$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d210aba2-a353-3fad-aba9-7a9f41e08029.roa File: d210aba2-a353-3fad-aba9-7a9f41e08029.roa (raw, json) Hash identifier: KFIX2YU59K43ICJEbtV7fdsH57qe+Ka1ILk5MDBlpNk= Subject key identifier: EF:DB:7D:85:80:64:C9:8D:79:9D:A0:86:61:FE:46:DF:D4:B2:36:CF Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D5B4FA45676C31505FA03A040 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d210aba2-a353-3fad-aba9-7a9f41e08029.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 22616 IP address blocks: 165.225.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a4:56:76:c3:15:05:fa:03:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=dbca68d7-9eb0-42c0-9ecb-ae70a6663398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e1:5e:ab:a7:1b:95:7f:e6:5f:cb:d2:e5:0c: e2:bf:fb:d0:c8:b1:68:1f:5b:70:27:c1:61:c3:9c: 18:5d:c1:81:f6:e0:db:14:af:17:a3:da:94:33:ea: 5c:c2:f3:ec:dd:30:d1:91:ed:75:05:72:a9:7b:0f: d4:b3:2b:d6:51:0b:82:c1:ad:33:29:07:40:e1:d5: 1e:61:e6:df:b6:1c:b8:d7:34:a6:74:1d:a6:44:f5: 4b:a6:91:82:fb:08:1a:f1:d8:ef:9e:23:e7:b3:7a: 7c:26:ad:69:73:4c:98:12:54:44:b2:11:9e:cd:34: 22:6d:0e:e0:c0:29:95:16:39:4b:87:99:f6:d1:93: cb:d0:95:07:44:1f:67:e6:44:72:33:af:37:ae:53: 5a:18:5a:92:0a:76:6a:7c:f6:43:18:63:8c:db:41: d5:20:c0:d1:5f:6d:6a:dd:e7:07:55:9d:5d:c5:dc: ae:92:19:96:2a:4a:b0:2d:fe:c3:5d:b2:4b:38:3e: 83:20:c3:3b:b3:33:59:ef:e5:ee:d1:c8:ab:13:89: d1:eb:d7:cf:a3:fc:b9:7e:0f:a2:a0:14:eb:20:33: b6:4a:2c:a7:1f:d2:fc:80:a6:87:48:e0:e2:91:31: 1c:df:9c:8c:c9:a0:db:0f:eb:64:51:18:15:cc:3f: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DB:7D:85:80:64:C9:8D:79:9D:A0:86:61:FE:46:DF:D4:B2:36:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d210aba2-a353-3fad-aba9-7a9f41e08029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:3f:27:0b:51:cf:e0:96:cd:8b:2c:a9:d9:27:89:0e:de:60: ba:58:ac:43:07:55:52:72:64:9f:3f:72:4b:c0:1d:ce:05:68: f5:48:97:cb:fe:26:59:0f:be:b2:fd:1a:d6:6e:59:a1:d3:75: 17:3d:27:e1:2b:3b:90:ea:6a:80:3b:73:1d:62:e8:16:ce:d6: 8f:11:af:ce:0d:6f:62:a1:52:ca:f9:c0:0b:86:94:f2:1a:07: d0:93:40:1c:c9:c3:a1:35:f2:2d:45:ee:62:cb:8a:f1:a2:31: 44:a7:38:09:79:d2:f9:2f:45:67:ac:07:ed:14:92:23:d4:17: 04:07:21:2e:4a:00:15:fc:3f:b5:44:65:fa:83:e4:d4:98:e2: e4:43:37:d5:75:fb:ae:bf:0a:e0:ed:f0:1b:e3:07:53:51:7b: 7e:5e:cc:38:e8:3b:11:87:fe:09:68:4c:f1:3b:24:bc:e3:fa: 17:34:fe:6b:91:be:26:3c:be:d4:91:f0:7c:c1:f6:dd:ab:9e: a2:1a:7d:d4:61:ea:79:b7:74:ca:84:d3:45:b3:eb:a8:67:31: 8d:58:02:7b:ad:51:b5:0b:ac:3d:72:7f:be:fb:8a:8d:51:7b: d2:bd:47:4c:56:de:eb:89:df:97:79:c3:7a:a7:43:72:91:cc: d4:5b:58:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6RWdsMVBfoDoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk ZGJjYTY4ZDctOWViMC00MmMwLTllY2ItYWU3MGE2NjYzMzk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquFeq6cblX/mX8vS5Qziv/vQyLFoH1twJ8Fh w5wYXcGB9uDbFK8Xo9qUM+pcwvPs3TDRke11BXKpew/UsyvWUQuCwa0zKQdA4dUe Yebfthy41zSmdB2mRPVLppGC+wga8djvniPns3p8Jq1pc0yYElREshGezTQibQ7g wCmVFjlLh5n20ZPL0JUHRB9n5kRyM683rlNaGFqSCnZqfPZDGGOM20HVIMDRX21q 3ecHVZ1dxdyukhmWKkqwLf7DXbJLOD6DIMM7szNZ7+Xu0cirE4nR69fPo/y5fg+i oBTrIDO2SiynH9L8gKaHSODikTEc35yMyaDbD+tkURgVzD+yswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/bfYWAZMmNeZ2ghmH+Rt/UsjbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDIxMGFiYTItYTM1My0z ZmFkLWFiYTktN2E5ZjQxZTA4MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeEoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0/JwtRz+CWzYssqdkniQ7eYLpYrEMHVVJyZJ8/ckvAHc4FaPVIl8v+ JlkPvrL9GtZuWaHTdRc9J+ErO5DqaoA7cx1i6BbO1o8Rr84Nb2KhUsr5wAuGlPIa B9CTQBzJw6E18i1F7mLLivGiMUSnOAl50vkvRWesB+0UkiPUFwQHIS5KABX8P7VE ZfqD5NSY4uRDN9V1+66/CuDt8BvjB1NRe35ezDjoOxGH/gloTPE7JLzj+hc0/muR viY8vtSR8HzB9t2rnqIafdRh6nm3dMqE00Wz66hnMY1YAnutUbULrD1yf777io1R e9K9R0xW3uuJ35d5w3qnQ3KRzNRbWPw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:41 2026 by rpki-client