$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: xFsClbQLPhDF22NAPFzRli6CrlbeoyRLMuOezeMhIiI= Subject key identifier: 76:C3:8C:A1:4C:1B:57:97:AF:5C:F2:0B:47:53:12:55:03:12:6C:22 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F4328584CC611F1B1A97D4B138FF2B600 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Fri 06 Feb 2026 14:00:40 +0000 ROA not before: Fri 06 Feb 2026 14:00:40 +0000 ROA not after: Thu 07 May 2026 13:00:40 +0000 asID: 833 IP address blocks: 165.140.200.0/24 maxlen: 24 165.140.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c6:11:f1:b1:a9:7d:4b:13:8f:f2:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Feb 6 14:00:40 2026 GMT Not After : May 7 13:00:40 2026 GMT Subject: CN=636c57f5-86eb-443e-b3dd-c9e7104f60c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:94:f0:11:c2:25:d0:0a:c2:19:32:38:dd:ad: c5:cb:d4:6f:8d:39:14:d9:64:71:9d:a3:4f:72:bb: a2:b6:22:0a:13:32:86:2f:e3:eb:54:71:ee:fc:e5: 07:b7:e9:49:1f:48:f5:3c:ab:ac:96:cd:fa:88:26: 0f:7b:52:5d:1b:ba:57:46:22:46:3e:da:66:4f:2f: e4:25:a2:c7:f8:85:84:d1:62:87:68:e9:1e:1f:e2: 20:da:39:fd:b0:3d:7c:2c:e8:2f:9e:50:4d:17:74: 52:91:76:0d:17:fe:3f:e3:37:4b:54:95:ad:c5:2f: cc:f1:06:94:0f:c1:fe:3b:b9:77:a4:3c:3f:7c:9a: fa:8f:98:f4:a1:82:e7:d3:b9:76:c3:fc:02:c2:55: ef:74:1e:21:84:81:69:f8:1a:89:13:aa:5a:bc:85: 92:5b:5e:fc:ac:0c:5e:2d:d5:d5:65:d1:a2:0c:42: 28:51:d0:5e:88:be:27:f6:98:28:0e:db:76:67:52: 43:ea:c1:2f:ef:d0:44:e4:9e:20:ad:59:63:d3:a0: 4b:0b:cf:b7:a6:6b:de:5c:2b:f7:e8:32:a6:0a:6f: dc:bf:7a:8e:10:5c:57:01:6f:83:f0:ad:07:8a:53: bb:35:2c:07:aa:b6:45:22:ba:df:4f:1b:4f:47:f7: ff:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C3:8C:A1:4C:1B:57:97:AF:5C:F2:0B:47:53:12:55:03:12:6C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:57:76:47:14:1c:57:4f:db:9f:f0:1c:81:80:71:08:20:48: cb:04:78:f3:9a:e2:2f:b7:c5:ee:fd:49:88:58:b9:70:cb:1e: fc:c3:58:93:34:03:71:00:a3:7b:84:b8:50:64:12:24:0e:24: 85:67:99:54:b8:38:7d:39:00:17:cb:61:6a:d8:3b:e5:a7:40: cc:24:3b:b0:2e:9a:74:9c:38:60:3c:ed:2b:56:4f:9e:1d:ae: 3f:9b:79:57:21:3d:32:db:e5:00:f2:a4:d5:40:6a:90:a3:68: ab:d4:21:70:4d:a9:53:f6:04:85:ba:89:db:fc:2b:8c:5d:62: 40:14:e7:19:4b:a8:91:f7:4b:00:71:02:8e:3d:d8:6e:5f:41: 51:1a:ee:23:7e:f8:15:6e:9e:3b:1f:0b:08:ae:a3:c0:0b:25: d4:8d:9e:20:a5:6f:07:f2:7c:9c:f2:49:80:f0:b0:37:7f:0a: 23:3c:99:74:32:7a:b9:93:8c:86:22:80:47:c1:9e:84:c7:98: 5c:23:8f:9d:79:79:3b:dd:08:0d:be:8b:e3:86:5e:f7:27:50: ef:c7:a7:cf:c4:ae:9d:a3:cc:b8:af:ec:1b:94:98:0a:66:75: c1:f0:b8:ee:c4:6c:19:11:d1:d3:ea:33:cd:51:fd:72:6e:90: a0:68:df:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzGEfGxqX1LE4/ytgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk NjM2YzU3ZjUtODZlYi00NDNlLWIzZGQtYzllNzEwNGY2MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5TwEcIl0ArCGTI43a3Fy9RvjTkU2WRxnaNP cruitiIKEzKGL+PrVHHu/OUHt+lJH0j1PKusls36iCYPe1JdG7pXRiJGPtpmTy/k JaLH+IWE0WKHaOkeH+Ig2jn9sD18LOgvnlBNF3RSkXYNF/4/4zdLVJWtxS/M8QaU D8H+O7l3pDw/fJr6j5j0oYLn07l2w/wCwlXvdB4hhIFp+BqJE6pavIWSW178rAxe LdXVZdGiDEIoUdBeiL4n9pgoDtt2Z1JD6sEv79BE5J4grVlj06BLC8+3pmveXCv3 6DKmCm/cv3qOEFxXAW+D8K0HilO7NSwHqrZFIrrfTxtPR/f/ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbDjKFMG1eXr1zyC0dTElUDEmwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFXdkcUHFdP25/wHIGAcQggSMsEePOa4i+3xe79SYhYuXDLHvzDWJM0 A3EAo3uEuFBkEiQOJIVnmVS4OH05ABfLYWrYO+WnQMwkO7AumnScOGA87StWT54d rj+beVchPTLb5QDypNVAapCjaKvUIXBNqVP2BIW6idv8K4xdYkAU5xlLqJH3SwBx Ao492G5fQVEa7iN++BVunjsfCwiuo8ALJdSNniClbwfyfJzySYDwsDd/CiM8mXQy ermTjIYigEfBnoTHmFwjj515eTvdCA2+i+OGXvcnUO/Hp8/Erp2jzLiv7BuUmApm dcHwuO7EbBkR0dPqM81R/XJukKBo34o= -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:07 2026 by rpki-client