$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa File: befc52dd-73ea-3c14-814e-7758fca1ffec.roa (raw, json) Hash identifier: hVnSmpFc54mvL6DfhtmT8ID30M9UNiMMefEGGPlxZi8= Subject key identifier: 13:C5:59:3E:E8:29:35:E5:7E:41:CE:36:93:08:DA:BA:D1:BD:BC:25 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D746FC186B84597B468065900 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 19437 IP address blocks: 131.153.242.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c1:86:b8:45:97:b4:68:06:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=a0e6f34a-6d44-47cd-844e-1949bb812051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e2:51:a3:85:2c:51:14:db:ca:22:c9:bd:05: bb:82:41:43:1c:91:8c:a0:f3:61:79:3e:ba:b0:d9: ea:54:c2:a2:9e:e4:3a:ed:77:ee:3e:bf:ec:2e:47: 79:c1:72:6a:07:9e:79:ec:1e:72:2f:72:1c:22:55: ea:12:ac:4a:b9:da:45:44:43:f3:5c:83:ef:d7:c5: 86:30:f8:59:86:f3:86:b5:41:c0:3e:ab:2e:78:29: 59:82:7a:48:ff:95:8b:9a:45:46:e3:a5:5c:f4:16: 78:90:15:a4:fa:3f:50:8a:32:b6:f9:fd:59:df:b1: 1a:f5:58:39:b8:cd:9b:5b:cc:d8:48:3f:36:cc:63: 96:8f:13:06:37:9e:6e:6f:5a:9e:00:78:ad:42:0e: af:f2:04:04:a6:b2:59:b9:7e:73:8b:d4:9f:d1:ce: 9e:0d:1a:22:74:c1:74:d2:52:a4:4e:a9:b5:3a:bb: ef:4b:cf:f5:35:c1:b9:14:44:1d:47:ec:a4:dd:1a: 2c:9b:67:60:3a:b8:40:0a:81:2d:49:e2:8e:46:5a: e2:3d:3e:e5:5b:e9:48:6b:47:32:d7:6b:42:b4:aa: a4:e1:e4:fe:4f:84:6c:b8:b1:de:d0:88:68:d8:b7: 7b:4b:c9:86:78:1d:d5:03:f5:49:34:7d:32:2e:80: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C5:59:3E:E8:29:35:E5:7E:41:CE:36:93:08:DA:BA:D1:BD:BC:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/befc52dd-73ea-3c14-814e-7758fca1ffec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ca:0a:c8:78:ec:6e:e7:be:19:21:79:82:42:09:a3:d1:e8: b8:a6:ee:fd:b1:85:33:d2:63:fa:92:0a:bc:9b:e2:2a:75:ca: 2b:a2:9d:d1:a5:f7:39:80:d6:3a:14:0e:50:91:87:8f:85:c1: a5:5a:78:c1:d5:e4:04:72:7c:8b:74:a6:df:03:e1:b0:83:e4: 78:21:2b:0a:2b:2d:e1:c9:89:27:41:61:85:84:b1:14:77:75: c7:5b:4b:4b:7b:35:0c:9e:b8:27:ce:19:9f:84:b3:d4:5d:04: 21:8b:39:5e:c4:ff:b0:e6:ec:4d:4b:35:a6:d1:90:54:1e:b2: 36:10:cd:f2:b9:27:e4:23:2c:90:3d:b5:75:ce:d4:cb:ea:e9: e2:19:90:71:11:4d:b6:2a:fc:ce:15:3a:53:46:69:e4:21:33: 08:9a:9a:5c:cf:e7:3b:28:18:ab:61:d0:5b:d5:01:25:c2:ef: 30:4f:4f:3c:5e:c8:38:dc:39:9f:2b:dd:6d:fa:7d:67:8c:fd: ba:6f:d7:79:d8:da:84:d5:99:72:8e:04:22:60:20:0e:5d:a5: 0e:29:18:d7:c1:4a:35:f2:c2:8a:f0:57:d3:57:fd:58:02:1a: a4:4e:84:67:66:0e:91:b0:9d:13:37:18:d5:08:6b:9d:48:28: 4e:38:de:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8GGuEWXtGgGWQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YTBlNmYzNGEtNmQ0NC00N2NkLTg0NGUtMTk0OWJiODEyMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuJRo4UsURTbyiLJvQW7gkFDHJGMoPNheT66 sNnqVMKinuQ67XfuPr/sLkd5wXJqB5557B5yL3IcIlXqEqxKudpFREPzXIPv18WG MPhZhvOGtUHAPqsueClZgnpI/5WLmkVG46Vc9BZ4kBWk+j9QijK2+f1Z37Ea9Vg5 uM2bW8zYSD82zGOWjxMGN55ub1qeAHitQg6v8gQEprJZuX5zi9Sf0c6eDRoidMF0 0lKkTqm1OrvvS8/1NcG5FEQdR+yk3Rosm2dgOrhACoEtSeKORlriPT7lW+lIa0cy 12tCtKqk4eT+T4RsuLHe0Iho2Ld7S8mGeB3VA/VJNH0yLoB+DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPFWT7oKTXlfkHONpMI2rrRvbwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYmVmYzUyZGQtNzNlYS0z YzE0LTgxNGUtNzc1OGZjYTFmZmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrKCsh47G7nvhkheYJCCaPR6Lim7v2xhTPSY/qSCryb4ip1yiuindGl 9zmA1joUDlCRh4+FwaVaeMHV5ARyfIt0pt8D4bCD5HghKworLeHJiSdBYYWEsRR3 dcdbS0t7NQyeuCfOGZ+Es9RdBCGLOV7E/7Dm7E1LNabRkFQesjYQzfK5J+QjLJA9 tXXO1Mvq6eIZkHERTbYq/M4VOlNGaeQhMwiamlzP5zsoGKth0FvVASXC7zBPTzxe yDjcOZ8r3W36fWeM/bpv13nY2oTVmXKOBCJgIA5dpQ4pGNfBSjXyworwV9NX/VgC GqROhGdmDpGwnRM3GNUIa51IKE443kM= -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:10 2026 by rpki-client