$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa File: e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa (raw, json) Hash identifier: 9UMW1RhaLEytFyVs8JS/sQei/nmioBi+FtAth03K+og= Subject key identifier: 2A:79:40:B9:20:B4:40:1C:02:06:A2:D0:2C:4D:1A:A0:AA:9B:C7:1F Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584DE9B086FE0EA7B1E4E07646B4 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 3949 IP address blocks: 131.103.20.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:86:fe:0e:a7:b1:e4:e0:76:46:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=bf6a4593-ff00-4297-9af7-0b98a978737b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:2d:cb:ab:66:b2:95:ad:d6:3b:0b:69:ca:cd: dc:37:47:4a:0c:d8:b2:52:09:85:6e:8d:36:38:18: da:ed:81:de:fd:63:7b:68:1e:13:4e:dc:1b:82:3c: cc:a1:17:5b:00:39:ec:c0:e8:7e:bc:d7:18:d0:0d: a5:4d:1d:ce:97:40:b0:ea:5d:91:a8:c9:12:83:9f: 3c:8e:0f:d1:f3:39:db:55:53:66:6a:0a:8d:6b:05: 4e:52:f6:94:9d:92:20:c5:04:02:b7:75:73:13:bc: dc:c9:34:bc:10:85:4e:9a:a0:2c:1f:b2:c1:83:38: 23:fe:9e:84:68:96:8e:a7:7f:40:9f:80:b6:1f:21: 37:a4:22:ff:cd:57:51:0f:26:04:6a:96:9f:0a:e2: 8d:b5:28:af:d8:69:ba:a6:59:f6:90:46:df:65:d5: f5:59:2b:e0:c1:ac:74:a7:39:0f:66:10:c6:59:72: 90:da:df:80:5a:43:f9:15:2d:75:96:9f:ca:38:76: 66:14:31:be:3f:d4:38:c4:6d:0e:49:af:32:87:24: 14:b8:3b:4f:3b:63:8f:f8:f0:1d:ef:cb:98:b0:ad: ce:e5:4a:97:73:17:a1:6c:ba:b0:03:f4:0a:fb:c8: 2d:a7:13:a8:fd:08:32:4e:ca:a1:e7:ba:b1:f4:7d: d6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:79:40:B9:20:B4:40:1C:02:06:A2:D0:2C:4D:1A:A0:AA:9B:C7:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.20.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:af:d8:e2:32:94:a3:9b:d8:9c:05:09:ee:1e:6b:f8:07:44: a3:57:36:86:ee:b7:0f:c5:fe:db:17:7f:b0:0d:c1:b1:37:de: 8b:a3:ac:32:00:c4:dd:56:8f:72:6c:fa:3b:44:b2:17:d9:45: bc:a9:ed:a2:2e:61:12:dd:d5:18:08:1d:74:86:73:74:28:b1: b1:75:08:f6:6d:a6:6b:d2:53:8e:db:ba:f1:ec:cd:a5:61:b2: a9:61:a4:a6:a4:96:3b:5f:0a:49:2b:4e:7b:06:04:17:63:e2: 08:75:83:f2:c6:39:0e:a7:f1:68:5d:21:80:6c:6b:09:f9:6c: e9:78:e7:97:bb:90:41:cd:de:34:c5:d2:a5:ae:f4:55:43:4c: c0:1d:0e:5c:1a:81:c0:ef:60:95:c5:19:9b:c0:e9:6c:65:9f: bb:70:05:b3:a6:81:71:e9:c2:7a:1c:36:33:92:48:d2:75:fa: 55:e4:0c:39:1a:19:4d:1c:48:bc:e2:85:36:f3:ee:26:40:47: fd:c4:8c:ee:08:b7:31:e1:4e:40:99:3f:76:20:62:28:9f:1f: fb:df:55:b1:01:dc:9a:0b:44:a6:d5:df:fa:a7:f7:44:5b:5f: d4:1b:d3:c1:e1:d4:32:41:e2:eb:36:3e:de:51:56:8b:31:3f: 6a:cd:1c:60 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3psIb+Dqex5OB2RrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk YmY2YTQ1OTMtZmYwMC00Mjk3LTlhZjctMGI5OGE5Nzg3MzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiC3Lq2ayla3WOwtpys3cN0dKDNiyUgmFbo02 OBja7YHe/WN7aB4TTtwbgjzMoRdbADnswOh+vNcY0A2lTR3Ol0Cw6l2RqMkSg588 jg/R8znbVVNmagqNawVOUvaUnZIgxQQCt3VzE7zcyTS8EIVOmqAsH7LBgzgj/p6E aJaOp39An4C2HyE3pCL/zVdRDyYEapafCuKNtSiv2Gm6pln2kEbfZdX1WSvgwax0 pzkPZhDGWXKQ2t+AWkP5FS11lp/KOHZmFDG+P9Q4xG0OSa8yhyQUuDtPO2OP+PAd 78uYsK3O5UqXcxehbLqwA/QK+8gtpxOo/QgyTsqh57qx9H3WWwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCp5QLkgtEAcAgai0CxNGqCqm8cfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTRiOWVjNDAtMGQ4YS0z N2UyLTlhMDEtZDIzNmFhN2ZlYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDg2cUyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBBr9jiMpSjm9icBQnuHmv4B0SjVzaG7rcPxf7bF3+wDcGxN96Lo6wy AMTdVo9ybPo7RLIX2UW8qe2iLmES3dUYCB10hnN0KLGxdQj2baZr0lOO27rx7M2l YbKpYaSmpJY7XwpJK057BgQXY+IIdYPyxjkOp/FoXSGAbGsJ+WzpeOeXu5BBzd40 xdKlrvRVQ0zAHQ5cGoHA72CVxRmbwOlsZZ+7cAWzpoFx6cJ6HDYzkkjSdfpV5Aw5 GhlNHEi84oU28+4mQEf9xIzuCLcx4U5AmT92IGIonx/731WxAdyaC0Sm1d/6p/dE W1/UG9PB4dQyQeLrNj7eUVaLMT9qzRxg -----END CERTIFICATE-----Generated at Sat Jun 13 13:30:04 2026 by rpki-client