$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa File: bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa (raw, json) Hash identifier: wN8Rszp9t9Uf31c7FBSIb4pO+y9ENQEcqoD8Ayybw6s= Subject key identifier: A0:8F:69:A7:B3:DD:4B:D7:C9:9D:EF:2D:45:C7:B4:B6:86:C5:B0:F9 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FAA6A51A05EE11C545F80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 165.225.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:aa:6a:51:a0:5e:e1:1c:54:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=29c71e76-225e-4f0b-af06-2fb7ed9ba1cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b2:57:e1:76:dc:29:ab:52:c6:c2:f3:1c:aa: 5a:87:91:c1:b1:14:c2:69:c6:8b:96:9e:84:1b:13: 1e:56:c0:2c:2d:ff:06:dc:15:cf:5c:37:80:8e:03: 41:cb:8e:64:8c:0b:c2:b3:68:0d:5f:a7:54:04:4d: 9d:60:4b:8d:e5:36:96:88:d5:2f:c3:11:3c:8c:95: fa:54:4c:c9:9a:21:d3:72:a0:68:ac:d1:46:97:e2: 15:80:65:36:07:c8:b9:5e:08:97:ff:87:f7:a4:af: fc:cb:5f:3d:a6:54:ac:80:a7:86:b8:0c:68:dd:33: d2:2a:7c:47:6f:3e:d5:21:f7:80:74:e8:a8:74:8e: 24:4e:e3:27:51:60:25:36:8f:28:62:d8:97:be:69: c5:e0:ef:2f:3b:92:4f:84:a9:51:ad:93:e3:67:fa: 61:ab:23:fa:02:94:87:a7:40:30:2e:27:b0:53:37: e8:ee:a6:f7:31:d5:35:03:85:c1:08:04:87:79:ba: 9e:3c:1c:a8:f9:53:5f:9f:f8:03:d3:39:e0:5d:fb: b4:9b:8d:f9:fd:02:6c:4c:d7:04:10:9f:3c:cd:86: 3e:50:8b:b5:61:59:3a:05:8d:25:79:94:07:a9:b7: ae:a3:f8:cd:4d:4a:2e:32:cc:c3:12:bc:8f:b4:a5: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:69:A7:B3:DD:4B:D7:C9:9D:EF:2D:45:C7:B4:B6:86:C5:B0:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/bb87c9ec-1d9a-3eeb-987c-cfb40413a00d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:9b:f8:c3:97:30:60:1c:47:c8:03:45:ac:b8:74:55:b2:5b: 9e:fb:f5:8b:9c:f3:d7:6e:10:8b:e9:8c:98:9f:f4:c5:7f:2e: f6:3b:94:e3:17:2b:79:ad:29:09:b2:a0:b8:08:1c:bd:aa:12: 6e:15:f4:aa:63:02:76:a4:b4:5d:8b:d8:f4:65:98:c0:33:47: 61:50:fb:0e:fe:dc:ea:78:a2:c6:60:d3:b9:7d:c0:21:2d:ab: 0d:ec:5e:34:08:ed:17:8a:7d:a9:da:81:0f:ff:c3:98:e4:62: 2b:0f:8f:4d:11:77:48:fa:f0:d9:fd:f7:8e:00:29:a9:82:90: a1:d8:aa:2a:7f:01:a8:30:2f:f8:b4:70:f9:34:38:a1:8c:70: 72:68:f0:7e:d6:af:cf:54:44:88:b7:ab:26:67:23:90:76:be: 37:bb:af:b7:3a:0b:12:ef:e8:0d:0d:c1:f3:bd:af:bd:48:6c: d9:bf:7e:a2:d0:1b:98:a4:9b:01:19:87:6b:46:52:75:77:b1: f0:58:18:ed:14:3b:4c:55:0c:a1:b9:bf:01:b2:f6:b6:5c:bf: fa:e2:be:da:b0:8f:b7:a6:9f:9b:50:a3:65:2c:d5:7d:16:b4: d6:1a:36:88:20:4e:b7:88:b7:36:f3:ed:15:1c:f1:ed:3c:a5: 94:a8:ac:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6pqUaBe4RxUX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MjljNzFlNzYtMjI1ZS00ZjBiLWFmMDYtMmZiN2VkOWJhMWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbJX4XbcKatSxsLzHKpah5HBsRTCacaLlp6E GxMeVsAsLf8G3BXPXDeAjgNBy45kjAvCs2gNX6dUBE2dYEuN5TaWiNUvwxE8jJX6 VEzJmiHTcqBorNFGl+IVgGU2B8i5XgiX/4f3pK/8y189plSsgKeGuAxo3TPSKnxH bz7VIfeAdOiodI4kTuMnUWAlNo8oYtiXvmnF4O8vO5JPhKlRrZPjZ/phqyP6ApSH p0AwLiewUzfo7qb3MdU1A4XBCASHebqePByo+VNfn/gD0zngXfu0m435/QJsTNcE EJ88zYY+UIu1YVk6BY0leZQHqbeuo/jNTUouMszDEryPtKV8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCPaaez3UvXyZ3vLUXHtLaGxbD5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYmI4N2M5ZWMtMWQ5YS0z ZWViLTk4N2MtY2ZiNDA0MTNhMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOb+MOXMGAcR8gDRay4dFWyW5779Yuc89duEIvpjJif9MV/LvY7lOMX K3mtKQmyoLgIHL2qEm4V9KpjAnaktF2L2PRlmMAzR2FQ+w7+3Op4osZg07l9wCEt qw3sXjQI7ReKfanagQ//w5jkYisPj00Rd0j68Nn9944AKamCkKHYqip/AagwL/i0 cPk0OKGMcHJo8H7Wr89URIi3qyZnI5B2vje7r7c6CxLv6A0NwfO9r71IbNm/fqLQ G5ikmwEZh2tGUnV3sfBYGO0UO0xVDKG5vwGy9rZcv/rivtqwj7emn5tQo2Us1X0W tNYaNoggTreItzbz7RUc8e08pZSorKg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:26 2026 by rpki-client