$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa File: 71c737cf-e37e-3b72-88ca-56c9984a18b8.roa (raw, json) Hash identifier: Qa0mWZyE55XSjuoP1jdbTU2TKneBo3+Y/qSad+vyZlY= Subject key identifier: 29:05:9A:77:9C:01:C5:19:6D:AE:48:EF:42:AB:9A:31:67:A0:85:82 Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584D80FFF2BBB9EA540C561CED80 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 399381 IP address blocks: 131.201.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:f2:bb:b9:ea:54:0c:56:1c:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=2e48dca5-fa48-4042-8aec-3ecb30a86649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b2:46:66:97:10:95:56:23:30:a0:9b:aa:7d: 7e:31:f3:05:1a:77:e3:0e:2c:39:52:9a:46:b4:f3: e3:a5:44:c7:f6:29:99:36:4c:54:0c:42:0d:d9:33: 39:e8:ab:a4:b5:4f:43:a3:f2:63:4b:58:51:7f:04: 27:8f:a4:91:eb:77:a7:b8:87:9a:d0:37:0f:d2:13: be:4d:8f:01:8e:84:bc:c2:35:09:a0:3a:a9:80:ea: 7b:7b:52:31:34:8f:c2:2d:2a:c2:3f:dd:13:38:6e: 1e:e9:71:84:1f:d5:2d:f3:bc:f2:bb:3c:ec:97:68: b8:f3:50:6c:8f:4d:3d:46:4b:10:9c:4b:13:71:16: 78:a4:f2:36:20:ad:e0:b7:18:21:fc:9a:c0:23:6e: 88:6a:75:b1:13:5e:a0:db:13:90:7f:6a:72:48:f0: b2:ca:7f:d3:ee:39:ea:eb:c2:04:7d:75:0a:1b:44: 4c:7b:21:03:1f:dd:a0:67:43:9a:ac:4a:e6:26:9d: b5:a5:75:98:4c:bb:36:f9:62:6b:aa:34:72:8c:ae: 99:c8:85:f3:92:0c:37:1d:bf:cc:22:14:2a:7c:74: f9:95:a2:e4:2a:f7:36:ff:85:04:66:8f:f0:29:14: db:7d:93:5c:63:6f:8f:d0:f0:0d:b8:38:d6:d1:ec: b4:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:05:9A:77:9C:01:C5:19:6D:AE:48:EF:42:AB:9A:31:67:A0:85:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8a:5a:a0:52:98:5c:44:ab:4d:b0:45:e0:b3:5b:84:d1:c9: 89:59:c6:e9:90:41:6e:cd:81:66:eb:2d:c3:8a:99:ea:a5:d8: 9f:41:00:bf:9d:f3:cb:be:ed:c3:50:18:6c:9b:ef:b9:29:b8: 82:b2:c4:f5:08:f9:39:60:24:45:97:01:8a:2b:8d:a1:c7:7e: 45:96:46:dd:c6:99:d5:2a:78:41:8c:64:c2:33:4e:85:35:20: 49:cd:82:6e:60:19:fa:83:03:83:01:6b:16:6a:b8:75:17:e1: ee:92:de:ce:2d:1f:66:cf:b7:13:dc:ca:e4:87:dc:69:86:67: 92:c0:cd:1b:87:4f:f1:b8:db:9b:8f:f2:a4:f1:89:ec:75:16: bc:15:40:91:79:47:20:42:00:ee:3a:d0:b8:d8:e7:1c:50:ae: 42:d2:2f:9e:b9:f6:dd:18:f6:1e:7e:08:62:cd:56:b7:68:ab: 19:c1:81:77:fb:99:b8:e7:8e:5b:a4:5f:64:aa:86:75:e0:43: 40:f5:20:d8:59:f9:5d:54:23:d8:85:52:fb:eb:8c:5b:16:e2: 8f:e7:49:f1:f3:64:11:6e:5d:47:aa:51:7d:06:38:61:06:23: 5f:5c:30:e2:f3:24:6d:48:52:2b:4d:62:1f:12:4c:9a:6b:f5: e9:06:65:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A//K7uepUDFYc7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk MmU0OGRjYTUtZmE0OC00MDQyLThhZWMtM2VjYjMwYTg2NjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLJGZpcQlVYjMKCbqn1+MfMFGnfjDiw5UppG tPPjpUTH9imZNkxUDEIN2TM56KuktU9Do/JjS1hRfwQnj6SR63enuIea0DcP0hO+ TY8BjoS8wjUJoDqpgOp7e1IxNI/CLSrCP90TOG4e6XGEH9Ut87zyuzzsl2i481Bs j009RksQnEsTcRZ4pPI2IK3gtxgh/JrAI26IanWxE16g2xOQf2pySPCyyn/T7jnq 68IEfXUKG0RMeyEDH92gZ0OarErmJp21pXWYTLs2+WJrqjRyjK6ZyIXzkgw3Hb/M IhQqfHT5laLkKvc2/4UEZo/wKRTbfZNcY2+P0PANuDjW0ey0kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkFmnecAcUZba5I70KrmjFnoIWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNzFjNzM3Y2YtZTM3ZS0z YjcyLTg4Y2EtNTZjOTk4NGExOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuKWqBSmFxEq02wReCzW4TRyYlZxumQQW7NgWbrLcOKmeql2J9BAL+d 88u+7cNQGGyb77kpuIKyxPUI+TlgJEWXAYorjaHHfkWWRt3GmdUqeEGMZMIzToU1 IEnNgm5gGfqDA4MBaxZquHUX4e6S3s4tH2bPtxPcyuSH3GmGZ5LAzRuHT/G425uP 8qTxiex1FrwVQJF5RyBCAO460LjY5xxQrkLSL5659t0Y9h5+CGLNVrdoqxnBgXf7 mbjnjlukX2SqhnXgQ0D1INhZ+V1UI9iFUvvrjFsW4o/nSfHzZBFuXUeqUX0GOGEG I19cMOLzJG1IUitNYh8STJpr9ekGZcI= -----END CERTIFICATE-----Generated at Sat Apr 18 04:00:08 2026 by rpki-client