$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa File: e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json) Hash identifier: J40+TTzTE5f0j/1K/cWVkXQkyO2esJzWP2ciNMy8abY= Subject key identifier: 68:38:21:A9:F0:6E:3B:2E:9C:CF:1F:FE:B6:4F:6E:85:58:D3:BA:5F Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584D4D5A70679FE8B012320B3C00 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 8987 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:70:67:9f:e8:b0:12:32:0b:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a5d950ce-a626-41a3-b0db-fb4e7dfccf1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:47:6a:77:d5:24:b4:a7:27:f9:4b:f2:f4:f9: 05:ae:6d:c8:b1:7c:d8:01:34:47:b4:cd:04:5c:c2: 85:d3:d7:ca:10:a5:70:d1:de:bb:1c:cc:21:2a:25: 32:5e:e1:8c:f6:25:d7:48:ca:6f:80:af:63:f3:27: 42:44:5e:8e:98:18:a6:84:90:3c:50:d4:b8:6a:c6: 96:cf:96:c4:82:21:11:2f:75:7d:e0:d3:80:d7:29: d4:ee:9e:59:ba:2b:c9:6e:51:a6:e5:00:c0:db:95: 2f:2d:26:2d:01:e8:ab:29:4d:1d:33:12:0d:8f:84: c1:15:f8:df:67:8b:a2:96:c5:08:d4:a1:a3:2e:39: dc:37:50:de:5b:af:1e:23:f7:2e:28:67:a2:5f:89: fe:4d:fb:77:9a:b7:97:7a:b0:cf:d3:d2:7e:06:08: 62:d9:b5:35:54:82:10:21:c2:db:c3:ff:5a:f2:4f: 04:46:96:a2:f6:8e:f3:7d:47:e3:3a:89:4d:fc:b6: 53:e3:5a:55:8f:af:be:b4:ad:a1:97:1f:a6:c3:9b: 01:cc:02:3c:87:48:95:d5:f9:4b:2f:7e:b2:13:2d: 15:f2:02:43:8d:a7:c4:e4:69:9c:61:f9:5c:45:46: 90:af:8c:ab:d8:31:ce:e2:8b:df:41:5b:51:f5:3d: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:38:21:A9:F0:6E:3B:2E:9C:CF:1F:FE:B6:4F:6E:85:58:D3:BA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:56:bc:e0:e9:aa:9c:d2:28:c0:d8:da:88:60:95:80:2b:b8: 87:ae:80:05:84:a9:92:7e:9f:2a:97:93:7f:4c:d9:1c:1d:27: 39:65:35:91:5c:2a:47:95:84:99:6b:d9:5d:ea:aa:19:39:53: 88:e6:af:08:02:d8:f9:26:79:07:90:fd:be:dd:f3:d7:b7:47: f5:2e:19:db:cc:af:7e:f3:d2:23:f7:69:30:0a:d6:85:40:a7: 02:f7:02:6e:79:e3:cf:5c:8d:79:11:01:4f:0e:9f:df:3a:b9: 55:08:39:75:f7:ab:ef:6f:0c:0c:2e:33:74:8f:ed:8a:8d:0b: ba:7e:4b:8c:7f:40:70:82:d6:53:ff:6a:53:ee:eb:88:10:21: fe:5b:df:bc:54:ed:0b:a8:ad:dc:6d:b9:e6:52:d9:b9:98:32: db:3e:3f:be:35:be:56:28:0f:a7:29:12:02:5a:16:51:78:aa: 1d:68:39:c2:34:27:e6:0d:32:07:11:7a:b3:3b:a3:7a:e7:b3: 54:85:24:fa:d6:d8:d6:e8:cb:18:ae:6e:f0:ac:4b:68:94:ee: 75:e6:24:a0:40:12:f6:80:3a:c2:26:50:89:b1:02:91:aa:1b: 78:9e:db:78:1b:e6:05:f5:59:8b:78:c9:70:13:e3:38:ef:f3: 76:f9:76:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnBnn+iwEjILPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTVkOTUwY2UtYTYyNi00MWEzLWIwZGItZmI0ZTdkZmNjZjFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUdqd9UktKcn+Uvy9PkFrm3IsXzYATRHtM0E XMKF09fKEKVw0d67HMwhKiUyXuGM9iXXSMpvgK9j8ydCRF6OmBimhJA8UNS4asaW z5bEgiERL3V94NOA1ynU7p5ZuivJblGm5QDA25UvLSYtAeirKU0dMxINj4TBFfjf Z4uilsUI1KGjLjncN1DeW68eI/cuKGeiX4n+Tft3mreXerDP09J+Bghi2bU1VIIQ IcLbw/9a8k8ERpai9o7zfUfjOolN/LZT41pVj6++tK2hlx+mw5sBzAI8h0iV1flL L36yEy0V8gJDjafE5GmcYflcRUaQr4yr2DHO4ovfQVtR9T1FpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGg4IanwbjsunM8f/rZPboVY07pfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZTBlNDQ5NzAtMmY4Ny0z NmJlLWI0YjgtNmUzZGFlOWYxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIxWvODpqpzSKMDY2ohglYAruIeugAWEqZJ+nyqXk39M2RwdJzllNZFc KkeVhJlr2V3qqhk5U4jmrwgC2PkmeQeQ/b7d89e3R/UuGdvMr37z0iP3aTAK1oVA pwL3Am55489cjXkRAU8On986uVUIOXX3q+9vDAwuM3SP7YqNC7p+S4x/QHCC1lP/ alPu64gQIf5b37xU7QuordxtueZS2bmYMts+P741vlYoD6cpEgJaFlF4qh1oOcI0 J+YNMgcRerM7o3rns1SFJPrW2NboyxiubvCsS2iU7nXmJKBAEvaAOsImUImxApGq G3ie23gb5gX1WYt4yXAT4zjv83b5diA= -----END CERTIFICATE-----Generated at Fri Apr 17 10:40:55 2026 by rpki-client