$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa File: 791737a9-6ef5-349f-8551-4e4fe0275515.roa (raw, json) Hash identifier: 0Wg7+MWBmLVH9KwmA0JB9/OCF9MHYeKt0BuJi0ZWkHQ= Subject key identifier: 65:DE:51:48:33:27:A7:8E:C9:CE:FD:99:85:9F:7B:80:7D:5A:3D:D4 Certificate issuer: /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Certificate serial: 010D0C9F4328584D037D19A92B2F8DE0D0F3F380 Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 14048 IP address blocks: 141.225.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:19:a9:2b:2f:8d:e0:d0:f3:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412 Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=a2da191c-db40-435e-8abc-e953e99c3d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:fe:c6:f4:6b:40:17:4f:77:95:a3:fa:49:88: e6:73:82:22:64:1a:de:b8:03:fa:4f:09:0d:f0:2a: 47:0b:7a:80:54:12:c6:74:38:a3:c3:e3:81:d2:4f: 4a:bc:6a:d5:15:4d:a6:c4:f7:e8:9b:17:8b:a6:02: 6f:83:e3:28:85:4c:46:01:7b:0c:2f:45:6a:3a:9d: eb:d0:61:0d:7f:6c:e9:66:4f:81:8d:c9:71:89:72: b7:71:49:16:22:1d:0c:b7:b3:1c:62:82:ad:b7:f8: 79:10:4a:18:f6:45:7a:97:57:6b:58:e8:29:cf:33: fb:4b:27:a0:63:4e:74:f4:de:df:1b:71:22:5e:64: 6c:a9:45:6e:9a:5f:45:ae:04:75:62:10:0f:e2:e2: 59:8d:55:cb:3c:6c:39:13:bc:f5:2e:6f:1e:1d:25: 17:05:ef:a9:1d:db:44:1c:f3:b3:1f:76:78:5b:a6: e1:09:d1:54:66:c8:43:16:45:34:37:57:fb:71:84: d6:34:93:5e:57:b4:6d:91:fe:57:b2:d8:13:33:e8: 15:20:56:80:a5:df:fb:c5:90:3c:09:77:0b:85:eb: 2c:83:bf:61:8f:8d:de:38:f3:ad:5e:e6:99:ea:62: 0a:2b:2a:a4:17:24:b2:89:1f:b7:fc:c4:4e:3f:c3: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:DE:51:48:33:27:A7:8E:C9:CE:FD:99:85:9F:7B:80:7D:5A:3D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/791737a9-6ef5-349f-8551-4e4fe0275515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl X509v3 Authority Key Identifier: keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer sbgp-ipAddrBlock: critical IPv4: 141.225.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:8a:0d:53:cb:fc:dc:f8:0f:bd:f0:73:20:d3:d0:7c:a0:5e: c1:4e:43:76:34:8a:bb:d5:3e:10:93:51:c8:db:cf:9a:16:20: 02:ae:b8:cc:5f:68:a9:5c:b1:41:fe:ef:4b:65:0e:30:90:e4: 7d:18:45:b1:a0:39:43:df:9f:d0:41:bd:89:5c:8a:62:8f:1d: 75:80:f9:cc:65:da:79:ec:51:5f:4d:28:e6:ed:6c:a8:b4:f5: 36:42:88:e0:33:ae:3b:9a:9b:83:d0:60:3c:26:4b:40:5d:c3: 2b:0d:bc:61:6d:d8:2a:5d:a1:1b:5c:75:12:26:63:96:39:e4: 89:ee:ad:1b:90:1a:a4:03:a3:55:d1:95:1a:44:23:05:5c:54: b0:7f:0a:19:44:a9:a2:01:c0:93:2c:97:4a:06:73:c3:10:54: 37:d8:6b:e2:bb:33:18:86:55:bd:22:dc:67:36:16:c0:09:b4: 1d:f5:53:f0:a1:17:1b:54:10:3e:15:4c:29:19:03:74:f5:83: cf:6b:8e:08:e1:50:39:4a:a0:ba:11:f4:da:b4:ec:80:b5:f9: 51:3f:5b:da:fb:1a:36:ad:9a:d9:e5:2b:1c:f4:88:9e:58:02: 3b:e1:98:5b:0c:4c:9c:de:f2:99:eb:37:33:95:b0:b0:bc:97: 7a:de:e8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfRmpKy+N4NDz84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVlZmRkNzktYTJjMi00ZmQ0LWFkMWEtNWQ1Mzg0MTM4 NDEyMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YTJkYTE5MWMtZGI0MC00MzVlLThhYmMtZTk1M2U5OWMzZDkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgP7G9GtAF093laP6SYjmc4IiZBreuAP6TwkN 8CpHC3qAVBLGdDijw+OB0k9KvGrVFU2mxPfomxeLpgJvg+MohUxGAXsML0VqOp3r 0GENf2zpZk+BjclxiXK3cUkWIh0Mt7McYoKtt/h5EEoY9kV6l1drWOgpzzP7Syeg Y0509N7fG3EiXmRsqUVuml9FrgR1YhAP4uJZjVXLPGw5E7z1Lm8eHSUXBe+pHdtE HPOzH3Z4W6bhCdFUZshDFkU0N1f7cYTWNJNeV7Rtkf5XstgTM+gVIFaApd/7xZA8 CXcLhessg79hj43eOPOtXuaZ6mIKKyqkFySyiR+3/MROP8PxSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXeUUgzJ6eOyc79mYWfe4B9Wj3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWVm ZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUzODQxMzg0MTIvNzkxNzM3YTktNmVmNS0z NDlmLTg1NTEtNGU0ZmUwMjc1NTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVlZmRkNzktYTJjMi00ZmQ0LWFk MWEtNWQ1Mzg0MTM4NDEyLzY1ZWZkZDc5LWEyYzItNGZkNC1hZDFhLTVkNTM4NDEz ODQxMi5jcmwwHwYDVR0jBBgwFoAUrBLkmEvyBzypjD+IIQbdJmX8XKYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWVmZGQ3OS1hMmMyLTRmZDQtYWQxYS01ZDUz ODQxMzg0MTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjeEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOKDVPL/Nz4D73wcyDT0HygXsFOQ3Y0irvVPhCTUcjbz5oWIAKuuMxf aKlcsUH+70tlDjCQ5H0YRbGgOUPfn9BBvYlcimKPHXWA+cxl2nnsUV9NKObtbKi0 9TZCiOAzrjuam4PQYDwmS0BdwysNvGFt2CpdoRtcdRImY5Y55InurRuQGqQDo1XR lRpEIwVcVLB/ChlEqaIBwJMsl0oGc8MQVDfYa+K7MxiGVb0i3Gc2FsAJtB31U/Ch FxtUED4VTCkZA3T1g89rjgjhUDlKoLoR9Nq07IC1+VE/W9r7GjatmtnlKxz0iJ5Y AjvhmFsMTJze8pnrNzOVsLC8l3re6KA= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:39 2026 by rpki-client