$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/6504cfac-922d-383c-b9f6-2e5c5e5a9f39.roa File: 6504cfac-922d-383c-b9f6-2e5c5e5a9f39.roa (raw, json) Hash identifier: PistlhUozuf0jg+iktqOjyUQ4UkW6kt70/NYQOnrVaU= Subject key identifier: 1D:DC:88:33:53:90:29:D9:20:3C:B5:D8:32:52:30:6C:FD:B8:8B:0F Certificate issuer: /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Certificate serial: 010D0C9F4328584CB121E11B8E5084E685124F00 Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/6504cfac-922d-383c-b9f6-2e5c5e5a9f39.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 49544 IP address blocks: 203.132.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:e1:1b:8e:50:84:e6:85:12:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=355edcc0-d068-4817-ba60-871281b49f6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:35:37:01:13:a5:63:03:cc:d9:c1:91:2e:11: f5:80:d7:f9:f7:4c:84:c5:eb:02:3c:55:19:19:98: 9d:74:fa:d1:4f:1e:4d:0b:55:78:67:4f:ae:48:33: d9:24:19:61:a7:cf:42:4c:6a:8f:93:3e:ce:93:4d: d7:5e:ce:94:76:85:5f:af:90:b8:b6:34:58:f7:04: a6:d2:a4:e3:f9:eb:35:af:0d:ea:18:98:e3:ea:dc: d2:dd:66:61:85:e8:a5:66:a0:3f:76:fe:db:ff:d1: a5:ec:43:b3:e0:25:3d:72:48:2e:12:58:1a:40:4c: 75:4a:fd:de:06:94:2f:7e:b3:ca:e2:1b:b0:8c:77: 13:6b:33:2d:ff:82:ed:74:bb:4e:89:d0:d0:f7:e6: 5b:cb:74:23:b7:af:97:ab:82:05:45:5a:35:63:b2: 37:ba:9a:e1:54:8d:3a:81:da:34:48:78:34:6a:a7: 8f:77:ff:87:4e:cc:00:98:e6:ff:22:fa:47:71:20: 26:e8:c6:e6:db:2e:a1:aa:03:ad:36:80:36:15:c7: f3:6a:96:ef:c0:39:ea:59:ce:80:88:a5:31:1b:57: aa:6d:53:97:84:ff:b8:25:aa:69:15:11:48:11:5a: c9:57:c8:68:82:c8:bd:1e:91:94:fa:9c:9a:cd:2e: 21:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DC:88:33:53:90:29:D9:20:3C:B5:D8:32:52:30:6C:FD:B8:8B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/6504cfac-922d-383c-b9f6-2e5c5e5a9f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl X509v3 Authority Key Identifier: keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer sbgp-ipAddrBlock: critical IPv4: 203.132.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ba:9e:77:8c:47:5f:2f:f6:9a:a8:f2:b9:07:9e:e0:35:4a: 97:99:8a:43:29:58:19:62:c2:d6:31:45:2a:0e:b2:c1:ed:43: ef:85:67:bb:5b:cb:94:d8:ba:dc:76:73:dc:e5:0b:30:49:bf: cc:c5:37:25:10:5f:76:74:e9:25:3b:5c:68:e8:84:9f:e6:89: 31:43:53:32:54:c7:4c:14:31:4f:76:2c:6a:c1:ea:c1:3c:df: 9a:dc:2b:93:de:47:c2:a3:34:9c:19:55:4c:bf:37:9f:bc:f0: 33:e1:c8:8d:01:0c:f0:51:01:f1:bf:e1:69:a7:85:2f:e5:d5: 9d:99:11:c4:1b:75:3c:43:48:49:3a:61:59:b2:28:a4:e6:ec: 4e:62:03:fb:6f:2f:df:ac:58:29:8b:ef:ac:bc:92:1c:f2:10: 56:f5:a0:e9:e9:e8:9d:ac:d7:fb:09:fe:1f:04:28:15:cb:b0: 3f:66:ad:7b:80:93:da:6f:a3:b6:62:54:cd:12:7b:c4:0d:ee: a3:8d:34:1f:2b:35:8b:24:a2:e3:26:b4:54:09:a5:71:4a:24: 53:59:53:f2:dd:5a:cb:6a:9f:c2:fd:89:1d:8f:bc:d1:c1:a2: 86:fd:71:e1:48:e6:af:61:4c:bc:35:3c:7d:67:c2:60:98:4e: 15:7f:62:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIeEbjlCE5oUSTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkwMzBlYTUtMzFhMC00YmFkLWJlYmQtMmZmZmJjZTI3 YWRkMB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk MzU1ZWRjYzAtZDA2OC00ODE3LWJhNjAtODcxMjgxYjQ5ZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DU3AROlYwPM2cGRLhH1gNf590yExesCPFUZ GZiddPrRTx5NC1V4Z0+uSDPZJBlhp89CTGqPkz7Ok03XXs6UdoVfr5C4tjRY9wSm 0qTj+es1rw3qGJjj6tzS3WZhheilZqA/dv7b/9Gl7EOz4CU9ckguElgaQEx1Sv3e BpQvfrPK4huwjHcTazMt/4LtdLtOidDQ9+Zby3Qjt6+Xq4IFRVo1Y7I3uprhVI06 gdo0SHg0aqePd/+HTswAmOb/IvpHcSAm6Mbm2y6hqgOtNoA2FcfzapbvwDnqWc6A iKUxG1eqbVOXhP+4JappFRFIEVrJV8hogsi9HpGU+pyazS4h1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3ciDNTkCnZIDy12DJSMGz9uIsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAz MGVhNS0zMWEwLTRiYWQtYmViZC0yZmZmYmNlMjdhZGQvNjUwNGNmYWMtOTIyZC0z ODNjLWI5ZjYtMmU1YzVlNWE5ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjkwMzBlYTUtMzFhMC00YmFkLWJl YmQtMmZmZmJjZTI3YWRkL2I5MDMwZWE1LTMxYTAtNGJhZC1iZWJkLTJmZmZiY2Uy N2FkZC5jcmwwHwYDVR0jBBgwFoAUt2zyN6N3ryZWce4FS44bbhLjnGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAzMGVhNS0zMWEwLTRiYWQtYmViZC0yZmZm YmNlMjdhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4QVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA66nneMR18v9pqo8rkHnuA1SpeZikMpWBliwtYxRSoOssHtQ++FZ7tb y5TYutx2c9zlCzBJv8zFNyUQX3Z06SU7XGjohJ/miTFDUzJUx0wUMU92LGrB6sE8 35rcK5PeR8KjNJwZVUy/N5+88DPhyI0BDPBRAfG/4WmnhS/l1Z2ZEcQbdTxDSEk6 YVmyKKTm7E5iA/tvL9+sWCmL76y8khzyEFb1oOnp6J2s1/sJ/h8EKBXLsD9mrXuA k9pvo7ZiVM0Se8QN7qONNB8rNYskouMmtFQJpXFKJFNZU/LdWstqn8L9iR2PvNHB oob9ceFI5q9hTLw1PH1nwmCYThV/YkQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:21:07 2026 by rpki-client