$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: cayqBkd3MhRD/kuKl2bKYhrcjTLRaM274IuTAzP7RX0= Subject key identifier: B3:1E:11:8F:1B:ED:94:42:44:8A:D7:22:AF:24:C3:6F:22:AA:CE:4D Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584F4973F177E15A0864EEBCDFA0 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f1:77:e1:5a:08:64:ee:bc:df:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20bcfc3c-a85f-4a33-a429-834fd84e07d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:83:b0:7d:7e:e5:b4:e0:16:4b:0f:8f:16: 62:ae:03:36:04:d5:51:a8:96:a6:83:b5:95:20:58: fb:f3:6e:1b:22:fb:36:b9:16:38:54:50:d7:29:4d: 4f:a5:de:b8:e1:14:a5:f0:f7:83:8b:ba:85:e1:bf: 79:a9:e9:f4:5c:7c:ba:fe:b3:12:4e:30:3c:05:0f: 46:b5:58:80:b9:e9:d2:9d:4f:00:42:dc:d3:6a:2d: ec:cc:33:90:75:9c:dc:e6:1e:f9:7e:c1:ac:cf:b3: 14:0f:99:cf:18:ef:3e:16:4f:b4:43:01:e0:6b:73: e7:4b:b2:56:bf:41:74:d8:7a:89:21:94:5d:95:62: 56:9b:50:e5:7f:93:e3:68:9d:5f:24:2a:70:80:1c: 5b:ae:8c:cd:01:46:fb:53:bb:0a:a9:76:f3:40:e7: 96:3c:38:cd:27:61:2b:2a:32:25:76:2c:43:25:57: 1c:dd:fb:49:fa:70:7a:a0:75:e1:b0:a3:b6:0d:35: 02:df:02:2d:1d:de:46:89:03:03:10:9e:ca:5e:7e: 97:9c:5a:5d:4f:2e:7f:30:41:8f:26:f5:c3:2c:3b: d0:fb:ce:b4:0d:48:ab:d7:2b:bb:21:1c:46:fc:cc: 4d:d4:bd:1d:bc:3d:31:59:fb:bb:08:b4:04:98:89: 9d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1E:11:8F:1B:ED:94:42:44:8A:D7:22:AF:24:C3:6F:22:AA:CE:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:fb:5d:64:ac:ed:4f:99:2d:ca:a0:f3:32:70:25:0d:50:a5: 41:d5:39:93:2b:80:73:3f:41:60:21:b1:27:c2:b4:b8:32:fd: fc:b5:22:46:de:01:e1:6b:4d:26:c7:ab:97:b6:20:14:80:94: e9:0d:7f:39:9b:13:39:67:7d:a4:29:9a:c2:12:97:66:81:88: a7:1d:8b:80:e3:c2:3c:56:f0:93:4d:f3:46:49:1d:55:78:60: 30:a6:25:c1:2f:6c:9a:67:b1:20:25:3a:86:3a:db:1e:51:40: df:b0:e8:54:99:1c:03:59:10:7c:09:d8:0a:9f:02:62:a7:c8: 61:d8:d9:be:b9:cc:b6:0a:82:76:a3:7f:61:f2:63:b9:33:61: d7:5a:27:7a:3f:7f:dd:37:3b:73:c4:f5:5b:b1:33:e4:a0:d8: 84:a2:c4:6e:16:95:00:f1:43:4a:83:03:f1:50:bd:03:9a:b7: e4:41:4d:57:15:17:ee:43:b4:3a:a3:ed:ab:25:99:ab:27:d1: fd:6d:69:ee:1f:cf:f2:4c:3f:ea:c9:1a:ef:cc:89:c6:74:e2: 2c:84:7a:90:ff:44:ce:4a:0e:f7:aa:37:b5:cf:a1:e3:4a:e5: bc:8e:91:b1:10:72:a0:db:0d:99:6b:2e:af:db:f4:2d:ab:3b: 47:20:b0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/F34VoIZO6836AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBiY2ZjM2MtYTg1Zi00YTMzLWE0MjktODM0ZmQ4NGUwN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj2DsH1+5bTgFksPjxZirgM2BNVRqJamg7WV IFj7824bIvs2uRY4VFDXKU1Ppd644RSl8PeDi7qF4b95qen0XHy6/rMSTjA8BQ9G tViAuenSnU8AQtzTai3szDOQdZzc5h75fsGsz7MUD5nPGO8+Fk+0QwHga3PnS7JW v0F02HqJIZRdlWJWm1Dlf5PjaJ1fJCpwgBxbrozNAUb7U7sKqXbzQOeWPDjNJ2Er KjIldixDJVcc3ftJ+nB6oHXhsKO2DTUC3wItHd5GiQMDEJ7KXn6XnFpdTy5/MEGP JvXDLDvQ+860DUir1yu7IRxG/MxN1L0dvD0xWfu7CLQEmImdTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMeEY8b7ZRCRIrXIq8kw28iqs5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/7XWSs7U+ZLcqg8zJwJQ1QpUHVOZMrgHM/QWAhsSfCtLgy/fy1Ikbe AeFrTSbHq5e2IBSAlOkNfzmbEzlnfaQpmsISl2aBiKcdi4DjwjxW8JNN80ZJHVV4 YDCmJcEvbJpnsSAlOoY62x5RQN+w6FSZHANZEHwJ2AqfAmKnyGHY2b65zLYKgnaj f2HyY7kzYddaJ3o/f903O3PE9VuxM+Sg2ISixG4WlQDxQ0qDA/FQvQOat+RBTVcV F+5DtDqj7aslmasn0f1tae4fz/JMP+rJGu/MicZ04iyEepD/RM5KDveqN7XPoeNK 5byOkbEQcqDbDZlrLq/b9C2rO0cgsHI= -----END CERTIFICATE-----Generated at Sat Sep 26 22:29:28 2026 by rpki-client