$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa File: 854709f1-c55c-3f5f-9469-3bea6718e5b4.roa (raw, json) Hash identifier: aKo69UkUUeRg0wn8RYC8NGTeyWdtouofBaP9v4Q6b3c= Subject key identifier: 2A:43:5F:E2:73:DF:7F:A6:D1:06:E3:2A:E9:0C:38:4D:53:0C:5F:99 Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584D60E50BB446BA825F68201880 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 26930 IP address blocks: 202.5.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:0b:b4:46:ba:82:5f:68:20:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=c23a4cb0-6681-4728-934a-bbe16d75d769 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:1c:f3:ec:75:95:d1:85:2e:8b:c9:4f:b0: 46:12:24:96:09:06:df:13:94:ea:52:6c:e8:49:46: 30:56:34:2a:96:9e:5e:59:5a:0f:22:f1:86:f4:ad: d5:83:c2:fe:a8:58:63:63:2c:8f:95:27:d8:c8:43: aa:ca:39:62:33:14:91:72:5b:31:89:69:e6:f1:58: d3:a7:43:a5:9b:95:a4:66:cb:c9:a5:b8:49:77:65: a4:49:56:ed:b3:f1:3c:76:87:aa:fc:10:9a:7b:53: 66:00:d5:16:8c:f9:22:dd:b6:d8:8d:3d:c3:65:e4: dc:e7:29:c5:18:e3:c3:0b:a6:b0:26:58:40:5e:ed: d5:19:62:46:a0:f0:4a:19:a4:6f:cd:c5:3d:fc:d9: 72:7c:c3:48:72:3b:ec:b6:2b:ca:d3:1c:b3:fc:09: cb:c9:b1:fd:52:f0:97:6d:b7:2d:36:8d:87:9e:25: c3:d3:c7:bb:d9:97:e0:6f:f8:12:53:b6:c9:d3:13: 19:5d:ee:82:37:02:85:a6:7f:bc:f1:27:a0:aa:d7: f7:4a:9d:74:ea:78:58:65:91:57:54:10:bb:a0:3d: 35:6a:b7:eb:f5:3a:92:6d:57:63:bc:8f:cf:4a:75: 8c:7d:f1:2d:14:f1:51:29:42:2a:06:3b:02:e3:65: b4:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:43:5F:E2:73:DF:7F:A6:D1:06:E3:2A:E9:0C:38:4D:53:0C:5F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/854709f1-c55c-3f5f-9469-3bea6718e5b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 202.5.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:50:9d:d6:c3:e4:54:81:4c:bb:49:c3:c1:74:eb:6d:e4:79: 13:d8:d6:a2:e1:a9:12:ba:4b:4b:39:d3:3e:08:48:17:4f:17: 2e:50:af:6e:b4:6d:b4:51:d5:9f:81:07:4c:58:c6:0f:2e:dd: 4b:74:9c:93:2f:df:22:2a:39:25:ee:d6:5a:24:b2:55:08:0f: ee:cb:f9:2f:36:c4:11:bb:19:88:5d:7e:f8:5b:55:1e:4d:9f: 28:ec:64:5e:d0:28:8c:60:16:6b:fc:82:09:bd:27:7b:90:0a: a2:61:29:13:1a:13:04:b1:02:7d:5a:bc:32:a9:25:b6:50:d3: 7a:21:6e:26:fd:24:d4:60:f7:f6:c7:51:67:7c:b1:3b:9d:63: dd:75:c7:71:3c:cf:84:ee:49:2a:62:5a:1c:cd:5b:d6:88:c2: ec:af:54:7e:32:62:ab:b4:1e:87:1d:f8:d7:ed:75:dd:41:fe: 53:41:0f:55:41:4a:b0:cb:1c:af:2b:17:76:c5:cb:15:39:f7: c6:b6:45:b6:62:1f:59:a1:bf:db:b3:cf:14:02:d2:67:71:64: 6c:3c:2d:8b:2c:65:e5:34:ea:a3:df:6a:db:92:70:55:69:88: 38:6a:d3:ee:60:bb:6b:b9:6b:d2:8b:97:1f:dc:4d:53:fa:5f: f6:b5:22:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5Qu0RrqCX2ggGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk YzIzYTRjYjAtNjY4MS00NzI4LTkzNGEtYmJlMTZkNzVkNzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMwc8+x1ldGFLovJT7BGEiSWCQbfE5TqUmzo SUYwVjQqlp5eWVoPIvGG9K3Vg8L+qFhjYyyPlSfYyEOqyjliMxSRclsxiWnm8VjT p0Olm5WkZsvJpbhJd2WkSVbts/E8doeq/BCae1NmANUWjPki3bbYjT3DZeTc5ynF GOPDC6awJlhAXu3VGWJGoPBKGaRvzcU9/NlyfMNIcjvstivK0xyz/AnLybH9UvCX bbctNo2HniXD08e72Zfgb/gSU7bJ0xMZXe6CNwKFpn+88Segqtf3Sp106nhYZZFX VBC7oD01arfr9TqSbVdjvI/PSnWMffEtFPFRKUIqBjsC42W05QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpDX+Jz33+m0QbjKukMOE1TDF+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvODU0NzA5ZjEtYzU1Yy0z ZjVmLTk0NjktM2JlYTY3MThlNWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAygUaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtQndbD5FSBTLtJw8F0623keRPY1qLhqRK6S0s50z4ISBdPFy5Qr260 bbRR1Z+BB0xYxg8u3Ut0nJMv3yIqOSXu1lokslUID+7L+S82xBG7GYhdfvhbVR5N nyjsZF7QKIxgFmv8ggm9J3uQCqJhKRMaEwSxAn1avDKpJbZQ03ohbib9JNRg9/bH UWd8sTudY911x3E8z4TuSSpiWhzNW9aIwuyvVH4yYqu0Hocd+Nftdd1B/lNBD1VB SrDLHK8rF3bFyxU598a2RbZiH1mhv9uzzxQC0mdxZGw8LYssZeU06qPfatuScFVp iDhq0+5gu2u5a9KLlx/cTVP6X/a1Irc= -----END CERTIFICATE-----Generated at Fri Apr 17 14:18:01 2026 by rpki-client