$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa File: c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json) Hash identifier: Q8GerkSV5H9PZRhRqoPtZdDL3vZCZ3JJf6t+vOLFpGs= Subject key identifier: 2B:E5:16:FB:DF:4F:6E:48:96:F8:73:1E:E6:82:F4:6C:72:D7:3C:18 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584CFEA39CF57BFDA552546D1100 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa Signing time: Tue 06 Jan 2026 02:00:31 +0000 ROA not before: Tue 06 Jan 2026 02:00:31 +0000 ROA not after: Mon 06 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fe:a3:9c:f5:7b:fd:a5:52:54:6d:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Jan 6 02:00:31 2026 GMT Not After : Apr 6 01:00:31 2026 GMT Subject: CN=e40ce743-d30b-43d9-83e4-659882ce424d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:3f:32:52:d0:bc:0d:ec:c0:59:62:6a:77: 78:fd:05:52:69:9c:00:34:52:64:4a:f5:ca:d7:39: e2:0f:2c:20:a9:3c:23:80:7b:64:5c:73:44:e5:77: 30:ae:8f:10:e3:65:04:66:58:64:7a:4c:6a:86:72: b3:bf:9d:20:6f:56:d0:69:22:63:2e:7e:bd:53:c2: d9:0c:36:33:7a:f2:80:ac:01:31:a2:91:e9:c2:9b: 5d:29:31:4b:36:9b:be:34:da:8c:c9:ec:05:8f:49: 17:44:90:b6:a4:bb:c1:85:fb:fc:f0:af:6f:3e:bb: ec:5f:97:61:55:97:47:e7:82:88:82:a2:fb:06:47: 7e:81:f6:a3:ea:18:47:5b:1d:20:b3:95:d9:0e:45: d2:3f:7c:90:b2:8b:ac:dc:79:53:65:57:63:20:07: 48:a4:99:24:89:46:93:7b:5b:5a:79:e3:ec:25:76: ec:01:e3:35:d1:4f:1b:b5:e0:c9:33:34:ca:01:76: 5b:ea:b3:05:d4:d1:ed:5c:77:47:d2:e7:ec:d1:e0: e3:d4:2e:34:64:41:8d:2e:da:ee:14:7e:19:a4:b0: 19:68:f5:44:f3:e7:3d:fb:9d:f7:06:40:b7:fd:bf: e2:3f:25:58:8d:cf:de:5b:47:96:80:8f:6e:e1:9b: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E5:16:FB:DF:4F:6E:48:96:F8:73:1E:E6:82:F4:6C:72:D7:3C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:c8:97:3b:51:b5:22:92:c8:80:f9:ad:41:cb:6a:eb:31:c8: ea:41:60:77:a2:3c:68:81:1f:06:d8:e7:6b:be:a2:ba:c7:13: 00:59:61:44:43:b4:80:8f:23:f6:6f:cb:f5:dd:5d:56:f1:af: a6:00:79:c6:67:ad:b9:5f:b0:63:11:d7:e8:69:38:2c:7a:d2: 9c:9f:df:df:3b:f1:ef:b0:0b:93:c1:31:14:96:10:4f:ab:be: 0f:91:e3:75:a9:a1:9c:17:e8:1e:4f:64:7f:ee:80:da:c5:c3: b5:52:63:3e:fa:69:b2:8b:39:1f:b5:d9:76:a0:b3:8a:41:f5: 03:a5:97:00:ee:e5:d9:a6:18:cd:3e:9c:d2:5d:37:cd:42:6a: b7:08:a4:4f:a0:13:1a:ca:12:8d:7a:8e:e9:c5:0d:d8:81:4c: 03:2e:cc:12:bb:e9:da:35:e7:f3:f6:2e:13:fb:a5:38:fa:0c: 6f:59:12:24:80:fe:06:cf:ae:78:00:88:f7:10:89:82:ab:e0: 7c:7c:ee:ad:a9:15:9b:fd:6c:d8:9e:c8:e2:10:0d:77:89:33: 1d:b3:51:d0:fc:f0:17:cd:49:d5:db:15:6d:b8:63:3c:95:28: 4e:31:d6:0f:87:e2:84:e7:6e:90:91:b1:25:fb:62:9a:01:2e: 4f:6f:e3:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz+o5z1e/2lUlRtEQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk ZTQwY2U3NDMtZDMwYi00M2Q5LTgzZTQtNjU5ODgyY2U0MjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbs/MlLQvA3swFliand4/QVSaZwANFJkSvXK 1zniDywgqTwjgHtkXHNE5Xcwro8Q42UEZlhkekxqhnKzv50gb1bQaSJjLn69U8LZ DDYzevKArAExopHpwptdKTFLNpu+NNqMyewFj0kXRJC2pLvBhfv88K9vPrvsX5dh VZdH54KIgqL7Bkd+gfaj6hhHWx0gs5XZDkXSP3yQsous3HlTZVdjIAdIpJkkiUaT e1taeePsJXbsAeM10U8bteDJMzTKAXZb6rMF1NHtXHdH0ufs0eDj1C40ZEGNLtru FH4ZpLAZaPVE8+c9+533BkC3/b/iPyVYjc/eW0eWgI9u4ZtYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvlFvvfT25IlvhzHuaC9Gxy1zwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjIlztRtSKSyID5rUHLausxyOpBYHeiPGiBHwbY52u+orrHEwBZYURD tICPI/Zvy/XdXVbxr6YAecZnrblfsGMR1+hpOCx60pyf39878e+wC5PBMRSWEE+r vg+R43WpoZwX6B5PZH/ugNrFw7VSYz76abKLOR+12Xags4pB9QOllwDu5dmmGM0+ nNJdN81CarcIpE+gExrKEo16junFDdiBTAMuzBK76do15/P2LhP7pTj6DG9ZEiSA /gbPrngAiPcQiYKr4Hx87q2pFZv9bNieyOIQDXeJMx2zUdD88BfNSdXbFW24YzyV KE4x1g+H4oTnbpCRsSX7YpoBLk9v4zk= -----END CERTIFICATE-----Generated at Sun Mar 1 23:09:49 2026 by rpki-client