$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/008a1a08-a05d-3789-866e-c89e5cdfba5f.roa File: 008a1a08-a05d-3789-866e-c89e5cdfba5f.roa (raw, json) Hash identifier: 59hl64bPbW1oN8Ft0lco+p7q7xM9P+7M53ZSA0SCJ8g= Subject key identifier: EA:E8:59:DA:CE:FF:B3:B6:20:00:EB:99:1F:B0:72:07:DA:2E:AD:73 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F9E6F1C3A4A45958F0000 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/008a1a08-a05d-3789-866e-c89e5cdfba5f.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 165.225.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:9e:6f:1c:3a:4a:45:95:8f:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=247bc272-9c38-4604-9f01-5d42607db740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:18:1e:60:19:2d:aa:96:d3:99:cb:ff:7f:0c: 4a:d4:20:af:fd:2d:73:54:c9:b9:5f:3d:0c:cb:00: 06:19:cc:e2:d9:38:b9:3c:0c:1a:5d:15:a3:59:fb: bd:b8:e0:97:67:48:70:d1:e2:3f:d5:d0:15:5f:87: bb:39:fb:f9:35:04:7d:62:db:3f:90:fd:52:d6:04: 72:41:71:d6:c3:43:b6:4a:15:42:1b:38:63:16:90: 32:4f:e9:95:b7:f7:42:c0:a7:13:bc:e4:b0:6c:c4: 70:b0:c4:ca:6b:8a:f1:60:64:16:00:90:ca:86:d9: f0:81:96:51:f1:af:86:6e:00:65:52:af:21:99:8f: ac:44:7c:ac:ce:27:97:cf:4c:23:c3:60:e2:74:f1: 66:0c:ef:69:50:20:cf:d2:3e:f3:e8:1f:74:6f:bc: 4a:ee:9a:2b:fb:41:66:4b:12:93:99:48:63:62:3d: bd:57:f4:63:70:79:f2:e5:ff:47:30:1f:3b:d1:1c: c5:5d:cb:e6:d9:fb:5d:03:ff:81:6d:61:00:8c:5f: 6d:3f:c4:49:f4:71:05:5b:9c:1a:ae:eb:7b:c8:41: be:1b:cb:f0:e4:e5:fd:26:40:ff:bf:5a:b4:f7:81: 18:f6:e5:24:e4:b7:cc:95:9a:fe:10:16:7a:36:fd: 59:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:59:DA:CE:FF:B3:B6:20:00:EB:99:1F:B0:72:07:DA:2E:AD:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/008a1a08-a05d-3789-866e-c89e5cdfba5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:48:6c:1b:74:10:35:ba:e9:61:bd:d1:5f:63:5e:82:a8:94: de:4d:ec:f4:88:d3:11:70:ed:01:f9:19:1c:e3:e5:e6:3e:94: d0:ca:23:5d:f9:dd:db:e0:1f:b8:8b:4a:a5:33:25:cd:ec:32: 9d:97:7c:8f:3c:d2:fa:29:0c:19:03:28:d3:d8:73:56:df:8f: 54:72:d3:28:16:fa:3e:2a:0a:61:d6:8d:e7:89:6a:eb:a9:d6: 8f:d8:48:35:32:3a:1b:26:e6:e6:b9:3b:c3:5b:f5:9b:91:45: 3b:43:bb:d0:d7:2b:21:fa:3b:4c:84:00:58:d0:81:04:a9:4b: 4d:81:38:c6:21:40:bf:61:94:55:b8:74:c4:2b:3f:1a:7d:0d: 75:97:85:bd:ec:83:d6:10:3b:98:ea:ac:b0:fe:63:f6:f1:3f: ed:40:02:17:b3:7b:e7:59:23:2a:5a:d2:e4:2b:57:7e:f2:c9: 55:3d:b4:fe:4c:db:84:18:2d:b4:1e:ea:58:73:bc:46:d8:ee: a2:b8:d1:fe:6e:c5:3f:69:90:d8:1f:fa:75:8e:bc:39:9e:9c: 3f:45:7f:5a:04:ff:1f:0f:58:81:eb:75:80:64:39:f8:ad:e1: ed:e5:fb:94:0f:ff:38:ed:d6:18:e2:a4:07:df:1b:34:c3:13: 3f:53:dc:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT55vHDpKRZWPAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MjQ3YmMyNzItOWMzOC00NjA0LTlmMDEtNWQ0MjYwN2RiNzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhgeYBktqpbTmcv/fwxK1CCv/S1zVMm5Xz0M ywAGGczi2Ti5PAwaXRWjWfu9uOCXZ0hw0eI/1dAVX4e7Ofv5NQR9Yts/kP1S1gRy QXHWw0O2ShVCGzhjFpAyT+mVt/dCwKcTvOSwbMRwsMTKa4rxYGQWAJDKhtnwgZZR 8a+GbgBlUq8hmY+sRHyszieXz0wjw2DidPFmDO9pUCDP0j7z6B90b7xK7por+0Fm SxKTmUhjYj29V/RjcHny5f9HMB870RzFXcvm2ftdA/+BbWEAjF9tP8RJ9HEFW5wa rut7yEG+G8vw5OX9JkD/v1q094EY9uUk5LfMlZr+EBZ6Nv1ZyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOroWdrO/7O2IADrmR+wcgfaLq1zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDA4YTFhMDgtYTA1ZC0z Nzg5LTg2NmUtYzg5ZTVjZGZiYTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFIbBt0EDW66WG90V9jXoKolN5N7PSI0xFw7QH5GRzj5eY+lNDKI135 3dvgH7iLSqUzJc3sMp2XfI880vopDBkDKNPYc1bfj1Ry0ygW+j4qCmHWjeeJauup 1o/YSDUyOhsm5ua5O8Nb9ZuRRTtDu9DXKyH6O0yEAFjQgQSpS02BOMYhQL9hlFW4 dMQrPxp9DXWXhb3sg9YQO5jqrLD+Y/bxP+1AAheze+dZIypa0uQrV37yyVU9tP5M 24QYLbQe6lhzvEbY7qK40f5uxT9pkNgf+nWOvDmenD9Ff1oE/x8PWIHrdYBkOfit 4e3l+5QP/zjt1hjipAffGzTDEz9T3EQ= -----END CERTIFICATE-----Generated at Fri Apr 17 14:16:57 2026 by rpki-client