$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa File: 0250530e-60f1-3b41-aba9-e6d0f26b8737.roa (raw, json) Hash identifier: 6NkAKPUf4ARt8d8hvKXTxpDLsC/ixulj5mbuu5a/8Fg= Subject key identifier: 86:5A:99:2D:BA:B7:30:77:F4:2E:2A:69:1E:92:27:EA:77:96:99:87 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584ED001E98FC66B082AA999CEE0 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 36136 IP address blocks: 131.201.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:e9:8f:c6:6b:08:2a:a9:99:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=bea02f2d-3826-414d-a4ae-49c9cc165299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:f6:f7:a9:d0:83:08:5c:3a:78:a8:99:fa: c2:97:94:ea:dd:4e:45:dc:4f:e8:22:a1:7b:73:53: 20:7e:93:b9:b0:cb:74:01:ed:27:ab:14:e6:d1:aa: 38:df:df:92:9c:86:9b:a0:26:d6:12:b6:c0:29:4e: 29:a9:52:d1:be:89:1b:a3:c5:ae:6e:1e:8d:98:8f: ab:3d:1d:59:5c:21:f4:4c:a1:49:e4:69:96:ef:51: 31:18:6b:8e:79:c5:f8:ba:be:81:d7:8e:ac:17:a3: b8:0d:25:87:8f:58:f0:89:8f:6b:47:90:38:59:0b: 32:01:bf:5d:e4:b1:f2:55:0c:25:4c:46:bb:14:d4: fc:58:75:1e:db:38:78:d7:f7:c3:b2:c7:1a:05:94: db:5a:e1:87:75:73:7b:d4:fc:07:b9:2f:bb:11:4f: 85:43:d3:03:ca:1d:00:8f:1e:aa:62:65:13:fa:0b: 78:65:19:12:18:31:37:d8:e0:2a:1e:1e:0c:b8:ce: 11:8c:c0:64:a8:37:8e:86:74:04:02:e4:7d:fd:04: 90:de:41:0e:06:9f:24:04:22:a4:09:d9:97:6b:43: ee:74:cb:76:73:bb:0b:f0:f5:b4:0a:8f:0f:12:a9: e8:54:45:af:70:41:5a:38:f8:5a:b5:8c:8f:5a:60: f9:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:5A:99:2D:BA:B7:30:77:F4:2E:2A:69:1E:92:27:EA:77:96:99:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0250530e-60f1-3b41-aba9-e6d0f26b8737.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:51:80:fa:72:1a:d9:26:dc:12:34:4f:39:f6:05:40:81:e5: 8c:93:42:cd:a5:df:93:aa:a2:32:26:b1:0d:cd:94:2d:4b:35: fd:a3:a2:b9:45:53:e0:e3:69:5a:0c:a6:a3:92:1c:a1:77:3e: ea:35:53:6c:bf:1c:82:bf:6d:ef:d9:cd:72:0a:c8:96:c1:94: 8c:f1:17:68:73:29:99:44:fc:da:9d:ba:0a:ad:fe:28:a3:1c: 35:35:a0:fc:61:c8:be:18:f9:07:5e:a5:da:c7:27:c3:fe:9d: f3:0f:0d:60:ba:0a:f6:ca:c4:28:ed:a2:6f:0d:32:ee:44:63: 68:ca:ef:90:5d:c9:2f:78:1e:02:09:1a:a8:04:6f:0e:54:28: f1:99:8f:d0:c0:d0:f6:02:a2:d8:15:a0:5c:7d:e8:e6:40:14: e7:dc:71:69:54:34:c9:9f:da:83:3f:98:16:19:59:26:b5:b8: 5f:25:d8:93:26:d0:69:c0:d2:f8:32:3e:6f:ca:9f:a9:77:23: d7:d9:78:88:ff:d8:e0:f4:14:37:a7:e7:7e:cc:f7:77:35:7b: 52:ef:a0:ac:d1:c3:53:31:a2:63:2a:d0:0f:17:bd:46:98:df: 76:d5:31:21:6b:db:e0:78:fd:a4:1c:ae:7d:38:43:7f:dc:58: 4e:66:02:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAemPxmsIKqmZzuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk YmVhMDJmMmQtMzgyNi00MTRkLWE0YWUtNDljOWNjMTY1Mjk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIf296nQgwhcOniomfrCl5Tq3U5F3E/oIqF7 c1MgfpO5sMt0Ae0nqxTm0ao439+SnIaboCbWErbAKU4pqVLRvokbo8Wubh6NmI+r PR1ZXCH0TKFJ5GmW71ExGGuOecX4ur6B146sF6O4DSWHj1jwiY9rR5A4WQsyAb9d 5LHyVQwlTEa7FNT8WHUe2zh41/fDsscaBZTbWuGHdXN71PwHuS+7EU+FQ9MDyh0A jx6qYmUT+gt4ZRkSGDE32OAqHh4MuM4RjMBkqDeOhnQEAuR9/QSQ3kEOBp8kBCKk CdmXa0PudMt2c7sL8PW0Co8PEqnoVEWvcEFaOPhatYyPWmD5QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZamS26tzB39C4qaR6SJ+p3lpmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvMDI1MDUzMGUtNjBmMS0z YjQxLWFiYTktZTZkMGYyNmI4NzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8nsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFRgPpyGtkm3BI0Tzn2BUCB5YyTQs2l35OqojImsQ3NlC1LNf2jorlF U+DjaVoMpqOSHKF3Puo1U2y/HIK/be/ZzXIKyJbBlIzxF2hzKZlE/Nqdugqt/iij HDU1oPxhyL4Y+QdepdrHJ8P+nfMPDWC6CvbKxCjtom8NMu5EY2jK75BdyS94HgIJ GqgEbw5UKPGZj9DA0PYCotgVoFx96OZAFOfccWlUNMmf2oM/mBYZWSa1uF8l2JMm 0GnA0vgyPm/Kn6l3I9fZeIj/2OD0FDen537M93c1e1LvoKzRw1MxomMq0A8XvUaY 33bVMSFr2+B4/aQcrn04Q3/cWE5mAuE= -----END CERTIFICATE-----Generated at Thu Sep 24 22:03:18 2026 by rpki-client