$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa File: 57c1f272-d40d-3157-8493-4276aeec2785.roa (raw, json) Hash identifier: Q7Upa4h0l36n8fAwNSKr//cdGDZvS1vwFf7HVgpNL0s= Subject key identifier: C7:5E:6D:77:AB:0E:71:84:56:BC:42:4E:F7:2E:82:9E:7D:E4:68:DD Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D91C0113568D73EB4B9FDB300 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 20454 IP address blocks: 131.153.237.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:11:35:68:d7:3e:b4:b9:fd:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=67c5b8d2-cf33-416e-9944-26bfaeed353c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:72:4c:00:a3:d5:a2:fe:fc:0b:e6:c7:f0:32: fe:d9:29:03:91:28:be:63:8b:b9:ab:cf:1a:54:1b: b3:d7:b1:3a:df:ea:e1:c9:81:e1:72:cb:58:6e:84: 75:67:08:44:f7:87:33:96:fe:41:6e:9e:b3:22:05: d7:ab:5d:ee:57:b9:c3:f0:ae:8f:42:11:0c:dc:7e: 9f:c2:fa:de:10:41:fd:3b:61:37:91:2b:8e:24:f1: d6:90:9a:fb:bb:3e:b6:bb:6b:43:b7:25:44:d0:0a: 7a:8e:6d:df:47:6d:fc:0d:ff:53:17:b6:a1:b5:cd: d5:a4:de:7a:6b:42:c7:c3:49:37:13:3c:fa:d7:e3: ba:0c:69:5f:73:a3:16:fb:84:69:b4:fc:9e:27:8d: fb:f7:54:d7:27:de:ce:74:50:2e:af:d8:44:46:fa: a1:0c:20:3b:79:eb:72:df:83:b6:57:9e:93:5e:65: df:d8:88:91:25:85:28:db:80:0c:c2:73:c6:ed:cb: 58:71:c5:e3:51:78:d7:54:b9:b9:1c:9b:3d:76:ff: 87:d6:da:cd:df:f2:92:43:77:c4:d6:92:ef:31:ca: 16:93:96:a0:2f:79:f1:23:f8:cb:c3:1b:92:a3:c4: 89:e7:7e:0a:23:7d:08:83:fd:4a:4e:72:58:16:21: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:5E:6D:77:AB:0E:71:84:56:BC:42:4E:F7:2E:82:9E:7D:E4:68:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:4f:46:3a:09:cd:96:1e:5f:a9:b7:c7:ed:4a:29:2d:91:0c: 78:21:45:9a:e3:04:34:2a:17:cb:a1:4d:2c:ee:f1:14:d9:cf: d5:00:b0:9d:ac:ab:50:19:65:c6:dd:77:02:1d:2b:d2:f4:bc: 17:de:18:53:43:0d:f7:85:0a:02:70:83:59:32:14:13:6f:c2: 92:12:b2:f2:b9:b3:27:cd:a3:d0:c9:ae:0c:06:01:ec:a8:ca: d8:71:73:a8:7f:fc:42:d5:94:ee:88:b4:18:a6:a6:ea:18:e8: 27:ed:7f:0b:3f:08:e0:00:5c:1b:b6:99:54:19:2f:85:9f:0c: c9:f7:80:4a:b0:f2:83:77:86:c7:4a:38:66:1c:b0:eb:67:3f: 9a:4e:25:08:5e:30:69:d9:2a:9f:9e:0e:74:38:ca:a0:07:eb: 27:64:b7:9a:83:b2:cc:e6:4e:be:46:33:7a:d5:04:38:17:70: b2:04:44:51:f9:8f:32:2b:af:21:b6:a1:e5:7b:33:bc:e9:d6: ce:ec:5c:17:a3:f7:54:db:bf:f6:30:c3:1e:80:24:fc:9c:1f: 13:98:db:19:2a:c1:cd:3e:5a:86:79:76:2a:a1:f7:3a:b1:a1: 9d:74:cd:51:4c:03:e0:92:0e:91:3e:de:79:3b:0c:f1:49:c4: 8b:e5:b5:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBE1aNc+tLn9swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NjdjNWI4ZDItY2YzMy00MTZlLTk5NDQtMjZiZmFlZWQzNTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HJMAKPVov78C+bH8DL+2SkDkSi+Y4u5q88a VBuz17E63+rhyYHhcstYboR1ZwhE94czlv5Bbp6zIgXXq13uV7nD8K6PQhEM3H6f wvreEEH9O2E3kSuOJPHWkJr7uz62u2tDtyVE0Ap6jm3fR238Df9TF7ahtc3VpN56 a0LHw0k3Ezz61+O6DGlfc6MW+4RptPyeJ43791TXJ97OdFAur9hERvqhDCA7eety 34O2V56TXmXf2IiRJYUo24AMwnPG7ctYccXjUXjXVLm5HJs9dv+H1trN3/KSQ3fE 1pLvMcoWk5agL3nxI/jLwxuSo8SJ534KI30Ig/1KTnJYFiHfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdebXerDnGEVrxCTvcugp595GjdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTdjMWYyNzItZDQwZC0z MTU3LTg0OTMtNDI3NmFlZWMyNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ntMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5PRjoJzZYeX6m3x+1KKS2RDHghRZrjBDQqF8uhTSzu8RTZz9UAsJ2s q1AZZcbddwIdK9L0vBfeGFNDDfeFCgJwg1kyFBNvwpISsvK5syfNo9DJrgwGAeyo ythxc6h//ELVlO6ItBimpuoY6Cftfws/COAAXBu2mVQZL4WfDMn3gEqw8oN3hsdK OGYcsOtnP5pOJQheMGnZKp+eDnQ4yqAH6ydkt5qDsszmTr5GM3rVBDgXcLIERFH5 jzIrryG2oeV7M7zp1s7sXBej91Tbv/Ywwx6AJPycHxOY2xkqwc0+WoZ5diqh9zqx oZ10zVFMA+CSDpE+3nk7DPFJxIvltXs= -----END CERTIFICATE-----Generated at Tue Apr 21 18:08:41 2026 by rpki-client