D6:21:08:70:A4:AB:E6:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/5f3402e5-cd92-33b6-812c-0892c0b8b16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:00:7c:2b:aa:c2:32:04:37:81:1d:01:f4:47:9b:09:83:6c: 80:ef:52:91:30:b1:bd:80:20:db:3b:b8:11:88:87:1e:e5:70: d8:20:b5:9f:7a:85:39:22:10:3d:0c:83:24:2d:eb:cf:3b:d6: 83:59:cf:91:56:56:30:4d:99:9a:d3:28:e4:07:98:fa:b3:cd: 5b:30:84:1f:96:1f:69:0d:d1:d2:53:b6:96:ca:d0:55:d7:6a: 6e:81:c8:94:28:d4:97:bc:d0:21:d8:13:d6:2b:40:04:74:ca: 1e:7a:d4:cb:24:ae:bd:a3:4b:30:83:eb:2f:08:2e:97:0e:fd: 44:ab:04:a2:0a:5c:30:32:12:10:44:05:f8:25:55:3d:6f:ed: 66:93:9f:c0:ee:d6:d2:dd:54:b6:f6:98:a3:24:75:9c:18:53: db:dc:79:7d:f7:f9:fb:af:be:97:a2:20:0e:a7:e2:fe:fe:77: 14:10:b6:a1:f0:69:24:59:8f:68:e3:f1:0b:87:59:54:cb:07: 3d:97:ce:08:0c:5e:5d:33:aa:87:df:e8:6d:0c:21:6d:7e:8e: 0e:cf:1e:09:88:41:2c:6c:bc:b1:5f:c8:68:d6:a4:8f:4a:94: e2:37:c4:c1:a0:a6:77:2a:58:20:db:af:94:b4:5d:33:6b:ce: 65:d6:d1:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9O6hfPfX6WJtUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MWMwNDI2YTctOTUwZi00OGUzLWE3ZDQtN2M1YTI4OWE3NDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoItIwZerHEOQsCGGhGp8WfZNwqZ7Cd7e9lVu HE72cK1OdUkKU4nrYxtV+1T+0/fuzPCRQ5iv9qdcvReWZUBCY19RPHmVM4fM8SjK t8rvXHnjvKju+Zk/sVc2UDhbc0BjSdf/Mo+yI+sOpljJd1fCMxpkD4GQmbNZBJHr xwMU9qRgM8z3zj0kjUdDtTgKmZNbTSGwn/uOwnVIgve5TDTll8aznvx3uwUaBCwJ kdI6mJbvFGFuqRsSwbgx8MBwOmgqy5X4o+MKmTXnUvnIamt/XutXwkuNY9tyXCqK 1Ff2fZc5xdJtln/wxUKH3lQhwXAjBZCAZwDNyfPEgsWvNVQdKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGzXEG0MP8bNJCimQtYhCHCkq+YMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNWYzNDAyZTUtY2Q5Mi0z M2I2LTgxMmMtMDg5MmMwYjhiMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5mQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQAfCuqwjIEN4EdAfRHmwmDbIDvUpEwsb2AINs7uBGIhx7lcNggtZ96 hTkiED0MgyQt68871oNZz5FWVjBNmZrTKOQHmPqzzVswhB+WH2kN0dJTtpbK0FXX am6ByJQo1Je80CHYE9YrQAR0yh561Mskrr2jSzCD6y8ILpcO/USrBKIKXDAyEhBE BfglVT1v7WaTn8Du1tLdVLb2mKMkdZwYU9vceX33+fuvvpeiIA6n4v7+dxQQtqHw aSRZj2jj8QuHWVTLBz2XzggMXl0zqoff6G0MIW1+jg7PHgmIQSxsvLFfyGjWpI9K lOI3xMGgpncqWCDbr5S0XTNrzmXW0aM= -----END CERTIFICATE-----Generated at Fri Apr 17 12:42:55 2026 by rpki-client