$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa File: 0a5f3109-fd1f-385b-ab65-9e307183fab3.roa (raw, json) Hash identifier: v38uA9yu+zYncYWdQvqQFbbOLqlFhMQVYsgTAN9qaFc= Subject key identifier: 40:3C:AA:32:B3:E2:2C:85:D7:27:1F:97:73:B7:0B:6E:61:E7:D4:73 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D8AC53A9944F12164E7085B90 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 60558 IP address blocks: 131.153.243.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3a:99:44:f1:21:64:e7:08:5b:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=fd391f66-b477-49f8-8b84-58f9bed3234a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:89:20:fc:9b:fb:c0:cf:a6:f1:b6:da:46:95: 03:8f:31:6e:13:8d:2d:79:66:b8:da:1e:92:99:60: 7d:ba:a2:55:38:7b:5c:ee:7f:38:9c:4c:56:db:8e: ce:dc:a5:03:22:53:fb:96:09:49:e8:50:b8:0e:b5: 4a:30:c5:87:a9:1b:64:c2:51:ec:f3:df:9c:80:7a: e6:66:1d:74:8b:b7:a4:77:a4:c5:be:09:d0:97:65: ef:5d:ae:44:74:4d:d8:5e:ea:5c:97:e4:ec:18:69: ef:be:8b:42:b7:9b:24:46:d9:18:84:7b:14:83:80: 1d:73:8a:6b:52:9f:7b:e5:7e:d3:f9:22:0c:20:9d: 9c:37:78:0e:cb:77:0a:1c:c1:44:57:da:90:df:72: c6:8d:10:7b:f7:21:d0:74:c4:86:80:63:5d:d6:53: 61:dc:4b:5c:94:04:f3:4b:5f:9e:74:99:81:a7:c4: ca:0f:3d:53:69:64:81:5e:fd:86:af:09:45:fa:fc: 45:68:ac:1d:39:ea:57:b3:e9:5b:09:e0:95:85:7d: 6e:f5:16:1c:84:14:fc:07:66:94:52:25:e7:78:10: 02:89:43:0c:aa:90:fc:39:c2:8d:27:36:3d:e9:eb: 10:ed:88:57:79:b0:63:a9:01:c0:fa:85:a4:ee:c7: 40:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:AA:32:B3:E2:2C:85:D7:27:1F:97:73:B7:0B:6E:61:E7:D4:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/0a5f3109-fd1f-385b-ab65-9e307183fab3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:23:56:8b:cf:c7:d8:42:0d:29:e0:f1:9a:73:26:61:f0:7b: 42:bb:13:37:fa:3e:b0:26:9c:76:e8:af:ca:69:be:65:0c:47: 6a:04:51:e9:9c:f0:44:58:51:4e:c0:37:8e:9f:ee:4a:ce:e4: f9:a2:07:38:5c:4a:5e:74:33:a2:8a:84:b9:03:18:fb:2a:5b: 14:d7:4f:f4:49:cb:a7:0d:86:bc:76:83:d6:65:59:83:d8:d2: c1:65:68:2c:36:5b:51:76:6a:a0:37:e1:ee:62:0c:d5:b4:94: 39:35:5c:d6:ee:c1:05:e3:f0:cc:47:bf:47:57:ac:99:44:b4: c5:22:0f:39:fd:d2:ae:f2:6d:32:19:f6:d4:f3:5f:44:78:be: e1:2b:e0:75:70:9b:f2:a5:19:62:8f:d5:54:27:be:6b:e1:50: e6:7f:c0:c2:28:83:ca:9b:61:5b:cb:66:f2:5d:c1:28:2c:81: ee:ee:c4:b5:f1:46:b1:4d:61:ee:4f:ab:2f:2d:e4:30:b4:2f: eb:dd:64:26:20:b0:ea:22:f8:6c:a9:12:f7:14:bb:ef:55:0a: 82:e5:60:49:a2:2b:b4:3f:b6:a0:a5:52:41:31:30:26:84:91: 9c:cb:f5:1b:8d:07:f5:9c:73:13:96:bb:54:83:95:46:06:9d: e2:aa:46:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTqZRPEhZOcIW5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmQzOTFmNjYtYjQ3Ny00OWY4LThiODQtNThmOWJlZDMyMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4kg/Jv7wM+m8bbaRpUDjzFuE40teWa42h6S mWB9uqJVOHtc7n84nExW247O3KUDIlP7lglJ6FC4DrVKMMWHqRtkwlHs89+cgHrm Zh10i7ekd6TFvgnQl2XvXa5EdE3YXupcl+TsGGnvvotCt5skRtkYhHsUg4Adc4pr Up975X7T+SIMIJ2cN3gOy3cKHMFEV9qQ33LGjRB79yHQdMSGgGNd1lNh3EtclATz S1+edJmBp8TKDz1TaWSBXv2GrwlF+vxFaKwdOepXs+lbCeCVhX1u9RYchBT8B2aU UiXneBACiUMMqpD8OcKNJzY96esQ7YhXebBjqQHA+oWk7sdA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEA8qjKz4iyF1ycfl3O3C25h59RzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvMGE1ZjMxMDktZmQxZi0z ODViLWFiNjUtOWUzMDcxODNmYWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIjVovPx9hCDSng8ZpzJmHwe0K7Ezf6PrAmnHbor8ppvmUMR2oEUemc 8ERYUU7AN46f7krO5PmiBzhcSl50M6KKhLkDGPsqWxTXT/RJy6cNhrx2g9ZlWYPY 0sFlaCw2W1F2aqA34e5iDNW0lDk1XNbuwQXj8MxHv0dXrJlEtMUiDzn90q7ybTIZ 9tTzX0R4vuEr4HVwm/KlGWKP1VQnvmvhUOZ/wMIog8qbYVvLZvJdwSgsge7uxLXx RrFNYe5Pqy8t5DC0L+vdZCYgsOoi+GypEvcUu+9VCoLlYEmiK7Q/tqClUkExMCaE kZzL9RuNB/WccxOWu1SDlUYGneKqRjc= -----END CERTIFICATE-----Generated at Mon Apr 20 09:42:14 2026 by rpki-client