$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85f36c48-e895-337a-bc2f-3f8a45bc4066.roa File: 85f36c48-e895-337a-bc2f-3f8a45bc4066.roa (raw, json) Hash identifier: pSEeXwAsRDL0f2rxOL81Pw77QKQYj2n4+axgO2yofco= Subject key identifier: 3D:2A:E1:C6:F0:3E:77:97:18:BF:57:36:85:D3:70:7D:BA:54:27:36 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAF950170E96DFF02C738 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85f36c48-e895-337a-bc2f-3f8a45bc4066.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 165.225.214.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:af:95:01:70:e9:6d:ff:02:c7:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=07a54579-f9d8-4695-9ca5-1f7f00536e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:d7:94:29:c9:86:e6:41:47:29:78:72:68: 1d:7a:be:ec:67:21:a1:7c:22:9b:f8:d5:9e:ca:0a: 82:26:fc:59:93:79:52:35:fd:32:a7:91:f9:7d:b9: a0:88:0f:69:bd:3f:cb:99:7c:2f:04:17:f7:e7:ca: ad:b8:e4:46:f2:61:5a:ff:29:5f:c0:2e:4a:6d:b5: 81:a8:b6:dd:0e:3e:7e:1d:e4:c4:fc:2d:06:48:43: b1:db:d2:ee:ad:bc:f3:6c:ee:e9:c1:76:e2:68:59: fc:16:31:a8:88:3f:7d:8c:f5:24:a4:31:f9:fc:1f: 23:44:ed:4d:d0:81:4a:44:a3:0d:4c:34:cc:92:af: ed:2e:cd:a6:e4:45:ac:67:ac:d8:60:1f:22:22:f4: 96:a9:df:06:64:7a:aa:b3:21:3e:98:99:ad:66:9f: 4c:8a:8f:d4:56:27:a8:28:94:47:46:75:05:67:a0: 8e:5e:c9:80:0d:82:8e:40:ae:e8:1b:91:13:32:5d: a6:43:d6:12:69:b1:47:75:c1:6b:e4:bf:ab:1b:ce: 63:c2:7a:5a:df:67:4d:cf:c3:bc:eb:2c:02:9c:2c: 34:9d:33:ae:9b:cb:33:14:9e:d8:47:2f:06:e5:90: db:c6:7b:4a:6e:5b:5e:94:b7:16:cf:31:50:16:ec: 78:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2A:E1:C6:F0:3E:77:97:18:BF:57:36:85:D3:70:7D:BA:54:27:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/85f36c48-e895-337a-bc2f-3f8a45bc4066.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:17:f7:66:73:17:f6:da:e0:79:08:74:3c:aa:6c:ae:e4:38: 23:80:7a:e7:a6:66:b4:6d:9e:93:50:44:43:8d:92:51:4a:d5: 71:2d:2f:43:fe:8d:60:2b:40:aa:eb:79:07:99:d2:4a:bc:25: b7:1f:83:c4:13:03:53:07:91:bd:cb:b2:4d:94:ed:07:93:be: 87:e4:e5:34:58:fe:fc:3c:48:cd:aa:ac:f4:51:1d:0b:f2:4d: ff:50:c2:c8:04:c5:dd:57:06:a4:3f:36:07:a3:b8:61:ff:a6: 96:f0:ac:87:9c:b1:db:be:ac:b3:88:2b:41:71:a1:8f:3b:d5: f9:c6:dd:b8:3b:ab:12:f3:97:6d:24:de:45:b3:b7:30:7f:f8: d3:70:f3:b5:3a:f9:af:70:12:22:9d:f9:b5:8b:27:14:45:ab: b8:50:97:75:9f:f0:20:ab:11:5e:30:17:d2:0b:90:4c:82:0f: 4e:f7:b3:fd:40:f5:fa:aa:c5:a4:cd:2f:ae:58:94:d1:c7:2c: 67:31:4b:e2:3f:61:28:0b:e9:29:9f:3b:53:56:f4:71:89:b6: da:c6:db:32:da:fa:2b:41:d8:7a:0e:51:2c:6c:7e:3a:df:71: 4d:52:9c:fa:2c:1e:a4:ed:2c:91:de:40:ca:54:45:78:27:f9: be:88:0b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6+VAXDpbf8CxzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MDdhNTQ1NzktZjlkOC00Njk1LTljYTUtMWY3ZjAwNTM2ZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p7XlCnJhuZBRyl4cmgder7sZyGhfCKb+NWe ygqCJvxZk3lSNf0yp5H5fbmgiA9pvT/LmXwvBBf358qtuORG8mFa/ylfwC5KbbWB qLbdDj5+HeTE/C0GSEOx29LurbzzbO7pwXbiaFn8FjGoiD99jPUkpDH5/B8jRO1N 0IFKRKMNTDTMkq/tLs2m5EWsZ6zYYB8iIvSWqd8GZHqqsyE+mJmtZp9Mio/UVieo KJRHRnUFZ6COXsmADYKOQK7oG5ETMl2mQ9YSabFHdcFr5L+rG85jwnpa32dNz8O8 6ywCnCw0nTOum8szFJ7YRy8G5ZDbxntKbltelLcWzzFQFux4XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0q4cbwPneXGL9XNoXTcH26VCc2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvODVmMzZjNDgtZTg5NS0z MzdhLWJjMmYtM2Y4YTQ1YmM0MDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMX92ZzF/ba4HkIdDyqbK7kOCOAeuemZrRtnpNQREONklFK1XEtL0P+ jWArQKrreQeZ0kq8Jbcfg8QTA1MHkb3Lsk2U7QeTvofk5TRY/vw8SM2qrPRRHQvy Tf9QwsgExd1XBqQ/NgejuGH/ppbwrIecsdu+rLOIK0FxoY871fnG3bg7qxLzl20k 3kWztzB/+NNw87U6+a9wEiKd+bWLJxRFq7hQl3Wf8CCrEV4wF9ILkEyCD073s/1A 9fqqxaTNL65YlNHHLGcxS+I/YSgL6SmfO1NW9HGJttrG2zLa+itB2HoOUSxsfjrf cU1SnPosHqTtLJHeQMpURXgn+b6ICwU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:35:56 2026 by rpki-client