$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa File: ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa (raw, json) Hash identifier: 02FnBlUM8OEl7VDD730NfJP2i5y7Tc85G6dHup+RRPQ= Subject key identifier: CB:B5:8C:AE:43:10:3C:D5:CB:8F:ED:6C:22:1D:F4:83:56:5F:E8:9F Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D746FC1943A64CB719CEEA320 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 0 IP address blocks: 131.153.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:c1:94:3a:64:cb:71:9c:ee:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=62bb49be-53c8-48e1-85ca-38929108e8d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b3:77:92:3e:68:50:a4:be:52:54:16:3b:20: 21:fe:6b:88:f8:29:84:e5:f1:df:fa:00:8a:59:69: 10:8c:22:d2:4f:03:c3:53:0f:d3:cd:dc:7a:84:42: e8:4e:86:2b:04:1e:56:f5:a3:56:28:a5:89:52:45: 06:fd:c0:4e:5c:7c:56:a5:04:6a:be:67:00:fd:dd: 57:74:65:e8:99:10:e0:97:fc:d0:ad:d8:e5:9c:e0: a8:58:f4:4a:fb:31:e5:68:1a:6b:10:40:f5:a5:26: 94:93:cc:6b:13:54:d8:6d:d0:a9:5a:1e:c8:cb:56: 27:fd:24:ee:9c:4a:56:d0:df:cf:1e:69:70:b8:3f: 6d:c2:42:ba:51:9f:bb:44:0c:68:38:9d:55:a1:05: 46:45:14:39:2c:02:85:10:7a:d9:fa:1c:23:d2:c9: 1b:0f:c3:61:29:d4:64:e4:fe:8d:4e:0e:1d:f1:ed: f9:c9:7e:7e:bb:25:ec:52:b9:17:44:4b:af:ba:61: 37:ed:78:b3:c2:4d:c7:75:9c:a9:3f:9b:e4:05:98: bc:c3:ab:f7:52:c5:5e:95:63:38:b0:ab:c4:e8:af: b5:4a:fe:bd:ed:ea:11:bc:ce:a4:40:a6:03:92:6c: 82:20:49:52:e2:64:87:86:3b:13:d8:55:3d:24:b0: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B5:8C:AE:43:10:3C:D5:CB:8F:ED:6C:22:1D:F4:83:56:5F:E8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/ddcad4d0-50f9-3f63-9660-7b5b931bba48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:4d:2d:24:a9:dc:4b:bf:16:71:f6:8c:33:67:03:a8:91:8d: cb:ce:d0:79:52:60:4e:70:8b:6a:dd:f8:1d:62:e2:26:0e:b5: b1:1d:8b:e0:9d:97:3f:bb:55:e9:aa:91:0a:33:42:88:be:4f: de:ef:b8:80:23:23:44:c8:56:b3:7c:fd:41:14:d2:0e:30:ef: f1:9f:5d:0c:51:7a:bc:13:85:e7:b0:46:4c:1c:32:1c:ff:1c: 57:fe:92:17:d2:d8:da:24:b9:e2:ca:07:4b:80:5b:9c:0e:93: 96:8d:e1:35:34:1f:db:57:6f:2a:45:af:0b:4c:fd:79:d6:ab: 2e:f2:3f:09:f3:4b:c4:c5:80:7e:4f:f7:17:f2:b9:4e:17:6a: 20:36:57:b7:b7:b8:39:31:31:81:39:fa:41:26:6e:f9:30:53: 23:47:93:51:21:4d:2a:d0:fd:90:88:ef:d3:16:72:8a:dc:71: 77:af:7f:e6:06:0f:25:77:f5:2d:8f:89:1a:cd:74:ed:1e:6c: 68:44:72:d9:fe:c6:6f:ca:d0:b9:aa:56:51:ec:c3:30:2e:7a: 70:d9:89:d3:0d:a0:b2:fb:a0:3a:35:61:c5:1f:ea:95:fe:ea: 24:55:a0:86:1f:06:3a:47:8c:8d:9c:2d:be:69:b3:c2:0a:0e: 03:7b:a2:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b8GUOmTLcZzuoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NjJiYjQ5YmUtNTNjOC00OGUxLTg1Y2EtMzg5MjkxMDhlOGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bN3kj5oUKS+UlQWOyAh/muI+CmE5fHf+gCK WWkQjCLSTwPDUw/Tzdx6hELoToYrBB5W9aNWKKWJUkUG/cBOXHxWpQRqvmcA/d1X dGXomRDgl/zQrdjlnOCoWPRK+zHlaBprEED1pSaUk8xrE1TYbdCpWh7Iy1Yn/STu nEpW0N/PHmlwuD9twkK6UZ+7RAxoOJ1VoQVGRRQ5LAKFEHrZ+hwj0skbD8NhKdRk 5P6NTg4d8e35yX5+uyXsUrkXREuvumE37Xizwk3HdZypP5vkBZi8w6v3UsVelWM4 sKvE6K+1Sv697eoRvM6kQKYDkmyCIElS4mSHhjsT2FU9JLD2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMu1jK5DEDzVy4/tbCId9INWX+ifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZGRjYWQ0ZDAtNTBmOS0z ZjYzLTk2NjAtN2I1YjkzMWJiYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5nwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNNLSSp3Eu/FnH2jDNnA6iRjcvO0HlSYE5wi2rd+B1i4iYOtbEdi+Cd lz+7VemqkQozQoi+T97vuIAjI0TIVrN8/UEU0g4w7/GfXQxRerwTheewRkwcMhz/ HFf+khfS2NokueLKB0uAW5wOk5aN4TU0H9tXbypFrwtM/XnWqy7yPwnzS8TFgH5P 9xfyuU4XaiA2V7e3uDkxMYE5+kEmbvkwUyNHk1EhTSrQ/ZCI79MWcorccXevf+YG DyV39S2PiRrNdO0ebGhEctn+xm/K0LmqVlHswzAuenDZidMNoLL7oDo1YcUf6pX+ 6iRVoIYfBjpHjI2cLb5ps8IKDgN7orI= -----END CERTIFICATE-----Generated at Fri Apr 17 00:05:26 2026 by rpki-client