$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9d1163a6-a636-3412-9c9b-96d5c5b198a1.roa File: 9d1163a6-a636-3412-9c9b-96d5c5b198a1.roa (raw, json) Hash identifier: kJFCZjtlda5Ce2obYznlhMWXEqckbBRzdtJ1xr/EZi0= Subject key identifier: 2F:B2:11:2D:22:15:65:B6:BC:EC:06:D7:35:88:62:8F:FA:2C:B5:5E Certificate issuer: /CN=369643f4-a849-4a0c-af2a-677957de74bc Certificate serial: 010D0C9F4328584D0A77A16ED7EDA4B0A0857500 Authority key identifier: 78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9d1163a6-a636-3412-9c9b-96d5c5b198a1.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 209372 IP address blocks: 202.5.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a1:6e:d7:ed:a4:b0:a0:85:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=369643f4-a849-4a0c-af2a-677957de74bc Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=c66d999b-1cbf-4ab4-af43-7d394cf02d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:24:76:3d:9a:9e:7f:f5:e0:7e:44:b0:20:1f: c5:81:bb:39:6d:be:e8:f4:41:bb:6e:da:2e:3f:01: cc:38:91:98:d2:0b:1d:b3:e7:04:9b:79:7e:d4:0a: d3:80:0a:d5:68:85:64:e3:b4:a6:45:af:e4:0f:e6: fc:80:e9:62:22:e6:cb:52:0d:37:db:82:28:2d:22: ef:e8:5e:2a:02:8c:4e:31:57:cb:33:87:03:d0:0d: 71:ea:2e:c8:49:03:f9:71:4b:07:3a:9a:26:7d:c8: 1d:83:65:d7:31:48:7d:bc:4d:93:a2:f3:5b:91:ab: 39:97:40:18:46:f8:86:98:3a:55:0b:ed:ad:6e:d2: 15:d1:a5:a0:f9:05:65:50:85:f0:fa:84:d8:04:97: 6b:1b:05:50:4c:25:6a:06:c4:25:a7:5b:cd:8a:39: fe:d5:d3:d2:40:ce:13:2d:2b:60:7f:4a:4d:63:6e: fe:2d:c0:be:a6:5d:b1:40:49:ed:48:ea:4c:fa:c7: cb:b8:dd:0c:41:75:74:78:8d:0b:85:4f:51:87:ec: 93:c4:d7:88:7a:55:6f:88:7c:b0:14:6d:7b:01:9f: 10:a4:9d:30:1a:b4:27:e6:31:a3:6b:72:5a:68:fe: ae:2c:f2:f1:4f:c1:62:de:2f:2c:8d:e5:14:55:5d: a6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B2:11:2D:22:15:65:B6:BC:EC:06:D7:35:88:62:8F:FA:2C:B5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/9d1163a6-a636-3412-9c9b-96d5c5b198a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc/369643f4-a849-4a0c-af2a-677957de74bc.crl X509v3 Authority Key Identifier: keyid:78:4E:96:C5:87:E5:EB:E5:E4:C3:90:97:57:42:A0:7C:F7:DD:9C:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/369643f4-a849-4a0c-af2a-677957de74bc.cer sbgp-ipAddrBlock: critical IPv4: 202.5.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:5f:8d:99:c8:86:97:3c:54:bb:3d:aa:26:5c:5b:bf:92:1d: 8a:73:08:92:fe:34:c1:a4:d1:a6:0a:39:2e:a8:dc:cb:a2:58: 31:42:0c:c2:79:13:72:66:99:98:2d:00:f8:6b:4e:4f:2d:77: df:85:1b:99:2c:e9:62:84:e0:05:62:d6:25:05:78:9c:3d:af: 24:0a:89:6f:2a:65:64:5c:d2:fe:3b:31:84:d1:b8:3a:d3:68: b6:93:5c:12:7d:44:62:98:97:48:e3:b3:a7:da:7d:13:d7:de: 76:6b:7f:1a:a2:c1:eb:ef:62:9b:25:55:0a:af:26:35:26:0c: ab:cd:52:7e:66:16:a7:66:fd:1a:48:a7:98:0c:29:ec:bc:1a: 7f:0e:9b:82:5a:b9:ec:56:0c:5d:cb:9e:94:36:a3:34:af:ca: 54:d3:20:25:30:2c:75:5d:58:08:e5:af:c5:cd:48:a9:74:00: 30:28:18:3f:e9:72:60:df:b8:ec:4f:cd:33:52:29:1d:e6:94: f0:bd:91:04:49:d6:82:f2:c8:a6:97:85:55:d3:7d:03:c7:7c: c0:e2:62:34:6d:e6:e4:3d:37:8b:0e:c2:82:42:19:30:ef:32: 95:fc:f2:30:7c:59:3b:e6:e5:41:f6:1d:8b:0b:aa:9c:89:44: ea:5c:45:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6Fu1+2ksKCFdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzY5NjQzZjQtYTg0OS00YTBjLWFmMmEtNjc3OTU3ZGU3 NGJjMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk YzY2ZDk5OWItMWNiZi00YWI0LWFmNDMtN2QzOTRjZjAyZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziR2PZqef/XgfkSwIB/Fgbs5bb7o9EG7btou PwHMOJGY0gsds+cEm3l+1ArTgArVaIVk47SmRa/kD+b8gOliIubLUg0324IoLSLv 6F4qAoxOMVfLM4cD0A1x6i7ISQP5cUsHOpomfcgdg2XXMUh9vE2TovNbkas5l0AY RviGmDpVC+2tbtIV0aWg+QVlUIXw+oTYBJdrGwVQTCVqBsQlp1vNijn+1dPSQM4T LStgf0pNY27+LcC+pl2xQEntSOpM+sfLuN0MQXV0eI0LhU9Rh+yTxNeIelVviHyw FG17AZ8QpJ0wGrQn5jGja3JaaP6uLPLxT8Fi3i8sjeUUVV2mTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC+yES0iFWW2vOwG1zWIYo/6LLVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2 NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5NTdkZTc0YmMvOWQxMTYzYTYtYTYzNi0z NDEyLTljOWItOTZkNWM1YjE5OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY5NjQzZjQtYTg0OS00YTBjLWFm MmEtNjc3OTU3ZGU3NGJjLzM2OTY0M2Y0LWE4NDktNGEwYy1hZjJhLTY3Nzk1N2Rl NzRiYy5jcmwwHwYDVR0jBBgwFoAUeE6WxYfl6+Xkw5CXV0KgfPfdnKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjk2NDNmNC1hODQ5LTRhMGMtYWYyYS02Nzc5 NTdkZTc0YmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAygUXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJtfjZnIhpc8VLs9qiZcW7+SHYpzCJL+NMGk0aYKOS6o3MuiWDFCDMJ5 E3JmmZgtAPhrTk8td9+FG5ks6WKE4AVi1iUFeJw9ryQKiW8qZWRc0v47MYTRuDrT aLaTXBJ9RGKYl0jjs6fafRPX3nZrfxqiwevvYpslVQqvJjUmDKvNUn5mFqdm/RpI p5gMKey8Gn8Om4JauexWDF3LnpQ2ozSvylTTICUwLHVdWAjlr8XNSKl0ADAoGD/p cmDfuOxPzTNSKR3mlPC9kQRJ1oLyyKaXhVXTfQPHfMDiYjRt5uQ9N4sOwoJCGTDv MpX88jB8WTvm5UH2HYsLqpyJROpcRb0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:01:30 2026 by rpki-client