$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa File: 24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa (raw, json) Hash identifier: 1j+b8Ai73a9jSiC/V+BOUu44WHN4j+9b4Nxn6h3AvME= Subject key identifier: 39:0C:56:ED:A8:9D:75:5A:58:8F:07:BB:9C:5B:7B:F2:89:7D:3F:7E Certificate issuer: /CN=51772dd7-991f-47b2-b40b-d92a8497234e Certificate serial: 010D0C9F4328584F4112B27D6F96E2E89EC5DA40 Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 8075 IP address blocks: 202.130.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b2:7d:6f:96:e2:e8:9e:c5:da:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=a1e02e3b-aa1f-44bd-8bf2-5ccdf65c09aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:73:21:e5:81:55:b4:4b:c2:c3:6c:0e:26:68: e0:d3:6d:6d:95:ac:1b:ee:42:93:6f:93:a3:40:2a: 75:81:fa:24:3a:78:c2:6e:2b:96:12:f8:5a:4e:7b: 40:fd:f7:dd:da:73:7b:49:11:81:35:1d:57:ea:47: b0:bf:b0:fb:81:b2:bb:68:69:aa:0d:d2:24:46:18: 50:76:b8:20:93:96:01:67:14:08:96:e0:25:6f:01: d6:06:93:0a:e8:ca:ab:90:ac:5f:30:54:88:4f:70: f9:9d:78:18:59:75:68:fe:ab:da:db:3c:dc:6d:4a: b2:15:6d:6c:3d:15:42:c8:1b:ab:66:4c:22:8f:ac: 4a:0d:94:bb:7e:e7:17:15:df:34:20:1c:9b:4b:dd: 38:46:1a:a7:99:64:3a:43:23:e4:ff:7f:a3:4a:9a: 81:92:c2:a7:12:23:5d:c5:e5:72:a2:46:ff:d0:20: fd:f7:b3:e1:28:18:de:ce:92:42:35:32:10:42:f5: 9b:8f:d6:ba:2b:b6:a0:36:41:de:55:3c:f5:ee:06: 01:c4:b3:9e:50:90:eb:4c:1a:19:ed:93:56:52:15: e2:33:c2:41:84:78:02:c2:1a:69:90:52:a2:5b:e7: 9d:e5:77:0d:86:c4:31:bc:67:0b:75:4c:b7:aa:90: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:0C:56:ED:A8:9D:75:5A:58:8F:07:BB:9C:5B:7B:F2:89:7D:3F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/24cdf37d-452a-39a6-9d2c-6b61a5d50d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl X509v3 Authority Key Identifier: keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer sbgp-ipAddrBlock: critical IPv4: 202.130.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:26:88:f0:b9:6f:44:65:48:3d:20:7b:ad:ff:84:94:f0:09: 27:2a:bb:7f:7c:0e:df:3b:df:07:d1:67:6a:b7:1a:8b:6b:ec: 16:d8:23:d3:e7:3e:55:4f:af:2c:5a:13:53:67:71:59:f2:e6: cb:55:fa:fb:8d:f9:f1:aa:c6:32:02:29:0e:d0:b9:f9:41:c1: 7a:c2:53:54:23:02:98:c3:cd:28:44:be:e2:f1:17:b0:35:aa: 72:e2:65:4a:c2:87:3e:43:4a:7a:54:32:09:01:a1:e3:b2:8c: b8:2c:46:72:fd:4e:c5:d4:57:11:96:97:9a:1c:7a:3b:b7:71: 50:6f:c3:34:22:d9:64:83:d7:5e:d3:96:55:d7:17:e9:c2:04: f7:23:37:99:18:10:ff:2d:6d:79:01:4c:31:f2:e6:72:d5:cd: 4a:a5:c2:6e:18:f0:28:02:91:71:ca:3b:c9:69:94:a8:aa:b3: 59:6f:45:5f:74:50:36:e4:ca:8e:b1:74:e4:7d:85:bb:0f:36: c7:8f:f4:3e:b2:bc:a5:ef:6b:78:74:6d:c0:bf:2c:ba:5d:20: a7:67:a2:cb:91:f5:b2:1d:9f:d4:7d:93:9b:a5:91:17:b4:eb: a6:1d:7d:f5:32:cc:cd:d7:3a:9e:0c:12:39:55:63:a6:84:29: c3:72:04:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErJ9b5bi6J7F2kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3NzJkZDctOTkxZi00N2IyLWI0MGItZDkyYTg0OTcy MzRlMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk YTFlMDJlM2ItYWExZi00NGJkLThiZjItNWNjZGY2NWMwOWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnMh5YFVtEvCw2wOJmjg021tlawb7kKTb5Oj QCp1gfokOnjCbiuWEvhaTntA/ffd2nN7SRGBNR1X6kewv7D7gbK7aGmqDdIkRhhQ drggk5YBZxQIluAlbwHWBpMK6MqrkKxfMFSIT3D5nXgYWXVo/qva2zzcbUqyFW1s PRVCyBurZkwij6xKDZS7fucXFd80IBybS904RhqnmWQ6QyPk/3+jSpqBksKnEiNd xeVyokb/0CD997PhKBjezpJCNTIQQvWbj9a6K7agNkHeVTz17gYBxLOeUJDrTBoZ 7ZNWUhXiM8JBhHgCwhppkFKiW+ed5XcNhsQxvGcLdUy3qpBKMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkMVu2onXVaWI8Hu5xbe/KJfT9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3 MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJhODQ5NzIzNGUvMjRjZGYzN2QtNDUyYS0z OWE2LTlkMmMtNmI2MWE1ZDUwZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTE3NzJkZDctOTkxZi00N2IyLWI0 MGItZDkyYTg0OTcyMzRlLzUxNzcyZGQ3LTk5MWYtNDdiMi1iNDBiLWQ5MmE4NDk3 MjM0ZS5jcmwwHwYDVR0jBBgwFoAU17ypcT0ujL6ovHcuMMM9YAkEAo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MTc3MmRkNy05OTFmLTQ3YjItYjQwYi1kOTJh ODQ5NzIzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAyoLLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKgmiPC5b0RlSD0ge63/hJTwCScqu398Dt873wfRZ2q3Gotr7BbYI9Pn PlVPryxaE1NncVny5stV+vuN+fGqxjICKQ7QuflBwXrCU1QjApjDzShEvuLxF7A1 qnLiZUrChz5DSnpUMgkBoeOyjLgsRnL9TsXUVxGWl5oceju3cVBvwzQi2WSD117T llXXF+nCBPcjN5kYEP8tbXkBTDHy5nLVzUqlwm4Y8CgCkXHKO8lplKiqs1lvRV90 UDbkyo6xdOR9hbsPNseP9D6yvKXva3h0bcC/LLpdIKdnosuR9bIdn9R9k5ulkRe0 66YdffUyzM3XOp4MEjlVY6aEKcNyBEQ= -----END CERTIFICATE-----Generated at Sat Sep 26 10:43:29 2026 by rpki-client