$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/ffcb49e9-8d19-3423-bc7c-310116f8b11d.roa File: ffcb49e9-8d19-3423-bc7c-310116f8b11d.roa (raw, json) Hash identifier: 5lxZHX74htdoUcMMkwdYdIJ6twmXIbcGyllGbr7akyw= Subject key identifier: AF:D9:DD:75:1A:AF:54:FF:43:BE:6C:13:02:F2:95:DF:0D:A8:DC:05 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584E36FF7D660BF7659005542900 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/ffcb49e9-8d19-3423-bc7c-310116f8b11d.roa Signing time: Thu 18 Jun 2026 17:36:57 +0000 ROA not before: Thu 18 Jun 2026 17:36:57 +0000 ROA not after: Wed 16 Sep 2026 17:36:57 +0000 asID: 399359 IP address blocks: 43.245.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:36:ff:7d:66:0b:f7:65:90:05:54:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Jun 18 17:36:57 2026 GMT Not After : Sep 16 17:36:57 2026 GMT Subject: CN=3353822d-8e96-4fc0-9283-70f37a091e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:cc:65:10:bf:76:b2:86:4d:ff:da:65:3c: b6:2f:d3:fb:17:ea:90:bd:57:f4:d8:93:01:6a:37: 73:5f:c2:97:a8:6b:59:5b:1a:07:f9:3e:d8:68:af: 69:f5:83:fc:91:3c:2d:b3:1b:1d:74:21:85:53:68: 92:2d:70:63:c9:91:7b:8e:65:42:a3:4c:ab:f6:bc: 3d:5b:17:60:54:88:a7:79:84:c9:cf:74:64:11:a4: 54:cf:76:1e:44:11:49:e1:d3:52:4c:56:23:c3:bb: c3:2f:0d:54:ee:4b:b0:8d:83:82:31:11:0e:92:ff: 13:fa:d6:c6:20:86:8a:60:24:8c:eb:92:47:b3:67: 0d:4b:ed:81:e4:1e:94:74:b9:42:3e:ed:bd:e7:79: 64:a4:70:18:e3:92:8d:9e:bc:0d:58:46:42:6f:c3: 53:63:99:9f:39:81:a3:10:6b:eb:d5:0f:77:d3:14: fb:c2:d3:41:d3:ce:f6:18:00:7f:a4:4c:24:33:67: a5:4e:f6:80:14:e8:ec:68:03:7d:fc:2a:da:df:a1: 31:fe:2f:2d:91:73:22:03:17:94:44:c8:14:f6:ed: 44:ec:67:46:77:88:d1:87:90:93:d9:f4:b5:8b:09: 4e:87:48:14:1e:bf:7f:75:28:e0:08:a4:9f:cd:de: aa:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D9:DD:75:1A:AF:54:FF:43:BE:6C:13:02:F2:95:DF:0D:A8:DC:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/ffcb49e9-8d19-3423-bc7c-310116f8b11d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 43.245.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f4:1f:1f:7c:81:9a:99:25:77:73:06:df:9d:62:4d:f0:9f: 2e:4b:1d:f0:19:41:6c:92:96:88:4d:70:7d:73:77:fc:ea:04: 06:30:9e:83:c0:a9:6d:a2:5b:46:ed:2a:a0:1c:31:c4:21:ab: 04:c9:10:d6:8c:02:68:15:30:ff:78:a5:ec:77:d3:3f:32:c7: 14:ce:94:ba:71:85:b9:87:a9:0d:8d:d5:1c:56:a0:be:f0:8f: 61:73:be:72:fc:ba:54:59:e2:56:dc:7e:29:3a:be:51:53:e4: ad:ed:a7:c4:ea:5a:37:c8:e2:35:aa:00:02:7a:ea:40:08:15: 13:a6:f6:ae:18:62:4d:1c:79:f9:b6:a5:b0:66:93:27:9c:d6: b0:65:22:b8:94:8d:8e:96:ee:c5:dc:1c:2e:b1:41:73:56:73: fd:67:66:b8:94:02:2f:35:08:45:00:2b:57:39:10:8f:b7:4c: c6:5a:26:f2:8d:e3:fa:f2:7e:2e:61:79:9b:48:9c:d9:48:b3: 2e:c2:70:a8:40:c5:90:cc:8e:83:ae:d5:89:3b:9b:99:5a:bc: 60:c8:2a:97:c2:7b:55:ee:52:fd:72:cc:5b:55:cd:83:82:f3: c1:6b:61:0e:70:7e:68:bc:fd:83:89:ef:73:5d:24:32:b6:97: 82:d8:a5:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE42/31mC/dlkAVUKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDYxODE3MzY1N1oXDTI2MDkxNjE3MzY1N1owLzEtMCsGA1UEAxMk MzM1MzgyMmQtOGU5Ni00ZmMwLTkyODMtNzBmMzdhMDkxZTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWLMZRC/drKGTf/aZTy2L9P7F+qQvVf02JMB ajdzX8KXqGtZWxoH+T7YaK9p9YP8kTwtsxsddCGFU2iSLXBjyZF7jmVCo0yr9rw9 WxdgVIineYTJz3RkEaRUz3YeRBFJ4dNSTFYjw7vDLw1U7kuwjYOCMREOkv8T+tbG IIaKYCSM65JHs2cNS+2B5B6UdLlCPu2953lkpHAY45KNnrwNWEZCb8NTY5mfOYGj EGvr1Q930xT7wtNB0872GAB/pEwkM2elTvaAFOjsaAN9/Cra36Ex/i8tkXMiAxeU RMgU9u1E7GdGd4jRh5CT2fS1iwlOh0gUHr9/dSjgCKSfzd6qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/Z3XUar1T/Q75sEwLyld8NqNwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvZmZjYjQ5ZTktOGQxOS0z NDIzLWJjN2MtMzEwMTE2ZjhiMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/XuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH0Hx98gZqZJXdzBt+dYk3wny5LHfAZQWySlohNcH1zd/zqBAYwnoPA qW2iW0btKqAcMcQhqwTJENaMAmgVMP94pex30z8yxxTOlLpxhbmHqQ2N1RxWoL7w j2FzvnL8ulRZ4lbcfik6vlFT5K3tp8TqWjfI4jWqAAJ66kAIFROm9q4YYk0cefm2 pbBmkyec1rBlIriUjY6W7sXcHC6xQXNWc/1nZriUAi81CEUAK1c5EI+3TMZaJvKN 4/ryfi5heZtInNlIsy7CcKhAxZDMjoOu1Yk7m5lavGDIKpfCe1XuUv1yzFtVzYOC 88FrYQ5wfmi8/YOJ73NdJDK2l4LYpVY= -----END CERTIFICATE-----Generated at Fri Jun 26 19:24:25 2026 by rpki-client