$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa File: 9e468c02-912e-327f-a060-95177befb6a0.roa (raw, json) Hash identifier: ROy8sB+vsN+ITdP68JlMQE747eaThlvJKC5vFlbQnDw= Subject key identifier: 12:68:F4:3F:89:DA:F4:1D:20:B8:60:C5:98:55:2D:BD:98:74:91:10 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584C8FA17B9AF33EADA0404AA1C0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa Signing time: Sun 18 Jan 2026 02:00:31 +0000 ROA not before: Sun 18 Jan 2026 02:00:31 +0000 ROA not after: Sat 18 Apr 2026 01:00:31 +0000 asID: 12189 IP address blocks: 131.153.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:8f:a1:7b:9a:f3:3e:ad:a0:40:4a:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Jan 18 02:00:31 2026 GMT Not After : Apr 18 01:00:31 2026 GMT Subject: CN=fd280445-8c22-4c48-a087-7f184d836352 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:4a:cf:9e:eb:a1:6d:d3:f8:9e:4b:e6:eb:d0: 9f:8d:13:8b:0c:65:77:ec:e4:d8:c9:cd:28:5f:cd: 18:1e:57:60:ce:d9:84:d5:5c:45:bf:c3:77:e1:c5: cf:88:59:f8:e9:a4:cb:0c:87:1b:3e:05:e2:9c:89: 11:d0:bc:60:cb:4e:11:77:5c:cf:07:44:a1:83:6e: 9e:de:89:8d:d4:59:c7:54:fb:72:62:9e:1a:39:cb: f8:09:c2:44:bf:cf:7a:24:fe:37:64:9d:6e:7e:7e: b6:cf:aa:d4:35:c8:ef:52:bd:98:34:1b:79:5d:6b: 13:18:17:17:80:a7:c8:95:82:e1:92:fe:1f:ac:48: 1a:bb:f8:9f:21:ca:c3:67:3f:1a:a7:18:db:fd:9f: 5d:a7:f8:42:0a:05:9a:da:d3:e3:31:11:22:ea:23: 8e:9f:66:07:73:2a:ce:f9:fd:be:68:b8:73:11:95: 4a:b4:c1:b1:e9:79:bb:dc:15:87:d9:65:87:96:82: 0d:3f:59:46:51:e9:ff:d1:ea:72:3b:26:d5:67:4e: 33:5f:2e:d5:e3:d7:c5:27:d5:f8:df:0c:5f:a0:76: ee:d9:6d:fb:18:7e:48:61:0d:45:5f:dc:35:9c:59: 5e:75:9f:90:e8:d6:d7:77:bd:09:bb:70:4d:06:1e: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:68:F4:3F:89:DA:F4:1D:20:B8:60:C5:98:55:2D:BD:98:74:91:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/9e468c02-912e-327f-a060-95177befb6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:96:e3:4f:e3:71:73:8b:b1:3f:d2:9a:b6:74:4a:5b:c6: 6c:7e:6d:82:40:94:27:20:92:42:59:9e:fb:ff:de:58:75:0b: 1e:dd:72:c2:05:5e:1b:99:85:89:99:28:e1:fa:69:18:98:22: 5f:5a:da:5a:b9:d9:db:e9:96:b6:ed:29:41:92:ae:b7:53:3b: 87:0d:cd:61:a2:86:8d:9a:be:4a:68:1f:82:cc:ce:81:7d:67: d9:12:9f:78:73:d6:ed:b2:5f:af:ea:b0:6b:64:8d:7b:75:b2: c9:b1:82:7d:6f:27:46:cc:c0:45:df:a1:1d:68:a5:7a:bd:cd: 7e:e5:f0:76:8f:04:3b:c4:7d:6a:17:a2:b9:4d:87:37:07:cc: 83:69:15:93:d9:75:b1:d8:98:da:fd:f8:d4:48:d6:7a:6e:de: dc:04:46:8f:75:ca:b2:8a:09:26:e3:62:49:64:cf:9a:5d:72: 75:b3:df:d7:c7:db:fe:c2:bb:d0:14:b5:09:09:d9:14:d4:bf: fa:fb:e2:80:94:e7:94:75:ac:95:56:77:ce:3d:37:71:e5:a8: 4b:6c:93:df:28:c4:f3:da:ec:f8:5c:1a:05:d6:09:d9:ac:c5: 87:08:ab:ea:c6:06:87:f7:e4:91:e3:62:33:42:d3:44:6a:49: dd:02:db:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyPoXua8z6toEBKocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDExODAyMDAzMVoXDTI2MDQxODAxMDAzMVowLzEtMCsGA1UEAxMk ZmQyODA0NDUtOGMyMi00YzQ4LWEwODctN2YxODRkODM2MzUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkrPnuuhbdP4nkvm69CfjROLDGV37OTYyc0o X80YHldgztmE1VxFv8N34cXPiFn46aTLDIcbPgXinIkR0Lxgy04Rd1zPB0Shg26e 3omN1FnHVPtyYp4aOcv4CcJEv896JP43ZJ1ufn62z6rUNcjvUr2YNBt5XWsTGBcX gKfIlYLhkv4frEgau/ifIcrDZz8apxjb/Z9dp/hCCgWa2tPjMREi6iOOn2YHcyrO +f2+aLhzEZVKtMGx6Xm73BWH2WWHloINP1lGUen/0epyOybVZ04zXy7V49fFJ9X4 3wxfoHbu2W37GH5IYQ1FX9w1nFledZ+Q6NbXd70Ju3BNBh5PbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJo9D+J2vQdILhgxZhVLb2YdJEQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvOWU0NjhjMDItOTEyZS0z MjdmLWEwNjAtOTUxNzdiZWZiNmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg5mIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOiluNP43Fzi7E/0pq2dEpbxmx+bYJAlCcgkkJZnvv/3lh1Cx7dcsIF XhuZhYmZKOH6aRiYIl9a2lq52dvplrbtKUGSrrdTO4cNzWGiho2avkpoH4LMzoF9 Z9kSn3hz1u2yX6/qsGtkjXt1ssmxgn1vJ0bMwEXfoR1opXq9zX7l8HaPBDvEfWoX orlNhzcHzINpFZPZdbHYmNr9+NRI1npu3twERo91yrKKCSbjYklkz5pdcnWz39fH 2/7Cu9AUtQkJ2RTUv/r74oCU55R1rJVWd849N3HlqEtsk98oxPPa7PhcGgXWCdms xYcIq+rGBof35JHjYjNC00RqSd0C2wA= -----END CERTIFICATE-----Generated at Thu Feb 26 15:03:19 2026 by rpki-client