$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa File: 0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa (raw, json) Hash identifier: mIkr8t2yqSwEq4szzTW+FO6PYrbDuXH8URbDTGA3o24= Subject key identifier: 81:FE:77:0E:0C:28:AD:ED:CF:B6:41:2F:51:21:3A:A1:4A:19:D1:C3 Certificate issuer: /CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Certificate serial: 010D0C9F4328584D6EDA655B920447D7EE108580 Authority key identifier: 2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 163.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:65:5b:92:04:47:d7:ee:10:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=d7e07a1e-a6c7-4fc1-b18a-c07fd9d848da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:9f:89:59:e4:ef:13:17:f9:85:32:6e:f3: 03:a4:6e:8f:70:11:c0:90:1c:21:3f:df:ea:f8:a1: 7d:0e:6d:e8:d0:cf:83:de:fb:70:e0:62:d0:ce:27: 8b:18:a7:8a:9a:eb:88:c1:0d:c4:2e:72:3b:f5:7a: 93:aa:a0:03:fb:01:0c:1f:f5:84:03:a3:85:db:71: 45:43:1b:c0:ab:dc:06:2f:b9:ee:f1:e8:b7:2a:3c: 34:0f:e2:d1:69:4f:aa:23:06:55:07:49:af:46:ac: 61:04:60:d4:fe:6e:25:ed:90:3d:69:c5:65:ae:73: 96:70:a9:b6:12:6c:d9:73:49:72:17:05:b7:26:d3: 60:ae:8b:16:8c:84:26:f0:9c:3b:b3:3b:53:8e:91: d4:5c:4a:78:20:d1:2f:68:4a:79:07:89:b5:f1:e0: dd:90:77:cd:77:0c:fe:1e:65:3a:9d:bb:f9:f7:c0: b3:28:60:e7:be:c8:80:d4:92:a7:dd:bd:8a:ec:a4: e4:df:ae:ae:5d:e3:67:5e:48:a6:97:d9:e3:17:85: 45:cd:73:a0:9e:88:0c:5c:d7:a4:b0:13:cf:9e:88: f5:f7:cb:86:00:1f:7d:a7:b9:f0:3d:5a:0c:64:62: b9:52:bf:1c:22:eb:b8:f1:ec:f6:f1:d8:f6:de:f9: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FE:77:0E:0C:28:AD:ED:CF:B6:41:2F:51:21:3A:A1:4A:19:D1:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/0a1d64fb-b3ee-3d9c-b063-8d2eba8255ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl X509v3 Authority Key Identifier: keyid:2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer sbgp-ipAddrBlock: critical IPv4: 163.123.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:8e:31:ee:7e:a2:ef:10:29:4a:9e:e5:1a:1e:c6:56:c6:c0: c7:e6:07:ce:f0:45:1e:ea:80:5d:51:f8:3e:c9:3a:55:39:e7: 95:4d:94:21:b4:34:35:3c:af:25:3a:33:1e:24:9e:3e:4a:d2: fd:88:4e:e7:d3:31:78:cc:7c:9f:31:76:68:0e:79:1a:9b:21: c0:8e:84:b3:72:3c:de:ca:34:8d:d0:9e:96:a7:3c:ec:22:53: bf:d2:59:c8:f9:03:7a:b7:cb:d3:e0:aa:a2:48:ac:34:71:a4: 81:4f:80:ff:b9:db:4d:33:f7:9a:f4:7f:a1:c5:32:99:68:37: 5b:f0:47:d2:29:e9:f0:77:13:50:44:3c:78:bc:96:d9:c0:3d: fd:1e:c6:aa:d7:2d:d2:c3:d4:2b:3e:34:a8:bc:dc:10:a2:71: 96:d3:c4:bf:9d:69:83:98:25:fc:a5:9a:dc:b4:71:55:15:df: 5c:60:20:74:61:7a:07:24:49:c6:1a:0d:14:72:e0:31:0b:32: 74:6f:1a:7e:b5:45:eb:52:62:2f:96:67:b9:3e:cd:3e:f8:ee: 36:b4:4b:09:a1:81:07:76:98:a3:0b:8f:30:39:fa:30:a2:57: 8d:f1:cd:1b:d6:bb:09:1e:c4:bb:4e:00:d9:b2:24:cc:58:28: 47:d7:fa:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mVbkgRH1+4QhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQxMDU2MjAtNzM4OS00ODM3LWI1MGYtNmQ5YmZkZmQz NzczMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk ZDdlMDdhMWUtYTZjNy00ZmMxLWIxOGEtYzA3ZmQ5ZDg0OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4ifiVnk7xMX+YUybvMDpG6PcBHAkBwhP9/q +KF9Dm3o0M+D3vtw4GLQzieLGKeKmuuIwQ3ELnI79XqTqqAD+wEMH/WEA6OF23FF QxvAq9wGL7nu8ei3Kjw0D+LRaU+qIwZVB0mvRqxhBGDU/m4l7ZA9acVlrnOWcKm2 EmzZc0lyFwW3JtNgrosWjIQm8Jw7sztTjpHUXEp4INEvaEp5B4m18eDdkHfNdwz+ HmU6nbv598CzKGDnvsiA1JKn3b2K7KTk366uXeNnXkiml9njF4VFzXOgnogMXNek sBPPnoj198uGAB99p7nwPVoMZGK5Ur8cIuu48ez28dj23vluZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIH+dw4MKK3tz7ZBL1EhOqFKGdHDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZDEw NTYyMC03Mzg5LTQ4MzctYjUwZi02ZDliZmRmZDM3NzMvMGExZDY0ZmItYjNlZS0z ZDljLWIwNjMtOGQyZWJhODI1NWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmQxMDU2MjAtNzM4OS00ODM3LWI1 MGYtNmQ5YmZkZmQzNzczLzZkMTA1NjIwLTczODktNDgzNy1iNTBmLTZkOWJmZGZk Mzc3My5jcmwwHwYDVR0jBBgwFoAUKwDRhfW99IohDJ4dLtq37tnhqucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZDEwNTYyMC03Mzg5LTQ4MzctYjUwZi02ZDli ZmRmZDM3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeOMe5+ou8QKUqe5RoexlbGwMfmB87wRR7qgF1R+D7JOlU555VNlCG0 NDU8ryU6Mx4knj5K0v2ITufTMXjMfJ8xdmgOeRqbIcCOhLNyPN7KNI3QnpanPOwi U7/SWcj5A3q3y9PgqqJIrDRxpIFPgP+5200z95r0f6HFMploN1vwR9Ip6fB3E1BE PHi8ltnAPf0exqrXLdLD1Cs+NKi83BCicZbTxL+daYOYJfylmty0cVUV31xgIHRh egckScYaDRRy4DELMnRvGn61RetSYi+WZ7k+zT747ja0SwmhgQd2mKMLjzA5+jCi V43xzRvWuwkexLtOANmyJMxYKEfX+t8= -----END CERTIFICATE-----Generated at Sun Apr 19 10:02:06 2026 by rpki-client