$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa File: 6118720a-ed2c-312e-8962-08dd436ce917.roa (raw, json) Hash identifier: kyV+UOMxi1FyS61T/Xae6T2uOLWqw8bMDEQqabFrY/c= Subject key identifier: 32:61:2C:DA:78:F9:EA:2C:EA:1B:92:7C:41:45:B1:26:4D:84:E6:22 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584CAA2709FE68A5944D20BE9F80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 19437 IP address blocks: 131.153.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:09:fe:68:a5:94:4d:20:be:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=1965dc2f-b31e-46a9-91b6-9a1ea362fae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:54:ce:26:dd:16:63:4b:88:ee:e9:bc:5f:81: ab:9f:dc:8a:c2:07:3d:8d:d2:88:11:4f:87:90:43: 67:8b:57:b2:10:05:ae:cd:cd:d0:5d:28:09:ea:30: c2:dc:96:28:b5:06:31:79:42:77:23:c3:6d:ae:ba: d1:6b:97:d2:d9:23:01:23:d8:74:a4:fe:84:64:46: 48:af:ab:5c:21:91:43:8a:41:13:18:a5:74:18:3d: 58:e8:90:c0:80:d9:d1:a5:e8:b5:c3:a4:4c:ca:24: 8e:5a:1c:85:cb:82:80:27:84:c4:ad:59:2d:f5:9d: 7a:b9:7c:66:5c:1a:c3:a5:a9:de:c2:27:dd:2a:63: d8:ab:2a:a3:53:31:49:d5:0a:73:f4:91:67:d4:96: 2d:36:7b:4e:e3:7a:eb:e7:8b:a1:1e:8f:3f:34:8f: 2a:85:c4:20:34:98:fb:9d:76:4a:3c:44:7f:fc:19: 93:d5:53:25:c5:c6:6d:9c:98:60:d0:a3:37:d8:22: 20:36:e5:01:43:01:2e:9f:49:23:33:cb:9d:84:27: 48:80:6e:45:35:47:3e:35:26:09:a7:51:9f:c3:b8: e6:13:54:60:22:42:73:67:14:c9:97:17:cf:fc:6b: 01:86:0b:b1:bd:fe:f2:6f:2a:35:6f:22:4d:53:93: 28:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:61:2C:DA:78:F9:EA:2C:EA:1B:92:7C:41:45:B1:26:4D:84:E6:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/6118720a-ed2c-312e-8962-08dd436ce917.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b6:0c:77:48:ad:0b:05:da:96:4f:7e:22:4d:46:0f:18:80: 33:4f:f8:59:fe:ba:da:e3:36:96:c9:98:9c:42:4a:bd:d0:39: d4:38:82:f3:20:5c:19:92:11:e5:fd:11:4f:35:91:e6:15:3e: 02:fd:02:0f:95:82:31:8e:28:57:6d:33:c8:07:29:d3:e5:f7: 19:51:8d:57:a4:c4:2f:03:90:e8:b3:ab:7e:86:79:d5:c5:6f: 31:87:f2:58:5e:58:28:6d:05:c8:6e:c3:30:9e:16:aa:a5:72: a8:8a:15:ff:fc:b1:cb:7a:45:9e:d4:11:72:bb:45:ce:49:e3: 79:5e:0e:57:7c:04:dd:e2:7c:9f:50:18:43:84:98:d2:37:13: c1:48:7b:39:a8:1e:71:96:0c:8b:24:4f:0c:f3:a4:e5:90:69: 1b:a2:11:51:22:7c:cd:52:35:6f:29:34:e4:b2:ad:84:ae:d6: 6b:ac:a8:6b:8c:9e:f1:df:54:a0:54:36:2b:28:4c:a6:ed:ee: c8:ef:9e:48:6c:07:53:f4:68:25:f9:03:d1:10:fd:e1:93:4c: 46:7c:21:67:4f:2d:78:93:f2:4d:4b:45:e0:8c:5b:67:c3:c3: 7a:37:7e:83:d5:29:09:4e:7c:2a:b8:25:6b:83:96:eb:e0:04: 9f:cb:16:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwn+aKWUTSC+n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MTk2NWRjMmYtYjMxZS00NmE5LTkxYjYtOWExZWEzNjJmYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71TOJt0WY0uI7um8X4Grn9yKwgc9jdKIEU+H kENni1eyEAWuzc3QXSgJ6jDC3JYotQYxeUJ3I8NtrrrRa5fS2SMBI9h0pP6EZEZI r6tcIZFDikETGKV0GD1Y6JDAgNnRpei1w6RMyiSOWhyFy4KAJ4TErVkt9Z16uXxm XBrDpanewifdKmPYqyqjUzFJ1Qpz9JFn1JYtNntO43rr54uhHo8/NI8qhcQgNJj7 nXZKPER//BmT1VMlxcZtnJhg0KM32CIgNuUBQwEun0kjM8udhCdIgG5FNUc+NSYJ p1Gfw7jmE1RgIkJzZxTJlxfP/GsBhguxvf7ybyo1byJNU5MooQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJhLNp4+eos6huSfEFFsSZNhOYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNjExODcyMGEtZWQyYy0z MTJlLTg5NjItMDhkZDQzNmNlOTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHW2DHdIrQsF2pZPfiJNRg8YgDNP+Fn+utrjNpbJmJxCSr3QOdQ4gvMg XBmSEeX9EU81keYVPgL9Ag+VgjGOKFdtM8gHKdPl9xlRjVekxC8DkOizq36GedXF bzGH8lheWChtBchuwzCeFqqlcqiKFf/8sct6RZ7UEXK7Rc5J43leDld8BN3ifJ9Q GEOEmNI3E8FIezmoHnGWDIskTwzzpOWQaRuiEVEifM1SNW8pNOSyrYSu1musqGuM nvHfVKBUNisoTKbt7sjvnkhsB1P0aCX5A9EQ/eGTTEZ8IWdPLXiT8k1LReCMW2fD w3o3foPVKQlOfCq4JWuDluvgBJ/LFrs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:41:40 2026 by rpki-client