$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa File: cbf2173e-57d4-3b7c-b728-043cab3e2967.roa (raw, json) Hash identifier: QWOsOW16M4ulrIP9TMo2UrBjTTZT4dUUB3IaF8helfo= Subject key identifier: D4:6A:35:EA:BB:D4:90:28:C3:AD:85:B7:7D:E9:B8:86:47:24:4F:06 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4F93A96AF20C83CD4736C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 62044 IP address blocks: 165.225.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:93:a9:6a:f2:0c:83:cd:47:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=7539d6a1-216e-4ec6-bb86-3ff99a780c1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:2e:7e:c9:c8:51:8b:3b:eb:b2:fc:bc:d0: 96:5c:33:46:ab:be:52:78:18:68:bf:d6:25:a9:b2: 7b:c8:b3:33:14:5b:54:b4:0d:24:27:8f:27:9d:43: de:b7:86:cd:a8:48:24:46:80:0f:bf:b9:45:38:d2: d4:b6:19:2b:12:8a:d0:8f:11:86:bf:82:f9:cb:67: 21:40:0e:69:ee:e6:8d:ee:d7:9e:f9:97:9d:12:21: c0:c3:54:88:eb:7d:61:b5:1d:e4:ce:8e:9f:f2:72: e4:f0:25:04:94:41:62:e7:41:69:6c:65:f0:4a:0e: d5:0d:65:a2:29:67:29:08:7a:8e:57:21:14:93:36: bb:dc:c1:6b:cb:b0:07:e9:23:b4:92:16:02:bd:f5: b6:98:34:40:6e:db:3d:7f:9c:20:fa:c7:bf:d0:ea: 13:dd:9a:62:63:d5:0e:69:89:3c:88:5f:f0:9c:ed: 43:23:aa:b9:aa:c9:21:30:8e:93:2e:b5:86:70:ad: ec:b8:2f:9f:9a:25:10:bc:64:8e:9b:65:8f:6a:5b: c2:7e:f0:17:de:3b:c2:c0:85:a0:d0:8e:4e:bd:2d: 1f:29:7b:ff:32:63:ab:75:d2:6a:c5:48:be:cf:90: b2:c2:90:17:22:00:37:9b:7b:e7:00:76:b8:f8:22: 03:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6A:35:EA:BB:D4:90:28:C3:AD:85:B7:7D:E9:B8:86:47:24:4F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/cbf2173e-57d4-3b7c-b728-043cab3e2967.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:aa:1b:cc:97:d0:20:7a:54:45:c2:b9:e0:9b:07:6a:6b:8b: 33:79:ab:c1:a8:81:40:67:b0:99:f7:8c:26:12:af:ed:56:84: ab:f0:87:19:34:27:b8:ba:b4:fb:96:27:d9:f0:b2:33:31:88: 2c:74:db:0e:b1:77:72:5f:17:9c:3f:cc:82:7f:ec:23:62:f4: 90:fe:49:ac:dd:6b:6a:53:d8:25:be:83:29:6c:0f:9d:39:6b: 2d:e2:c0:95:00:ec:b1:a6:ee:4a:32:e3:02:fb:73:4d:5f:e2: 20:22:00:b3:9f:83:c8:02:d7:44:93:e2:47:55:3d:68:84:93: 8b:e8:73:e9:0a:fe:a9:31:bc:66:6a:b1:8d:c5:0c:02:94:a9: f1:a1:d6:e3:1e:34:77:a3:09:7e:97:80:c4:3e:82:b6:63:4a: 23:07:58:f7:8e:cc:09:25:f4:1d:fb:9d:36:0a:47:64:fd:9b: f8:ad:94:d7:50:30:7e:27:fa:ba:a7:64:4c:b4:4e:54:7b:60: 33:ae:1e:5f:54:0c:ef:42:a7:2b:fa:36:cf:eb:40:8e:d5:95: 7d:3c:6a:d4:c5:d2:06:71:44:e4:e7:d8:7a:3c:9a:f8:8d:d3: 6e:79:8b:9e:3e:fa:06:3a:67:70:bd:47:71:f8:b0:9b:10:09: ae:ae:2d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT5OpavIMg81HNsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk NzUzOWQ2YTEtMjE2ZS00ZWM2LWJiODYtM2ZmOTlhNzgwYzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAQufsnIUYs767L8vNCWXDNGq75SeBhov9Yl qbJ7yLMzFFtUtA0kJ48nnUPet4bNqEgkRoAPv7lFONLUthkrEorQjxGGv4L5y2ch QA5p7uaN7tee+ZedEiHAw1SI631htR3kzo6f8nLk8CUElEFi50FpbGXwSg7VDWWi KWcpCHqOVyEUkza73MFry7AH6SO0khYCvfW2mDRAbts9f5wg+se/0OoT3ZpiY9UO aYk8iF/wnO1DI6q5qskhMI6TLrWGcK3suC+fmiUQvGSOm2WPalvCfvAX3jvCwIWg 0I5OvS0fKXv/MmOrddJqxUi+z5CywpAXIgA3m3vnAHa4+CIDkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRqNeq71JAow62Ft33puIZHJE8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvY2JmMjE3M2UtNTdkNC0z YjdjLWI3MjgtMDQzY2FiM2UyOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2qG8yX0CB6VEXCueCbB2prizN5q8GogUBnsJn3jCYSr+1WhKvwhxk0 J7i6tPuWJ9nwsjMxiCx02w6xd3JfF5w/zIJ/7CNi9JD+Sazda2pT2CW+gylsD505 ay3iwJUA7LGm7koy4wL7c01f4iAiALOfg8gC10ST4kdVPWiEk4voc+kK/qkxvGZq sY3FDAKUqfGh1uMeNHejCX6XgMQ+grZjSiMHWPeOzAkl9B37nTYKR2T9m/itlNdQ MH4n+rqnZEy0TlR7YDOuHl9UDO9Cpyv6Ns/rQI7VlX08atTF0gZxROTn2Ho8mviN 0255i54++gY6Z3C9R3H4sJsQCa6uLaU= -----END CERTIFICATE-----Generated at Fri Apr 17 12:40:49 2026 by rpki-client