$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa File: e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa (raw, json) Hash identifier: YE+PN6M7xS84xHbm2orCHaJ/DaNI+Zq1f8V3c8hBnS8= Subject key identifier: 1D:15:43:0C:60:CF:06:63:49:F4:3F:A6:93:49:7B:27:82:3C:13:FD Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D09126AD166E87F2618C6CB80 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 3949 IP address blocks: 131.103.20.200/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:6a:d1:66:e8:7f:26:18:c6:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=ea54ea15-cd91-4e35-ad82-5565436919a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:1b:39:aa:34:cf:ca:39:38:95:a3:54:64: 46:61:64:d9:21:ca:ac:dd:c0:93:a8:f3:69:b4:4d: 78:10:7c:47:e1:3a:8e:f3:bd:5a:e3:8e:17:c0:89: 5f:35:ba:59:3c:fa:55:8b:5a:ef:44:52:fb:25:a4: b8:56:86:d6:09:9c:83:3c:1a:4a:aa:40:e7:fa:62: 92:0a:3f:af:50:44:00:71:60:25:0b:1c:17:2e:8b: 17:35:39:b3:92:ba:65:3f:30:09:4e:3b:28:23:9d: bd:bb:2b:6f:3f:9b:1a:ef:0e:34:2a:5b:2e:95:f9: 56:aa:81:dd:9c:55:0f:75:f9:d1:66:8c:64:f6:c3: 7f:05:ea:39:0d:59:4b:42:75:2c:6a:11:51:10:7b: 89:8a:34:0a:92:63:c7:5d:21:62:66:27:83:9a:b1: 34:7e:19:78:0b:fa:ca:90:23:da:c0:3c:24:a4:0f: dc:7b:4e:c5:45:c6:48:5f:5e:50:f8:66:89:de:35: 9c:35:58:52:a8:46:16:9e:9b:69:de:e5:96:13:de: 04:e7:22:a3:eb:38:bd:73:f3:d2:db:a5:ec:37:0b: 6d:5f:6e:41:38:84:e1:3c:57:33:be:04:da:20:21: cf:1f:c8:6c:c4:43:3a:b7:58:c2:f0:91:e2:dd:07: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:15:43:0C:60:CF:06:63:49:F4:3F:A6:93:49:7B:27:82:3C:13:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e4b9ec40-0d8a-37e2-9a01-d236aa7fec36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 131.103.20.200/29 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:6b:01:48:29:c8:51:46:ab:ce:5a:f9:01:ec:00:85:33:a5: a6:98:d7:8b:f9:ac:5f:9a:45:13:76:bb:18:98:c1:c3:62:7a: a4:5a:ad:26:69:98:ab:2a:f3:75:98:5e:5c:b7:97:3a:ae:d7: 55:48:e8:6a:9f:d7:fc:f8:89:d2:61:5f:4c:34:5c:35:6c:09: 08:df:97:75:41:b7:af:ce:37:d2:0e:58:6f:7f:fc:67:43:0a: d2:b9:78:09:96:19:7a:20:d1:5a:89:32:d2:28:fa:fb:8a:68: bc:7c:a2:54:39:b7:e4:ad:77:d3:64:53:8c:b2:d1:7c:f9:62: e0:cc:1f:05:7b:63:54:c3:ab:a3:cc:27:e5:9a:8d:d5:85:5e: 11:06:30:13:dd:2b:b9:2b:d3:58:ed:16:e4:42:90:60:c7:dc: eb:b3:6f:3e:50:b3:6b:3d:40:cd:1b:b8:9a:5d:79:40:82:3b: 4f:50:1a:20:9d:d3:59:6d:3e:21:39:cd:84:4d:d1:d3:4b:b7: ee:5c:8e:2c:b7:cb:41:7d:bb:b0:c2:12:70:7c:9f:a8:3a:18: 04:41:82:37:2a:e2:63:f8:26:9c:66:f6:de:77:56:8d:6b:56: 58:ce:ec:45:b0:53:8d:cf:34:1b:81:c8:5e:fa:b0:17:0b:a4: 5e:d5:3c:66 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0JEmrRZuh/JhjGy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ZWE1NGVhMTUtY2Q5MS00ZTM1LWFkODItNTU2NTQzNjkxOWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3MbOao0z8o5OJWjVGRGYWTZIcqs3cCTqPNp tE14EHxH4TqO871a444XwIlfNbpZPPpVi1rvRFL7JaS4VobWCZyDPBpKqkDn+mKS Cj+vUEQAcWAlCxwXLosXNTmzkrplPzAJTjsoI529uytvP5sa7w40KlsulflWqoHd nFUPdfnRZoxk9sN/Beo5DVlLQnUsahFREHuJijQKkmPHXSFiZieDmrE0fhl4C/rK kCPawDwkpA/ce07FRcZIX15Q+GaJ3jWcNVhSqEYWnptp3uWWE94E5yKj6zi9c/PS 26XsNwttX25BOIThPFczvgTaICHPH8hsxEM6t1jC8JHi3QdKZQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFB0VQwxgzwZjSfQ/ppNJeyeCPBP9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTRiOWVjNDAtMGQ4YS0z N2UyLTlhMDEtZDIzNmFhN2ZlYzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUDg2cUyDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCtawFIKchRRqvOWvkB7ACFM6WmmNeL+axfmkUTdrsYmMHDYnqkWq0m aZirKvN1mF5ct5c6rtdVSOhqn9f8+InSYV9MNFw1bAkI35d1QbevzjfSDlhvf/xn QwrSuXgJlhl6INFaiTLSKPr7imi8fKJUObfkrXfTZFOMstF8+WLgzB8Fe2NUw6uj zCflmo3VhV4RBjAT3Su5K9NY7RbkQpBgx9zrs28+ULNrPUDNG7iaXXlAgjtPUBog ndNZbT4hOc2ETdHTS7fuXI4st8tBfbuwwhJwfJ+oOhgEQYI3KuJj+CacZvbed1aN a1ZYzuxFsFONzzQbgche+rAXC6Re1Txm -----END CERTIFICATE-----Generated at Fri Mar 20 14:57:33 2026 by rpki-client