$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa File: 9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json) Hash identifier: hC0ZaXuoSDEbWFgbuXYidlFzOBhj0qzav8IWDxgc+o0= Subject key identifier: 4F:90:07:75:6D:10:2E:5C:20:D0:6A:64:21:2A:62:76:2F:D5:D3:23 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D703FD390C7C6317D7AD0F900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 12189 IP address blocks: 131.153.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d3:90:c7:c6:31:7d:7a:d0:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=24f85898-4657-489c-ac46-6c4681d1e588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:f8:3a:e6:00:ba:a5:de:08:26:48:13:b3: 88:c7:8f:ea:3a:c8:fc:f3:fd:52:0e:27:b8:c6:ae: 8c:90:43:a4:70:8d:8a:d4:0a:3f:d7:6f:a8:60:89: 28:94:11:c6:72:5e:58:50:ed:35:f1:39:3f:a0:76: 23:10:56:b1:4a:47:85:c1:20:dd:93:49:40:93:cc: 5c:21:df:35:4e:64:b6:57:b5:3b:d9:c1:41:4c:39: 77:b4:51:34:92:4a:4d:27:23:b6:c0:c4:96:75:57: f8:58:56:59:8a:47:39:67:3c:77:42:4a:7e:cf:08: dc:41:cf:4d:1d:29:f8:39:8c:97:91:92:9f:72:55: 26:3b:aa:f9:5a:ce:15:79:0e:89:bb:b8:d7:07:14: 41:e3:a4:fa:de:3f:ae:7a:e8:33:21:d9:8d:69:ef: 70:cc:65:d7:c9:b6:01:df:3b:90:d1:6e:0c:1e:fa: 99:28:05:05:d0:e0:43:be:fc:dd:70:b9:70:27:97: 6f:45:9c:b4:f0:94:45:b6:6a:e1:b7:49:42:1e:e3: 40:aa:9e:66:27:30:a8:c2:e2:6c:4b:f2:73:ba:d4: 6f:5f:61:1d:bc:77:6f:e3:50:4f:35:ef:82:0d:81: ce:80:d6:d2:f3:36:96:ac:a7:9f:bd:b9:45:57:f5: e5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:90:07:75:6D:10:2E:5C:20:D0:6A:64:21:2A:62:76:2F:D5:D3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:93:38:5a:6c:58:ea:88:bb:37:5c:14:55:c4:da:67:c2:fa: d1:b3:56:ff:97:89:61:ba:fd:b7:2a:44:a8:85:4b:44:56:35: cd:39:c5:91:b8:f4:14:6d:2e:91:c8:16:47:26:82:29:be:5a: 0d:c8:5b:7e:b5:e5:ac:7a:66:bc:94:4b:b2:3f:1e:9d:1a:83: 6f:eb:89:6b:fe:6e:4b:51:17:d6:df:06:64:91:cf:b4:42:f9: 86:9f:f2:79:23:09:29:f3:df:ae:0c:95:6f:83:a5:9c:7b:5a: 8c:82:03:05:93:67:81:71:f0:91:18:93:af:89:0e:e4:e6:a0: 9e:0b:78:fe:71:32:ab:96:b5:11:23:3f:7c:8c:b0:b6:29:32: 43:d0:75:47:39:b3:20:70:52:b5:07:09:5a:3e:4c:ef:9c:04: a2:b6:67:ec:dc:4e:87:9f:b6:9b:96:19:b4:da:92:3d:82:12: fa:2a:8b:12:88:54:32:b0:9f:9a:7d:f3:8d:64:1e:d9:eb:3a: 22:4d:84:43:51:0a:5c:73:62:47:e4:4d:f7:70:e7:55:79:74: 04:0f:96:5d:e3:f1:3d:2d:99:a5:3f:6a:8c:34:39:40:6b:c7: 88:47:ac:7b:38:2e:f0:f5:ed:be:68:31:be:dd:ac:7c:51:d4: 0c:9c:86:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9OQx8YxfXrQ+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk MjRmODU4OTgtNDY1Ny00ODljLWFjNDYtNmM0NjgxZDFlNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoj4OuYAuqXeCCZIE7OIx4/qOsj88/1SDie4 xq6MkEOkcI2K1Ao/12+oYIkolBHGcl5YUO018Tk/oHYjEFaxSkeFwSDdk0lAk8xc Id81TmS2V7U72cFBTDl3tFE0kkpNJyO2wMSWdVf4WFZZikc5Zzx3Qkp+zwjcQc9N HSn4OYyXkZKfclUmO6r5Ws4VeQ6Ju7jXBxRB46T63j+ueugzIdmNae9wzGXXybYB 3zuQ0W4MHvqZKAUF0OBDvvzdcLlwJ5dvRZy08JRFtmrht0lCHuNAqp5mJzCowuJs S/JzutRvX2EdvHdv41BPNe+CDYHOgNbS8zaWrKefvblFV/XlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+QB3VtEC5cINBqZCEqYnYv1dMjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWU0NjhjMDItOTEyZS0z MjdmLWEwNjAtOTUxNzdiZWZiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuTOFpsWOqIuzdcFFXE2mfC+tGzVv+XiWG6/bcqRKiFS0RWNc05xZG4 9BRtLpHIFkcmgim+Wg3IW3615ax6ZryUS7I/Hp0ag2/riWv+bktRF9bfBmSRz7RC +Yaf8nkjCSnz364MlW+DpZx7WoyCAwWTZ4Fx8JEYk6+JDuTmoJ4LeP5xMquWtREj P3yMsLYpMkPQdUc5syBwUrUHCVo+TO+cBKK2Z+zcToeftpuWGbTakj2CEvoqixKI VDKwn5p9841kHtnrOiJNhENRClxzYkfkTfdw51V5dAQPll3j8T0tmaU/aow0OUBr x4hHrHs4LvD17b5oMb7drHxR1Aychks= -----END CERTIFICATE-----Generated at Fri Apr 17 16:01:14 2026 by rpki-client