$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa File: 5878e216-f837-38e3-b277-8cb9c1df55e6.roa (raw, json) Hash identifier: ki+NAOca3yxrF27djCpWh4LVeMa5RP1M8rmxMc7n4X4= Subject key identifier: A4:F6:C3:72:7D:4B:46:C3:C6:70:A2:23:22:B8:27:A2:05:CB:F4:23 Certificate issuer: /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Certificate serial: 010D0C9F4328584D7CCFD0A9CE718DBCC92A1080 Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 30387 IP address blocks: 165.112.0.0/20 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d0:a9:ce:71:8d:bc:c9:2a:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=4a9d9f8d-fd22-46e3-8841-5b8c8f69524c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:74:e3:49:db:a4:96:6f:f1:eb:f2:e8:f0: d8:43:27:6f:df:43:3f:28:71:56:f4:cb:3c:3a:e3: f7:96:68:c9:1a:18:2f:de:b8:45:f0:7a:62:a9:d9: 37:5a:87:82:29:15:32:5c:96:09:8b:8c:14:52:00: f1:0e:42:f9:cc:d3:c2:42:14:e5:77:22:6a:37:af: c2:62:7f:b9:49:1c:f6:12:df:63:9f:f4:7f:f0:19: c0:48:f6:83:38:b3:9e:f3:9c:66:42:c5:f3:db:25: b3:d2:10:ea:c1:fc:db:6c:a4:26:14:f1:45:69:a5: c8:1b:d1:57:9c:6c:97:f4:8b:7e:e9:31:3a:13:72: df:4d:5b:6b:63:b3:13:6e:41:6a:34:27:72:2b:b0: e3:ca:f1:fb:7b:57:be:ca:7f:86:e6:a0:21:e3:d3: 3f:b3:69:b0:d2:d0:7e:92:41:7d:8a:67:41:f8:b9: 2e:3f:a4:68:d2:dc:62:8e:15:8e:0b:43:d5:20:5a: 3e:49:fe:89:bc:d9:09:d6:e8:06:1f:f3:32:ab:fe: 1e:45:11:2b:74:60:0a:36:b1:90:9f:90:87:bf:93: 3c:5d:49:38:12:ee:12:89:7b:21:1c:1b:85:d8:69: e3:7e:4a:8d:28:c1:26:cb:9a:1e:d9:c8:f0:84:be: 5e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F6:C3:72:7D:4B:46:C3:C6:70:A2:23:22:B8:27:A2:05:CB:F4:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/5878e216-f837-38e3-b277-8cb9c1df55e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl X509v3 Authority Key Identifier: keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer sbgp-ipAddrBlock: critical IPv4: 165.112.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:64:79:cf:fd:55:39:45:3d:1c:00:f3:c8:33:db:22:68:db: 5a:73:de:5c:3d:8d:75:6f:f7:3d:0c:8c:d3:35:14:9a:d2:f1: 8f:9f:cf:27:b2:83:f3:10:5c:9b:da:5e:cf:d4:1b:3e:71:98: 58:70:85:03:0a:ef:bf:46:83:69:fd:8e:8f:91:6d:e3:e0:6c: 39:b5:36:80:42:94:83:ec:b8:7a:3e:26:46:63:45:d0:2a:94: 3d:12:53:78:a0:e0:ad:aa:d9:b8:d0:4a:7c:fc:b0:14:ed:50: 1a:18:b9:9f:29:7a:fb:41:0b:42:37:69:e0:64:72:c7:57:ee: 55:ea:fc:c0:b1:dd:00:2d:e5:16:dd:5e:c4:58:f2:0f:97:1a: 20:80:ad:85:01:10:97:af:3f:0d:6d:94:bd:ce:1a:b4:ea:2c: fc:31:f4:61:3b:ce:67:ea:a1:0b:92:8e:9c:85:8d:9c:ce:89: 12:ab:57:c5:5f:f5:4e:7f:dc:1a:ab:21:24:86:a8:e4:ee:a8: cf:d4:10:64:f1:6f:79:a2:76:f6:a4:b8:f6:d4:c3:97:1e:59: e5:12:48:e1:2d:85:ba:76:73:34:80:db:8b:eb:58:97:53:9d: ca:fc:29:9f:5d:9b:2d:70:7b:06:60:3f:4e:cd:5e:8b:95:92: 71:a4:b8:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9CpznGNvMkqEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0 ZWE3MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk NGE5ZDlmOGQtZmQyMi00NmUzLTg4NDEtNWI4YzhmNjk1MjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiV040nbpJZv8evy6PDYQydv30M/KHFW9Ms8 OuP3lmjJGhgv3rhF8Hpiqdk3WoeCKRUyXJYJi4wUUgDxDkL5zNPCQhTldyJqN6/C Yn+5SRz2Et9jn/R/8BnASPaDOLOe85xmQsXz2yWz0hDqwfzbbKQmFPFFaaXIG9FX nGyX9It+6TE6E3LfTVtrY7MTbkFqNCdyK7DjyvH7e1e+yn+G5qAh49M/s2mw0tB+ kkF9imdB+LkuP6Ro0txijhWOC0PVIFo+Sf6JvNkJ1ugGH/Myq/4eRRErdGAKNrGQ n5CHv5M8XUk4Eu4SiXshHBuF2GnjfkqNKMEmy5oe2cjwhL5eXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT2w3J9S0bDxnCiIyK4J6IFy/QjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvNTg3OGUyMTYtZjgzNy0z OGUzLWIyNzctOGNiOWMxZGY1NWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5 OWIzYzRlYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpXAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExkec/9VTlFPRwA88gz2yJo21pz3lw9jXVv9z0MjNM1FJrS8Y+fzyey g/MQXJvaXs/UGz5xmFhwhQMK779Gg2n9jo+RbePgbDm1NoBClIPsuHo+JkZjRdAq lD0SU3ig4K2q2bjQSnz8sBTtUBoYuZ8pevtBC0I3aeBkcsdX7lXq/MCx3QAt5Rbd XsRY8g+XGiCArYUBEJevPw1tlL3OGrTqLPwx9GE7zmfqoQuSjpyFjZzOiRKrV8Vf 9U5/3BqrISSGqOTuqM/UEGTxb3midvakuPbUw5ceWeUSSOEthbp2czSA24vrWJdT ncr8KZ9dmy1wewZgP07NXouVknGkuIE= -----END CERTIFICATE-----Generated at Sat Apr 18 03:06:06 2026 by rpki-client