$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6eccde9c-e099-353a-a740-5e0c8ed9905c.roa File: 6eccde9c-e099-353a-a740-5e0c8ed9905c.roa (raw, json) Hash identifier: wl3K4dp7dC7+mZuso64fdCfm5V4QAgdHEaAFhOnu8vo= Subject key identifier: 7A:C5:7B:4D:5D:9F:61:AC:DC:DD:39:D8:84:3E:1A:22:7F:43:69:A1 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584D245767CD14D127426C1DF140 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6eccde9c-e099-353a-a740-5e0c8ed9905c.roa Signing time: Thu 12 Mar 2026 08:26:47 +0000 ROA not before: Thu 12 Mar 2026 08:26:47 +0000 ROA not after: Wed 10 Jun 2026 08:26:47 +0000 asID: 138699 IP address blocks: 101.45.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:57:67:cd:14:d1:27:42:6c:1d:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Mar 12 08:26:47 2026 GMT Not After : Jun 10 08:26:47 2026 GMT Subject: CN=a01ab142-778d-4ab4-a352-d7e2a65d1931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:44:7e:ed:82:72:27:53:e2:83:b3:d1:a6:18: 93:bf:76:20:64:27:94:23:7a:c4:aa:75:ee:cd:a6: 82:19:58:9b:a0:8f:6c:99:dd:ae:df:a0:32:75:24: af:c6:47:b1:c6:d3:d4:92:db:21:36:66:0b:db:62: cb:40:3b:ae:e1:cf:6e:14:26:64:ce:89:94:4a:42: 70:a0:d7:33:b8:91:65:6d:e1:4f:09:65:46:ff:0f: cd:17:2e:55:4b:93:9f:79:5c:4e:e5:47:86:5a:b1: 00:e3:bb:27:91:c6:5d:73:8d:7d:98:54:61:0b:a9: 45:b5:2f:e3:ac:72:26:20:3e:75:fc:f6:b3:b0:21: b3:b9:4d:ce:48:eb:e7:d9:77:14:be:3e:f7:b5:44: ca:bb:35:05:fe:5b:db:0c:5f:02:6e:29:ba:cb:14: 84:1b:09:4a:e5:1c:58:2c:b8:88:f9:26:75:97:c8: 7f:24:6e:66:ea:99:39:ad:8f:60:ee:96:02:d1:46: f5:71:b0:ed:46:e8:bd:ff:8f:a7:98:fb:4f:f7:31: 42:63:60:03:90:9e:17:ae:4a:00:77:29:9a:77:08: f8:bb:5a:55:9b:54:b7:57:d2:b1:fa:99:2a:22:6e: 07:ab:47:b8:63:6d:05:7a:48:24:b6:4c:57:5d:97: 26:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C5:7B:4D:5D:9F:61:AC:DC:DD:39:D8:84:3E:1A:22:7F:43:69:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/6eccde9c-e099-353a-a740-5e0c8ed9905c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:7d:e8:1c:8c:e2:43:e1:c6:c0:78:50:b9:46:6a:5c:6a:ba: 5e:a7:d7:92:71:a8:07:c7:1e:bc:59:22:08:0a:a4:4a:fe:87: 47:c0:fc:7d:40:1a:ab:39:2d:f6:a4:f0:8f:23:67:f4:18:ce: 95:99:10:7c:a4:10:35:5d:fe:b6:92:de:c4:f9:4c:62:2c:17: 55:b0:1b:59:23:05:a1:ea:7b:cd:d3:98:bf:07:c2:0e:30:44: 26:61:bf:d9:c5:91:2e:b5:e2:54:09:a9:e0:d1:90:e9:7d:3a: 9f:64:41:af:cb:2d:c2:16:82:f8:5f:d4:ff:14:17:1d:d5:76: e8:76:c8:82:c0:47:de:11:f2:71:c7:a7:23:d3:e8:80:3f:e3: ee:fb:50:ce:a9:43:43:83:7b:63:cf:5a:2b:a2:56:9d:8d:ba: b1:98:3b:49:ce:17:24:00:64:db:73:02:5b:1f:25:18:26:a6: 87:1e:fe:b5:15:a8:4e:bc:b7:b7:91:91:96:02:8e:35:3c:05: f7:29:59:2c:af:7e:9e:d9:fe:4b:d8:99:23:db:40:c7:5f:20: 62:5a:cc:01:8d:72:bc:00:88:2b:d8:e3:ce:a1:03:33:ba:a7: 5f:9e:e5:4f:32:b0:2d:f5:d5:33:99:9a:d1:7e:a3:47:9b:41: 50:50:c2:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0kV2fNFNEnQmwd8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDMxMjA4MjY0N1oXDTI2MDYxMDA4MjY0N1owLzEtMCsGA1UEAxMk YTAxYWIxNDItNzc4ZC00YWI0LWEzNTItZDdlMmE2NWQxOTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUR+7YJyJ1Pig7PRphiTv3YgZCeUI3rEqnXu zaaCGViboI9smd2u36AydSSvxkexxtPUktshNmYL22LLQDuu4c9uFCZkzomUSkJw oNczuJFlbeFPCWVG/w/NFy5VS5OfeVxO5UeGWrEA47snkcZdc419mFRhC6lFtS/j rHImID51/PazsCGzuU3OSOvn2XcUvj73tUTKuzUF/lvbDF8Cbim6yxSEGwlK5RxY LLiI+SZ1l8h/JG5m6pk5rY9g7pYC0Ub1cbDtRui9/4+nmPtP9zFCY2ADkJ4XrkoA dymadwj4u1pVm1S3V9Kx+pkqIm4Hq0e4Y20FekgktkxXXZcmawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrFe01dn2Gs3N052IQ+GiJ/Q2mhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvNmVjY2RlOWMtZTA5OS0z NTNhLWE3NDAtNWUwYzhlZDk5MDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZS3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA596ByM4kPhxsB4ULlGalxqul6n15JxqAfHHrxZIggKpEr+h0fA/H1A Gqs5Lfak8I8jZ/QYzpWZEHykEDVd/raS3sT5TGIsF1WwG1kjBaHqe83TmL8Hwg4w RCZhv9nFkS614lQJqeDRkOl9Op9kQa/LLcIWgvhf1P8UFx3Vduh2yILAR94R8nHH pyPT6IA/4+77UM6pQ0ODe2PPWiuiVp2NurGYO0nOFyQAZNtzAlsfJRgmpoce/rUV qE68t7eRkZYCjjU8BfcpWSyvfp7Z/kvYmSPbQMdfIGJazAGNcrwAiCvY486hAzO6 p1+e5U8ysC311TOZmtF+o0ebQVBQwj4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:01:07 2026 by rpki-client