$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa File: f26924a7-3907-31ca-928b-e3ff0f341667.roa (raw, json) Hash identifier: U/ZiZhgP/gm0zs91Te/NUK9qtn9nEZ2dPKON9/2/x5o= Subject key identifier: 51:C7:E8:9B:D4:00:A4:F3:F9:37:EB:07:E5:D8:10:E2:A4:D6:BE:84 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D703FD410B8A6C11F50140300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 19437 IP address blocks: 131.153.168.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:d4:10:b8:a6:c1:1f:50:14:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=81bdc0da-995a-4b1f-958c-71e23a9dd523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:81:4d:c8:8c:eb:7b:57:4d:d5:87:87:f5: 80:71:83:b8:3d:b5:75:43:7b:4d:d7:7b:a8:e4:b4: d8:d5:f3:fa:d7:58:d0:fb:f3:0e:90:63:c1:ad:17: ce:00:00:63:ef:94:36:b7:81:c4:ed:e6:96:1c:1b: cf:e5:55:c0:b9:31:d3:8d:25:cb:82:53:7a:38:cf: b6:31:40:ee:0c:80:0a:4a:04:78:9b:54:a9:4b:75: 8c:05:3d:5d:b1:1c:f1:49:4a:f6:d9:1f:fc:8a:c9: 12:ff:52:a4:6a:dc:7f:4a:3f:34:49:05:9d:da:12: ff:fb:ea:4a:70:8a:24:3c:0c:04:e7:fe:13:69:71: 61:5a:72:b8:f6:93:17:22:79:3a:41:97:06:87:cc: d8:bc:bd:6f:a1:5a:97:e5:ff:86:55:5b:05:cd:9d: 61:3e:df:0e:6a:d9:93:60:53:60:00:31:34:38:c4: 61:f8:ee:1d:1e:7d:f7:59:e7:4a:81:ed:b1:4c:c4: 5f:7a:f6:a3:b0:dc:0a:fa:b4:78:0d:09:62:26:48: eb:71:70:a6:1f:4d:42:4b:b9:bb:a6:4e:35:66:ee: f8:4b:a1:d9:f9:3b:a5:bb:8e:cc:a7:09:57:3c:f6: 81:37:d5:7d:65:27:a6:ab:83:d0:ff:2a:c7:f5:47: 92:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C7:E8:9B:D4:00:A4:F3:F9:37:EB:07:E5:D8:10:E2:A4:D6:BE:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f26924a7-3907-31ca-928b-e3ff0f341667.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b6:30:1f:26:47:24:1b:2f:e5:b6:7d:b8:32:1a:1f:e3:e8: ae:24:2c:1e:b4:19:e3:81:08:43:7b:38:fd:e2:78:f1:20:66: 2f:1e:64:1f:a8:8e:ec:5d:25:5b:8d:f4:8b:42:8d:7b:3c:b4: 41:c3:d1:f0:30:9d:4d:25:cd:a8:03:54:a5:b6:34:d7:a5:4c: cc:c3:6e:be:e9:f2:0b:74:35:85:e6:ff:22:41:01:74:65:0a: 1c:30:84:3e:24:9f:c8:74:89:8b:d7:99:ba:82:fe:a7:2e:0f: 81:19:b5:23:b4:58:0b:9c:cb:c2:c2:5f:f0:0f:60:0c:e6:70: c6:f8:a8:1a:e2:57:a0:ef:a8:51:08:d1:cc:fa:22:2b:07:5d: 01:61:77:67:89:0a:25:e7:c7:18:61:b4:93:f7:06:cd:88:62: 2f:25:78:4d:7f:c9:9a:ee:10:71:0a:38:57:02:8c:5a:10:f2: 3e:0d:7c:62:8d:de:03:fd:c8:da:c2:9d:ec:2f:7c:11:05:66: 8c:cf:90:16:e9:bf:98:88:49:af:e1:f3:f8:e7:4d:d1:fd:bb: b1:91:56:08:c8:a5:ea:9b:ee:63:25:ad:35:6a:7d:13:86:25: ea:4c:fc:be:47:a2:22:79:c3:bd:ea:52:a6:c3:69:20:44:7e: 52:b4:68:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP9QQuKbBH1AUAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk ODFiZGMwZGEtOTk1YS00YjFmLTk1OGMtNzFlMjNhOWRkNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhReBTciM63tXTdWHh/WAcYO4PbV1Q3tN13uo 5LTY1fP611jQ+/MOkGPBrRfOAABj75Q2t4HE7eaWHBvP5VXAuTHTjSXLglN6OM+2 MUDuDIAKSgR4m1SpS3WMBT1dsRzxSUr22R/8iskS/1Kkatx/Sj80SQWd2hL/++pK cIokPAwE5/4TaXFhWnK49pMXInk6QZcGh8zYvL1voVqX5f+GVVsFzZ1hPt8OatmT YFNgADE0OMRh+O4dHn33WedKge2xTMRfevajsNwK+rR4DQliJkjrcXCmH01CS7m7 pk41Zu74S6HZ+Tulu47MpwlXPPaBN9V9ZSemq4PQ/yrH9UeS+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHH6JvUAKTz+TfrB+XYEOKk1r6EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjI2OTI0YTctMzkwNy0z MWNhLTkyOGItZTNmZjBmMzQxNjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDg5moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu2MB8mRyQbL+W2fbgyGh/j6K4kLB60GeOBCEN7OP3iePEgZi8eZB+o juxdJVuN9ItCjXs8tEHD0fAwnU0lzagDVKW2NNelTMzDbr7p8gt0NYXm/yJBAXRl ChwwhD4kn8h0iYvXmbqC/qcuD4EZtSO0WAucy8LCX/APYAzmcMb4qBriV6DvqFEI 0cz6IisHXQFhd2eJCiXnxxhhtJP3Bs2IYi8leE1/yZruEHEKOFcCjFoQ8j4NfGKN 3gP9yNrCnewvfBEFZozPkBbpv5iISa/h8/jnTdH9u7GRVgjIpeqb7mMlrTVqfROG JepM/L5HoiJ5w73qUqbDaSBEflK0aBs= -----END CERTIFICATE-----Generated at Fri Apr 17 04:01:13 2026 by rpki-client