$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa File: 352e859a-e30b-311a-8d4e-4ebdda38bda4.roa (raw, json) Hash identifier: WzcZBDw6W+Zz1c2jZwpK0VfvgEVrqzNjUcYspRIQkJQ= Subject key identifier: A3:C4:AF:6F:22:4F:57:01:AA:C8:63:B9:2C:9E:E3:FB:EB:97:B8:C7 Certificate issuer: /CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Certificate serial: 010D0C9F4328584D91BFFE2AD934289B7338F800 Authority key identifier: B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 49544 IP address blocks: 203.132.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:bf:fe:2a:d9:34:28:9b:73:38:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9030ea5-31a0-4bad-bebd-2fffbce27add Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=2f2f7967-c3f1-4aed-86f4-aa16704a6091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:af:67:f7:09:4f:63:ca:20:53:5c:5f:1b: 97:1f:43:7a:2d:94:a7:3f:0a:ea:03:71:65:5d:ad: 6c:0a:5f:f9:2e:94:2e:47:ac:26:2e:44:ce:7b:2a: 25:8d:73:c5:c9:bd:1d:75:87:bb:97:32:2d:00:1e: 86:d6:23:c7:8d:aa:c5:66:53:62:b9:04:3e:6c:51: dd:6d:b4:98:4a:56:5d:9f:a9:a2:69:42:a4:13:c5: d9:06:da:d3:73:26:b8:a9:38:90:8d:2a:fa:c1:25: 65:bf:a5:1f:85:d5:9b:d1:08:81:2b:00:4b:86:8f: d7:19:f2:12:15:5d:86:df:55:3c:10:e4:0c:50:e8: 93:49:2a:e9:e9:b3:c6:17:46:6e:27:50:68:40:46: 44:7f:01:be:89:86:04:52:3c:ee:5a:a3:17:3f:60: 25:42:a6:9b:e9:15:96:c2:0d:43:2b:64:a6:31:4b: 02:0d:ea:b0:38:24:0e:3b:da:0e:5b:d0:67:cd:70: 93:3b:b1:5b:36:63:ac:dd:bb:7f:a6:37:d3:21:9e: db:fd:08:ec:ee:26:0a:0f:85:8c:7b:14:58:d4:7e: 7c:72:d0:14:ac:42:7d:06:dc:83:e3:bd:9f:b6:7b: cd:09:6e:41:e5:90:a4:ed:fc:59:26:5d:83:c5:c2: 9d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C4:AF:6F:22:4F:57:01:AA:C8:63:B9:2C:9E:E3:FB:EB:97:B8:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/352e859a-e30b-311a-8d4e-4ebdda38bda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add/b9030ea5-31a0-4bad-bebd-2fffbce27add.crl X509v3 Authority Key Identifier: keyid:B7:6C:F2:37:A3:77:AF:26:56:71:EE:05:4B:8E:1B:6E:12:E3:9C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b9030ea5-31a0-4bad-bebd-2fffbce27add.cer sbgp-ipAddrBlock: critical IPv4: 203.132.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:da:ae:38:1e:46:d8:9f:b4:5f:9a:eb:94:b4:37:82:36:9b: c1:45:fd:0b:ef:3b:e1:69:bf:75:f1:f8:1e:88:17:f1:e6:b5: 86:d2:2a:1e:6c:24:0d:8b:61:02:9d:5d:79:95:27:ec:2e:2f: 8b:0f:04:ef:2f:58:ac:93:27:db:b2:d2:9c:af:f4:0c:9d:bd: f4:05:d4:c3:0b:70:a2:55:fb:7d:02:f8:18:e9:12:79:33:e8: 41:c3:41:f2:b8:d1:ac:35:24:dd:c9:eb:79:c1:da:b3:f4:7b: 07:2b:be:0d:2e:e0:25:70:21:1f:c3:98:b9:cd:4d:f7:1f:5a: 48:76:1c:cd:21:ec:d2:c7:ad:6a:d6:0b:ed:c2:79:b9:08:51: a1:93:37:bc:04:49:72:29:b1:2f:26:4c:a6:63:47:88:2c:6c: 9a:eb:b9:a2:28:52:b0:e9:d3:3d:63:99:73:0e:e4:ef:4b:0a: f4:6b:62:75:03:96:75:4d:af:47:17:80:40:44:a7:e4:50:f2: b1:c6:5c:92:0e:a6:1e:63:4e:21:6a:14:6c:3b:17:2a:95:e1: 61:45:14:7b:5a:a7:04:94:eb:2e:a7:10:7d:7e:f3:cd:a3:88: 48:21:e7:87:67:d6:b6:39:a4:82:7e:7d:c8:d2:89:40:ec:49: 98:3a:a6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Rv/4q2TQom3M4+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkwMzBlYTUtMzFhMC00YmFkLWJlYmQtMmZmZmJjZTI3 YWRkMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MmYyZjc5NjctYzNmMS00YWVkLTg2ZjQtYWExNjcwNGE2MDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWvZ/cJT2PKIFNcXxuXH0N6LZSnPwrqA3Fl Xa1sCl/5LpQuR6wmLkTOeyoljXPFyb0ddYe7lzItAB6G1iPHjarFZlNiuQQ+bFHd bbSYSlZdn6miaUKkE8XZBtrTcya4qTiQjSr6wSVlv6UfhdWb0QiBKwBLho/XGfIS FV2G31U8EOQMUOiTSSrp6bPGF0ZuJ1BoQEZEfwG+iYYEUjzuWqMXP2AlQqab6RWW wg1DK2SmMUsCDeqwOCQOO9oOW9BnzXCTO7FbNmOs3bt/pjfTIZ7b/Qjs7iYKD4WM exRY1H58ctAUrEJ9BtyD472ftnvNCW5B5ZCk7fxZJl2DxcKdwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPEr28iT1cBqshjuSye4/vrl7jHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAz MGVhNS0zMWEwLTRiYWQtYmViZC0yZmZmYmNlMjdhZGQvMzUyZTg1OWEtZTMwYi0z MTFhLThkNGUtNGViZGRhMzhiZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjkwMzBlYTUtMzFhMC00YmFkLWJl YmQtMmZmZmJjZTI3YWRkL2I5MDMwZWE1LTMxYTAtNGJhZC1iZWJkLTJmZmZiY2Uy N2FkZC5jcmwwHwYDVR0jBBgwFoAUt2zyN6N3ryZWce4FS44bbhLjnGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iOTAzMGVhNS0zMWEwLTRiYWQtYmViZC0yZmZm YmNlMjdhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAy4QRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXarjgeRtiftF+a65S0N4I2m8FF/QvvO+Fpv3Xx+B6IF/HmtYbSKh5s JA2LYQKdXXmVJ+wuL4sPBO8vWKyTJ9uy0pyv9AydvfQF1MMLcKJV+30C+BjpEnkz 6EHDQfK40aw1JN3J63nB2rP0ewcrvg0u4CVwIR/DmLnNTfcfWkh2HM0h7NLHrWrW C+3CebkIUaGTN7wESXIpsS8mTKZjR4gsbJrruaIoUrDp0z1jmXMO5O9LCvRrYnUD lnVNr0cXgEBEp+RQ8rHGXJIOph5jTiFqFGw7FyqV4WFFFHtapwSU6y6nEH1+882j iEgh54dn1rY5pIJ+fcjSiUDsSZg6pj0= -----END CERTIFICATE-----Generated at Wed May 13 05:34:08 2026 by rpki-client