$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a0085cf-76b7-3c97-afda-c7a132a4a077.roa File: 9a0085cf-76b7-3c97-afda-c7a132a4a077.roa (raw, json) Hash identifier: qJ9Ush+xEE4hDpZhyFTdcE4EsPI5qNh4MxKqYrX7+C4= Subject key identifier: 8B:90:1A:5F:5A:9B:88:AE:00:E9:A0:5F:40:19:99:29:39:A2:6A:EC Certificate issuer: /CN=e201ba8b-eda4-4920-948d-160d561b0e16 Certificate serial: 010D0C9F4328584D55BA4A78938476677C5E7780 Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a0085cf-76b7-3c97-afda-c7a132a4a077.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 21738 IP address blocks: 43.255.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:4a:78:93:84:76:67:7c:5e:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=4526a4ff-74b2-4759-ba97-9a2c2921e915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7a:98:36:3f:13:a4:c6:2e:4e:20:a9:e9:4c: ec:89:b2:2c:78:0d:00:4d:23:cd:73:59:de:64:15: 31:b8:bc:93:f2:a1:6d:13:91:37:61:c9:03:ee:b4: 05:a3:7e:82:8c:bd:83:26:48:44:58:d7:85:e9:a0: ab:5c:e9:d9:b7:e0:12:9a:e5:65:9a:97:9a:be:67: e6:5b:7b:a8:df:8b:c4:b3:bc:c1:6c:de:a2:58:08: 79:36:d1:e8:2e:bc:1d:8f:be:60:fe:fb:71:53:b3: bc:1e:7f:b1:b0:bd:69:f7:d4:05:f9:e9:3a:68:ae: 6f:d6:ca:b7:7a:a3:58:a2:f9:72:21:6b:d4:57:e9: 0b:24:b1:41:ff:f6:8f:68:32:1a:58:c6:51:1b:fc: 36:9c:da:17:51:e4:bf:4b:d1:6e:73:04:17:54:62: 07:18:bd:93:e2:63:77:20:a0:94:a3:33:23:d4:5e: 93:07:31:c6:7d:ce:07:05:f8:e0:38:67:e9:0f:65: 3c:93:e0:ee:d5:8e:dc:83:5d:ec:dd:d2:1a:00:a6: 1b:2e:ed:ab:af:36:3d:e1:c7:24:44:27:ae:e1:84: 95:0f:c2:11:1a:75:43:c0:e7:53:84:0d:b6:29:7c: 56:23:8c:a1:e5:8c:0b:c6:03:15:60:7a:c1:8d:fc: 76:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:90:1A:5F:5A:9B:88:AE:00:E9:A0:5F:40:19:99:29:39:A2:6A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9a0085cf-76b7-3c97-afda-c7a132a4a077.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl X509v3 Authority Key Identifier: keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer sbgp-ipAddrBlock: critical IPv4: 43.255.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:61:5c:71:7d:55:ba:2d:49:4b:ec:16:25:2e:53:81:97:d5: 7e:e5:de:ae:72:64:6a:58:24:af:db:6f:a5:4f:c1:ae:06:49: e4:6e:fc:13:72:d9:2d:e9:03:0d:49:f4:29:fe:b7:2d:1a:08: 6f:a5:8f:ae:49:41:80:01:4e:72:4d:c8:da:d1:33:23:14:d4: 7b:fc:e1:1b:69:bb:24:b0:7d:a7:12:a9:08:51:e9:fc:42:9d: e8:fe:ad:6a:c6:f0:f5:57:67:ad:0e:19:ba:61:49:20:46:e6: a8:9d:83:20:94:6d:7e:cd:87:17:36:79:95:fc:60:06:a6:3f: 29:12:9e:83:bc:20:a5:13:ae:71:c9:9c:fe:cc:39:30:ae:cb: bd:51:57:a0:2f:fb:01:19:08:d0:8d:de:1c:35:57:59:be:b8: 41:52:25:ce:69:0c:07:ea:ed:ec:5e:45:0f:08:38:71:c9:9a: 96:42:74:71:a9:9e:bd:06:9e:e1:32:11:06:9b:16:71:77:20: 56:06:45:21:ca:0f:0b:d1:ad:13:24:a5:83:b7:d6:20:39:60: 11:c1:56:04:90:9c:48:4c:61:37:88:f5:23:aa:40:87:fd:ac: 9b:f6:02:d3:43:70:ab:79:1e:5c:5f:0e:32:34:e9:41:7b:41: c4:d1:e6:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vukp4k4R2Z3xed4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw ZTE2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk NDUyNmE0ZmYtNzRiMi00NzU5LWJhOTctOWEyYzI5MjFlOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3qYNj8TpMYuTiCp6UzsibIseA0ATSPNc1ne ZBUxuLyT8qFtE5E3YckD7rQFo36CjL2DJkhEWNeF6aCrXOnZt+ASmuVlmpeavmfm W3uo34vEs7zBbN6iWAh5NtHoLrwdj75g/vtxU7O8Hn+xsL1p99QF+ek6aK5v1sq3 eqNYovlyIWvUV+kLJLFB//aPaDIaWMZRG/w2nNoXUeS/S9FucwQXVGIHGL2T4mN3 IKCUozMj1F6TBzHGfc4HBfjgOGfpD2U8k+Du1Y7cg13s3dIaAKYbLu2rrzY94cck RCeu4YSVD8IRGnVDwOdThA22KXxWI4yh5YwLxgMVYHrBjfx2QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIuQGl9am4iuAOmgX0AZmSk5omrsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvOWEwMDg1Y2YtNzZiNy0z Yzk3LWFmZGEtYzdhMTMyYTRhMDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0 OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/+9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIphXHF9VbotSUvsFiUuU4GX1X7l3q5yZGpYJK/bb6VPwa4GSeRu/BNy 2S3pAw1J9Cn+ty0aCG+lj65JQYABTnJNyNrRMyMU1Hv84RtpuySwfacSqQhR6fxC nej+rWrG8PVXZ60OGbphSSBG5qidgyCUbX7Nhxc2eZX8YAamPykSnoO8IKUTrnHJ nP7MOTCuy71RV6Av+wEZCNCN3hw1V1m+uEFSJc5pDAfq7exeRQ8IOHHJmpZCdHGp nr0GnuEyEQabFnF3IFYGRSHKDwvRrRMkpYO31iA5YBHBVgSQnEhMYTeI9SOqQIf9 rJv2AtNDcKt5HlxfDjI06UF7QcTR5uI= -----END CERTIFICATE-----Generated at Fri Apr 17 17:15:27 2026 by rpki-client