$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa File: f6f9a004-d208-326b-81c8-642c2ada7bb8.roa (raw, json) Hash identifier: uh2It9m7nAxLkGSxrMyjbVLqx8EJvXcd4bj1e1DAcX4= Subject key identifier: 24:E7:66:B3:BB:5A:E2:4C:FE:48:A3:09:BC:5E:48:F4:32:A6:1B:6E Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584DAAE03568886BA0A86CC0E600 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 152879 IP address blocks: 131.153.230.0/24 maxlen: 32 131.153.245.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:35:68:88:6b:a0:a8:6c:c0:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=3b99b0f8-7d9c-4c84-bb5a-fe3d59f667e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:0c:4b:9a:f6:0c:f1:a7:75:3b:08:a3:0e:6b: d2:64:0d:da:aa:72:df:97:b1:2f:ee:ca:c6:44:1b: ec:7d:05:03:dc:98:ff:7e:a0:34:a2:2c:6d:46:7d: 0a:37:ae:60:df:6b:ee:f3:79:7e:20:c7:97:d7:fa: 0a:74:74:8f:b6:48:6f:bb:35:19:29:6d:49:b7:8f: 8e:3b:2d:cc:81:da:1c:41:f7:47:79:b5:ea:46:41: f8:33:43:d0:ff:0e:5b:f8:64:17:64:fb:85:da:9b: 2e:36:e4:90:57:a4:31:db:98:7f:83:bd:fe:5e:cd: df:de:1c:5b:60:09:3b:11:b6:65:6f:e6:58:51:1a: 36:5b:04:bd:e4:1b:27:48:66:8b:23:30:5d:d3:41: 76:3e:15:14:a6:7b:2e:f2:5e:58:81:09:b1:28:5f: ab:39:00:7f:da:78:4f:2b:5a:0c:65:90:e6:2d:22: ff:df:3c:e6:80:60:79:a7:9f:ce:3c:da:8b:6d:bc: a2:75:57:4a:40:a8:74:e2:5d:8c:a0:12:09:18:cf: 6f:d2:68:9a:3d:39:0a:8e:34:af:20:28:cb:21:30: a6:64:aa:b5:a4:43:7a:13:79:bd:03:00:ef:e8:ca: 61:a3:8e:3b:50:7f:e3:30:1f:7e:d1:ba:8f:e4:4c: 15:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:66:B3:BB:5A:E2:4C:FE:48:A3:09:BC:5E:48:F4:32:A6:1B:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f6f9a004-d208-326b-81c8-642c2ada7bb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 131.153.230.0/24 131.153.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:81:4c:59:cc:63:d2:ab:d5:33:8e:84:32:74:6c:c8:ab:99: 0b:31:bc:98:d5:8e:63:b6:60:cb:10:2d:49:b9:fb:4c:b8:a3: 50:b4:0f:66:92:d6:2a:c3:aa:c2:eb:82:99:3a:7b:2b:5c:97: 9d:90:46:29:8f:f2:bc:65:b9:d3:e2:be:7d:18:0c:69:86:cf: 2c:63:50:7c:29:c2:d1:2e:6e:8b:7b:5f:e7:ea:a5:39:ef:60: af:50:6e:ad:d2:5c:62:0a:d4:17:3f:0b:15:1c:26:14:49:02: 5b:a1:25:38:f2:6f:fd:38:42:ff:67:43:5e:d3:2f:6e:fa:81: 2a:4a:f5:89:e6:9a:e1:5d:2d:aa:87:a5:b3:8a:17:bd:2e:67: a4:16:a1:14:19:23:62:c8:1d:49:c4:7b:76:ed:db:4f:2c:b2: 94:ec:98:94:f9:a7:8b:e3:c5:36:76:34:04:da:90:6f:d1:4c: b3:a1:97:c0:b7:d9:3e:93:f1:ed:b2:42:69:ab:72:c1:19:9c: db:e4:97:7d:f6:9e:36:5c:12:a8:96:ee:33:83:81:15:c1:ec: a6:d5:3b:73:7a:fb:19:bf:35:0e:38:62:60:fc:a1:75:fc:34: fc:94:e0:9d:fb:ff:b3:07:31:89:ea:9f:e2:06:de:22:3d:05: 07:bc:b0:f8 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE2q4DVoiGugqGzA5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk M2I5OWIwZjgtN2Q5Yy00Yzg0LWJiNWEtZmUzZDU5ZjY2N2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQxLmvYM8ad1OwijDmvSZA3aqnLfl7Ev7srG RBvsfQUD3Jj/fqA0oixtRn0KN65g32vu83l+IMeX1/oKdHSPtkhvuzUZKW1Jt4+O Oy3MgdocQfdHebXqRkH4M0PQ/w5b+GQXZPuF2psuNuSQV6Qx25h/g73+Xs3f3hxb YAk7EbZlb+ZYURo2WwS95BsnSGaLIzBd00F2PhUUpnsu8l5YgQmxKF+rOQB/2nhP K1oMZZDmLSL/3zzmgGB5p5/OPNqLbbyidVdKQKh04l2MoBIJGM9v0miaPTkKjjSv ICjLITCmZKq1pEN6E3m9AwDv6Mpho447UH/jMB9+0bqP5EwVkwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCTnZrO7WuJM/kijCbxeSPQyphtuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvZjZmOWEwMDQtZDIwOC0z MjZiLTgxYzgtNjQyYzJhZGE3YmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg5nmAwQA g5n1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACSBTFnMY9Kr1TOOhDJ0bMirmQsxvJjVjmO2YMsQLUm5+0y4 o1C0D2aS1irDqsLrgpk6eytcl52QRimP8rxludPivn0YDGmGzyxjUHwpwtEubot7 X+fqpTnvYK9Qbq3SXGIK1Bc/CxUcJhRJAluhJTjyb/04Qv9nQ17TL276gSpK9Ynm muFdLaqHpbOKF70uZ6QWoRQZI2LIHUnEe3bt208sspTsmJT5p4vjxTZ2NATakG/R TLOhl8C32T6T8e2yQmmrcsEZnNvkl332njZcEqiW7jODgRXB7KbVO3N6+xm/NQ44 YmD8oXX8NPyU4J37/7MHMYnqn+IG3iI9BQe8sPg= -----END CERTIFICATE-----Generated at Wed May 13 11:43:40 2026 by rpki-client