$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: Qy+qXwRBcOlnobqOaRL8CE4SeAzPMMw4NIB/Ow9jAcg= Subject key identifier: AA:C8:2C:92:C6:45:3B:76:13:E8:E5:26:75:E7:59:A6:B6:F5:A6:E6 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584DE84B395F426BB3621905D580 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:39:5f:42:6b:b3:62:19:05:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=0ea725eb-dc9e-4a0b-87dc-b5e50369cb56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b1:14:aa:89:db:eb:e6:b8:05:72:e7:32:11: 49:6a:53:61:04:24:96:28:b7:15:4c:dc:7b:6f:d4: 66:69:05:4b:33:3a:fb:03:6a:d6:76:bd:0d:af:85: b0:0d:2f:0b:81:f1:42:8f:a7:9f:04:38:36:87:df: 5e:12:ec:b9:69:ee:0b:20:62:42:0c:da:ae:62:42: 7c:bd:4a:c7:bf:35:41:f5:83:ae:a9:57:9d:fc:75: 53:4b:8c:b0:0c:ff:da:32:dc:04:4d:76:33:62:1d: e1:8e:ae:e0:e0:af:64:ea:6d:d8:7e:83:25:0b:9a: 52:86:0a:08:58:47:b7:d3:af:09:7c:47:78:1a:82: 85:d1:f1:3e:6c:e7:09:d5:d0:fd:41:30:f6:98:40: 6a:bf:4e:64:48:d9:19:41:6d:f4:2c:62:fc:52:e7: e2:46:08:b3:9b:69:02:78:4d:ef:e3:9a:93:73:4f: ae:44:2f:21:e5:0d:73:fc:1f:80:d5:c4:03:b4:6b: 3b:d1:04:85:33:7e:e9:42:c3:c7:a0:02:bf:40:25: d6:b3:09:97:47:6c:62:91:86:01:f4:62:b6:ab:8d: 27:54:c0:30:e1:d8:1b:c7:46:d2:e9:76:21:e7:b1: 0e:f2:62:d7:ff:b3:8b:a6:d8:40:b2:cb:7d:35:60: 94:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:C8:2C:92:C6:45:3B:76:13:E8:E5:26:75:E7:59:A6:B6:F5:A6:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:c1:94:bf:f7:e7:13:dc:8f:0e:a1:42:02:7b:7f:cd:96:46: 64:da:7f:a9:b3:98:2e:31:62:e0:2c:23:cf:ad:eb:36:02:0a: 9f:29:85:28:ed:74:5e:eb:29:15:af:44:c1:85:72:45:fa:be: 73:40:6a:00:cd:6f:11:5c:af:f2:18:2a:6b:10:bc:f1:48:2b: 2c:c1:66:d4:cc:74:eb:a1:24:bd:44:aa:b8:c3:60:c7:b3:9c: 00:ca:da:9a:00:fe:bc:14:e2:61:70:9b:ff:a0:74:de:03:c2: 4f:97:43:8f:fe:16:16:a6:50:59:e5:7b:92:9e:a5:0a:20:8b: 59:4d:d1:81:3e:d2:4e:7a:fb:76:b8:b8:1c:61:96:0e:6c:72: 81:0f:5e:df:95:00:a1:23:f9:a1:51:e4:07:6c:4e:93:db:cd: 5e:69:85:7d:5e:77:5b:b6:b9:8d:5b:54:f4:ac:47:0f:44:a8: 53:9e:8f:40:42:7c:c0:79:24:66:84:67:57:e5:f7:c9:a2:a2: 91:1c:1f:ed:c7:e5:be:d6:8a:93:ba:1e:73:c7:07:ee:dd:c7: 00:58:57:bc:af:60:c1:4e:80:d9:58:5f:6f:37:4a:e7:88:95: 50:32:4c:64:17:f9:22:4f:70:8c:2f:53:b5:f0:31:69:b6:41: ef:8e:47:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSzlfQmuzYhkF1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk MGVhNzI1ZWItZGM5ZS00YTBiLTg3ZGMtYjVlNTAzNjljYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibEUqonb6+a4BXLnMhFJalNhBCSWKLcVTNx7 b9RmaQVLMzr7A2rWdr0Nr4WwDS8LgfFCj6efBDg2h99eEuy5ae4LIGJCDNquYkJ8 vUrHvzVB9YOuqVed/HVTS4ywDP/aMtwETXYzYh3hjq7g4K9k6m3YfoMlC5pShgoI WEe3068JfEd4GoKF0fE+bOcJ1dD9QTD2mEBqv05kSNkZQW30LGL8UufiRgizm2kC eE3v45qTc0+uRC8h5Q1z/B+A1cQDtGs70QSFM37pQsPHoAK/QCXWswmXR2xikYYB 9GK2q40nVMAw4dgbx0bS6XYh57EO8mLX/7OLpthAsst9NWCUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrILJLGRTt2E+jlJnXnWaa29abmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvBlL/35xPcjw6hQgJ7f82WRmTaf6mzmC4xYuAsI8+t6zYCCp8phSjt dF7rKRWvRMGFckX6vnNAagDNbxFcr/IYKmsQvPFIKyzBZtTMdOuhJL1EqrjDYMez nADK2poA/rwU4mFwm/+gdN4Dwk+XQ4/+FhamUFnle5KepQogi1lN0YE+0k56+3a4 uBxhlg5scoEPXt+VAKEj+aFR5AdsTpPbzV5phX1ed1u2uY1bVPSsRw9EqFOej0BC fMB5JGaEZ1fl98miopEcH+3H5b7WipO6HnPHB+7dxwBYV7yvYMFOgNlYX283SueI lVAyTGQX+SJPcIwvU7XwMWm2Qe+OR/I= -----END CERTIFICATE-----Generated at Sat Jun 13 10:33:57 2026 by rpki-client