$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa File: db04736c-f31c-3c7f-873c-818d9665fd54.roa (raw, json) Hash identifier: 4uRAhfCXJmDlUZAHby2hBdhGUU3T3OxMy2E+hwBdDVE= Subject key identifier: 9A:A0:34:1F:44:4F:08:BE:76:AD:D7:24:64:C4:45:AF:82:EB:D4:08 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D6EDA5FF3065C8CE696D57780 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 11572 IP address blocks: 131.153.66.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:5f:f3:06:5c:8c:e6:96:d5:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=d5c20dc7-e4c9-430f-8dfc-0568642d8fdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:13:09:0a:bd:f9:c4:1a:a7:ba:eb:3a:2d:7d: 76:a3:7a:42:a7:0d:0d:5a:77:a8:58:ea:71:98:41: fb:3d:ba:9d:6c:2e:a2:52:72:51:f2:5e:5f:24:b4: cd:44:ee:10:fd:f7:fe:01:e8:87:1a:aa:f0:dd:8d: 17:b7:20:aa:bc:b1:0a:de:58:c2:dc:b6:ca:84:4f: c1:28:0f:c0:51:85:9e:d2:63:d0:36:af:70:a0:bb: 48:b0:27:0b:e8:fa:32:af:72:81:30:07:b7:05:a0: 24:b1:21:63:8a:c3:f7:85:bf:a4:28:5b:8e:2e:d1: 76:06:6d:d7:c0:a2:09:a4:8c:37:b4:e2:bb:b8:12: e3:36:f5:0b:02:ed:95:29:0a:ee:05:64:46:0a:a6: e2:53:06:18:16:1d:6b:a9:35:1a:3f:6f:95:64:34: 47:f7:23:cf:51:a2:d4:a1:82:b3:be:d0:e9:30:0a: 86:4b:ba:c1:0b:4b:c1:a6:a4:8a:3b:2a:59:ac:1e: 10:9a:ae:03:66:7e:57:ed:02:7a:87:20:c5:7e:08: d4:82:72:2d:28:4b:44:c2:e5:1f:ab:39:ee:3b:56: ae:0d:94:96:11:b1:c8:27:a6:bd:9a:22:8e:c7:8d: 56:7b:a0:63:37:01:4c:cd:42:39:eb:5f:dd:09:4b: 09:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A0:34:1F:44:4F:08:BE:76:AD:D7:24:64:C4:45:AF:82:EB:D4:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/db04736c-f31c-3c7f-873c-818d9665fd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:2f:ef:43:5a:cd:8e:62:83:38:88:3e:07:f0:bf:d2:ef:81: 0f:c8:54:0e:5c:df:e3:7b:f8:62:a7:a4:c7:6a:23:af:a9:6e: 60:68:f4:8a:76:9c:3e:67:dd:54:65:7d:a1:a4:e0:61:39:fb: 28:a3:67:12:a6:61:6a:49:6b:b7:84:4b:d0:e2:5f:0a:3d:a2: cb:4e:28:d5:36:1c:8b:95:ca:88:a9:4c:d0:d7:65:29:30:f5: b6:ee:9b:b6:b3:09:ad:b0:7d:d7:aa:41:0b:31:01:c5:81:2b: f1:2b:d6:63:f8:57:43:01:93:f1:3e:bc:cf:64:9e:dc:b5:f6: c1:06:a3:f2:f2:1c:15:cb:e3:2d:03:cf:4b:39:57:22:35:81: b2:1f:d3:1c:38:ae:d7:78:26:9c:5b:82:06:fa:42:2c:8f:08: a5:f3:55:91:01:2f:99:65:cd:4b:8d:19:2f:ce:2b:06:49:75: 85:85:c3:12:54:c6:09:1f:5c:90:36:ce:b2:36:22:6d:c0:c6: b4:9b:a6:18:6d:31:f5:6c:d2:03:9d:ab:27:d4:c1:71:55:fc: 58:42:f5:ec:a1:be:ce:b0:09:18:bc:b5:fd:85:74:91:0a:68: 67:10:d8:ed:47:71:b0:63:f5:a7:69:ff:92:a1:27:12:09:93: 20:94:93:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2l/zBlyM5pbVd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDVjMjBkYzctZTRjOS00MzBmLThkZmMtMDU2ODY0MmQ4ZmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxMJCr35xBqnuus6LX12o3pCpw0NWneoWOpx mEH7PbqdbC6iUnJR8l5fJLTNRO4Q/ff+AeiHGqrw3Y0XtyCqvLEK3ljC3LbKhE/B KA/AUYWe0mPQNq9woLtIsCcL6Poyr3KBMAe3BaAksSFjisP3hb+kKFuOLtF2Bm3X wKIJpIw3tOK7uBLjNvULAu2VKQruBWRGCqbiUwYYFh1rqTUaP2+VZDRH9yPPUaLU oYKzvtDpMAqGS7rBC0vBpqSKOypZrB4Qmq4DZn5X7QJ6hyDFfgjUgnItKEtEwuUf qznuO1auDZSWEbHIJ6a9miKOx41We6BjNwFMzUI561/dCUsJAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqgNB9ETwi+dq3XJGTERa+C69QIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGIwNDczNmMtZjMxYy0z YzdmLTg3M2MtODE4ZDk2NjVmZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5lCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0v70NazY5igziIPgfwv9LvgQ/IVA5c3+N7+GKnpMdqI6+pbmBo9Ip2 nD5n3VRlfaGk4GE5+yijZxKmYWpJa7eES9DiXwo9ostOKNU2HIuVyoipTNDXZSkw 9bbum7azCa2wfdeqQQsxAcWBK/Er1mP4V0MBk/E+vM9knty19sEGo/LyHBXL4y0D z0s5VyI1gbIf0xw4rtd4Jpxbggb6QiyPCKXzVZEBL5llzUuNGS/OKwZJdYWFwxJU xgkfXJA2zrI2Im3AxrSbphhtMfVs0gOdqyfUwXFV/FhC9eyhvs6wCRi8tf2FdJEK aGcQ2O1HcbBj9adp/5KhJxIJkyCUkz4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:44:21 2026 by rpki-client