$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa File: d97f986e-cea3-3138-8288-1c3a31bda324.roa (raw, json) Hash identifier: q2HW6lTObzJAGHUeF8ojrMwjzosVaoryPrFO03VE9ps= Subject key identifier: 24:9D:6E:9F:DB:26:9C:5E:41:0F:53:24:D5:DF:39:C7:0A:B1:98:B5 Certificate issuer: /CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Certificate serial: 010D0C9F4328584DBBA04A3C64DCF3EE1023BA00 Authority key identifier: 73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 800 IP address blocks: 162.120.72.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 09 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:4a:3c:64:dc:f3:ee:10:23:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d318897-eed6-4fd9-a18c-91026968b3e2 Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=8a393eb6-7118-41a1-b7b1-0fdfbb2e9af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:84:f4:c0:91:87:88:2d:2a:ed:73:ef:eb:78: 00:00:7b:f9:c9:4f:11:48:86:a9:b9:7c:15:c5:91: 00:28:5e:4e:dc:61:39:10:8b:79:ea:c3:3b:14:9b: e8:f5:65:9c:45:2b:a6:51:94:8a:2f:c0:cd:3c:72: 49:28:99:9a:5f:ec:a4:ff:34:07:c6:50:9f:83:50: a7:18:10:d4:a0:28:d2:cc:13:7c:d6:70:8b:77:8d: 5b:65:8a:5f:e3:04:3a:02:78:7c:cd:fa:b6:3d:07: c0:36:cf:1b:bd:af:e5:39:78:79:a6:3c:dd:cb:2d: b1:bf:05:66:b9:d7:ed:55:50:6d:00:9d:d9:0f:cc: c6:f5:04:f0:19:34:2a:94:10:86:c7:40:b2:3d:ba: bc:d2:ac:40:7a:5f:15:7a:e0:a2:1e:f4:af:dd:31: 7e:c8:86:8a:aa:a9:c9:88:8b:2f:d3:5e:ff:be:ac: 91:67:ed:7f:c4:3c:ce:d3:62:86:0d:83:3c:29:75: 4a:49:fd:25:62:bd:fa:85:4e:72:99:84:5a:13:8d: 65:8e:1a:09:15:79:a4:59:53:ad:9b:fe:34:eb:40: be:36:8f:92:a5:84:4e:3e:ab:aa:94:6e:b0:b9:9d: 76:9e:f5:4e:34:9f:75:21:b0:ba:b9:71:8c:94:e0: 03:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:9D:6E:9F:DB:26:9C:5E:41:0F:53:24:D5:DF:39:C7:0A:B1:98:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/d97f986e-cea3-3138-8288-1c3a31bda324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2/3d318897-eed6-4fd9-a18c-91026968b3e2.crl X509v3 Authority Key Identifier: keyid:73:C4:D0:2C:36:91:A3:EA:9F:CC:FE:D5:AA:C0:E0:22:88:C3:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/3d318897-eed6-4fd9-a18c-91026968b3e2.cer sbgp-ipAddrBlock: critical IPv4: 162.120.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:d6:81:0c:b7:48:14:5e:9b:d1:2e:5f:7f:f8:0c:ef:47: 6e:f5:34:d6:11:39:01:79:70:1d:ee:84:d0:ca:db:de:07:55: 03:88:65:dd:48:98:17:0c:cc:b6:db:06:80:ad:a3:79:9d:5d: c8:9a:2d:d9:9a:2b:31:69:fc:e2:ea:f1:c6:35:b1:ed:81:6a: 34:66:59:9c:3a:04:f1:2d:31:df:14:33:b2:7f:70:2e:bd:b1: 25:93:9f:b7:7d:03:14:15:d0:3c:4a:6e:7f:ac:3c:48:16:90: fd:85:25:13:66:f2:0d:7c:dd:85:9d:1f:80:2c:72:45:0e:b6: 03:37:e7:79:4c:70:8e:3a:05:ed:28:99:5c:ef:b6:f8:81:32: 85:29:53:74:a6:50:f0:88:d4:c2:2e:d8:f2:31:90:6e:c3:a7: 2d:94:7f:b9:47:da:c3:eb:dd:7f:ec:a4:fd:f1:c7:a9:9d:68: 15:b4:e2:b1:55:e1:32:df:b9:7f:6b:c3:12:84:4c:23:3a:0e: 3f:9e:11:ed:59:0e:c0:7d:fe:05:01:19:69:a0:63:eb:1a:c5: 70:26:81:64:4d:85:5f:25:73:be:de:95:44:36:ba:76:fb:bb: 37:73:fd:bc:82:56:64:7a:a4:5a:35:9e:32:79:2b:53:29:34: 61:68:bd:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEo8ZNzz7hAjugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QzMTg4OTctZWVkNi00ZmQ5LWExOGMtOTEwMjY5Njhi M2UyMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk OGEzOTNlYjYtNzExOC00MWExLWI3YjEtMGZkZmJiMmU5YWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIT0wJGHiC0q7XPv63gAAHv5yU8RSIapuXwV xZEAKF5O3GE5EIt56sM7FJvo9WWcRSumUZSKL8DNPHJJKJmaX+yk/zQHxlCfg1Cn GBDUoCjSzBN81nCLd41bZYpf4wQ6Anh8zfq2PQfANs8bva/lOXh5pjzdyy2xvwVm udftVVBtAJ3ZD8zG9QTwGTQqlBCGx0CyPbq80qxAel8VeuCiHvSv3TF+yIaKqqnJ iIsv017/vqyRZ+1/xDzO02KGDYM8KXVKSf0lYr36hU5ymYRaE41ljhoJFXmkWVOt m/4060C+No+SpYROPquqlG6wuZ12nvVONJ91IbC6uXGMlOADrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSdbp/bJpxeQQ9TJNXfOccKsZi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zZDMx ODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAyNjk2OGIzZTIvZDk3Zjk4NmUtY2VhMy0z MTM4LTgyODgtMWMzYTMxYmRhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvM2QzMTg4OTctZWVkNi00ZmQ5LWEx OGMtOTEwMjY5NjhiM2UyLzNkMzE4ODk3LWVlZDYtNGZkOS1hMThjLTkxMDI2OTY4 YjNlMi5jcmwwHwYDVR0jBBgwFoAUc8TQLDaRo+qfzP7VqsDgIojDPKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zZDMxODg5Ny1lZWQ2LTRmZDktYTE4Yy05MTAy Njk2OGIzZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBonhIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjD1oEMt0gUXpvRLl9/+AzvR271NNYROQF5cB3uhNDK294HVQOIZd1I mBcMzLbbBoCto3mdXciaLdmaKzFp/OLq8cY1se2BajRmWZw6BPEtMd8UM7J/cC69 sSWTn7d9AxQV0DxKbn+sPEgWkP2FJRNm8g183YWdH4AsckUOtgM353lMcI46Be0o mVzvtviBMoUpU3SmUPCI1MIu2PIxkG7Dpy2Uf7lH2sPr3X/spP3xx6mdaBW04rFV 4TLfuX9rwxKETCM6Dj+eEe1ZDsB9/gUBGWmgY+saxXAmgWRNhV8lc77elUQ2unb7 uzdz/byCVmR6pFo1njJ5K1MpNGFovZI= -----END CERTIFICATE-----Generated at Thu May 7 01:15:51 2026 by rpki-client