$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa File: cc47fe57-b252-3fe7-a59a-1a298b383d54.roa (raw, json) Hash identifier: +oOhLnLDhtL3Tu3JQH8mPyE8Lvwt5N6njNAPsgXvc5M= Subject key identifier: BE:7D:EA:F3:0C:37:18:FF:B6:C3:35:BC:30:D9:75:E4:80:44:9B:C3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6EDA5E10928697C2BE719C80 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 207134 IP address blocks: 131.153.96.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5e:10:92:86:97:c2:be:71:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=ad4fa2a3-3ba4-42c6-bc5f-ad6ac4b60073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:f3:71:7f:91:1f:38:8e:a4:12:10:d3:36: b5:24:ec:c7:d1:1f:86:cf:37:c2:12:6c:bc:68:45: 1a:72:d4:85:a8:e0:23:12:be:38:21:ef:92:f0:de: 56:82:cf:94:31:89:8e:d0:ad:77:f5:e6:3f:7f:d3: a0:58:80:68:da:25:19:89:2b:11:82:52:c3:c2:10: 89:42:1d:14:f9:78:d2:0d:9b:55:5f:0a:1f:6a:54: b6:fe:2b:16:5d:bf:45:29:c2:ce:58:98:5d:dc:1c: 2f:d9:c4:14:dd:fa:ec:49:92:d0:4d:76:d6:54:2b: 7a:0d:d5:11:b5:bb:33:bb:01:4c:18:ef:67:be:7e: be:f2:98:55:bf:ce:66:27:a0:41:8d:d7:65:a1:cb: 5a:c9:44:64:a3:cc:f3:88:bf:88:f9:6b:c1:81:85: ec:3c:8b:1d:9f:30:8c:91:14:fd:fc:89:f3:a1:60: 98:7a:78:52:9d:41:61:4d:46:93:2c:89:0e:81:13: 0e:8e:eb:99:bb:fe:eb:ec:e7:e8:a9:ca:9c:10:09: f6:c0:04:db:57:13:3d:47:bf:2c:76:e5:e3:96:39: 96:0f:25:fe:cc:ee:72:dc:5b:b7:e8:ee:19:99:db: 6c:70:04:bd:c1:c1:88:c8:b9:3d:97:f9:9b:4d:56: 2b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:7D:EA:F3:0C:37:18:FF:B6:C3:35:BC:30:D9:75:E4:80:44:9B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cc47fe57-b252-3fe7-a59a-1a298b383d54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:3b:e0:cd:e6:9b:3e:31:cd:38:67:27:e1:f0:dd:a1:b1:95: 38:f3:af:02:02:50:4a:4f:ef:10:c3:15:cc:4f:b3:e6:a6:e1: 0d:b8:0b:8b:54:5a:21:b4:14:e4:2c:6f:38:59:e6:67:07:6d: 82:29:12:dd:81:64:c8:53:49:7b:a3:57:dc:18:be:34:ab:80: 6d:55:35:db:67:96:fb:50:85:16:71:cd:33:a2:bc:eb:93:1e: 2c:58:e9:90:ff:55:69:a1:25:7a:94:1d:71:ac:3b:8e:7c:fa: 39:75:68:a5:b2:3f:f0:84:92:3b:d4:be:da:bc:79:14:7a:c9: 9d:fb:5f:d9:9f:df:fa:8e:88:fc:0e:7c:8f:7e:57:21:2f:ee: 6d:70:a5:44:72:a8:30:6d:1d:95:5c:8b:5e:da:ee:a1:ce:70: 27:de:ee:60:ed:de:58:bc:50:fa:16:19:5a:eb:23:5f:cb:05: 92:c0:1e:23:2f:f1:1c:eb:2c:83:a1:32:2f:58:c4:1d:ad:36: b0:83:a8:17:22:60:df:7b:f6:d5:fd:99:e9:19:82:39:45:00: 46:86:0f:0b:6f:3e:05:39:8f:49:69:ef:04:42:1c:3b:43:bb: c5:b2:1b:47:c8:9e:a9:de:28:be:98:41:34:e4:38:60:e0:ea: 49:2e:0d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l4QkoaXwr5xnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YWQ0ZmEyYTMtM2JhNC00MmM2LWJjNWYtYWQ2YWM0YjYwMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zbzcX+RHziOpBIQ0za1JOzH0R+GzzfCEmy8 aEUactSFqOAjEr44Ie+S8N5Wgs+UMYmO0K139eY/f9OgWIBo2iUZiSsRglLDwhCJ Qh0U+XjSDZtVXwofalS2/isWXb9FKcLOWJhd3Bwv2cQU3frsSZLQTXbWVCt6DdUR tbszuwFMGO9nvn6+8phVv85mJ6BBjddloctayURko8zziL+I+WvBgYXsPIsdnzCM kRT9/InzoWCYenhSnUFhTUaTLIkOgRMOjuuZu/7r7OfoqcqcEAn2wATbVxM9R78s duXjljmWDyX+zO5y3Fu36O4ZmdtscAS9wcGIyLk9l/mbTVYrlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL596vMMNxj/tsM1vDDZdeSARJvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2M0N2ZlNTctYjI1Mi0z ZmU3LWE1OWEtMWEyOThiMzgzZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABM74M3mmz4xzThnJ+Hw3aGxlTjzrwICUEpP7xDDFcxPs+am4Q24C4tU WiG0FOQsbzhZ5mcHbYIpEt2BZMhTSXujV9wYvjSrgG1VNdtnlvtQhRZxzTOivOuT HixY6ZD/VWmhJXqUHXGsO458+jl1aKWyP/CEkjvUvtq8eRR6yZ37X9mf3/qOiPwO fI9+VyEv7m1wpURyqDBtHZVci17a7qHOcCfe7mDt3li8UPoWGVrrI1/LBZLAHiMv 8RzrLIOhMi9YxB2tNrCDqBciYN979tX9mekZgjlFAEaGDwtvPgU5j0lp7wRCHDtD u8WyG0fInqneKL6YQTTkOGDg6kkuDUs= -----END CERTIFICATE-----Generated at Fri Apr 17 01:47:44 2026 by rpki-client