$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa File: f4268c2a-59de-3a1d-b2ec-3952e6424669.roa (raw, json) Hash identifier: j3GInq/1Y8VWTH3Hebn6XkF1VjnVzWwJ4pQmEni2GpI= Subject key identifier: 0D:B7:AC:7C:5F:F1:D8:AA:64:FB:33:EC:A6:F0:E4:27:F0:88:C6:DF Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584D703FE44230C66F7C2BF1EF00 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa Signing time: Wed 08 Apr 2026 13:00:33 +0000 ROA not before: Wed 08 Apr 2026 13:00:33 +0000 ROA not after: Tue 07 Jul 2026 13:00:33 +0000 asID: 398343 IP address blocks: 165.140.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:70:3f:e4:42:30:c6:6f:7c:2b:f1:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Apr 8 13:00:33 2026 GMT Not After : Jul 7 13:00:33 2026 GMT Subject: CN=7b67b631-8d8b-440f-8429-f81c7206987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:ea:9b:30:93:e1:a7:ef:93:f8:d4:d0:37: 6d:77:93:0e:4c:66:74:a4:50:bd:8e:0d:b1:78:a4: 5f:f2:4b:d0:af:be:92:43:e7:49:1e:16:11:8b:77: c3:ec:e2:57:cd:5b:77:bf:95:d4:c4:5d:e0:80:10: e6:ae:37:b3:f5:b7:83:90:fa:fa:0f:cd:85:1d:f0: 06:74:a2:da:51:0c:59:97:dc:05:d0:e3:b9:3c:6a: 1c:b0:de:94:0d:6c:a8:0e:cb:6f:5b:97:64:11:16: 9f:52:72:b6:6d:ac:12:3f:dd:b4:75:1d:f4:91:16: d6:16:70:e0:4f:ca:25:9d:b6:16:7e:0f:55:e5:5f: f8:fa:49:ff:71:7a:e4:b6:22:4b:6a:6c:ec:22:6a: 9d:52:eb:1b:c1:47:bb:e2:82:20:ab:f2:60:76:86: 2a:66:a4:8c:94:a6:c3:7c:78:ad:39:62:1e:07:63: 33:d8:b6:db:bd:77:f7:40:09:ed:55:63:c2:6a:47: 93:c0:1e:de:9f:53:96:d6:e4:bf:d1:ab:5f:ec:7c: 7c:69:43:3e:64:92:de:ee:0e:36:e9:cd:40:a6:bc: 7c:0c:d5:ab:50:48:40:b1:e3:51:20:42:68:e0:08: a9:78:38:5f:0e:ed:42:9a:1c:39:d8:0f:7d:ba:42: 78:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:B7:AC:7C:5F:F1:D8:AA:64:FB:33:EC:A6:F0:E4:27:F0:88:C6:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/f4268c2a-59de-3a1d-b2ec-3952e6424669.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 165.140.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:20:86:65:bf:74:03:bd:f0:d2:d9:d1:e6:f7:83:cc:17:df: 37:44:0e:fe:03:e8:32:fd:ab:72:25:bc:38:b4:99:82:c1:a0: f7:d1:71:ae:26:1b:ac:68:92:c5:ab:27:89:5c:b0:5c:c3:07: a7:4f:cf:14:7a:37:7a:1d:1b:90:de:18:da:21:7c:d7:50:2d: 44:fb:b6:84:d4:8a:34:25:a4:62:c5:7b:51:aa:af:24:cf:7b: 40:2f:b3:f4:20:e5:76:04:91:61:d6:ef:5a:a9:27:9b:86:5c: 85:62:f6:89:25:00:35:ba:e6:b3:5c:20:d2:58:ed:2f:71:f8: 57:ae:75:e8:5b:8b:44:85:42:4d:43:41:70:7d:d7:61:83:ba: 52:a2:25:11:1c:76:70:b3:9f:d2:e2:7f:78:d7:cc:54:5e:6b: fb:1a:af:2d:44:d3:c5:3c:ff:c4:bb:3a:da:7b:5d:59:9c:5e: ce:6b:48:7d:c5:62:c1:82:05:d5:24:fe:15:9e:7c:37:24:e5: 6d:14:82:db:cc:e6:dd:90:97:ff:7d:af:cc:53:02:bc:dd:58: 9c:13:46:07:41:f6:24:3c:55:f9:6a:dc:6e:9f:7e:40:1f:fc: 8f:c8:5a:e6:30:16:d8:a8:9f:c7:d9:2a:dd:7f:9f:98:fc:2d: a6:e6:a1:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1wP+RCMMZvfCvx7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MDQwODEzMDAzM1oXDTI2MDcwNzEzMDAzM1owLzEtMCsGA1UEAxMk N2I2N2I2MzEtOGQ4Yi00NDBmLTg0MjktZjgxYzcyMDY5ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyvqmzCT4afvk/jU0Ddtd5MOTGZ0pFC9jg2x eKRf8kvQr76SQ+dJHhYRi3fD7OJXzVt3v5XUxF3ggBDmrjez9beDkPr6D82FHfAG dKLaUQxZl9wF0OO5PGocsN6UDWyoDstvW5dkERafUnK2bawSP920dR30kRbWFnDg T8olnbYWfg9V5V/4+kn/cXrktiJLamzsImqdUusbwUe74oIgq/JgdoYqZqSMlKbD fHitOWIeB2Mz2LbbvXf3QAntVWPCakeTwB7en1OW1uS/0atf7Hx8aUM+ZJLe7g42 6c1Aprx8DNWrUEhAseNRIEJo4AipeDhfDu1Cmhw52A99ukJ4vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA23rHxf8diqZPsz7Kbw5CfwiMbfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvZjQyNjhjMmEtNTlkZS0z YTFkLWIyZWMtMzk1MmU2NDI0NjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMghmW/dAO98NLZ0eb3g8wX3zdEDv4D6DL9q3IlvDi0mYLBoPfRca4m G6xoksWrJ4lcsFzDB6dPzxR6N3odG5DeGNohfNdQLUT7toTUijQlpGLFe1GqryTP e0Avs/Qg5XYEkWHW71qpJ5uGXIVi9oklADW65rNcINJY7S9x+Feudehbi0SFQk1D QXB912GDulKiJREcdnCzn9Lif3jXzFRea/sary1E08U8/8S7Otp7XVmcXs5rSH3F YsGCBdUk/hWefDck5W0UgtvM5t2Ql/99r8xTArzdWJwTRgdB9iQ8Vflq3G6ffkAf /I/IWuYwFtion8fZKt1/n5j8LabmoUw= -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:52 2026 by rpki-client