$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa File: 4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa (raw, json) Hash identifier: m1lwFOh8NhA6IPIEodYWnM01qaAiu+UIs/OH0DRUpBI= Subject key identifier: D6:79:6A:99:39:F2:67:63:58:DA:41:46:3B:2C:92:88:10:62:D1:8A Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584D571FB8849F57A354FDCC6240 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 399381 IP address blocks: 131.201.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b8:84:9f:57:a3:54:fd:cc:62:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=bbca542f-025f-4585-a2cf-457265d6848b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:1f:07:26:03:31:7b:1b:61:8b:29:6a:c6: 58:07:e9:20:9d:5d:21:f8:32:ca:4c:e0:5e:fd:13: b3:e0:4c:99:5d:ec:8c:2f:50:0d:67:e1:a9:f5:54: 58:19:ae:7a:2a:5a:40:10:cd:2e:22:d0:95:75:dd: 7f:4f:12:86:44:f1:a8:d6:e0:7a:eb:5c:2b:a0:04: 2c:06:15:47:e2:4f:16:3e:e8:03:3a:df:40:7a:0d: 2b:9b:44:8d:06:26:9f:55:f8:18:4d:09:9d:bf:e8: e3:16:b4:86:ed:cf:d3:e8:6c:49:fe:9f:b0:3f:60: 2c:81:13:f9:74:30:26:47:d4:c1:bd:ab:f0:d1:71: 09:19:82:48:ae:62:ae:a1:ee:a1:eb:96:96:29:f2: fa:94:55:43:f3:92:5b:dd:44:7e:e4:54:f1:f8:ad: e2:79:fd:6e:d6:85:f0:27:c1:d7:48:04:3d:b5:5a: fa:fc:15:98:3f:95:d3:0b:1b:51:e7:30:3d:7e:44: 01:75:46:75:9c:bc:8b:5e:6f:cf:a3:7b:7a:3d:52: 23:66:15:23:41:a7:d6:1e:e2:8e:62:c3:28:b4:15: 46:a5:17:19:02:6a:a4:05:f5:7c:33:30:72:85:67: f2:7a:fe:28:43:81:9a:70:65:49:4f:f7:7a:31:91: 14:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:79:6A:99:39:F2:67:63:58:DA:41:46:3B:2C:92:88:10:62:D1:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/4d61f5d1-ce3f-373d-a176-12e8ced186f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:20:04:3f:4c:54:c5:9a:23:e0:c7:d1:b3:dc:37:d2:15:45: c5:ef:27:08:2f:8f:f0:23:ec:1b:45:e9:26:54:58:3f:d6:ab: 32:f7:e3:05:8c:d6:e3:db:38:62:08:f4:3b:ee:05:96:1b:0e: 24:8d:73:12:b0:68:24:dd:d9:df:9f:6e:8f:9b:3a:4a:b8:b3: e4:f7:d0:5d:f6:68:1b:95:05:a7:a0:3d:0a:a2:5c:74:f2:be: c1:7f:8a:ce:a5:12:37:c3:77:af:91:8e:0d:a2:42:95:b4:d1: f7:e4:6d:e4:bd:e2:81:a5:48:49:49:a5:2b:80:c6:b8:75:9b: ca:c8:8a:dd:d9:4a:da:42:fd:2a:cd:82:6c:bf:de:f3:c7:c9: 4a:a7:2e:e8:90:b8:80:4c:b5:42:9e:ca:78:a2:00:56:64:6e: 20:16:78:e4:e9:9a:5e:47:10:ec:8e:be:30:e7:af:f8:50:68: d5:82:6d:7b:8c:49:e1:07:cb:2e:b4:2a:c1:5c:84:10:89:74: b9:34:69:91:1d:02:6e:f8:32:5a:da:c8:21:b9:25:c0:3d:20: 7f:8d:58:9e:d6:96:ab:83:c3:32:56:66:c6:b2:77:90:b2:02: ff:93:ce:e1:be:1d:53:e9:5c:34:8e:a9:4b:3a:35:f3:c9:04: f8:7f:0c:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7iEn1ejVP3MYkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk YmJjYTU0MmYtMDI1Zi00NTg1LWEyY2YtNDU3MjY1ZDY4NDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPYfByYDMXsbYYspasZYB+kgnV0h+DLKTOBe /ROz4EyZXeyML1ANZ+Gp9VRYGa56KlpAEM0uItCVdd1/TxKGRPGo1uB661wroAQs BhVH4k8WPugDOt9Aeg0rm0SNBiafVfgYTQmdv+jjFrSG7c/T6GxJ/p+wP2AsgRP5 dDAmR9TBvavw0XEJGYJIrmKuoe6h65aWKfL6lFVD85Jb3UR+5FTx+K3ief1u1oXw J8HXSAQ9tVr6/BWYP5XTCxtR5zA9fkQBdUZ1nLyLXm/Po3t6PVIjZhUjQafWHuKO YsMotBVGpRcZAmqkBfV8MzByhWfyev4oQ4GacGVJT/d6MZEUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZ5apk58mdjWNpBRjsskogQYtGKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNGQ2MWY1ZDEtY2UzZi0z NzNkLWExNzYtMTJlOGNlZDE4NmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAgBD9MVMWaI+DH0bPcN9IVRcXvJwgvj/Aj7BtF6SZUWD/WqzL34wWM 1uPbOGII9DvuBZYbDiSNcxKwaCTd2d+fbo+bOkq4s+T30F32aBuVBaegPQqiXHTy vsF/is6lEjfDd6+Rjg2iQpW00ffkbeS94oGlSElJpSuAxrh1m8rIit3ZStpC/SrN gmy/3vPHyUqnLuiQuIBMtUKeyniiAFZkbiAWeOTpml5HEOyOvjDnr/hQaNWCbXuM SeEHyy60KsFchBCJdLk0aZEdAm74MlrayCG5JcA9IH+NWJ7WlquDwzJWZsayd5Cy Av+TzuG+HVPpXDSOqUs6NfPJBPh/DHI= -----END CERTIFICATE-----Generated at Sat Apr 18 01:08:09 2026 by rpki-client