$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa File: 7cfb3343-9794-3299-b118-155e595370a9.roa (raw, json) Hash identifier: uaegjhaUOAsCmm+y+1F0l2iJdI7l6LIo+u70Oi6pL4Q= Subject key identifier: 11:09:D7:4A:A5:54:D6:DC:4E:05:B4:A6:1D:A4:4E:E2:86:65:B8:02 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584CB81C880E9688575501A77980 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa Signing time: Sun 01 Feb 2026 14:00:40 +0000 ROA not before: Sun 01 Feb 2026 14:00:40 +0000 ROA not after: Sat 02 May 2026 13:00:40 +0000 asID: 399672 IP address blocks: 165.140.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b8:1c:88:0e:96:88:57:55:01:a7:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Feb 1 14:00:40 2026 GMT Not After : May 2 13:00:40 2026 GMT Subject: CN=f72f4fdc-890b-44ae-b883-7158c880e22a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e4:e4:e6:d4:34:25:fb:37:09:10:fe:75:7e: ad:32:7b:77:45:f9:55:57:3c:95:4e:a8:4d:34:ea: ad:e0:8a:b6:04:39:cf:b1:3f:37:2d:5a:78:d5:62: 7b:a6:ae:08:98:f5:24:d5:36:1f:d0:b0:27:64:05: 4c:3f:8b:e9:43:fe:63:e2:83:21:d1:30:9e:4d:93: de:f2:9f:b7:9b:f3:1b:47:66:07:3b:42:8c:be:a9: 72:e7:a4:0c:73:c8:85:c9:9a:61:ee:a3:aa:65:6b: 2a:b1:a5:d6:4c:1b:b0:12:68:c4:96:e7:81:85:97: ea:72:f1:33:7e:ff:f9:d7:aa:53:7b:2f:3a:fd:0d: 4e:f1:03:cf:94:f0:47:03:21:05:7f:1d:b8:3f:12: 1c:bf:0b:1a:ea:aa:29:f7:17:c5:cf:b4:f6:1c:77: 3a:50:b1:9c:ab:f9:ec:de:23:08:26:75:35:e7:78: 71:d6:5d:1e:8f:3d:d9:05:8e:54:ce:76:92:88:b4: 98:14:bf:9d:78:8f:f3:f8:d2:ea:77:86:57:26:de: 4b:36:fe:57:2e:85:36:5f:28:40:01:12:91:97:11: 94:c2:94:76:be:5c:b8:14:85:06:32:e5:f6:5f:29: fc:32:de:87:0a:5e:2f:8e:44:82:84:b8:53:22:11: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:09:D7:4A:A5:54:D6:DC:4E:05:B4:A6:1D:A4:4E:E2:86:65:B8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 165.140.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7e:8b:23:33:8a:7e:0a:f0:72:78:2a:f4:89:3e:ce:6a:48: 53:c6:cd:03:03:73:dd:5d:a2:0a:a3:0b:b0:f3:4c:ed:62:43: 19:cc:29:7a:16:44:01:27:d4:af:ed:8a:41:1a:b8:62:1f:1e: cb:3d:4e:f6:53:35:13:4c:c1:51:dd:b1:1a:00:e2:58:49:bf: 3e:fb:a6:da:16:ce:e1:4c:df:e1:c7:e7:04:19:88:73:26:ea: fd:53:c0:15:91:07:05:17:1a:5d:34:55:a6:ce:36:16:2e:6e: 56:f3:ec:2e:eb:f5:54:15:52:10:fd:52:c4:4b:ea:8b:8c:5c: b1:a4:d1:a9:06:45:56:6a:04:b4:60:9f:0a:7e:cf:19:db:9e: ea:0e:3e:13:dd:c2:f4:a8:f7:c3:a4:72:ad:ef:35:81:59:43: 21:d1:2e:fd:28:2c:ab:ee:eb:cc:65:92:55:60:55:5f:bb:e6: a8:76:9e:3c:db:d4:d3:66:4c:3d:20:cd:87:d4:87:42:fa:25: 7d:af:42:47:15:e5:06:46:63:2c:cc:bd:e1:45:34:be:a0:08: 0b:15:22:07:ff:d3:6e:e1:c6:09:8e:46:22:08:a6:37:93:b9: aa:73:1b:bf:d9:65:95:57:7e:aa:e1:3c:f8:3d:e0:23:dd:0e: e5:c5:af:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy4HIgOlohXVQGneYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDIwMTE0MDA0MFoXDTI2MDUwMjEzMDA0MFowLzEtMCsGA1UEAxMk ZjcyZjRmZGMtODkwYi00NGFlLWI4ODMtNzE1OGM4ODBlMjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouTk5tQ0Jfs3CRD+dX6tMnt3RflVVzyVTqhN NOqt4Iq2BDnPsT83LVp41WJ7pq4ImPUk1TYf0LAnZAVMP4vpQ/5j4oMh0TCeTZPe 8p+3m/MbR2YHO0KMvqly56QMc8iFyZph7qOqZWsqsaXWTBuwEmjElueBhZfqcvEz fv/516pTey86/Q1O8QPPlPBHAyEFfx24PxIcvwsa6qop9xfFz7T2HHc6ULGcq/ns 3iMIJnU153hx1l0ejz3ZBY5UznaSiLSYFL+deI/z+NLqd4ZXJt5LNv5XLoU2XyhA ARKRlxGUwpR2vly4FIUGMuX2Xyn8Mt6HCl4vjkSChLhTIhEz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEJ10qlVNbcTgW0ph2kTuKGZbgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2NmYjMzNDMtOTc5NC0z Mjk5LWIxMTgtMTU1ZTU5NTM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ+iyMzin4K8HJ4KvSJPs5qSFPGzQMDc91dogqjC7DzTO1iQxnMKXoW RAEn1K/tikEauGIfHss9TvZTNRNMwVHdsRoA4lhJvz77ptoWzuFM3+HH5wQZiHMm 6v1TwBWRBwUXGl00VabONhYublbz7C7r9VQVUhD9UsRL6ouMXLGk0akGRVZqBLRg nwp+zxnbnuoOPhPdwvSo98Okcq3vNYFZQyHRLv0oLKvu68xlklVgVV+75qh2njzb 1NNmTD0gzYfUh0L6JX2vQkcV5QZGYyzMveFFNL6gCAsVIgf/027hxgmORiIIpjeT uapzG7/ZZZVXfqrhPPg94CPdDuXFrzg= -----END CERTIFICATE-----Generated at Sun Mar 1 23:30:54 2026 by rpki-client