$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json) Hash identifier: j7Zd/J5JNtfKOgKBYqsiHR+k7YKN47vP9YbYenA0jHo= Subject key identifier: E9:58:B7:6E:B7:3E:5C:8F:12:A0:2E:D6:E0:BE:97:D2:3E:03:41:61 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584D4D5A6639BBA67F9765D10D90 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 36136 IP address blocks: 131.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:66:39:bb:a6:7f:97:65:d1:0d:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=e4962ec3-2c2c-4455-a708-13c3e12fa9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:06:b9:f2:8d:bf:9b:4d:48:0b:8c:99:ea:00: 89:ac:b0:c4:33:d9:bf:4e:da:08:66:d7:97:ac:9d: cf:ac:fa:1f:44:d5:ad:43:fb:11:01:d5:67:8c:fa: 81:4a:7f:29:e1:e3:ea:f9:26:3e:46:1c:ce:c8:cb: 40:7b:52:56:83:09:a2:62:92:9a:ad:cd:74:f0:69: c6:60:bb:d7:9f:92:e9:8a:16:54:42:ee:0b:fe:18: 46:de:76:a6:47:f4:39:2e:27:8e:2c:89:9f:a3:51: b5:ab:d9:d2:13:ff:b4:64:5d:f8:71:33:d2:74:9c: d4:b3:b5:12:2c:a7:03:5c:ab:59:e6:8a:94:b4:ba: 7e:fe:fa:ac:af:48:b2:ab:1c:2a:17:0f:db:03:94: b3:e5:84:8c:38:9c:22:f7:10:19:a2:6d:d5:84:99: fe:1f:bb:54:c3:5d:4b:c6:7d:18:e5:85:69:f5:86: d3:39:63:62:7f:60:be:d6:16:01:57:7e:6e:cc:fa: 69:6d:5d:4f:68:e5:38:e0:23:88:0b:c2:9c:5d:8f: f7:64:46:8f:d5:f1:d4:e5:bc:16:09:1d:94:23:7e: 6f:de:45:4b:05:ad:f2:70:f4:d8:62:41:87:f2:c6: 2e:5b:91:9b:fe:18:9c:08:85:3a:9e:4d:d4:5a:70: 7d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:58:B7:6E:B7:3E:5C:8F:12:A0:2E:D6:E0:BE:97:D2:3E:03:41:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:72:ff:67:12:c7:48:e4:a8:2c:45:a8:95:40:ca:c6:4e:4d: fe:55:e1:b7:f8:89:4f:c1:67:3b:e5:16:29:59:63:90:3d:bc: 2e:01:4e:8a:45:5b:fd:c1:7e:71:9f:df:3c:f7:e4:01:9b:5f: 11:dd:d3:8e:6f:2b:7d:c5:81:0b:0d:7a:94:ee:ed:a2:c7:ae: bf:28:67:e2:c7:17:1d:c7:71:51:ea:62:58:0e:f5:52:2d:ad: aa:4e:44:fc:f2:08:62:92:2c:8d:68:dd:a8:18:c7:1e:95:47: 17:c2:75:f6:6b:35:be:37:78:dc:b0:96:a4:fc:89:69:f2:c6: 56:72:22:64:e0:7c:03:80:e3:41:1f:47:f7:11:c6:40:21:fc: 37:40:2c:0e:be:9a:80:8c:ad:7e:48:2d:b7:fc:10:0d:84:dd: ba:2a:3e:25:2d:56:b9:51:bc:d7:c6:e2:c2:86:cd:dc:8a:07: 42:77:10:5a:3b:0e:ee:d9:80:e7:d9:c9:61:2c:34:7a:24:f4: 2e:ce:85:a3:d6:67:85:63:ab:40:62:9a:3f:9f:63:0b:ca:fc: e6:be:b5:ae:58:a2:ce:76:d1:14:3b:07:8e:51:b5:2f:ec:8a: 38:96:b0:bd:7a:8c:0c:e0:d1:15:d5:1d:5d:1e:7f:32:e2:7d: bf:62:71:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmY5u6Z/l2XRDZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTQ5NjJlYzMtMmMyYy00NDU1LWE3MDgtMTNjM2UxMmZhOWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswa58o2/m01IC4yZ6gCJrLDEM9m/TtoIZteX rJ3PrPofRNWtQ/sRAdVnjPqBSn8p4ePq+SY+RhzOyMtAe1JWgwmiYpKarc108GnG YLvXn5LpihZUQu4L/hhG3namR/Q5LieOLImfo1G1q9nSE/+0ZF34cTPSdJzUs7US LKcDXKtZ5oqUtLp+/vqsr0iyqxwqFw/bA5Sz5YSMOJwi9xAZom3VhJn+H7tUw11L xn0Y5YVp9YbTOWNif2C+1hYBV35uzPppbV1PaOU44COIC8KcXY/3ZEaP1fHU5bwW CR2UI35v3kVLBa3ycPTYYkGH8sYuW5Gb/hicCIU6nk3UWnB91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlYt263PlyPEqAu1uC+l9I+A0FhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMDI1MDUzMGUtNjBmMS0z YjQxLWFiYTktZTZkMGYyNmI4NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGFy/2cSx0jkqCxFqJVAysZOTf5V4bf4iU/BZzvlFilZY5A9vC4BTopF W/3BfnGf3zz35AGbXxHd045vK33FgQsNepTu7aLHrr8oZ+LHFx3HcVHqYlgO9VIt rapORPzyCGKSLI1o3agYxx6VRxfCdfZrNb43eNywlqT8iWnyxlZyImTgfAOA40Ef R/cRxkAh/DdALA6+moCMrX5ILbf8EA2E3boqPiUtVrlRvNfG4sKGzdyKB0J3EFo7 Du7ZgOfZyWEsNHok9C7OhaPWZ4Vjq0Bimj+fYwvK/Oa+ta5Yos520RQ7B45RtS/s ijiWsL16jAzg0RXVHV0efzLifb9icY0= -----END CERTIFICATE-----Generated at Fri Apr 17 18:02:03 2026 by rpki-client