$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa File: 397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa (raw, json) Hash identifier: VBkQVhUniFmjcU7xXGKou5dbzHFS+Y7JKM0nm7Qgm9w= Subject key identifier: 46:35:95:E7:35:12:19:CB:CF:F5:69:81:FE:52:DE:C6:51:B3:F5:C3 Certificate issuer: /CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Certificate serial: 010D0C9F4328584D6EDA656AB7BA623E52D08FC0 Authority key identifier: 2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 163.123.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:65:6a:b7:ba:62:3e:52:d0:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d105620-7389-4837-b50f-6d9bfdfd3773 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=b17a2b4f-52b1-45de-8660-6dcf0806f5e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:98:9e:e6:84:98:34:2a:ce:77:84:73:3a: 98:56:83:5e:21:5f:c4:01:42:e4:38:11:7e:c4:19: 17:38:7a:12:f6:e2:8b:27:d0:61:cf:0c:8f:58:ae: e9:d2:bb:9a:0e:91:a2:94:c7:17:6a:5c:de:23:80: d5:fa:d0:6d:c5:89:92:82:2e:fb:af:39:df:0d:11: 79:ff:f2:75:e7:b0:f2:40:98:32:08:29:1f:29:bd: 38:f2:87:80:27:ea:94:ce:36:af:68:e7:91:70:dd: ec:fb:17:f0:be:29:1e:8b:eb:1b:de:f1:2b:53:0a: 0c:cc:95:cc:d5:da:88:14:04:98:78:ec:0d:e6:4f: f8:3e:82:cc:5e:d7:64:e9:ad:f3:99:3b:56:f8:08: ec:db:3b:59:44:dc:e7:75:02:cc:04:30:fa:2c:30: 3c:74:e4:40:f1:10:dd:13:95:aa:de:16:f0:94:e2: 18:0e:22:c4:9e:e4:41:67:74:e0:be:ac:e9:e8:fa: 09:b6:57:4a:54:e4:ec:5e:61:5c:56:73:cb:d5:88: e4:cd:74:ec:7d:76:62:42:de:31:bd:a4:55:51:22: a3:99:4a:fa:2e:9a:64:f9:b4:63:a8:83:18:ae:f3: b4:42:8f:f2:91:40:d5:a6:dc:f2:d2:c7:d2:a5:e1: 08:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:35:95:E7:35:12:19:CB:CF:F5:69:81:FE:52:DE:C6:51:B3:F5:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/397ed46c-7f68-3dcf-a6a3-bf79d552e954.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773/6d105620-7389-4837-b50f-6d9bfdfd3773.crl X509v3 Authority Key Identifier: keyid:2B:00:D1:85:F5:BD:F4:8A:21:0C:9E:1D:2E:DA:B7:EE:D9:E1:AA:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6d105620-7389-4837-b50f-6d9bfdfd3773.cer sbgp-ipAddrBlock: critical IPv4: 163.123.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:8b:cc:ff:1c:ee:0c:0d:38:21:eb:27:f7:14:b9:f9:52:45: ce:cc:c9:a1:b4:69:26:93:be:0f:75:40:97:88:de:ba:b7:12: 0a:ad:8c:88:d2:08:19:36:59:e7:5b:d5:70:27:87:fc:43:55: 77:7e:a8:7a:b7:83:0f:07:2c:7e:c3:11:cd:6e:2d:a9:55:74: 34:42:d5:c3:5c:d9:fa:71:9e:e5:af:45:27:67:b9:a5:86:10: ab:72:f9:b7:48:98:b8:c6:50:f5:ef:cb:15:af:d2:45:0b:c2: c5:92:7b:ae:7b:8c:c6:45:46:94:fd:6e:84:76:04:7d:c6:88: 68:87:f2:9b:55:0e:b8:bb:18:3f:ce:28:62:c8:57:af:12:f3: 5a:30:17:02:29:fd:3c:23:47:83:c5:f5:ad:01:48:18:87:21: 1a:ac:ef:96:b4:15:84:fa:82:c6:4b:81:79:d0:85:8c:bb:74: e5:55:ea:1d:2d:1c:e7:5f:7b:2a:80:6d:4f:06:22:41:05:c0: 5d:65:7e:f6:2c:4c:57:d8:38:ee:68:4f:93:e1:4c:d9:7e:59: b2:e2:2d:c0:62:74:e7:de:5d:46:f0:8c:21:d9:17:92:95:b0: 4a:78:77:e6:f6:2f:69:2f:08:1a:77:23:af:bd:4c:c0:97:a6: e2:f5:a3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mVqt7piPlLQj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQxMDU2MjAtNzM4OS00ODM3LWI1MGYtNmQ5YmZkZmQz NzczMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YjE3YTJiNGYtNTJiMS00NWRlLTg2NjAtNmRjZjA4MDZmNWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcqYnuaEmDQqzneEczqYVoNeIV/EAULkOBF+ xBkXOHoS9uKLJ9BhzwyPWK7p0ruaDpGilMcXalzeI4DV+tBtxYmSgi77rznfDRF5 //J157DyQJgyCCkfKb048oeAJ+qUzjavaOeRcN3s+xfwvikei+sb3vErUwoMzJXM 1dqIFASYeOwN5k/4PoLMXtdk6a3zmTtW+Ajs2ztZRNzndQLMBDD6LDA8dORA8RDd E5Wq3hbwlOIYDiLEnuRBZ3Tgvqzp6PoJtldKVOTsXmFcVnPL1YjkzXTsfXZiQt4x vaRVUSKjmUr6Lppk+bRjqIMYrvO0Qo/ykUDVptzy0sfSpeEIvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEY1lec1EhnLz/Vpgf5S3sZRs/XDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82ZDEw NTYyMC03Mzg5LTQ4MzctYjUwZi02ZDliZmRmZDM3NzMvMzk3ZWQ0NmMtN2Y2OC0z ZGNmLWE2YTMtYmY3OWQ1NTJlOTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNmQxMDU2MjAtNzM4OS00ODM3LWI1 MGYtNmQ5YmZkZmQzNzczLzZkMTA1NjIwLTczODktNDgzNy1iNTBmLTZkOWJmZGZk Mzc3My5jcmwwHwYDVR0jBBgwFoAUKwDRhfW99IohDJ4dLtq37tnhqucwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82ZDEwNTYyMC03Mzg5LTQ4MzctYjUwZi02ZDli ZmRmZDM3NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo3vZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqLzP8c7gwNOCHrJ/cUuflSRc7MyaG0aSaTvg91QJeI3rq3EgqtjIjS CBk2Wedb1XAnh/xDVXd+qHq3gw8HLH7DEc1uLalVdDRC1cNc2fpxnuWvRSdnuaWG EKty+bdImLjGUPXvyxWv0kULwsWSe657jMZFRpT9boR2BH3GiGiH8ptVDri7GD/O KGLIV68S81owFwIp/TwjR4PF9a0BSBiHIRqs75a0FYT6gsZLgXnQhYy7dOVV6h0t HOdfeyqAbU8GIkEFwF1lfvYsTFfYOO5oT5PhTNl+WbLiLcBidOfeXUbwjCHZF5KV sEp4d+b2L2kvCBp3I6+9TMCXpuL1o/M= -----END CERTIFICATE-----Generated at Fri Apr 17 10:44:24 2026 by rpki-client