$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa File: 71c737cf-e37e-3b72-88ca-56c9984a18b8.roa (raw, json) Hash identifier: Zf5ssXgnY1QqXMsPRIyEVjpkIUKhLgdb2zfAWCbra9s= Subject key identifier: 14:10:10:FA:BF:5A:E8:83:B8:00:F7:21:CF:14:0E:F2:46:8B:58:DB Certificate issuer: /CN=0c23b672-82ba-4697-9783-b36dad570d90 Certificate serial: 010D0C9F4328584E6144B6A354FEA3C9A6EF03A8 Authority key identifier: 74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 399381 IP address blocks: 131.201.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:b6:a3:54:fe:a3:c9:a6:ef:03:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c23b672-82ba-4697-9783-b36dad570d90 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=9f86e7e3-12ab-4b00-a930-9c5827f44dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:30:96:a4:22:be:55:db:a9:f8:c4:93:70: 73:fe:60:fa:b4:1b:76:0c:f0:9c:75:cc:6c:55:6f: 25:53:82:1a:3e:14:d9:90:d1:6a:13:0d:a8:89:39: 5e:d0:05:97:1d:53:64:75:c9:a9:18:6e:ff:37:51: 6b:d9:69:20:b1:b5:91:0a:a6:c5:c4:1f:7b:c9:67: 29:7b:7d:1b:3e:c8:35:f9:f0:ba:dd:46:f8:d1:d9: f6:ed:37:c0:2a:4e:89:a1:c0:27:10:12:7d:31:c3: 2c:37:b7:85:27:d6:9e:7a:5b:22:d6:52:ca:08:30: 07:31:d7:20:95:f3:d7:ce:ab:38:66:ae:29:e4:7e: c6:4f:3a:79:46:e9:94:34:f8:be:15:ab:53:4b:0a: 2d:07:bd:bd:59:0b:8c:54:b0:26:0b:18:3b:50:c0: ab:16:d2:24:97:e2:42:21:c7:57:56:bf:1c:07:4b: d0:1d:10:bf:55:c1:bb:11:67:5c:0f:37:2e:df:b8: c2:ea:a5:42:0f:7f:ad:f0:be:8d:98:2a:e7:4a:62: be:86:43:58:e4:82:98:51:ca:32:ca:ea:6c:d7:e7: 36:21:7f:b8:b7:0d:b8:71:a2:fa:a9:1b:8e:cf:0d: 5e:06:a4:bb:8d:04:d3:da:c9:49:b9:a4:98:fa:f3: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:10:10:FA:BF:5A:E8:83:B8:00:F7:21:CF:14:0E:F2:46:8B:58:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/71c737cf-e37e-3b72-88ca-56c9984a18b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90/0c23b672-82ba-4697-9783-b36dad570d90.crl X509v3 Authority Key Identifier: keyid:74:02:2D:B3:60:25:0A:16:82:DF:28:1A:7F:FE:77:AE:4B:CE:62:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0c23b672-82ba-4697-9783-b36dad570d90.cer sbgp-ipAddrBlock: critical IPv4: 131.201.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:92:8a:bb:b3:14:30:61:65:e9:45:80:c9:a7:ec:60:c4:53: 2b:20:d1:fc:f0:36:a4:55:02:cf:2e:8d:b9:f2:8c:9e:ea:2b: 68:a8:ba:18:39:55:7b:01:4f:1d:99:90:09:62:9b:db:d5:fe: 77:6a:2a:31:bc:19:7f:23:e6:a9:26:aa:60:88:8a:15:75:88: e1:25:9b:f2:c8:bb:d8:ce:14:cc:ce:a1:28:64:7e:7b:5d:0e: c8:7e:21:d0:64:8e:ab:cf:1c:19:02:2f:0a:05:31:dd:5a:12: 41:38:1b:2a:e5:53:ae:66:19:b1:3e:21:be:31:14:1c:da:d7: 32:c0:2a:66:d1:68:78:85:9c:2d:89:bd:28:43:ab:25:5b:25: a8:67:3f:0b:bb:b4:55:83:4d:c5:93:82:81:3f:11:18:ec:63: d4:9b:4f:eb:1c:57:b7:5d:5f:2f:45:5f:ca:88:4c:df:f6:b4: 06:08:62:fa:3d:49:d8:c6:d7:77:6c:99:e6:ac:3a:94:dd:b5: 7b:4f:a4:85:86:2a:fb:7a:58:8e:cf:ee:a5:3f:27:fa:4d:92: a8:65:59:ff:2f:74:b4:4e:10:6b:7c:fa:42:27:3f:25:5f:41: 47:d5:f5:4c:14:3a:68:c9:2d:d7:35:1c:fb:88:c9:87:da:0e: 18:cc:95:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRLajVP6jyabvA6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyM2I2NzItODJiYS00Njk3LTk3ODMtYjM2ZGFkNTcw ZDkwMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk OWY4NmU3ZTMtMTJhYi00YjAwLWE5MzAtOWM1ODI3ZjQ0ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO0wlqQivlXbqfjEk3Bz/mD6tBt2DPCcdcxs VW8lU4IaPhTZkNFqEw2oiTle0AWXHVNkdcmpGG7/N1Fr2WkgsbWRCqbFxB97yWcp e30bPsg1+fC63Ub40dn27TfAKk6JocAnEBJ9McMsN7eFJ9aeelsi1lLKCDAHMdcg lfPXzqs4Zq4p5H7GTzp5RumUNPi+FatTSwotB729WQuMVLAmCxg7UMCrFtIkl+JC IcdXVr8cB0vQHRC/VcG7EWdcDzcu37jC6qVCD3+t8L6NmCrnSmK+hkNY5IKYUcoy yups1+c2IX+4tw24caL6qRuOzw1eBqS7jQTT2slJuaSY+vMgrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQQEPq/WuiDuAD3Ic8UDvJGi1jbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wYzIz YjY3Mi04MmJhLTQ2OTctOTc4My1iMzZkYWQ1NzBkOTAvNzFjNzM3Y2YtZTM3ZS0z YjcyLTg4Y2EtNTZjOTk4NGExOGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMGMyM2I2NzItODJiYS00Njk3LTk3 ODMtYjM2ZGFkNTcwZDkwLzBjMjNiNjcyLTgyYmEtNDY5Ny05NzgzLWIzNmRhZDU3 MGQ5MC5jcmwwHwYDVR0jBBgwFoAUdAIts2AlChaC3ygaf/53rkvOYnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wYzIzYjY3Mi04MmJhLTQ2OTctOTc4My1iMzZk YWQ1NzBkOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg8kNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWSiruzFDBhZelFgMmn7GDEUysg0fzwNqRVAs8ujbnyjJ7qK2iouhg5 VXsBTx2ZkAlim9vV/ndqKjG8GX8j5qkmqmCIihV1iOElm/LIu9jOFMzOoShkfntd Dsh+IdBkjqvPHBkCLwoFMd1aEkE4GyrlU65mGbE+Ib4xFBza1zLAKmbRaHiFnC2J vShDqyVbJahnPwu7tFWDTcWTgoE/ERjsY9SbT+scV7ddXy9FX8qITN/2tAYIYvo9 SdjG13dsmeasOpTdtXtPpIWGKvt6WI7P7qU/J/pNkqhlWf8vdLROEGt8+kInPyVf QUfV9UwUOmjJLdc1HPuIyYfaDhjMlaI= -----END CERTIFICATE-----Generated at Fri Jul 24 15:57:44 2026 by rpki-client