$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa File: c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa (raw, json) Hash identifier: tbJzHzy6mM+WtTSLEAOa79QhHfz3KA1Xu3LqZAann0o= Subject key identifier: 12:99:E9:18:8F:E5:7D:8F:0B:61:26:D7:A2:D0:FA:AB:BB:46:3F:F3 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584DD090550D446F8BF539D0F080 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 20454 IP address blocks: 131.153.225.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:55:0d:44:6f:8b:f5:39:d0:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=9f8250d4-a7a2-4817-9207-be6147e56a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:26:13:84:30:d3:5c:f9:e7:ee:0e:90:d1: ad:a1:b5:0f:01:cf:a5:73:94:de:74:fa:5b:be:a3: 67:e5:f0:fe:98:41:ce:2d:4f:a4:af:22:b2:31:86: f0:2f:93:63:1f:f0:af:f0:ea:b2:cd:02:37:e6:a8: 47:58:26:f2:cb:74:6e:12:b7:70:79:01:2e:6f:b5: 86:04:77:ab:a3:85:0a:ef:5d:47:7d:0a:c7:2d:42: 0a:ad:37:c9:68:04:01:02:ad:b7:3c:08:ea:bf:3b: ec:25:1d:0e:ad:bc:3b:45:ea:4a:32:90:27:14:46: 28:bd:ee:41:b3:ed:51:a4:a7:06:62:6a:8c:15:60: d1:1e:fb:34:2c:09:48:0c:17:5e:cd:4a:6d:fc:fc: fb:5d:bc:75:d1:34:5f:12:e4:fc:24:85:7c:8c:f1: e5:b9:6e:de:88:31:24:39:75:8a:3c:cb:dc:7a:7b: 5b:ae:fb:7f:af:25:07:bc:1a:48:3c:48:62:b5:58: 84:b2:30:cd:6d:0c:4a:79:ab:fe:8b:44:4d:63:7d: 75:8e:a4:ca:2b:37:3c:f1:3b:52:f2:d4:92:d0:6e: f5:1c:55:c6:03:df:fd:6b:71:7b:b7:72:bd:90:d9: 09:68:33:63:c6:11:62:3d:f7:e2:3c:ca:74:b4:33: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:99:E9:18:8F:E5:7D:8F:0B:61:26:D7:A2:D0:FA:AB:BB:46:3F:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c5c70e70-bb5c-30b4-8842-4be1aca4a393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:aa:23:01:db:25:43:0e:40:23:32:f5:cd:61:8e:5c:9e:87: 7f:a8:82:fc:24:fa:ad:5f:cd:ca:1e:56:32:e6:90:7d:85:3b: 1d:12:56:58:71:75:be:7a:94:24:03:ca:11:3e:61:6b:57:c6: a4:73:b6:ba:0e:5e:55:10:41:f7:a2:34:5d:a3:e1:38:68:5c: 04:96:3a:aa:4c:43:86:7a:33:9f:fc:4c:d4:53:a2:0b:5d:1c: 3f:30:09:de:23:d0:3b:51:ce:33:20:f2:70:2b:92:68:d8:78: 78:18:05:1c:ef:04:45:97:41:f1:15:cb:c6:c6:fe:a3:7d:de: c6:4f:01:1d:c4:1f:10:2e:27:c9:0d:1c:ed:dc:2a:c9:f5:3c: c9:71:a8:5d:86:75:68:46:6f:1b:16:27:1f:49:7b:01:03:fd: 98:a5:11:78:79:58:c4:a5:d1:41:a9:e9:ba:e0:12:fd:98:9e: 77:dc:3e:59:3a:96:45:02:bb:c1:8f:a1:fc:ff:d4:3d:12:7f: 03:37:f9:b5:52:ff:cb:c4:a8:57:1c:c6:de:14:82:b8:9d:7a: bb:e7:a8:75:87:21:10:31:37:28:fc:d0:3c:15:12:47:fa:a4: 95:d6:8a:cf:4a:1b:e0:05:a4:d7:21:d4:42:a6:00:3f:17:06: a1:34:0c:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFUNRG+L9TnQ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk OWY4MjUwZDQtYTdhMi00ODE3LTkyMDctYmU2MTQ3ZTU2YTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8mE4Qw01z55+4OkNGtobUPAc+lc5TedPpb vqNn5fD+mEHOLU+kryKyMYbwL5NjH/Cv8OqyzQI35qhHWCbyy3RuErdweQEub7WG BHero4UK711HfQrHLUIKrTfJaAQBAq23PAjqvzvsJR0Orbw7RepKMpAnFEYove5B s+1RpKcGYmqMFWDRHvs0LAlIDBdezUpt/Pz7Xbx10TRfEuT8JIV8jPHluW7eiDEk OXWKPMvcentbrvt/ryUHvBpIPEhitViEsjDNbQxKeav+i0RNY311jqTKKzc88TtS 8tSS0G71HFXGA9/9a3F7t3K9kNkJaDNjxhFiPffiPMp0tDOWGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKZ6RiP5X2PC2Em16LQ+qu7Rj/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzVjNzBlNzAtYmI1Yy0z MGI0LTg4NDItNGJlMWFjYTRhMzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5nhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCqIwHbJUMOQCMy9c1hjlyeh3+ogvwk+q1fzcoeVjLmkH2FOx0SVlhx db56lCQDyhE+YWtXxqRztroOXlUQQfeiNF2j4ThoXASWOqpMQ4Z6M5/8TNRTogtd HD8wCd4j0DtRzjMg8nArkmjYeHgYBRzvBEWXQfEVy8bG/qN93sZPAR3EHxAuJ8kN HO3cKsn1PMlxqF2GdWhGbxsWJx9JewED/ZilEXh5WMSl0UGp6brgEv2YnnfcPlk6 lkUCu8GPofz/1D0SfwM3+bVS/8vEqFccxt4UgridervnqHWHIRAxNyj80DwVEkf6 pJXWis9KG+AFpNch1EKmAD8XBqE0DKM= -----END CERTIFICATE-----Generated at Wed May 13 12:49:18 2026 by rpki-client