$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa File: b1a52e16-9db5-3a34-9bb1-3649b401126a.roa (raw, json) Hash identifier: eysObez9zJI1Qos6qGGz1M2yGiFgR13yBCcceQsH5wM= Subject key identifier: 62:AA:E1:B1:CC:44:E3:99:28:42:44:4E:AC:25:C2:10:95:68:07:A2 Certificate issuer: /CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288 Certificate serial: 010D0C9F4328584DAC457F7F280E61C77130F900 Authority key identifier: 03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 199563 IP address blocks: 132.190.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:7f:7f:28:0e:61:c7:71:30:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc37b0c2-03f7-4d4d-9048-a7041df8c288 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=43c9220f-715d-419b-8bf5-62f7e8aec70c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:db:b7:73:a5:65:4a:d0:29:98:87:c2:96: a0:6d:88:fc:d8:4e:d7:86:b8:71:55:46:0d:02:9f: 92:b0:e8:17:48:ec:1a:5b:b0:b3:9a:c6:5a:54:2b: 08:77:c2:31:b4:af:1e:ae:91:86:4b:c7:db:98:96: 19:61:ac:31:d0:2f:bf:35:a7:63:11:70:d5:87:04: 6e:79:48:58:41:3d:57:98:f9:c1:eb:6c:1e:bd:df: 27:f0:7b:35:ad:58:c5:db:87:65:29:fc:c9:1e:bb: 40:23:b6:b8:db:0e:48:0e:8a:61:b5:ba:99:8b:98: a0:ac:99:31:d8:fe:6b:6e:67:26:50:bf:00:b2:73: 93:9a:6b:82:d8:a2:5b:45:ff:5a:c5:13:e6:d0:6b: 2d:b1:6c:50:bf:95:0a:69:f7:32:3e:bd:f1:6e:7b: a4:97:99:b8:2e:6f:18:1e:30:59:91:a6:3e:d9:6c: f8:65:54:8a:a2:78:fb:a7:d0:3d:9f:53:da:14:37: e9:02:74:52:b9:28:60:27:b1:e3:ea:c7:01:51:90: 13:7e:c3:01:c4:7e:96:a1:56:ee:1c:fe:41:14:5e: 0b:e3:29:9c:20:cc:2c:2f:70:cd:b5:0d:bc:b2:8b: fb:7b:26:db:77:01:d9:61:00:f3:1b:d2:50:16:0c: f7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AA:E1:B1:CC:44:E3:99:28:42:44:4E:AC:25:C2:10:95:68:07:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/b1a52e16-9db5-3a34-9bb1-3649b401126a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288/fc37b0c2-03f7-4d4d-9048-a7041df8c288.crl X509v3 Authority Key Identifier: keyid:03:27:42:47:A0:F0:A9:68:65:E9:72:0C:27:71:CE:C8:63:B2:77:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fc37b0c2-03f7-4d4d-9048-a7041df8c288.cer sbgp-ipAddrBlock: critical IPv4: 132.190.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:10:f8:d7:de:c0:1c:4f:e0:67:75:38:58:ba:8f:c5:84:eb: 47:26:13:38:a0:be:3f:42:ec:24:de:f2:4a:4f:66:4e:63:97: 40:82:02:32:a7:6c:a0:b3:90:9d:df:6e:e1:0c:d4:82:15:5f: 09:5b:07:c8:a9:76:4c:90:1e:dc:88:c3:cf:bf:bd:4a:35:c6: b2:87:9b:3a:e3:6d:8a:8e:31:cf:3e:2d:42:1c:d6:ad:a1:1e: f7:64:bb:e3:8c:8a:ef:fd:84:c6:bf:90:40:9b:68:01:c5:52: bb:8d:b0:a7:78:0a:ef:b4:9d:c3:42:75:c0:41:35:d5:f5:39: c1:4e:e3:77:5c:0e:22:df:dc:9d:cf:c5:3d:f1:76:30:c3:bf: 89:48:51:e1:4d:24:7d:19:03:5f:50:5d:9b:53:25:69:bd:f1: 49:13:3d:3e:1c:34:4f:44:86:85:79:8a:7b:f9:ee:7a:ad:33: 0b:f8:73:95:a6:b8:b1:b8:8b:ea:87:63:77:cc:47:9e:21:49: e7:d3:7b:e6:68:0c:e7:23:93:84:43:d6:39:07:b3:44:94:05: 25:f1:4c:e3:0f:69:64:2b:e9:b9:88:6c:ed:b1:e1:ab:a3:e1: c1:42:09:84:57:3d:95:4e:3e:cf:b1:56:1f:37:0e:2e:5b:fe: 90:7a:25:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRX9/KA5hx3Ew+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzN2IwYzItMDNmNy00ZDRkLTkwNDgtYTcwNDFkZjhj Mjg4MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NDNjOTIyMGYtNzE1ZC00MTliLThiZjUtNjJmN2U4YWVjNzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdvbt3OlZUrQKZiHwpagbYj82E7XhrhxVUYN Ap+SsOgXSOwaW7CzmsZaVCsId8IxtK8erpGGS8fbmJYZYawx0C+/NadjEXDVhwRu eUhYQT1XmPnB62wevd8n8Hs1rVjF24dlKfzJHrtAI7a42w5IDophtbqZi5igrJkx 2P5rbmcmUL8AsnOTmmuC2KJbRf9axRPm0GstsWxQv5UKafcyPr3xbnukl5m4Lm8Y HjBZkaY+2Wz4ZVSKonj7p9A9n1PaFDfpAnRSuShgJ7Hj6scBUZATfsMBxH6WoVbu HP5BFF4L4ymcIMwsL3DNtQ28sov7eybbdwHZYQDzG9JQFgz3CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKq4bHMROOZKEJETqwlwhCVaAeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYzM3 YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0MWRmOGMyODgvYjFhNTJlMTYtOWRiNS0z YTM0LTliYjEtMzY0OWI0MDExMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmMzN2IwYzItMDNmNy00ZDRkLTkw NDgtYTcwNDFkZjhjMjg4L2ZjMzdiMGMyLTAzZjctNGQ0ZC05MDQ4LWE3MDQxZGY4 YzI4OC5jcmwwHwYDVR0jBBgwFoAUAydCR6DwqWhl6XIMJ3HOyGOyd4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9mYzM3YjBjMi0wM2Y3LTRkNGQtOTA0OC1hNzA0 MWRmOGMyODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhL4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8Q+NfewBxP4Gd1OFi6j8WE60cmEzigvj9C7CTe8kpPZk5jl0CCAjKn bKCzkJ3fbuEM1IIVXwlbB8ipdkyQHtyIw8+/vUo1xrKHmzrjbYqOMc8+LUIc1q2h Hvdku+OMiu/9hMa/kECbaAHFUruNsKd4Cu+0ncNCdcBBNdX1OcFO43dcDiLf3J3P xT3xdjDDv4lIUeFNJH0ZA19QXZtTJWm98UkTPT4cNE9EhoV5inv57nqtMwv4c5Wm uLG4i+qHY3fMR54hSefTe+ZoDOcjk4RD1jkHs0SUBSXxTOMPaWQr6bmIbO2x4auj 4cFCCYRXPZVOPs+xVh83Di5b/pB6JUU= -----END CERTIFICATE-----Generated at Wed May 13 11:45:53 2026 by rpki-client