$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/38df6afa-08e9-36d8-96d5-124ac867cb53.roa File: 38df6afa-08e9-36d8-96d5-124ac867cb53.roa (raw, json) Hash identifier: 7QB7L13LPXCtqZ3Y744aVGBsVVLh3pE4AzlnsMasgSg= Subject key identifier: AF:9E:97:F7:18:2F:42:1F:8D:6E:B8:A7:67:02:2D:CF:2E:2E:82:1F Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584CA5F710B3BA393A6C1DB6F700 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/38df6afa-08e9-36d8-96d5-124ac867cb53.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 396982 IP address blocks: 165.85.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:10:b3:ba:39:3a:6c:1d:b6:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=e4afba20-5045-45d0-bb80-a357d3b4da4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:a2:4c:fd:4f:9e:05:68:f5:7b:9c:d2:41: ef:df:aa:70:e8:90:93:5b:c3:d8:40:5e:29:6c:bf: d9:54:68:3f:93:ab:68:23:ba:e1:d1:a4:84:14:ba: d2:19:03:b0:be:8f:ef:2a:0c:59:93:eb:e1:64:b4: b4:e1:2f:30:c7:d9:fc:f3:39:b0:ea:c1:33:79:f0: f1:26:27:20:34:84:90:fe:18:2c:c4:c8:e4:82:99: 13:39:60:0f:eb:55:f2:0c:87:d1:b0:aa:4d:4a:22: 58:60:e5:e1:9d:d2:8a:7e:55:59:15:6f:bd:02:6f: ac:57:78:c6:9d:2f:90:6d:2a:44:f2:48:68:60:2b: f3:2c:51:d0:d2:4c:cd:c0:8e:36:a8:4e:8f:68:16: 66:1e:f4:3f:d7:16:f3:04:b5:f4:c5:52:cf:99:04: 52:75:bb:84:09:e9:6f:b5:ea:35:d0:07:d6:60:da: 0c:08:8e:60:0b:68:17:9c:15:47:84:13:70:3a:51: 38:b8:07:ef:0c:de:b9:8b:40:dd:43:96:a4:d6:16: 25:cb:e7:e7:ab:1a:7f:c9:e9:08:19:67:e4:a6:95: a4:19:51:fd:0a:78:08:d0:34:90:bc:48:26:1d:b8: 47:e3:d2:6b:e6:21:55:45:6f:7b:c1:e2:ca:c1:7b: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9E:97:F7:18:2F:42:1F:8D:6E:B8:A7:67:02:2D:CF:2E:2E:82:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/38df6afa-08e9-36d8-96d5-124ac867cb53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 165.85.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:20:84:4e:36:1a:3d:0a:9f:e4:4c:0f:95:02:61:28:56:c4: 28:c9:80:e2:12:67:41:62:e3:c0:c2:57:8b:2c:6c:77:e0:31: 05:02:84:76:d6:3f:79:5a:81:81:aa:46:4c:fe:90:e6:94:e1: 67:da:43:9d:f6:28:e2:44:1d:c5:44:0b:3a:ac:8c:1a:6f:25: bf:33:04:99:99:80:96:44:0b:89:23:34:41:f1:2e:67:e3:fa: b3:65:b3:1a:b4:5f:ea:53:b0:06:98:a3:6a:ea:c1:26:d0:d7: 3d:0f:4d:7e:5a:29:70:fe:ef:58:19:dc:a5:f0:73:8a:0b:b9: 62:95:e3:6c:52:20:bf:9a:46:3f:e5:69:fd:03:44:4b:9a:e9: d3:03:b1:82:bf:f3:02:45:fe:d2:06:25:5a:68:04:26:30:84: b3:fe:b5:55:6c:15:7d:7c:7c:4a:dd:27:2c:5b:eb:b1:74:c6: 7b:49:f7:0a:96:5b:e2:8d:ef:b5:95:05:b0:ba:b7:ce:2a:0b: d1:76:51:16:32:31:6e:46:1d:4b:6c:1a:2d:8d:83:48:71:c5: d3:26:a6:65:43:f1:07:38:c5:4a:ac:7e:99:a6:f3:8e:52:63: 63:71:b0:a6:ab:05:a6:73:94:19:6f:d1:7c:99:3a:05:1c:ee: 4f:7a:be:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9xCzujk6bB229wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZTRhZmJhMjAtNTA0NS00NWQwLWJiODAtYTM1N2QzYjRkYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt56iTP1PngVo9Xuc0kHv36pw6JCTW8PYQF4p bL/ZVGg/k6toI7rh0aSEFLrSGQOwvo/vKgxZk+vhZLS04S8wx9n88zmw6sEzefDx JicgNISQ/hgsxMjkgpkTOWAP61XyDIfRsKpNSiJYYOXhndKKflVZFW+9Am+sV3jG nS+QbSpE8khoYCvzLFHQ0kzNwI42qE6PaBZmHvQ/1xbzBLX0xVLPmQRSdbuECelv teo10AfWYNoMCI5gC2gXnBVHhBNwOlE4uAfvDN65i0DdQ5ak1hYly+fnqxp/yekI GWfkppWkGVH9CngI0DSQvEgmHbhH49Jr5iFVRW97weLKwXubXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK+el/cYL0IfjW64p2cCLc8uLoIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMzhkZjZhZmEtMDhlOS0z NmQ4LTk2ZDUtMTI0YWM4NjdjYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpVX+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMghE42Gj0Kn+RMD5UCYShWxCjJgOISZ0Fi48DCV4ssbHfgMQUChHbW P3lagYGqRkz+kOaU4WfaQ532KOJEHcVECzqsjBpvJb8zBJmZgJZEC4kjNEHxLmfj +rNlsxq0X+pTsAaYo2rqwSbQ1z0PTX5aKXD+71gZ3KXwc4oLuWKV42xSIL+aRj/l af0DREua6dMDsYK/8wJF/tIGJVpoBCYwhLP+tVVsFX18fErdJyxb67F0xntJ9wqW W+KN77WVBbC6t84qC9F2URYyMW5GHUtsGi2Ng0hxxdMmpmVD8Qc4xUqsfpmm845S Y2NxsKarBaZzlBlv0XyZOgUc7k96vss= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:17 2026 by rpki-client