$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f2d32d0f-e067-3349-b468-253aac94ea4f.roa File: f2d32d0f-e067-3349-b468-253aac94ea4f.roa (raw, json) Hash identifier: tQsAkTfUG1osQ4TykedsBiinJ1WIPrCKckfr4U2P0GE= Subject key identifier: 2A:E4:72:64:31:23:52:14:AD:D1:F4:36:4B:0F:AC:22:40:E7:B5:9E Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584D65153EC6BD675B658E3DB180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f2d32d0f-e067-3349-b468-253aac94ea4f.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 62044 IP address blocks: 165.225.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:3e:c6:bd:67:5b:65:8e:3d:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=34dfe045-5b8a-4d25-af3a-bc6053c7d32e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:52:11:fc:8a:d5:c5:48:45:25:ce:a8:19:8a: 3a:bc:08:5e:89:90:9c:8c:5c:cd:79:ff:af:27:19: 67:bf:7b:7a:01:47:c3:99:bf:9e:cf:70:80:0c:50: 65:ed:d7:3b:93:25:12:16:08:64:c8:f6:3f:9a:5d: 2b:77:68:a9:4d:b7:66:a6:8e:0c:66:e3:10:78:c1: 27:5f:04:fd:d3:c8:3c:f3:11:14:1b:38:77:4b:75: b8:d1:e0:cb:aa:fe:4a:b0:71:d2:12:e2:92:20:e1: 25:18:f4:2d:27:14:e8:d2:aa:8b:dc:2e:c3:97:14: 2e:b7:36:c9:56:85:f7:29:93:5f:0d:24:c9:ad:e5: 79:63:17:7a:f9:46:6f:79:c4:7f:29:51:37:23:e3: 75:0b:db:5d:1a:27:35:00:25:81:5e:05:f5:5d:d7: 8b:c6:11:1d:22:b8:bb:4e:e3:53:99:42:fc:d0:90: 73:f5:b0:3a:38:e1:91:d8:84:96:5f:ed:b8:3f:b7: 6c:3d:50:31:f6:96:a7:6d:28:e3:9c:68:5e:82:00: c6:02:73:0d:ac:e7:ff:11:db:9f:c4:9d:da:f2:ed: 89:47:e4:5e:d6:60:11:3a:1c:9c:2c:fe:26:fd:33: f1:cf:24:99:df:49:06:89:22:48:c9:a3:73:20:f5: bb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:E4:72:64:31:23:52:14:AD:D1:F4:36:4B:0F:AC:22:40:E7:B5:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/f2d32d0f-e067-3349-b468-253aac94ea4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:d0:98:b5:ad:91:d0:49:19:3d:ca:63:82:ee:07:68:04:19: 18:7e:0d:c7:1e:e0:0f:68:d6:31:52:df:14:c0:22:e9:2a:54: d1:22:d4:ec:d1:90:eb:cc:2e:4c:14:55:4e:3f:56:0e:91:34: 35:c0:1b:59:6a:93:aa:47:df:00:26:b4:68:9e:0f:32:bf:cc: f1:b6:0f:0b:53:48:81:29:11:89:0a:ce:bf:0f:96:5d:b8:ac: 6b:73:77:02:c9:34:1d:74:ae:75:c5:31:78:f4:10:ea:5a:1a: 36:06:07:31:1c:58:74:97:1f:9a:fb:88:d6:9b:83:db:d1:d8: 45:04:4e:1a:ce:8f:7f:e6:39:9d:f4:03:d7:13:44:f0:fc:6f: 73:3a:8b:bd:c9:09:98:ff:f2:bb:ef:ea:7d:c5:98:d9:05:a1: 41:54:55:45:e1:56:cb:ed:d8:17:3e:77:36:23:24:c6:62:31: 83:3b:60:9f:a7:d1:8a:48:32:56:4e:a3:68:83:bf:89:ac:5d: 63:e0:8b:92:72:1d:35:ed:01:0e:71:31:a5:1c:ff:2c:ad:57: 4d:7d:a9:6d:1a:c4:9e:2a:34:1a:b7:d6:0d:66:c9:de:a0:5a: 5f:5e:9f:3f:c3:7c:bc:64:f4:27:76:45:99:1f:4a:61:c7:c3: d7:12:a2:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFT7GvWdbZY49sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk MzRkZmUwNDUtNWI4YS00ZDI1LWFmM2EtYmM2MDUzYzdkMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1IR/IrVxUhFJc6oGYo6vAheiZCcjFzNef+v Jxlnv3t6AUfDmb+ez3CADFBl7dc7kyUSFghkyPY/ml0rd2ipTbdmpo4MZuMQeMEn XwT908g88xEUGzh3S3W40eDLqv5KsHHSEuKSIOElGPQtJxTo0qqL3C7DlxQutzbJ VoX3KZNfDSTJreV5Yxd6+UZvecR/KVE3I+N1C9tdGic1ACWBXgX1XdeLxhEdIri7 TuNTmUL80JBz9bA6OOGR2ISWX+24P7dsPVAx9panbSjjnGheggDGAnMNrOf/Eduf xJ3a8u2JR+Re1mAROhycLP4m/TPxzySZ30kGiSJIyaNzIPW7eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrkcmQxI1IUrdH0NksPrCJA57WeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZjJkMzJkMGYtZTA2Ny0z MzQ5LWI0NjgtMjUzYWFjOTRlYTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK3QmLWtkdBJGT3KY4LuB2gEGRh+Dcce4A9o1jFS3xTAIukqVNEi1OzR kOvMLkwUVU4/Vg6RNDXAG1lqk6pH3wAmtGieDzK/zPG2DwtTSIEpEYkKzr8Pll24 rGtzdwLJNB10rnXFMXj0EOpaGjYGBzEcWHSXH5r7iNabg9vR2EUEThrOj3/mOZ30 A9cTRPD8b3M6i73JCZj/8rvv6n3FmNkFoUFUVUXhVsvt2Bc+dzYjJMZiMYM7YJ+n 0YpIMlZOo2iDv4msXWPgi5JyHTXtAQ5xMaUc/yytV019qW0axJ4qNBq31g1myd6g Wl9enz/DfLxk9Cd2RZkfSmHHw9cSot0= -----END CERTIFICATE-----Generated at Fri Apr 17 12:38:34 2026 by rpki-client