$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa File: 3b710bba-fc04-3741-970d-7622d98c7f22.roa (raw, json) Hash identifier: 4lWwS8wWYlreZLMGdWdWd4wd+6yzS/YNAz9r1Y0botw= Subject key identifier: B2:51:48:60:A2:4C:94:F9:44:31:41:AF:62:3B:A3:48:D8:6E:CA:3B Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584D3DFFAA130535A9C683EDD494 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 20454 IP address blocks: 131.153.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:aa:13:05:35:a9:c6:83:ed:d4:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=da0a20d7-81b7-4ffe-8591-78e433e4532b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:91:5c:23:fa:64:76:a0:97:7e:0b:05:31:31: e1:4c:c6:5e:17:95:22:ae:b2:47:85:e5:64:bf:0f: 97:0e:da:49:65:45:9d:1c:b4:14:a8:9e:c6:ee:7e: cd:0b:e6:74:30:d9:5f:05:b6:bc:da:ae:45:eb:0f: c7:13:5c:c3:f6:86:af:1b:ee:9d:3e:8b:18:37:16: 75:d9:c0:b4:2e:35:02:2a:d9:6e:6b:0e:d8:0e:ff: 27:e9:18:8c:e8:0e:c3:07:3d:a3:c6:38:e2:02:4c: dd:63:d1:c2:38:73:56:42:12:fa:99:73:9c:78:c1: a3:47:0d:f8:74:f1:ef:49:a7:f6:40:bc:6f:98:cd: ed:85:e2:d5:4e:2f:7f:43:cf:53:c7:86:e4:3b:3f: 50:1e:5d:a4:9e:b0:fa:5a:d0:e2:07:58:f5:e2:d4: b5:3d:5b:c9:20:83:9a:a0:3e:f6:ec:c8:c3:7f:37: 95:77:4e:58:6c:c2:e2:1f:66:9b:60:35:2b:ea:ae: 4b:de:08:ce:b0:7a:26:5f:54:78:d4:26:de:fb:b3: ca:fe:9a:0c:18:9a:3d:8f:59:f0:18:1a:6f:b3:3f: 6f:27:da:2b:2b:a7:18:ae:0c:da:2b:f1:68:0f:a5: d1:51:1c:b7:a6:70:e9:17:d2:df:2e:60:42:4e:61: 67:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:51:48:60:A2:4C:94:F9:44:31:41:AF:62:3B:A3:48:D8:6E:CA:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3b710bba-fc04-3741-970d-7622d98c7f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:7c:21:5c:09:83:5e:42:c4:dc:6a:59:aa:15:c5:61:e5:aa: 86:83:5a:23:9f:62:94:99:40:cf:3d:11:5a:07:26:c5:60:43: 81:29:31:90:a4:42:d6:0b:f2:ff:1d:ab:79:18:e0:60:c4:e9: c4:8e:55:a3:2e:fb:20:d9:ac:c3:94:e3:cb:32:bc:10:d9:47: ba:fc:bd:b0:42:5a:6a:02:41:a7:98:fa:7b:fb:09:10:97:10: f8:95:fb:7a:8f:c3:25:5d:ee:5c:4e:75:47:1f:fc:85:3f:9a: c6:53:63:3f:9c:b2:d9:3b:e4:01:a6:cd:18:f2:7c:3c:95:0a: 41:84:e8:19:fe:a3:78:7e:54:94:dc:24:55:02:4b:93:ef:d8: 57:8f:06:65:70:e4:8f:3e:f9:24:ae:3f:e4:cb:ba:05:48:c4: d5:fc:bb:af:24:be:2a:51:77:dd:93:5b:32:52:e7:07:79:e7: 2e:ce:60:b9:89:d7:1a:55:e2:f0:5d:e1:2d:ae:78:09:ac:cf: f0:d4:ce:42:54:8f:a1:de:a9:dc:bf:0a:1d:24:e6:95:61:a4: 13:83:0b:75:a7:dc:e3:bd:6d:37:8c:2a:1a:96:54:4f:2f:8c: 89:ba:f4:84:d1:4b:bb:40:df:d8:6f:4d:b7:2d:7b:08:6a:33: 5b:2c:bc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6oTBTWpxoPt1JQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZGEwYTIwZDctODFiNy00ZmZlLTg1OTEtNzhlNDMzZTQ1MzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZFcI/pkdqCXfgsFMTHhTMZeF5UirrJHheVk vw+XDtpJZUWdHLQUqJ7G7n7NC+Z0MNlfBba82q5F6w/HE1zD9oavG+6dPosYNxZ1 2cC0LjUCKtluaw7YDv8n6RiM6A7DBz2jxjjiAkzdY9HCOHNWQhL6mXOceMGjRw34 dPHvSaf2QLxvmM3theLVTi9/Q89Tx4bkOz9QHl2knrD6WtDiB1j14tS1PVvJIIOa oD727MjDfzeVd05YbMLiH2abYDUr6q5L3gjOsHomX1R41Cbe+7PK/poMGJo9j1nw GBpvsz9vJ9orK6cYrgzaK/FoD6XRURy3pnDpF9LfLmBCTmFn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJRSGCiTJT5RDFBr2I7o0jYbso7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2I3MTBiYmEtZmMwNC0z NzQxLTk3MGQtNzYyMmQ5OGM3ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACx8IVwJg15CxNxqWaoVxWHlqoaDWiOfYpSZQM89EVoHJsVgQ4EpMZCk QtYL8v8dq3kY4GDE6cSOVaMu+yDZrMOU48syvBDZR7r8vbBCWmoCQaeY+nv7CRCX EPiV+3qPwyVd7lxOdUcf/IU/msZTYz+cstk75AGmzRjyfDyVCkGE6Bn+o3h+VJTc JFUCS5Pv2FePBmVw5I8++SSuP+TLugVIxNX8u68kvipRd92TWzJS5wd55y7OYLmJ 1xpV4vBd4S2ueAmsz/DUzkJUj6Heqdy/Ch0k5pVhpBODC3Wn3OO9bTeMKhqWVE8v jIm69ITRS7tA39hvTbctewhqM1ssvLI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:56:13 2026 by rpki-client