$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/ae641f02-0935-3081-899f-ed5d784c07e8.roa File: ae641f02-0935-3081-899f-ed5d784c07e8.roa (raw, json) Hash identifier: 8p4UUvndaCDDJD+sVvahsvutD8plDgm/vo/Xi7l+kAs= Subject key identifier: 7A:9E:D4:3C:7E:FC:B5:6D:79:F9:2D:91:F8:D3:FE:A9:9E:08:72:F7 Certificate issuer: /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Certificate serial: 010D0C9F4328584E6144A2341B36837A68571980 Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/ae641f02-0935-3081-899f-ed5d784c07e8.roa Signing time: Fri 03 Jul 2026 21:00:11 +0000 ROA not before: Fri 03 Jul 2026 21:00:11 +0000 ROA not after: Thu 01 Oct 2026 21:00:11 +0000 asID: 138699 IP address blocks: 101.45.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:61:44:a2:34:1b:36:83:7a:68:57:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345 Validity Not Before: Jul 3 21:00:11 2026 GMT Not After : Oct 1 21:00:11 2026 GMT Subject: CN=88b579f5-b595-48ae-aca6-8621ea75b02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e3:81:b7:fd:36:04:31:38:66:ed:75:f9:6c: 47:e5:ab:9d:3b:48:41:ae:67:99:39:de:ef:01:80: 14:fb:3e:ff:b2:fc:bf:9b:95:38:d4:b7:f7:b8:c1: 04:7f:c5:e9:ae:09:ee:48:54:50:dd:56:f8:62:91: 33:4e:32:4f:76:bd:b9:b7:6f:35:20:f4:3d:2b:71: 8b:f1:e4:5e:5c:69:38:0b:2e:d9:6a:00:9e:61:fe: b6:57:d0:8f:de:3f:37:af:a9:b1:01:0f:df:45:f1: 95:66:8c:af:86:0e:a9:85:9a:cc:89:f7:93:b2:7c: 61:14:b9:65:64:14:cd:99:1c:a3:3d:83:32:67:8c: 93:dc:6d:8a:9e:4c:fa:a7:0a:d5:d5:5d:e3:70:9d: b2:78:d6:cb:58:bc:22:71:0f:10:f7:fc:76:76:6e: 5d:b0:9c:bc:96:aa:54:bc:85:11:64:63:87:c9:4b: 88:a3:ca:b3:9f:3f:a0:e3:36:09:0a:2f:d9:e9:c0: 0b:4f:50:e0:a6:eb:fd:c0:d6:7b:61:01:8b:e1:17: 09:9a:48:a2:78:0d:ce:61:41:30:c6:3e:f6:e2:6f: 31:11:d2:6a:b6:d6:62:22:a3:31:eb:04:c3:1e:11: 55:91:37:4a:eb:4e:f8:15:d8:7c:2c:f7:b2:37:73: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:D4:3C:7E:FC:B5:6D:79:F9:2D:91:F8:D3:FE:A9:9E:08:72:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/ae641f02-0935-3081-899f-ed5d784c07e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl X509v3 Authority Key Identifier: keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer sbgp-ipAddrBlock: critical IPv4: 101.45.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:57:81:4a:4a:41:53:68:ce:52:42:cd:ea:f4:93:a6:9d:ef: 78:8f:c1:6a:34:79:6e:fc:12:1a:0d:d9:bf:30:c5:ee:f3:3a: 26:bb:e3:f8:03:12:80:4b:b6:8a:a3:fb:c7:1b:37:98:8b:26: 89:0e:5c:57:c7:63:34:1b:ca:5e:42:b7:61:d8:48:69:93:93: a2:41:d9:6c:da:53:38:da:d3:81:27:15:1d:cc:e0:71:56:fa: ef:46:61:bf:3b:1c:8e:42:15:ee:cb:27:8c:28:95:d4:83:d8: 89:7e:dd:bb:a2:03:37:63:c0:1c:11:32:9d:b9:95:b9:14:6e: d7:fc:f5:5e:81:53:09:89:86:04:1c:0b:df:54:2d:f6:06:44: e3:68:18:13:a6:bc:b9:82:0d:12:0a:05:f2:14:15:7f:90:12: b7:15:27:3a:05:28:4d:5c:0c:78:32:b9:45:4c:9a:14:83:0c: a1:52:e1:11:93:b6:9a:37:0d:a3:1b:f8:85:0b:c8:3f:4f:d0: 79:2c:e9:e2:6c:ec:9b:13:f3:9f:48:60:49:db:a0:7c:23:8a: ec:4b:c9:56:0e:c1:ee:6f:77:24:56:55:3a:bb:59:8e:33:c2: 0e:0e:76:5f:df:1c:da:1b:c0:61:b7:45:fd:25:88:f3:d4:0d: b5:ae:b1:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5hRKI0GzaDemhXGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ2MzM4YTUtN2M2MC00ZGM1LWIxZDgtMWM1MDRhNGVm MzQ1MB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk ODhiNTc5ZjUtYjU5NS00OGFlLWFjYTYtODYyMWVhNzViMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuOBt/02BDE4Zu11+WxH5audO0hBrmeZOd7v AYAU+z7/svy/m5U41Lf3uMEEf8XprgnuSFRQ3Vb4YpEzTjJPdr25t281IPQ9K3GL 8eReXGk4Cy7ZagCeYf62V9CP3j83r6mxAQ/fRfGVZoyvhg6phZrMifeTsnxhFLll ZBTNmRyjPYMyZ4yT3G2Knkz6pwrV1V3jcJ2yeNbLWLwicQ8Q9/x2dm5dsJy8lqpU vIURZGOHyUuIo8qznz+g4zYJCi/Z6cALT1Dgpuv9wNZ7YQGL4RcJmkiieA3OYUEw xj724m8xEdJqttZiIqMx6wTDHhFVkTdK6074Fdh8LPeyN3MAHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqe1Dx+/LVtefktkfjT/qmeCHL3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYz MzhhNS03YzYwLTRkYzUtYjFkOC0xYzUwNGE0ZWYzNDUvYWU2NDFmMDItMDkzNS0z MDgxLTg5OWYtZWQ1ZDc4NGMwN2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQ2MzM4YTUtN2M2MC00ZGM1LWIx ZDgtMWM1MDRhNGVmMzQ1LzFkNjMzOGE1LTdjNjAtNGRjNS1iMWQ4LTFjNTA0YTRl ZjM0NS5jcmwwHwYDVR0jBBgwFoAU2d97ozrzBBGTcYJwMlTvgkEtX1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDYzMzhhNS03YzYwLTRkYzUtYjFkOC0xYzUw NGE0ZWYzNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZS3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJXgUpKQVNozlJCzer0k6ad73iPwWo0eW78EhoN2b8wxe7zOia74/gD EoBLtoqj+8cbN5iLJokOXFfHYzQbyl5Ct2HYSGmTk6JB2WzaUzja04EnFR3M4HFW +u9GYb87HI5CFe7LJ4woldSD2Il+3buiAzdjwBwRMp25lbkUbtf89V6BUwmJhgQc C99ULfYGRONoGBOmvLmCDRIKBfIUFX+QErcVJzoFKE1cDHgyuUVMmhSDDKFS4RGT tpo3DaMb+IULyD9P0Hks6eJs7JsT859IYEnboHwjiuxLyVYOwe5vdyRWVTq7WY4z wg4Odl/fHNobwGG3Rf0liPPUDbWusZ0= -----END CERTIFICATE-----Generated at Mon Jul 13 05:57:26 2026 by rpki-client