$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa File: cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa (raw, json) Hash identifier: 75xSoRpuyQjAeXukhxEEHMpjHu+jDgteDXwGMqSfEZo= Subject key identifier: A3:D9:E6:DC:CA:48:9D:3C:40:EC:96:CF:93:F2:AD:35:0F:0C:DE:CC Certificate issuer: /CN=481fd97a-d501-4297-871e-0024fbe50fc6 Certificate serial: 010D0C9F4328584D59EA729860AD5350833320C0 Authority key identifier: E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 35866 IP address blocks: 117.18.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:72:98:60:ad:53:50:83:33:20:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=481fd97a-d501-4297-871e-0024fbe50fc6 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=1d815b5c-eb98-4b14-b64e-5a8bd88ec488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:aa:91:92:10:8e:20:a9:64:4d:e6:6c:c1:12: 49:cd:70:e6:1e:56:5d:21:d3:a0:04:16:70:cd:37: f8:fe:f9:86:52:2f:46:90:2b:1f:80:95:7d:47:0d: f0:c7:31:72:fc:f5:cb:a9:ca:dc:33:93:77:7b:fd: 50:2f:41:9a:e4:25:2f:23:0b:c5:4e:1b:c1:03:ee: 1a:fc:92:06:90:d6:48:5b:f6:fb:a7:ed:a5:04:fa: d1:7b:9c:37:65:cc:ce:db:63:2e:9c:39:f9:89:f5: ae:6d:db:71:b7:04:47:03:aa:e7:a9:c2:b3:bd:48: 39:91:21:1b:41:b7:be:c5:eb:b8:b8:8d:6f:2d:0d: 4a:7b:c7:14:b3:72:4a:ca:20:85:4b:84:b8:7d:da: 65:e2:fc:14:ee:54:73:14:84:5f:67:69:71:c0:b1: 27:22:09:72:79:60:e9:8d:22:e6:47:24:ab:ff:92: 30:a9:84:f4:2e:b3:58:7b:60:12:69:a6:cc:f9:7c: 83:07:d6:ee:46:d2:c1:ec:db:08:62:dc:ce:24:ff: bb:ed:a1:94:8a:fc:95:33:9b:94:a9:fa:23:28:ae: ce:2e:30:c1:b5:47:bf:39:16:9c:78:01:96:c5:fd: e5:e4:16:83:79:ff:b5:f8:67:0e:1e:92:90:aa:69: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D9:E6:DC:CA:48:9D:3C:40:EC:96:CF:93:F2:AD:35:0F:0C:DE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/cc489d3f-2bc1-3a9b-9e7d-e46fd73c4393.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6/481fd97a-d501-4297-871e-0024fbe50fc6.crl X509v3 Authority Key Identifier: keyid:E0:7F:C4:6B:FB:1B:F3:17:DC:DD:E9:74:51:77:B2:11:48:CB:1F:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/481fd97a-d501-4297-871e-0024fbe50fc6.cer sbgp-ipAddrBlock: critical IPv4: 117.18.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:59:79:8b:b6:ee:af:1f:12:68:bd:39:ce:e9:26:43:18:13: 8c:5e:0b:e1:4d:34:09:dd:72:32:ea:02:82:c6:40:e9:af:ee: d0:6c:b4:d4:d6:ad:29:91:74:9a:80:a3:a3:df:16:f3:e9:98: 30:5c:ee:de:e3:9b:d4:7e:f2:44:c9:9d:38:78:bf:48:f5:8f: 89:c7:58:9a:02:ed:6e:6d:2e:61:8e:a2:3e:6c:73:e6:b3:f3: a4:0a:e9:c3:07:7e:4c:fd:ae:2d:d2:3f:18:e1:f7:53:ed:8f: 5f:3a:78:82:49:a5:c8:0c:91:a3:15:2a:7d:5a:a4:f6:07:ec: b5:53:57:01:9c:a8:8e:38:76:4e:c4:61:c6:38:de:ff:f7:c3: 74:93:5a:bf:6f:24:88:c4:1b:99:a0:8d:8d:51:2c:3d:dd:e5: 1d:c5:aa:10:84:6a:ad:b1:ff:6d:08:77:cf:82:0f:ff:36:3e: ff:b8:85:98:fa:77:a2:72:ba:7b:e4:3c:ed:1e:68:a3:71:a8: 31:ab:9e:4c:c4:ac:bb:12:e9:7e:42:70:6c:50:34:53:79:93: ed:f2:a5:59:0a:7b:86:f0:0c:e2:49:6d:60:ce:1e:71:fb:42: a8:3d:55:73:f5:35:79:25:89:5d:1a:32:a3:bc:e6:38:4f:ea: a6:78:53:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nKYYK1TUIMzIMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgxZmQ5N2EtZDUwMS00Mjk3LTg3MWUtMDAyNGZiZTUw ZmM2MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MWQ4MTViNWMtZWI5OC00YjE0LWI2NGUtNWE4YmQ4OGVjNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqqRkhCOIKlkTeZswRJJzXDmHlZdIdOgBBZw zTf4/vmGUi9GkCsfgJV9Rw3wxzFy/PXLqcrcM5N3e/1QL0Ga5CUvIwvFThvBA+4a /JIGkNZIW/b7p+2lBPrRe5w3ZczO22MunDn5ifWubdtxtwRHA6rnqcKzvUg5kSEb Qbe+xeu4uI1vLQ1Ke8cUs3JKyiCFS4S4fdpl4vwU7lRzFIRfZ2lxwLEnIglyeWDp jSLmRySr/5IwqYT0LrNYe2ASaabM+XyDB9buRtLB7NsIYtzOJP+77aGUivyVM5uU qfojKK7OLjDBtUe/ORaceAGWxf3l5BaDef+1+GcOHpKQqml5oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPZ5tzKSJ08QOyWz5PyrTUPDN7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFm ZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0ZmJlNTBmYzYvY2M0ODlkM2YtMmJjMS0z YTliLTllN2QtZTQ2ZmQ3M2M0MzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDgxZmQ5N2EtZDUwMS00Mjk3LTg3 MWUtMDAyNGZiZTUwZmM2LzQ4MWZkOTdhLWQ1MDEtNDI5Ny04NzFlLTAwMjRmYmU1 MGZjNi5jcmwwHwYDVR0jBBgwFoAU4H/Ea/sb8xfc3el0UXeyEUjLHxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80ODFmZDk3YS1kNTAxLTQyOTctODcxZS0wMDI0 ZmJlNTBmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdRJ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5ZeYu27q8fEmi9Oc7pJkMYE4xeC+FNNAndcjLqAoLGQOmv7tBstNTW rSmRdJqAo6PfFvPpmDBc7t7jm9R+8kTJnTh4v0j1j4nHWJoC7W5tLmGOoj5sc+az 86QK6cMHfkz9ri3SPxjh91Ptj186eIJJpcgMkaMVKn1apPYH7LVTVwGcqI44dk7E YcY43v/3w3STWr9vJIjEG5mgjY1RLD3d5R3FqhCEaq2x/20Id8+CD/82Pv+4hZj6 d6JyunvkPO0eaKNxqDGrnkzErLsS6X5CcGxQNFN5k+3ypVkKe4bwDOJJbWDOHnH7 Qqg9VXP1NXkliV0aMqO85jhP6qZ4U50= -----END CERTIFICATE-----Generated at Sat Apr 18 01:34:51 2026 by rpki-client