$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa File: 352e859a-e30b-311a-8d4e-4ebdda38bda4.roa (raw, json) Hash identifier: ULiRkPyrFrPAfoWWGJ3XJ3gZMBzMJi3wVskvfNA3McY= Subject key identifier: F6:45:FB:E6:58:39:9D:2C:26:ED:14:BE:4D:56:76:A0:13:FC:30:FF Certificate issuer: /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Certificate serial: 010D0C9F4328584CB121B6B3F3F7685E2B4E52E0 Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 49544 IP address blocks: 203.132.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:b6:b3:f3:f7:68:5e:2b:4e:52:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=2de62d29-c448-4555-9fd2-a42b1d19b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:16:7d:e8:e4:5e:7e:b0:81:dd:73:62:6d:71: 96:e3:4d:80:f3:8d:35:4f:bd:73:79:56:9a:50:40: 8b:a2:a6:93:d5:4e:2a:b9:7a:35:81:6c:7c:42:49: 10:e1:ee:3a:6c:9f:62:46:55:71:99:0a:ca:ca:3a: f0:ce:0d:c4:3c:f7:ae:a4:49:23:02:f2:48:70:99: df:39:17:d8:c1:d4:90:0f:5c:92:a5:7f:bf:74:83: e5:c5:e1:bb:5c:fd:7c:91:29:a4:b6:d0:c2:3f:ba: f5:af:9e:d3:fb:3a:de:b5:06:0a:8c:e8:88:81:6a: c0:83:1c:a0:bd:83:e1:cb:9f:75:ef:1d:5c:9c:c8: ed:2f:cf:46:e9:36:0b:c8:a8:e9:28:82:19:be:30: ed:43:87:07:38:86:0c:98:36:65:75:03:62:f4:c5: 1d:4f:81:40:d8:72:5b:64:db:18:4b:b3:07:30:e8: ae:21:82:d7:e0:f3:aa:b8:5e:a4:42:7f:0c:f5:46: bb:0b:bf:a9:71:72:e7:50:04:ed:cc:d9:14:aa:61: 97:21:8f:12:06:00:44:d1:c8:61:f8:84:fd:4e:53: 5e:93:b1:5b:33:6c:50:11:37:10:59:69:a2:30:e9: 75:73:79:01:ee:79:57:f6:e6:7a:f3:6b:d5:f2:98: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:45:FB:E6:58:39:9D:2C:26:ED:14:BE:4D:56:76:A0:13:FC:30:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl X509v3 Authority Key Identifier: keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer sbgp-ipAddrBlock: critical IPv4: 203.132.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:8e:51:b1:54:46:a0:f2:6f:1d:ad:f9:d3:ff:28:ff:b9:a4: 3d:33:78:33:d4:58:21:a1:a0:f5:93:c3:a6:f5:af:52:21:83: 14:76:e9:0b:49:40:d8:fc:22:bb:f0:8d:da:28:9b:46:31:42: 35:74:12:bf:80:89:2d:59:ed:db:36:1f:ed:52:c7:f4:d7:bd: 4e:d9:48:9f:33:f6:3e:29:25:25:3b:f3:e8:37:c0:fe:59:b7: 94:cc:62:4b:c5:17:65:7e:44:7d:80:25:71:eb:f1:06:d5:b1: 8e:83:3f:f4:c9:08:18:bf:23:50:96:d1:5c:f8:bb:83:69:0d: c3:bf:b5:28:e9:6d:67:18:9b:3c:69:4a:4a:b4:16:b9:60:62: 2a:c1:a7:f4:cd:77:be:11:99:67:ec:35:a9:f3:57:1d:49:b7: 9f:a1:c1:1f:42:9e:b1:88:df:3b:f2:2f:97:66:2f:a9:0f:62: da:60:9f:a4:d3:67:cd:74:76:86:32:65:72:da:81:1b:9c:19: f9:cb:a9:26:4e:ce:43:9b:53:ad:3d:8c:2d:e1:0c:5e:c0:39: a1:9c:90:9d:43:a3:6b:62:76:64:31:29:53:4c:1e:0a:66:19: cc:72:f0:58:9a:30:9f:52:63:01:a2:e6:09:d4:83:59:96:0c: 78:d2:1b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIbaz8/doXitOUuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkwMzBlYTUtMzFhMC00YmFkLWJlYmQtMmZmZmJjZTI3 YWRkMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MmRlNjJkMjktYzQ0OC00NTU1LTlmZDItYTQyYjFkMTliN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZ96ORefrCB3XNibXGW402A8401T71zeVaa UECLoqaT1U4quXo1gWx8QkkQ4e46bJ9iRlVxmQrKyjrwzg3EPPeupEkjAvJIcJnf ORfYwdSQD1ySpX+/dIPlxeG7XP18kSmkttDCP7r1r57T+zretQYKjOiIgWrAgxyg vYPhy5917x1cnMjtL89G6TYLyKjpKIIZvjDtQ4cHOIYMmDZldQNi9MUdT4FA2HJb ZNsYS7MHMOiuIYLX4POquF6kQn8M9Ua7C7+pcXLnUATtzNkUqmGXIY8SBgBE0chh +IT9TlNek7FbM2xQETcQWWmiMOl1c3kB7nlX9uZ682vV8ph2ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPZF++ZYOZ0sJu0Uvk1WdqAT/DD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAz MGVhNS0zMWEwLTRiYWQtYmViZC0yZmZmYmNlMjdhZGQvMzUyZTg1OWEtZTMwYi0z MTFhLThkNGUtNGViZGRhMzhiZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjkwMzBlYTUtMzFhMC00YmFkLWJl YmQtMmZmZmJjZTI3YWRkL2I5MDMwZWE1LTMxYTAtNGJhZC1iZWJkLTJmZmZiY2Uy N2FkZC5jcmwwHwYDVR0jBBgwFoAUt2zyN6N3ryZWce4FS44bbhLjnGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAzMGVhNS0zMWEwLTRiYWQtYmViZC0yZmZm YmNlMjdhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4QRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADaOUbFURqDybx2t+dP/KP+5pD0zeDPUWCGhoPWTw6b1r1IhgxR26QtJ QNj8Irvwjdoom0YxQjV0Er+AiS1Z7ds2H+1Sx/TXvU7ZSJ8z9j4pJSU78+g3wP5Z t5TMYkvFF2V+RH2AJXHr8QbVsY6DP/TJCBi/I1CW0Vz4u4NpDcO/tSjpbWcYmzxp Skq0FrlgYirBp/TNd74RmWfsNanzVx1Jt5+hwR9CnrGI3zvyL5dmL6kPYtpgn6TT Z810doYyZXLagRucGfnLqSZOzkObU609jC3hDF7AOaGckJ1Do2tidmQxKVNMHgpm Gcxy8FiaMJ9SYwGi5gnUg1mWDHjSG+U= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:07 2026 by rpki-client