$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa File: f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa (raw, json) Hash identifier: mymWClQFmun7ql6SX2EMEak2YoHdM0mgbECK+x73i/Y= Subject key identifier: BC:82:A7:03:17:61:55:2E:F0:AE:45:EE:A4:96:7E:4F:C3:4E:94:EB Certificate issuer: /CN=03cb17c9-7597-4c95-a127-009654391416 Certificate serial: 010D0C9F4328584DA280129D22CE8461A2F7A700 Authority key identifier: 2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 40776 IP address blocks: 131.143.21.0/24 maxlen: 24 2602:f8ab:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:12:9d:22:ce:84:61:a2:f7:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03cb17c9-7597-4c95-a127-009654391416 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=42127d70-8b65-4907-8335-4bce98ec4d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2b:6d:eb:07:85:a5:ad:17:c0:66:93:ac:9a: 58:2b:41:88:72:80:bf:ad:1a:bd:0c:4b:57:5c:d4: cc:c1:28:99:3a:c6:11:09:9b:2d:d2:83:09:8c:ca: 14:aa:b0:d9:b6:60:6f:d5:f0:0a:a7:73:b5:1f:73: 66:28:3d:a1:99:89:52:0c:17:dc:e5:a6:c6:2e:93: 8e:f8:b0:10:26:55:e5:fd:77:7f:36:11:40:a5:f5: 96:1c:cc:ef:2c:0a:3d:c8:fc:76:dd:7d:9e:c7:14: f1:23:89:92:b4:2c:b9:f4:b7:0f:77:80:47:f6:49: 44:0f:6e:c9:00:b2:33:88:46:48:2d:e6:f4:54:cf: f0:b9:10:a5:44:6e:8a:cc:0d:f5:0f:29:04:26:63: 8b:06:28:42:7e:eb:47:03:a2:e6:67:e4:2c:cb:0f: 68:b7:3c:51:c6:d6:f0:19:ef:84:1c:14:0b:65:84: 20:3e:74:20:22:ca:ad:d7:80:b1:3a:14:2e:c7:72: f7:51:8e:4d:cf:ed:39:37:4c:9a:f1:59:5c:79:67: eb:54:2d:60:b2:a0:8a:1c:8f:a9:3b:a8:c6:ed:93: e0:ca:8a:61:0f:51:47:52:94:d8:b7:82:7b:66:b3: b0:7f:88:22:fb:b4:93:3c:c8:fa:64:3e:aa:ba:40: 00:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:82:A7:03:17:61:55:2E:F0:AE:45:EE:A4:96:7E:4F:C3:4E:94:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/f1d50459-b2c6-3b79-ae46-38d8a85b0950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416/03cb17c9-7597-4c95-a127-009654391416.crl X509v3 Authority Key Identifier: keyid:2C:EF:60:85:98:CE:03:2F:2B:51:AD:EE:73:2F:C8:7D:26:3B:73:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03cb17c9-7597-4c95-a127-009654391416.cer sbgp-ipAddrBlock: critical IPv4: 131.143.21.0/24 IPv6: 2602:f8ab:b::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c1:31:08:67:cd:cd:40:af:42:db:5b:b0:9e:54:18:a9:4d: b3:db:8b:83:4a:fc:80:09:41:45:ee:b0:a3:5a:0b:fc:9d:c5: d5:c3:71:a3:bc:78:da:36:ba:a5:ac:13:61:2d:d5:dd:cb:f8: 35:91:67:73:3e:b6:bd:58:55:25:38:08:59:7e:4b:fa:29:f8: ab:d2:a6:34:a0:fc:bb:a5:14:f5:95:54:12:8d:9d:15:ef:1f: 92:2c:f6:7f:1c:70:3c:e5:a3:58:7d:7d:59:b8:58:63:6e:df: c1:b6:95:6a:5f:80:c0:23:b7:25:cc:22:82:c0:69:19:0a:55: f8:32:37:14:12:d8:92:c7:3d:48:f2:d5:a2:d2:b8:93:21:5e: a0:36:8f:34:1d:f2:78:8e:c8:25:82:ce:2b:20:60:e1:29:5f: c3:12:67:b1:12:29:42:8f:e1:d6:78:7a:22:1a:81:5f:f2:c6: c6:da:03:6d:93:10:f5:ce:83:e1:85:a9:40:6c:dc:40:8f:75: 71:27:ef:bc:fb:f0:b1:0d:e4:80:6f:1d:ec:5d:c8:d4:3c:af: 46:52:27:e0:6e:5f:ab:29:b9:65:08:42:9b:cc:ad:b6:5f:19: 6a:bc:cf:f9:32:a8:84:b0:c0:59:54:db:5f:2e:5b:62:91:80: 24:e7:4d:cd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE2igBKdIs6EYaL3pwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNjYjE3YzktNzU5Ny00Yzk1LWExMjctMDA5NjU0Mzkx NDE2MB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk NDIxMjdkNzAtOGI2NS00OTA3LTgzMzUtNGJjZTk4ZWM0ZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsytt6weFpa0XwGaTrJpYK0GIcoC/rRq9DEtX XNTMwSiZOsYRCZst0oMJjMoUqrDZtmBv1fAKp3O1H3NmKD2hmYlSDBfc5abGLpOO +LAQJlXl/Xd/NhFApfWWHMzvLAo9yPx23X2exxTxI4mStCy59LcPd4BH9klED27J ALIziEZILeb0VM/wuRClRG6KzA31DykEJmOLBihCfutHA6LmZ+Qsyw9otzxRxtbw Ge+EHBQLZYQgPnQgIsqt14CxOhQux3L3UY5Nz+05N0ya8VlceWfrVC1gsqCKHI+p O6jG7ZPgyophD1FHUpTYt4J7ZrOwf4gi+7STPMj6ZD6qukAApwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFLyCpwMXYVUu8K5F7qSWfk/DTpTrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wM2Ni MTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2NTQzOTE0MTYvZjFkNTA0NTktYjJjNi0z Yjc5LWFlNDYtMzhkOGE4NWIwOTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDNjYjE3YzktNzU5Ny00Yzk1LWEx MjctMDA5NjU0MzkxNDE2LzAzY2IxN2M5LTc1OTctNGM5NS1hMTI3LTAwOTY1NDM5 MTQxNi5jcmwwHwYDVR0jBBgwFoAULO9ghZjOAy8rUa3ucy/IfSY7c5cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wM2NiMTdjOS03NTk3LTRjOTUtYTEyNy0wMDk2 NTQzOTE0MTYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAg48VMA8E AgACMAkDBwAmAvirAAswVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAS8ExCGfNzUCvQttbsJ5UGKlNs9uLg0r8 gAlBRe6wo1oL/J3F1cNxo7x42ja6pawTYS3V3cv4NZFncz62vVhVJTgIWX5L+in4 q9KmNKD8u6UU9ZVUEo2dFe8fkiz2fxxwPOWjWH19WbhYY27fwbaVal+AwCO3Jcwi gsBpGQpV+DI3FBLYksc9SPLVotK4kyFeoDaPNB3yeI7IJYLOKyBg4SlfwxJnsRIp Qo/h1nh6IhqBX/LGxtoDbZMQ9c6D4YWpQGzcQI91cSfvvPvwsQ3kgG8d7F3I1Dyv RlIn4G5fqym5ZQhCm8yttl8ZarzP+TKohLDAWVTbXy5bYpGAJOdNzQ== -----END CERTIFICATE-----Generated at Wed May 13 14:02:24 2026 by rpki-client