$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa File: 1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa (raw, json) Hash identifier: GuE1Z6U+LiAZ5FXw6SGKdWbg4A+5pNLqJcfIZSYtn/M= Subject key identifier: FB:88:5E:DF:9C:BE:B6:D8:83:6E:2B:16:E2:BA:81:81:A2:90:A2:20 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D7A0530BE91E748CF2DB719A4 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 1225 IP address blocks: 165.254.42.160/27 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:30:be:91:e7:48:cf:2d:b7:19:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=986b8eea-d3c8-4be0-9f42-9a0e5b78e9e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d3:4a:cf:bc:59:6c:15:43:bb:92:52:25:a6: 77:54:c5:79:2b:e5:7a:cb:9e:10:ce:04:f0:bd:fd: 05:94:fd:14:a7:b2:3f:4a:ab:ea:e9:0c:6a:23:22: bf:ea:6c:ff:05:6f:28:05:82:c4:bf:bd:b5:74:65: d1:95:43:06:d9:4e:a7:58:f5:1e:a8:9f:1b:6f:32: ac:51:12:82:8d:9c:8e:89:72:1d:45:ac:9f:a1:42: d5:67:c7:42:d6:5e:1e:d6:ff:16:d4:c3:50:9b:d2: c8:bd:fb:50:b7:25:85:17:9a:f1:6a:6e:20:98:25: d6:28:9d:f6:98:18:54:3e:c2:fc:86:c2:69:51:42: 34:ce:3a:94:e2:5f:05:9e:02:eb:89:86:c2:db:21: 09:f1:d0:6c:6e:9e:72:48:29:fd:2c:02:9e:55:40: 14:5c:eb:43:1b:c9:a7:8e:60:9f:d0:8c:af:fb:6a: 7e:e9:e7:8a:de:72:03:86:c5:8b:41:9b:07:4b:43: e3:4d:b6:b8:8e:5b:3d:60:61:0c:c9:46:90:12:7f: fc:24:38:a6:ec:19:56:18:9b:b6:1f:fb:2a:dc:8f: 04:d9:34:ec:73:16:41:93:10:54:0c:44:a8:f4:75: 4f:45:1c:d5:2a:c5:66:d2:92:ec:b5:7d:e0:de:94: f5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:88:5E:DF:9C:BE:B6:D8:83:6E:2B:16:E2:BA:81:81:A2:90:A2:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/1e0f0657-8ac0-366b-bb37-8cf2aaa8eca7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.42.160/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:95:37:90:50:c6:b3:31:33:b9:d7:bb:ea:b8:95:65:85:15: a6:31:73:0a:a3:4a:0a:af:58:6b:10:c8:8d:67:fc:28:63:0b: 55:bd:1c:b8:fc:b8:73:3b:4b:39:5e:89:91:1f:dd:76:3c:4e: 0b:49:58:84:75:6f:37:31:4e:58:5f:0c:63:6f:32:6a:92:a5: cc:d4:5c:af:bf:fe:23:55:cd:df:dc:69:32:06:7c:a4:4d:bb: d9:a2:7a:08:e8:dc:f3:18:36:9a:c7:15:62:8d:2f:63:ec:a0: 96:d8:c9:2e:28:5a:12:3a:37:12:c5:76:ac:0d:7b:4a:97:80: f7:d1:2e:3e:ec:9c:02:41:17:4c:e3:e6:cb:1f:7d:c6:da:aa: 03:af:6d:26:8c:22:70:53:54:8f:e2:8c:75:1a:55:ac:90:05: af:5d:0a:c6:b5:97:96:c4:8d:00:a1:cb:a2:bb:ee:7e:e5:7e: 8f:1f:81:89:5a:e0:9a:8c:5b:7c:2e:52:81:7d:a2:58:2a:07: a9:9b:d3:f7:3a:6a:c8:d4:b9:c4:8a:f6:ab:78:18:1c:b7:fe: 68:79:1d:ba:70:8d:1e:51:23:61:a2:85:0f:20:38:90:84:d2: 7f:c2:e9:d6:99:e7:3f:de:6c:20:02:83:d6:24:2d:cc:e4:3a: 3b:30:e2:3d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE16BTC+kedIzy23GaQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk OTg2YjhlZWEtZDNjOC00YmUwLTlmNDItOWEwZTViNzhlOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNNKz7xZbBVDu5JSJaZ3VMV5K+V6y54QzgTw vf0FlP0Up7I/Sqvq6QxqIyK/6mz/BW8oBYLEv721dGXRlUMG2U6nWPUeqJ8bbzKs URKCjZyOiXIdRayfoULVZ8dC1l4e1v8W1MNQm9LIvftQtyWFF5rxam4gmCXWKJ32 mBhUPsL8hsJpUUI0zjqU4l8FngLriYbC2yEJ8dBsbp5ySCn9LAKeVUAUXOtDG8mn jmCf0Iyv+2p+6eeK3nIDhsWLQZsHS0PjTba4jls9YGEMyUaQEn/8JDim7BlWGJu2 H/sq3I8E2TTscxZBkxBUDESo9HVPRRzVKsVm0pLstX3g3pT1KwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPuIXt+cvrbYg24rFuK6gYGikKIgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMWUwZjA2NTctOGFjMC0z NjZiLWJiMzctOGNmMmFhYThlY2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFpf4qoDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAllTeQUMazMTO517vquJVlhRWmMXMKo0oKr1hrEMiNZ/woYwtVvRy4 /LhzO0s5XomRH912PE4LSViEdW83MU5YXwxjbzJqkqXM1Fyvv/4jVc3f3GkyBnyk TbvZonoI6NzzGDaaxxVijS9j7KCW2MkuKFoSOjcSxXasDXtKl4D30S4+7JwCQRdM 4+bLH33G2qoDr20mjCJwU1SP4ox1GlWskAWvXQrGtZeWxI0Aocuiu+5+5X6PH4GJ WuCajFt8LlKBfaJYKgepm9P3OmrI1LnEivareBgct/5oeR26cI0eUSNhooUPIDiQ hNJ/wunWmec/3mwgAoPWJC3M5Do7MOI9 -----END CERTIFICATE-----Generated at Fri Apr 17 11:33:56 2026 by rpki-client