$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa File: 745cf059-f6d3-336e-a7cf-2547681d7221.roa (raw, json) Hash identifier: eo4VoRK3BQ2/+Inysf1pxPmYE3CP7qYsgMWSJ0wjcQA= Subject key identifier: D9:6B:2A:E5:6E:28:02:32:76:D4:AA:0B:76:C2:91:C1:37:6E:EE:0E Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584CFEA376666287B8C5707DA800 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:a3:76:66:62:87:b8:c5:70:7d:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=3c8a08cf-dc6f-4dd3-a894-4962d16f7560 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f0:a7:7c:6a:ec:5a:f4:24:31:10:6c:db:1a: b5:7c:10:3b:6a:41:9c:79:b2:50:23:6f:d2:94:12: e3:5e:38:20:c0:7c:16:6f:ab:df:4d:e4:f2:16:4c: ac:40:89:00:06:2d:ec:d6:e9:f0:82:ba:a6:0e:89: 8f:e4:ff:ea:db:c6:9e:3a:04:6a:48:9d:7d:da:03: 09:a6:7f:0d:68:c2:ae:ba:54:a9:af:86:57:d8:34: 54:05:5c:21:2c:99:6a:82:0a:5e:7c:d1:8c:b8:4d: 1f:86:ab:37:93:b7:5a:de:61:71:fc:ee:14:4e:4d: 51:80:d5:a4:ca:dd:2c:5a:da:22:b8:d2:8a:8b:4b: 0d:5a:0f:66:3c:7a:76:34:c2:53:54:b6:ee:04:c9: d4:7d:e4:af:87:c4:f8:fa:f1:66:72:7d:5c:bd:b6: 7b:67:3f:80:d5:95:e1:5e:df:c2:b5:0d:73:e0:cb: 77:8f:7e:39:0a:4c:09:44:bf:8c:fd:23:c6:da:7a: b0:03:33:7d:ca:a8:b1:23:d3:4f:90:f8:96:48:23: 6f:81:f1:bd:ca:b8:72:44:f1:82:3e:7e:bb:7a:d6: 13:01:69:55:0d:33:b8:ab:40:0c:e2:22:d4:cb:74: da:01:28:6d:f8:30:ff:fd:74:23:ec:9e:3a:ae:a9: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6B:2A:E5:6E:28:02:32:76:D4:AA:0B:76:C2:91:C1:37:6E:EE:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6f:0c:96:11:39:c1:50:27:f8:60:aa:4c:06:c9:1a:48:a7: 30:3b:88:b0:1e:0c:05:d0:de:c0:3c:d2:b8:fc:9b:10:4a:12: f2:6e:84:db:51:8e:aa:ff:73:9f:cb:97:c3:e1:2d:53:67:94: eb:50:7b:65:7b:f5:47:e7:89:ef:e9:22:41:81:52:c9:38:33: d9:26:46:02:44:df:da:03:81:55:11:18:b6:c2:92:99:c0:2c: ae:0d:e5:8c:3b:0f:36:97:e0:b1:68:08:6c:9f:db:91:3d:e3: d6:2b:de:6d:0b:c7:3f:51:44:2b:69:77:94:22:cc:da:b1:d8: e0:5c:27:18:b8:5c:fd:4d:01:6d:44:3f:c5:d8:3e:0e:34:29: d5:ec:2e:c1:37:f2:7c:ec:d7:11:dd:ac:73:e4:14:73:47:23: 71:87:9b:06:42:e9:e8:d4:0c:64:f5:25:62:5d:ef:41:ee:e2: 8a:ab:dd:1b:b1:ca:b2:58:f6:01:c8:a5:20:12:ef:fb:bd:fd: 1c:47:59:50:35:bc:2e:9b:cb:33:04:31:7e:11:c3:bf:15:30: e4:a1:df:46:9c:86:cb:45:65:c6:4b:00:09:92:25:4a:50:8d: 55:cd:c6:cc:ac:2b:c8:92:3d:70:a7:65:97:93:09:be:36:99: 8d:df:b0:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz+o3ZmYoe4xXB9qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk M2M4YTA4Y2YtZGM2Zi00ZGQzLWE4OTQtNDk2MmQxNmY3NTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/CnfGrsWvQkMRBs2xq1fBA7akGcebJQI2/S lBLjXjggwHwWb6vfTeTyFkysQIkABi3s1unwgrqmDomP5P/q28aeOgRqSJ192gMJ pn8NaMKuulSpr4ZX2DRUBVwhLJlqggpefNGMuE0fhqs3k7da3mFx/O4UTk1RgNWk yt0sWtoiuNKKi0sNWg9mPHp2NMJTVLbuBMnUfeSvh8T4+vFmcn1cvbZ7Zz+A1ZXh Xt/CtQ1z4Mt3j345CkwJRL+M/SPG2nqwAzN9yqixI9NPkPiWSCNvgfG9yrhyRPGC Pn67etYTAWlVDTO4q0AM4iLUy3TaASht+DD//XQj7J46rqlVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlrKuVuKAIydtSqC3bCkcE3bu4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvNzQ1Y2YwNTktZjZkMy0z MzZlLWE3Y2YtMjU0NzY4MWQ3MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhvDJYROcFQJ/hgqkwGyRpIpzA7iLAeDAXQ3sA80rj8mxBKEvJuhNtR jqr/c5/Ll8PhLVNnlOtQe2V79Ufnie/pIkGBUsk4M9kmRgJE39oDgVURGLbCkpnA LK4N5Yw7DzaX4LFoCGyf25E949Yr3m0Lxz9RRCtpd5QizNqx2OBcJxi4XP1NAW1E P8XYPg40KdXsLsE38nzs1xHdrHPkFHNHI3GHmwZC6ejUDGT1JWJd70Hu4oqr3Rux yrJY9gHIpSAS7/u9/RxHWVA1vC6byzMEMX4Rw78VMOSh30achstFZcZLAAmSJUpQ jVXNxsysK8iSPXCnZZeTCb42mY3fsCs= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:01 2026 by rpki-client