$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa File: a213c9c8-3185-36d3-853f-006a33183b34.roa (raw, json) Hash identifier: nkCAMV7efWomgf6JI1uYvTkVI0mx35H5dZ8D5BswdqI= Subject key identifier: 5F:40:82:B7:4E:D2:B3:0C:E1:17:F0:2F:14:08:E5:A1:7A:55:07:52 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EE4233DEB8CDA7B8670B015C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa Signing time: Wed 19 Aug 2026 18:03:49 +0000 ROA not before: Wed 19 Aug 2026 18:03:49 +0000 ROA not after: Mon 10 Apr 2028 04:00:00 +0000 asID: 393536 IP address blocks: 131.103.20.192/29 maxlen: 29 131.103.20.224/27 maxlen: 27 131.103.21.24/29 maxlen: 29 131.103.21.64/27 maxlen: 27 131.103.22.0/24 maxlen: 24 131.103.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:23:3d:eb:8c:da:7b:86:70:b0:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Aug 19 18:03:49 2026 GMT Not After : Apr 10 04:00:00 2028 GMT Subject: CN=247d5cb1-d588-47ca-a50c-80f26b136b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:22:03:70:4b:6c:78:ef:f3:ca:86:bd:fb:54: 7b:c7:1b:f4:69:14:19:cb:f8:43:c2:80:99:05:26: 80:d5:d9:31:2e:93:3a:fc:94:23:b9:c1:78:5e:f1: d1:5d:1d:72:bd:1c:21:49:6f:90:34:96:c3:83:51: 93:92:85:83:8b:6f:c3:cc:10:ff:25:38:35:48:ec: 31:78:89:72:dd:3f:15:a7:ad:46:e4:79:34:e1:20: 87:4a:fb:0e:61:8b:c5:20:93:62:96:98:82:e7:51: 62:a2:4d:8f:15:d1:dd:84:10:89:51:6f:34:91:97: 38:25:67:2d:37:03:38:46:50:97:4b:fe:6d:78:71: 91:76:d9:ad:44:5b:56:ca:3a:a4:1a:23:f7:2f:41: ae:98:61:0d:b7:30:23:bc:9d:b0:cb:e4:25:e4:f5: ee:13:ca:0d:83:80:ce:ea:cc:c9:31:a3:34:43:4e: 50:53:57:1d:60:fe:d9:14:c4:0a:90:fa:09:60:40: 04:f2:ed:cb:19:e0:5f:5b:bd:57:ee:22:ab:52:96: bf:cd:4a:e2:14:83:3f:16:3c:b1:ae:de:51:b3:ba: 51:2a:eb:cd:10:ed:7a:8f:19:d5:35:0c:11:8a:b5: 85:fc:b4:b6:36:7f:f6:fa:38:a7:88:25:7d:cd:91: e6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:40:82:B7:4E:D2:B3:0C:E1:17:F0:2F:14:08:E5:A1:7A:55:07:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a213c9c8-3185-36d3-853f-006a33183b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.20.192/29 131.103.20.224/27 131.103.21.24/29 131.103.21.64/27 131.103.22.0/24 131.103.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:70:86:9b:5a:09:d0:29:4d:6a:20:85:e6:35:08:78:c9:2a: 09:f9:21:37:7b:7c:80:e5:ee:c7:e2:dd:6f:e7:ee:50:fb:fb: 4e:83:21:8c:5b:8d:7f:ef:b1:36:c8:c7:45:7b:47:88:db:95: 91:dd:ea:5e:3d:3a:3f:8c:04:34:df:2e:78:4e:93:1c:4b:b1: 1d:e5:39:dd:52:5e:ef:55:45:0a:00:64:79:f7:63:73:69:6a: ef:23:4a:79:2c:55:ef:0a:c7:29:5a:4c:c9:63:66:b6:02:04: d2:4c:1a:4e:99:aa:d2:22:f2:8e:94:c7:e1:a1:77:1e:d8:19: a4:c9:d7:0c:d0:b5:d2:25:4e:b3:04:22:42:d6:f5:b2:92:92: 7a:bb:48:cf:11:f4:61:47:39:08:01:2c:94:4c:5c:69:77:43: 70:35:c1:3a:69:14:30:d0:a5:8a:6c:32:26:45:5b:fa:91:3e: 20:af:62:a8:c7:0a:21:0d:32:b4:5e:3a:6c:9e:ef:50:ed:46: 50:ad:b7:00:1c:21:05:9c:49:66:fc:53:94:d6:91:70:08:8e: 6c:d1:36:b5:be:89:ea:ad:4a:25:8f:14:da:64:10:ff:39:a3: 04:cb:1e:b2:a4:cf:e1:81:0f:65:b6:9b:44:66:b1:53:42:9b: 9d:5c:d4:30 -----BEGIN CERTIFICATE----- MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE7kIz3rjNp7hnCwFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDgxOTE4MDM0OVoXDTI4MDQxMDA0MDAwMFowLzEtMCsGA1UEAxMk MjQ3ZDVjYjEtZDU4OC00N2NhLWE1MGMtODBmMjZiMTM2Yjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyIDcEtseO/zyoa9+1R7xxv0aRQZy/hDwoCZ BSaA1dkxLpM6/JQjucF4XvHRXR1yvRwhSW+QNJbDg1GTkoWDi2/DzBD/JTg1SOwx eIly3T8Vp61G5Hk04SCHSvsOYYvFIJNilpiC51Fiok2PFdHdhBCJUW80kZc4JWct NwM4RlCXS/5teHGRdtmtRFtWyjqkGiP3L0GumGENtzAjvJ2wy+Ql5PXuE8oNg4DO 6szJMaM0Q05QU1cdYP7ZFMQKkPoJYEAE8u3LGeBfW71X7iKrUpa/zUriFIM/Fjyx rt5Rs7pRKuvNEO16jxnVNQwRirWF/LS2Nn/2+jiniCV9zZHmSQIDAQABo4IDdzCC A3MwHQYDVR0OBBYEFF9AgrdO0rMM4RfwLxQI5aF6VQdSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTIxM2M5YzgtMzE4NS0z NmQzLTg1M2YtMDA2YTMzMTgzYjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwUDg2cUwAMF BYNnFOADBQODZxUYAwUFg2cVQAMEAINnFgMEAINnGDBUBgNVHSABAf8ESjBIMEYG CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAscIabWgnQ KU1qIIXmNQh4ySoJ+SE3e3yA5e7H4t1v5+5Q+/tOgyGMW41/77E2yMdFe0eI25WR 3epePTo/jAQ03y54TpMcS7Ed5TndUl7vVUUKAGR592NzaWrvI0p5LFXvCscpWkzJ Y2a2AgTSTBpOmarSIvKOlMfhoXce2BmkydcM0LXSJU6zBCJC1vWykpJ6u0jPEfRh RzkIASyUTFxpd0NwNcE6aRQw0KWKbDImRVv6kT4gr2KoxwohDTK0Xjpsnu9Q7UZQ rbcAHCEFnElm/FOU1pFwCI5s0Ta1vonqrUoljxTaZBD/OaMEyx6ypM/hgQ9ltptE ZrFTQpudXNQw -----END CERTIFICATE-----Generated at Thu Sep 17 14:58:58 2026 by rpki-client