$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa File: c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json) Hash identifier: Y4HnC8sbY80mP5iEJa8r8ytD6FFM++nlURQ+amj8uh8= Subject key identifier: F4:9B:DA:76:EA:A6:E1:AD:8B:A6:16:72:D6:CD:04:A3:7B:00:A5:4D Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584D4D5A708463EC297EA6C9A880 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:70:84:63:ec:29:7e:a6:c9:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=899781c6-955f-4eb2-9efb-dfd0decba6ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:59:e7:78:2b:df:4e:4a:11:1c:7d:32:4b:3f: 39:8e:bd:5c:a5:13:02:93:a0:8f:4f:2c:12:f9:11: d7:03:a9:9e:55:19:8c:58:69:57:e9:ae:1e:f5:b9: e2:f8:64:88:b4:c0:6b:9f:92:b4:30:94:64:21:74: 07:e1:7a:7b:1a:bd:6f:9b:5c:a4:93:81:8f:a7:64: c6:1e:46:38:30:4c:eb:82:0d:e1:96:64:ad:3a:fa: 9a:68:98:34:25:96:11:22:f8:85:93:bc:32:9c:aa: 09:76:c7:57:5b:f9:c5:7b:3c:39:6f:1a:ee:52:47: 38:d9:7a:29:7d:cd:11:ae:3a:51:c1:80:2f:91:07: ea:45:55:f9:29:07:18:b3:6c:63:36:41:e4:32:9c: 83:6c:e2:12:87:27:13:af:01:aa:9c:12:84:01:99: b5:d8:92:5b:6a:e4:9d:3d:c1:2d:c1:b5:66:f3:5d: 1a:0d:5f:e1:6a:13:23:40:6f:fb:95:dc:26:e4:e6: 6e:75:ec:3c:e3:69:77:26:19:e8:45:d1:77:26:bf: 5b:2c:07:f5:f4:de:bd:ba:bd:2a:57:6e:a8:41:c2: 45:11:e1:65:ff:f8:61:ac:a9:7f:c4:7f:0e:6b:b8: 68:dd:a3:6b:1a:13:78:cf:2e:fd:11:19:10:99:3d: 6d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9B:DA:76:EA:A6:E1:AD:8B:A6:16:72:D6:CD:04:A3:7B:00:A5:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:e3:5c:70:de:11:fa:9b:a8:55:71:6c:51:2f:71:6d:39:ee: 33:fa:3d:83:1f:d9:52:ed:43:12:21:55:7e:9a:cc:6f:2a:91: 55:cd:96:25:55:0c:9e:70:db:26:bf:95:70:37:64:58:66:01: 0d:87:a7:a2:fe:63:5a:41:27:ee:b3:66:0d:c9:5e:06:b3:ab: 1a:bc:77:72:18:fa:ba:55:68:c8:ba:66:9e:36:1b:53:c9:f9: 88:04:82:bf:45:0e:78:9e:95:31:8c:01:50:cc:26:a8:49:9f: a3:b2:d5:4a:bf:37:92:7f:33:6f:93:8c:c0:de:89:97:34:85: d4:7d:5a:a5:e8:1f:d2:d1:9c:1c:63:33:f3:a6:24:bd:62:07: 62:c8:9b:b6:03:e5:ac:73:b4:19:58:b9:51:3a:a5:03:29:eb: 20:7d:1d:33:f9:dc:82:eb:af:1e:ce:9c:8d:a3:86:dc:35:00: d1:36:b4:c5:bd:3a:9c:2b:11:ca:9d:6d:99:70:04:d9:a3:66: 2f:ed:be:c1:08:a5:fc:90:e5:47:b3:32:06:55:fd:e9:d5:7e: 32:92:66:d1:d0:86:fe:7a:08:44:91:9f:dd:da:01:5c:67:ab: 2d:d4:5e:3c:5c:53:f8:b0:cc:af:4f:64:9a:e5:9b:9a:90:6c: a8:df:a8:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnCEY+wpfqbJqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ODk5NzgxYzYtOTU1Zi00ZWIyLTllZmItZGZkMGRlY2JhNmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllnneCvfTkoRHH0ySz85jr1cpRMCk6CPTywS +RHXA6meVRmMWGlX6a4e9bni+GSItMBrn5K0MJRkIXQH4Xp7Gr1vm1ykk4GPp2TG HkY4MEzrgg3hlmStOvqaaJg0JZYRIviFk7wynKoJdsdXW/nFezw5bxruUkc42Xop fc0RrjpRwYAvkQfqRVX5KQcYs2xjNkHkMpyDbOIShycTrwGqnBKEAZm12JJbauSd PcEtwbVm810aDV/hahMjQG/7ldwm5OZudew842l3JhnoRdF3Jr9bLAf19N69ur0q V26oQcJFEeFl//hhrKl/xH8Oa7ho3aNrGhN4zy79ERkQmT1tqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSb2nbqpuGti6YWctbNBKN7AKVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnjXHDeEfqbqFVxbFEvcW057jP6PYMf2VLtQxIhVX6azG8qkVXNliVV DJ5w2ya/lXA3ZFhmAQ2Hp6L+Y1pBJ+6zZg3JXgazqxq8d3IY+rpVaMi6Zp42G1PJ +YgEgr9FDnielTGMAVDMJqhJn6Oy1Uq/N5J/M2+TjMDeiZc0hdR9WqXoH9LRnBxj M/OmJL1iB2LIm7YD5axztBlYuVE6pQMp6yB9HTP53ILrrx7OnI2jhtw1ANE2tMW9 OpwrEcqdbZlwBNmjZi/tvsEIpfyQ5UezMgZV/enVfjKSZtHQhv56CESRn93aAVxn qy3UXjxcU/iwzK9PZJrlm5qQbKjfqBE= -----END CERTIFICATE-----Generated at Fri Apr 17 11:31:17 2026 by rpki-client