$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa File: 8d254be0-4973-3adb-9609-4a7ab5dad347.roa (raw, json) Hash identifier: 2Bc+lh+gFt00/fwAH0eVShtghqMBKfAG7Ik1qLAnOJk= Subject key identifier: 10:FD:1C:37:FD:2D:49:EC:47:5D:53:EF:E2:4C:0C:62:74:1A:D0:15 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6EDA5ED4D088D74D55A73680 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 12189 IP address blocks: 131.153.116.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5e:d4:d0:88:d7:4d:55:a7:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=73122f54-21cd-4adf-ac63-d8dfee711ddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:4a:e4:6d:90:3d:f3:aa:0f:eb:46:8c:0e:b6: 0b:e5:57:b9:99:1e:9a:31:7e:e7:75:cc:20:5e:fe: 1e:4d:5d:e7:23:4d:e3:e0:37:91:a3:25:b3:13:63: 64:3e:be:bb:22:fa:5a:7e:5f:1b:bd:51:91:77:c0: e2:77:34:de:3e:cd:32:4a:59:05:a7:de:9f:8c:4b: 36:cb:bf:30:73:21:65:95:75:e5:0c:cf:b3:04:5f: 6e:38:b8:49:8c:6f:2a:c5:7c:52:e1:f2:ab:d4:db: 4f:03:52:fb:8c:b3:68:13:b5:5a:1f:30:cc:78:e8: 21:bf:cb:d0:6f:dd:3c:37:99:5f:57:76:22:e2:22: 1a:13:3d:a6:94:6f:6f:8e:d4:60:88:42:08:d8:cc: 25:dc:c0:b0:40:ff:40:fe:f9:7e:23:77:f4:82:c0: bc:ee:97:de:72:69:af:c8:af:1c:55:b5:e5:28:6c: ad:30:41:5b:f3:66:ff:a5:48:45:db:e1:34:f9:42: ba:b5:62:88:f4:4d:9e:ee:a1:9b:b4:27:d9:57:2f: e9:21:5c:64:8a:25:f9:d2:b8:70:1a:6c:a2:f8:8a: cd:ef:37:24:21:64:1b:f5:66:01:12:9e:68:a4:2e: cf:04:0d:56:e1:ad:23:9b:b5:6a:a7:69:97:d3:7d: 17:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:FD:1C:37:FD:2D:49:EC:47:5D:53:EF:E2:4C:0C:62:74:1A:D0:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/8d254be0-4973-3adb-9609-4a7ab5dad347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:7e:be:8e:56:89:0d:7c:82:c0:db:bb:4c:a5:fa:3f:ed:ed: ea:69:6e:6e:e7:f7:93:7b:a9:e5:db:07:3a:ce:b1:f0:d4:b7: 9d:c6:00:07:07:2b:3d:9d:36:35:8e:43:72:b9:36:ef:db:de: 21:f6:c1:69:0d:5b:8d:4c:c7:6f:a5:d8:34:63:7f:35:d3:9f: 53:4d:63:fc:27:15:8e:28:b3:39:19:19:aa:2c:7c:33:73:db: 6f:a4:83:1d:01:94:a1:4a:95:23:27:69:aa:a6:53:0d:4a:75: 76:ed:60:f3:e5:bf:84:3b:ab:f0:6d:9a:d3:1c:e9:02:ec:c6: 1a:5f:4c:72:60:e2:1f:3a:95:c9:75:1e:e9:1e:9f:d6:ac:ac: 18:70:b0:43:6f:ae:d4:49:88:6f:67:b1:00:f6:d7:da:3d:da: 28:3e:3c:08:1e:73:99:63:b3:cd:51:79:8a:38:1d:a5:c8:73: fa:45:ef:2d:d5:34:aa:8c:a4:6f:f3:bd:6f:a6:8c:21:d2:dc: 0b:85:cb:76:10:f1:6f:13:7e:6f:c8:6d:40:9d:be:59:14:47: b9:5c:38:e3:23:f0:65:78:cb:be:fb:4b:04:ee:0c:09:50:9e: 1c:7b:6f:ba:34:c2:fa:38:f4:72:f1:6c:cf:9c:3b:d8:e9:92: 91:65:fb:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l7U0IjXTVWnNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk NzMxMjJmNTQtMjFjZC00YWRmLWFjNjMtZDhkZmVlNzExZGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUrkbZA986oP60aMDrYL5Ve5mR6aMX7ndcwg Xv4eTV3nI03j4DeRoyWzE2NkPr67Ivpafl8bvVGRd8DidzTePs0ySlkFp96fjEs2 y78wcyFllXXlDM+zBF9uOLhJjG8qxXxS4fKr1NtPA1L7jLNoE7VaHzDMeOghv8vQ b908N5lfV3Yi4iIaEz2mlG9vjtRgiEII2Mwl3MCwQP9A/vl+I3f0gsC87pfecmmv yK8cVbXlKGytMEFb82b/pUhF2+E0+UK6tWKI9E2e7qGbtCfZVy/pIVxkiiX50rhw Gmyi+IrN7zckIWQb9WYBEp5opC7PBA1W4a0jm7Vqp2mX030XuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBD9HDf9LUnsR11T7+JMDGJ0GtAVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOGQyNTRiZTAtNDk3My0z YWRiLTk2MDktNGE3YWI1ZGFkMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5l0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1+vo5WiQ18gsDbu0yl+j/t7eppbm7n95N7qeXbBzrOsfDUt53GAAcH Kz2dNjWOQ3K5Nu/b3iH2wWkNW41Mx2+l2DRjfzXTn1NNY/wnFY4oszkZGaosfDNz 22+kgx0BlKFKlSMnaaqmUw1KdXbtYPPlv4Q7q/BtmtMc6QLsxhpfTHJg4h86lcl1 Huken9asrBhwsENvrtRJiG9nsQD219o92ig+PAgec5ljs81ReYo4HaXIc/pF7y3V NKqMpG/zvW+mjCHS3AuFy3YQ8W8Tfm/IbUCdvlkUR7lcOOMj8GV4y777SwTuDAlQ nhx7b7o0wvo49HLxbM+cO9jpkpFl+5k= -----END CERTIFICATE-----Generated at Fri Apr 17 17:10:29 2026 by rpki-client