$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa File: c8819cb6-ad46-30d6-a405-084987fa239d.roa (raw, json) Hash identifier: Y8BVQAGKmnnqTGk+NZzmCMxrLl6MMgLQBh0PSiyQd34= Subject key identifier: 9B:01:EC:8B:FD:19:41:DB:F4:78:BE:70:31:20:30:1F:BA:AE:27:6B Certificate issuer: /CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Certificate serial: 010D0C9F4328584D71A50E6ECBE7FC381B3A8880 Authority key identifier: D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 202.37.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0e:6e:cb:e7:fc:38:1b:3a:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40a67241-3cd8-43fd-9ff7-3e18bd867926 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=001e9229-5e4d-4a0e-8a02-60686d5dadf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a3:a9:c0:92:49:24:c8:60:d4:bd:67:c9:49: 42:8d:36:ac:21:99:0b:3a:a7:8c:96:c0:90:58:23: e2:0a:8f:a6:2d:3d:6c:83:a3:61:43:c2:3b:e7:e8: 15:c5:23:7c:7b:a7:84:21:45:64:60:b2:f3:04:1c: 10:ad:79:2d:de:77:9e:c2:60:b1:5f:ff:14:b2:f7: 40:89:0a:03:73:2e:75:6a:bf:71:15:b8:21:48:de: 5d:10:16:8a:65:03:92:0f:5d:ba:44:c9:7e:e1:5a: b4:c6:f7:da:38:24:b9:36:5a:67:83:ae:b4:de:98: 3f:a6:6b:8b:a0:e6:e5:26:9a:be:dd:66:67:0a:3d: 47:55:d7:c6:94:df:e0:89:82:e0:0a:9b:d9:00:f4: 09:24:ea:0c:68:46:10:76:3d:4f:d0:ad:0b:07:ff: 75:d3:48:04:a8:56:54:9d:22:f4:3c:32:66:d0:1b: e1:c6:bb:0a:7b:43:05:34:9c:9b:0a:44:7a:af:b4: d2:82:ad:37:26:d0:3b:d0:86:32:57:9d:bf:95:a0: 64:dc:a6:e0:c6:5c:f4:2f:54:b6:7d:e1:5d:85:32: 8a:14:ed:ee:d8:b8:09:86:45:90:79:f6:5e:96:bb: 47:b0:30:d8:42:89:0d:49:f6:02:da:80:a2:89:ba: 9c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:01:EC:8B:FD:19:41:DB:F4:78:BE:70:31:20:30:1F:BA:AE:27:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/c8819cb6-ad46-30d6-a405-084987fa239d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926/40a67241-3cd8-43fd-9ff7-3e18bd867926.crl X509v3 Authority Key Identifier: keyid:D5:B5:59:9F:D6:FE:71:1C:FA:0E:BE:CE:0B:29:DA:34:DB:02:F5:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/40a67241-3cd8-43fd-9ff7-3e18bd867926.cer sbgp-ipAddrBlock: critical IPv4: 202.37.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:95:08:9d:38:bc:d8:56:6b:5f:f0:8e:81:38:4e:75:5e:76: 42:22:3f:f2:70:0e:4c:1e:16:4c:f5:21:a8:69:39:f9:72:47: 83:d5:50:01:ed:a6:0a:6f:6c:37:d7:ce:2b:8e:19:d3:d1:7c: ed:ee:f8:74:26:82:ed:2a:52:62:f7:7c:65:5f:59:60:a1:54: 4b:3f:f4:ce:1b:77:b9:2a:d7:36:ce:74:2e:a6:df:fa:9f:72: 97:92:df:de:27:be:0f:23:87:80:5c:53:3c:f7:ef:6e:27:d8: a2:25:fb:18:10:33:08:c0:88:d6:cb:51:af:15:c5:71:3e:bb: 8a:ff:e5:a3:5a:22:35:d9:16:04:ab:4a:d5:80:ce:00:5a:58: 39:9f:cc:a7:6f:24:a8:83:e7:b0:10:d0:33:89:af:64:95:9e: 9a:3c:81:03:b1:26:2e:e9:45:0d:b7:71:f9:8c:e3:63:46:2c: d6:61:39:e5:6b:76:7d:15:f0:54:63:03:db:40:74:93:e8:c9: d3:47:6d:14:b6:24:68:03:5f:e4:37:03:6b:9b:b2:e7:d9:9a: 22:7b:f7:8e:5e:2e:7b:c6:d3:95:a8:a4:a7:9d:ba:6e:ff:c7: 3a:43:d4:dc:a6:4f:db:43:a1:be:71:6b:e4:ae:e0:3f:5a:e6: 5c:53:af:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ5uy+f8OBs6iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBhNjcyNDEtM2NkOC00M2ZkLTlmZjctM2UxOGJkODY3 OTI2MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk MDAxZTkyMjktNWU0ZC00YTBlLThhMDItNjA2ODZkNWRhZGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKOpwJJJJMhg1L1nyUlCjTasIZkLOqeMlsCQ WCPiCo+mLT1sg6NhQ8I75+gVxSN8e6eEIUVkYLLzBBwQrXkt3neewmCxX/8UsvdA iQoDcy51ar9xFbghSN5dEBaKZQOSD126RMl+4Vq0xvfaOCS5Nlpng6603pg/pmuL oOblJpq+3WZnCj1HVdfGlN/giYLgCpvZAPQJJOoMaEYQdj1P0K0LB/9100gEqFZU nSL0PDJm0BvhxrsKe0MFNJybCkR6r7TSgq03JtA70IYyV52/laBk3Kbgxlz0L1S2 feFdhTKKFO3u2LgJhkWQefZelrtHsDDYQokNSfYC2oCiibqcWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsB7Iv9GUHb9Hi+cDEgMB+6ridrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MGE2 NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4YmQ4Njc5MjYvYzg4MTljYjYtYWQ0Ni0z MGQ2LWE0MDUtMDg0OTg3ZmEyMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDBhNjcyNDEtM2NkOC00M2ZkLTlm ZjctM2UxOGJkODY3OTI2LzQwYTY3MjQxLTNjZDgtNDNmZC05ZmY3LTNlMThiZDg2 NzkyNi5jcmwwHwYDVR0jBBgwFoAU1bVZn9b+cRz6Dr7OCynaNNsC9Z4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MGE2NzI0MS0zY2Q4LTQzZmQtOWZmNy0zZTE4 YmQ4Njc5MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyiWqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWVCJ04vNhWa1/wjoE4TnVedkIiP/JwDkweFkz1IahpOflyR4PVUAHt pgpvbDfXziuOGdPRfO3u+HQmgu0qUmL3fGVfWWChVEs/9M4bd7kq1zbOdC6m3/qf cpeS394nvg8jh4BcUzz3724n2KIl+xgQMwjAiNbLUa8VxXE+u4r/5aNaIjXZFgSr StWAzgBaWDmfzKdvJKiD57AQ0DOJr2SVnpo8gQOxJi7pRQ23cfmM42NGLNZhOeVr dn0V8FRjA9tAdJPoydNHbRS2JGgDX+Q3A2ubsufZmiJ7945eLnvG05WopKedum7/ xzpD1NymT9tDob5xa+Su4D9a5lxTrzw= -----END CERTIFICATE-----Generated at Fri Apr 17 04:56:39 2026 by rpki-client