$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa File: 2ac55f39-0179-3626-9f0f-32171775be3e.roa (raw, json) Hash identifier: jhRhPrPUIzpEgz/ch9ZQQAVItwe3cnYV7miMZ1osiew= Subject key identifier: 2B:C2:D3:5F:FB:EE:C6:C9:00:3D:D4:F5:0A:AB:D8:D8:B0:A8:8F:F6 Certificate issuer: /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Certificate serial: 010D0C9F4328584DE9B07B64F8FAE3575338FF18 Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 396949 IP address blocks: 103.101.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:7b:64:f8:fa:e3:57:53:38:ff:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=2786c2f2-cda3-4cd9-9c7e-6dc9c4b3dc3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:ca:4b:ff:ef:9e:00:29:9f:95:b1:b6:cb: 99:1d:85:00:c0:e0:88:2f:9a:13:fa:b2:49:87:0d: c5:bd:57:ce:1e:80:03:a3:43:e5:50:16:40:b2:54: 0c:e6:3d:54:71:8a:e1:25:0d:1a:e6:f1:0c:77:30: 91:16:58:17:e5:d6:1b:12:14:d1:bb:ef:06:3d:91: 25:6f:e0:8c:98:bf:3e:76:f7:2d:e5:98:7a:5f:a2: ce:60:fe:7d:90:97:2c:ef:2c:bd:50:10:22:f6:7f: f6:8d:81:e1:65:f9:49:04:bb:7a:76:87:a5:1f:68: 03:a5:d6:83:dc:dc:dc:a7:51:ba:c3:27:99:35:61: f8:7b:b9:49:df:f8:94:ba:82:53:fd:34:68:f9:79: 2c:45:b3:cb:f6:59:e5:d6:79:44:18:1a:e0:81:10: 2c:b9:8f:66:70:af:76:4c:84:3a:72:8f:d1:71:a2: 5d:cd:ec:b4:64:ed:df:65:cc:88:67:00:e6:00:98: e7:25:d4:2c:6a:e2:ab:df:1b:c7:db:99:27:c7:51: c6:20:c8:25:82:e5:5e:1a:43:43:f5:fe:74:a7:90: 6e:39:ea:26:55:33:43:6d:ba:82:75:be:6f:0a:4f: 30:6b:3e:00:a0:b1:f3:de:67:22:ff:82:e5:11:9d: 4d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C2:D3:5F:FB:EE:C6:C9:00:3D:D4:F5:0A:AB:D8:D8:B0:A8:8F:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/2ac55f39-0179-3626-9f0f-32171775be3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl X509v3 Authority Key Identifier: keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer sbgp-ipAddrBlock: critical IPv4: 103.101.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:98:88:16:8a:94:76:d8:90:57:e4:03:df:3f:eb:d4:45:2f: 6f:55:d7:99:ec:a0:90:e6:25:cb:10:37:fa:c3:56:90:20:02: 41:60:17:b2:95:a2:03:d3:40:ea:a8:4e:3c:e7:d2:1f:76:1b: e2:35:b8:7a:da:de:43:0b:7c:c6:c6:46:0b:30:3b:da:e6:2d: 1d:5c:dd:42:a3:26:e6:d3:48:e6:8c:97:e8:47:1f:41:b5:23: f0:61:0c:5b:4f:56:b1:e0:5d:e5:b7:ae:de:12:03:03:c5:81: 15:01:f0:3c:d9:5d:c3:85:43:18:31:0d:3f:31:cc:f7:ef:ce: 76:36:db:86:bf:42:ab:19:28:22:2b:58:03:d2:65:ce:fc:b3: 7a:18:0a:18:84:25:cd:22:a6:14:2c:a7:41:cd:68:04:40:9f: d8:70:09:da:be:3f:d2:49:9b:df:cd:9d:7c:fa:9f:cb:2d:00: 56:b1:34:5d:fc:c9:29:76:6e:a5:c2:c0:f5:24:dd:66:66:be: 3e:70:d9:09:93:08:1f:5f:3a:ee:99:62:7d:3d:2b:45:c4:26: 4a:36:16:43:5e:6a:48:55:00:29:bd:53:a9:cc:43:14:f7:ec: 26:89:45:b6:b5:48:c0:da:68:0d:2c:e7:5b:e3:7b:02:54:73: f6:da:ff:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psHtk+PrjV1M4/xgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVkYzk3NDEtNTU5ZC00ZDliLTlmOGQtYmUzNTYwNzU0 ZmZkMB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk Mjc4NmMyZjItY2RhMy00Y2Q5LTljN2UtNmRjOWM0YjNkYzNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5vKS//vngApn5WxtsuZHYUAwOCIL5oT+rJJ hw3FvVfOHoADo0PlUBZAslQM5j1UcYrhJQ0a5vEMdzCRFlgX5dYbEhTRu+8GPZEl b+CMmL8+dvct5Zh6X6LOYP59kJcs7yy9UBAi9n/2jYHhZflJBLt6doelH2gDpdaD 3Nzcp1G6wyeZNWH4e7lJ3/iUuoJT/TRo+XksRbPL9lnl1nlEGBrggRAsuY9mcK92 TIQ6co/RcaJdzey0ZO3fZcyIZwDmAJjnJdQsauKr3xvH25knx1HGIMglguVeGkND 9f50p5BuOeomVTNDbbqCdb5vCk8waz4AoLHz3mci/4LlEZ1NnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvC01/77sbJAD3U9Qqr2NiwqI/2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NWRj OTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1NjA3NTRmZmQvMmFjNTVmMzktMDE3OS0z NjI2LTlmMGYtMzIxNzE3NzViZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTVkYzk3NDEtNTU5ZC00ZDliLTlm OGQtYmUzNTYwNzU0ZmZkLzk1ZGM5NzQxLTU1OWQtNGQ5Yi05ZjhkLWJlMzU2MDc1 NGZmZC5jcmwwHwYDVR0jBBgwFoAU6PV/ieoECgMeYW7fmRTMWxY4sJQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy85NWRjOTc0MS01NTlkLTRkOWItOWY4ZC1iZTM1 NjA3NTRmZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABiYiBaKlHbYkFfkA98/69RFL29V15nsoJDmJcsQN/rDVpAgAkFgF7KV ogPTQOqoTjzn0h92G+I1uHra3kMLfMbGRgswO9rmLR1c3UKjJubTSOaMl+hHH0G1 I/BhDFtPVrHgXeW3rt4SAwPFgRUB8DzZXcOFQxgxDT8xzPfvznY224a/QqsZKCIr WAPSZc78s3oYChiEJc0iphQsp0HNaARAn9hwCdq+P9JJm9/NnXz6n8stAFaxNF38 ySl2bqXCwPUk3WZmvj5w2QmTCB9fOu6ZYn09K0XEJko2FkNeakhVACm9U6nMQxT3 7CaJRba1SMDaaA0s51vjewJUc/ba/0k= -----END CERTIFICATE-----Generated at Thu Jun 11 23:57:26 2026 by rpki-client