$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa File: 4339de50-d6ec-3f49-8167-716050f6f12f.roa (raw, json) Hash identifier: BEQ4buohZRxf2gUtbCQkwFPZ8Y16ozu4M2XKZmL8cDk= Subject key identifier: B7:A5:74:13:42:75:C9:C9:3C:EC:5B:AD:4D:7C:85:A6:D4:F6:40:51 Certificate issuer: /CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Certificate serial: 010D0C9F4328584CAA270659764849B932F45A40 Authority key identifier: 1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 22649 IP address blocks: 165.140.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:06:59:76:48:49:b9:32:f4:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90b303ba-d2f4-491c-90db-4875b9ffe03c Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=d01ed0ef-15ca-4f07-baed-220bf7af342f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:e6:86:f3:07:2c:c8:5e:8c:ae:28:8a:70: 0c:a6:ea:bb:32:ed:a7:e2:e0:8e:8d:0c:c1:28:d7: 83:d3:0f:d7:0a:e0:74:9d:ae:64:bf:29:c7:cc:af: 50:d4:87:7e:5b:c5:a8:59:0e:02:af:d5:5a:fe:75: 3d:6a:08:6f:b7:82:e7:5a:48:54:7b:0d:bb:53:86: 10:db:a7:48:73:c5:90:bb:92:7d:19:2a:11:bb:72: 0e:a2:be:bb:63:f0:2a:49:d5:dc:d0:1f:10:04:92: a3:38:f5:11:3a:3d:68:d7:3a:c4:7e:0d:e6:77:a7: ba:8e:57:2d:24:f9:7f:62:06:9a:68:b3:7c:6f:f5: e4:d2:07:a2:ba:f4:43:97:2a:11:29:e1:ee:d4:b8: 66:33:77:ca:61:6f:32:4e:4e:0e:7c:39:b1:76:5d: 9f:7b:aa:26:78:c9:48:92:e3:0d:87:08:85:4a:8b: 6b:30:a5:9f:c4:a3:c8:bc:48:ba:88:0f:ac:73:a6: 28:f9:63:28:a6:9b:b6:6c:7b:49:99:6f:3a:27:f9: 85:e5:f2:88:ba:98:80:0e:ba:d7:9c:5d:eb:76:98: 4d:13:8b:70:03:90:bb:ac:db:80:ed:3f:fa:e5:ad: fa:a4:1d:8f:58:d1:09:68:b3:9c:1c:53:96:b2:3b: 46:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A5:74:13:42:75:C9:C9:3C:EC:5B:AD:4D:7C:85:A6:D4:F6:40:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/4339de50-d6ec-3f49-8167-716050f6f12f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c/90b303ba-d2f4-491c-90db-4875b9ffe03c.crl X509v3 Authority Key Identifier: keyid:1E:8B:E5:E2:7C:7B:07:59:E2:A1:43:D9:CE:18:15:D6:79:60:C1:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90b303ba-d2f4-491c-90db-4875b9ffe03c.cer sbgp-ipAddrBlock: critical IPv4: 165.140.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:9b:f8:b5:fc:48:4b:c3:dc:8d:d4:1d:5b:fb:ee:5a:d0:5c: cc:9e:f0:5a:2d:0f:df:7e:9f:e1:60:33:5f:cc:0f:9d:8d:a7: c9:db:24:2b:23:76:6a:a6:b1:0d:52:48:30:7e:2e:48:be:24: fa:6a:06:aa:b6:ec:0e:b0:81:fc:de:01:7b:cf:08:94:66:87: 02:22:1e:4f:cf:41:18:c8:fb:bf:66:83:a5:43:1e:31:57:3d: 66:e2:1a:4c:6e:5f:87:28:33:68:76:3d:b5:d5:6a:27:17:f8: e9:4d:6a:3c:be:a4:ac:dc:ad:c7:67:5d:c6:da:69:ab:e0:05: 21:5c:ff:55:2a:61:2d:c8:47:ef:5a:d7:15:4d:11:e0:83:4c: 22:06:14:1b:eb:5f:c3:87:04:86:9f:7c:98:2a:09:39:be:c9: 34:8c:33:4b:89:61:9e:ed:ab:52:e9:5f:4f:d1:55:35:f9:33: c6:2a:70:f5:6f:e5:e5:aa:cd:d9:ff:80:9c:0d:e7:a5:b9:03: 91:f1:10:aa:e1:a4:24:91:60:69:07:5f:d7:6f:39:c7:74:fe: 4a:e0:7f:9f:7b:a7:11:ce:d4:e6:c9:02:6b:69:2e:99:92:30: 09:85:4c:50:be:55:30:87:8d:41:b3:e9:fa:d1:3c:f3:64:9f: ce:c3:b7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwZZdkhJuTL0WkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBiMzAzYmEtZDJmNC00OTFjLTkwZGItNDg3NWI5ZmZl MDNjMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk ZDAxZWQwZWYtMTVjYS00ZjA3LWJhZWQtMjIwYmY3YWYzNDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg/mhvMHLMhejK4oinAMpuq7Mu2n4uCOjQzB KNeD0w/XCuB0na5kvynHzK9Q1Id+W8WoWQ4Cr9Va/nU9aghvt4LnWkhUew27U4YQ 26dIc8WQu5J9GSoRu3IOor67Y/AqSdXc0B8QBJKjOPUROj1o1zrEfg3md6e6jlct JPl/YgaaaLN8b/Xk0geiuvRDlyoRKeHu1LhmM3fKYW8yTk4OfDmxdl2fe6omeMlI kuMNhwiFSotrMKWfxKPIvEi6iA+sc6Yo+WMoppu2bHtJmW86J/mF5fKIupiADrrX nF3rdphNE4twA5C7rNuA7T/65a36pB2PWNEJaLOcHFOWsjtGgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeldBNCdcnJPOxbrU18habU9kBRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGIz MDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1YjlmZmUwM2MvNDMzOWRlNTAtZDZlYy0z ZjQ5LTgxNjctNzE2MDUwZjZmMTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBiMzAzYmEtZDJmNC00OTFjLTkw ZGItNDg3NWI5ZmZlMDNjLzkwYjMwM2JhLWQyZjQtNDkxYy05MGRiLTQ4NzViOWZm ZTAzYy5jcmwwHwYDVR0jBBgwFoAUHovl4nx7B1nioUPZzhgV1nlgwb4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGIzMDNiYS1kMmY0LTQ5MWMtOTBkYi00ODc1 YjlmZmUwM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIub+LX8SEvD3I3UHVv77lrQXMye8FotD99+n+FgM1/MD52Np8nbJCsj dmqmsQ1SSDB+Lki+JPpqBqq27A6wgfzeAXvPCJRmhwIiHk/PQRjI+79mg6VDHjFX PWbiGkxuX4coM2h2PbXVaicX+OlNajy+pKzcrcdnXcbaaavgBSFc/1UqYS3IR+9a 1xVNEeCDTCIGFBvrX8OHBIaffJgqCTm+yTSMM0uJYZ7tq1LpX0/RVTX5M8YqcPVv 5eWqzdn/gJwN56W5A5HxEKrhpCSRYGkHX9dvOcd0/krgf597pxHO1ObJAmtpLpmS MAmFTFC+VTCHjUGz6frRPPNkn87Dt/U= -----END CERTIFICATE-----Generated at Sun Mar 1 23:28:25 2026 by rpki-client