$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa File: de97a398-0fe3-3499-a1ee-909d1a9839c0.roa (raw, json) Hash identifier: MvEezo3b36UyNq37FzOa90eAwCwyN6juTKsurF+unSw= Subject key identifier: 3A:42:BE:2E:75:21:18:D6:92:06:DF:19:AE:FF:CB:97:3E:FC:14:47 Certificate issuer: /CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Certificate serial: 010D0C9F4328584D9E5012DBE83ABA3F91A67DC0 Authority key identifier: 44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 16580 IP address blocks: 131.232.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 04 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:12:db:e8:3a:ba:3f:91:a6:7d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7e64b66-84df-4665-a4fb-eb3b8add365e Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=97eb9452-22ef-4d14-b26a-2f79571790f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9a:7c:a7:66:eb:46:3f:35:5f:bb:77:63:b3: 65:6f:41:6c:34:62:64:68:30:b7:f3:b7:2f:e6:11: f1:53:1b:39:14:af:90:09:a6:86:89:f2:d2:05:7f: 34:e4:f5:ce:12:e6:b2:d1:64:13:00:68:d3:f3:9c: 3a:39:97:1a:88:8b:72:6c:de:24:25:79:65:d9:e1: 7d:12:0f:37:46:a8:f2:c8:a9:27:f9:96:48:96:9d: fd:e7:69:7e:be:1d:d4:46:82:c9:b0:af:b6:12:11: 2c:ca:1b:57:6c:c7:85:2e:41:6d:bc:8b:7b:eb:c4: 0b:97:e8:94:b4:58:41:3a:e9:eb:69:35:77:66:bc: 69:49:1c:09:c1:ee:71:b9:51:92:05:f4:7e:e5:3c: ea:d2:5a:4f:9a:9a:73:e9:eb:3d:68:51:d8:41:0d: d5:dc:67:d5:c2:8c:3f:af:e3:12:83:0c:f0:15:3c: 43:c5:61:06:af:8c:8d:08:f0:a5:55:f1:92:b8:09: 67:9b:35:37:96:de:5f:f6:72:a8:46:e4:ad:79:10: 52:ad:ef:dc:09:f9:85:36:83:85:49:cd:5f:b9:0e: de:30:b7:bc:f6:72:4b:da:7e:49:4b:3b:d0:40:88: ad:97:0a:ed:45:63:b4:63:53:b9:74:38:8b:e6:b2: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:42:BE:2E:75:21:18:D6:92:06:DF:19:AE:FF:CB:97:3E:FC:14:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/de97a398-0fe3-3499-a1ee-909d1a9839c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e/a7e64b66-84df-4665-a4fb-eb3b8add365e.crl X509v3 Authority Key Identifier: keyid:44:3F:7C:2A:02:E3:81:66:DD:29:43:80:CF:73:20:89:BF:C3:18:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7e64b66-84df-4665-a4fb-eb3b8add365e.cer sbgp-ipAddrBlock: critical IPv4: 131.232.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:3b:d8:8c:79:e6:13:e6:56:0b:d6:93:2b:03:e3:96:8e:4b: b5:75:ac:61:e3:be:61:ca:c5:5e:2e:24:2f:1e:b9:0e:f6:1c: 77:e9:b5:a4:50:39:6b:f2:27:4b:94:7b:1f:48:bf:6f:6c:4d: 2e:fc:97:55:4c:13:67:7c:e7:ab:a2:d2:6d:7b:7e:71:a6:9d: 04:80:ab:02:fb:bb:f7:22:18:9b:46:0b:5f:a8:f2:ad:10:d3: 48:a2:31:7f:ff:3a:0e:00:b2:43:c2:33:79:ee:f5:30:d6:a2: 39:e1:74:3d:51:3f:5a:b4:bc:75:b6:04:23:fe:10:86:a2:a7: e3:e4:2f:2f:f8:fe:12:87:09:fb:31:73:43:41:56:1b:3a:2e: 33:2c:cf:c1:2a:e6:45:89:3f:a6:1a:6a:08:68:8a:c2:4c:10: dd:f3:ad:ea:1c:e0:94:4a:18:0e:c2:26:e5:04:95:f4:14:6c: b5:ad:63:23:29:a1:ea:8f:ca:08:b5:44:fa:d7:eb:95:4f:9f: 4e:d4:32:20:f6:f1:0c:38:e0:57:55:34:42:4d:6e:07:7e:7a: 20:a6:87:90:de:bf:cc:f5:a4:c7:9a:76:54:97:bf:e7:48:59: 2e:ae:0b:2c:47:81:79:55:97:f4:77:3d:f6:9b:e9:b7:c4:52: 8b:9b:27:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUBLb6Dq6P5GmfcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdlNjRiNjYtODRkZi00NjY1LWE0ZmItZWIzYjhhZGQz NjVlMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk OTdlYjk0NTItMjJlZi00ZDE0LWIyNmEtMmY3OTU3MTc5MGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35p8p2brRj81X7t3Y7Nlb0FsNGJkaDC387cv 5hHxUxs5FK+QCaaGifLSBX805PXOEuay0WQTAGjT85w6OZcaiItybN4kJXll2eF9 Eg83RqjyyKkn+ZZIlp3952l+vh3URoLJsK+2EhEsyhtXbMeFLkFtvIt768QLl+iU tFhBOunraTV3ZrxpSRwJwe5xuVGSBfR+5Tzq0lpPmppz6es9aFHYQQ3V3GfVwow/ r+MSgwzwFTxDxWEGr4yNCPClVfGSuAlnmzU3lt5f9nKoRuSteRBSre/cCfmFNoOF Sc1fuQ7eMLe89nJL2n5JSzvQQIitlwrtRWO0Y1O5dDiL5rKMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpCvi51IRjWkgbfGa7/y5c+/BRHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2 NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNiOGFkZDM2NWUvZGU5N2EzOTgtMGZlMy0z NDk5LWExZWUtOTA5ZDFhOTgzOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTdlNjRiNjYtODRkZi00NjY1LWE0 ZmItZWIzYjhhZGQzNjVlL2E3ZTY0YjY2LTg0ZGYtNDY2NS1hNGZiLWViM2I4YWRk MzY1ZS5jcmwwHwYDVR0jBBgwFoAURD98KgLjgWbdKUOAz3Mgib/DGEAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hN2U2NGI2Ni04NGRmLTQ2NjUtYTRmYi1lYjNi OGFkZDM2NWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg+gCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIE72Ix55hPmVgvWkysD45aOS7V1rGHjvmHKxV4uJC8euQ72HHfptaRQ OWvyJ0uUex9Iv29sTS78l1VME2d856ui0m17fnGmnQSAqwL7u/ciGJtGC1+o8q0Q 00iiMX//Og4AskPCM3nu9TDWojnhdD1RP1q0vHW2BCP+EIaip+PkLy/4/hKHCfsx c0NBVhs6LjMsz8Eq5kWJP6YaaghoisJMEN3zreoc4JRKGA7CJuUElfQUbLWtYyMp oeqPygi1RPrX65VPn07UMiD28Qw44FdVNEJNbgd+eiCmh5Dev8z1pMeadlSXv+dI WS6uCyxHgXlVl/R3Pfab6bfEUoubJ60= -----END CERTIFICATE-----Generated at Sun May 3 17:53:35 2026 by rpki-client