$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa File: 41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa (raw, json) Hash identifier: RuguUjCDT7W+kWM4fR0hS2MLBzKyN9ncFYHxNYsT9aY= Subject key identifier: 5F:3B:4B:D4:A4:C8:FF:F4:25:DB:56:A6:0A:36:08:EB:6A:6F:93:0E Certificate issuer: /CN=70ddad33-55eb-4125-9221-0129168a645b Certificate serial: 010D0C9F4328584D7B6A8890BB855A8664C16C80 Authority key identifier: 7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 400341 IP address blocks: 165.140.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:88:90:bb:85:5a:86:64:c1:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70ddad33-55eb-4125-9221-0129168a645b Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=b31521f1-0afb-45cf-bad8-274e0a731ec3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5c:d2:e4:cd:fa:bb:87:45:7e:ae:1e:2b:e6: 42:da:55:13:fd:6f:03:9d:20:22:aa:10:6f:ef:0d: d9:a8:4f:3f:6b:ec:0e:d2:40:9d:2b:42:95:f2:87: 11:59:9d:06:7a:c6:de:bf:64:9c:f7:ec:4b:9a:20: 3b:4f:39:f7:b0:82:47:a6:ee:a1:2a:d7:59:f6:f4: b3:89:fb:2e:3b:5e:12:e5:2e:38:a5:84:71:14:1c: d1:12:de:28:6f:d4:b5:f6:59:b8:e4:4d:d2:6f:f0: 65:cc:08:3e:23:a7:15:38:46:b9:7d:e5:2a:da:70: 8a:81:d9:7e:a0:91:c1:c3:f5:75:d0:d9:02:b9:03: 3f:a0:d9:80:53:65:4f:9a:33:af:b2:99:8c:49:f9: 24:38:70:c2:e2:b6:d1:64:e8:af:31:45:8d:08:26: 80:be:23:fa:63:08:eb:f0:92:0a:33:5a:4d:94:90: 89:ad:d4:ad:11:84:1f:72:c4:99:ad:1f:a5:f8:cc: 54:53:c0:e8:56:40:9b:08:3b:a2:18:fc:df:64:b4: 66:71:98:5e:6c:77:2c:6b:22:b3:71:a6:ca:d5:73: f6:ea:f4:16:80:2a:2c:de:9e:90:45:5d:c2:d1:ef: 8e:60:41:86:72:c0:79:69:c9:9b:f5:c5:07:2b:49: 95:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:3B:4B:D4:A4:C8:FF:F4:25:DB:56:A6:0A:36:08:EB:6A:6F:93:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/41138728-4b0a-33e7-a5bd-ea7cb42a601e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b/70ddad33-55eb-4125-9221-0129168a645b.crl X509v3 Authority Key Identifier: keyid:7F:4C:A4:22:A3:CB:BB:A5:D6:77:9C:25:01:F3:7F:E5:D9:0E:B4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70ddad33-55eb-4125-9221-0129168a645b.cer sbgp-ipAddrBlock: critical IPv4: 165.140.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:73:f9:59:f0:05:87:9d:59:42:6c:41:4e:71:a6:6d:f3:34: 57:d3:fc:df:40:87:5c:bf:c6:fa:30:85:57:17:9f:5c:1e:1e: da:80:9e:42:ce:2f:df:a5:8a:97:d1:08:e8:83:03:64:4d:5d: 09:8a:14:86:cc:4e:f1:55:16:f9:0a:32:24:a3:71:ff:ab:1f: 2b:cb:a0:9a:7c:41:86:72:95:86:b6:ec:2a:6d:1e:78:08:06: dd:03:1c:37:ab:f0:dd:30:7f:05:e8:a4:6c:85:9c:11:58:97: 63:d1:1c:dd:d6:11:74:45:50:4d:41:22:6b:71:2d:46:83:98: bd:8d:57:31:12:66:4d:cc:99:3b:bf:8e:37:a1:24:3b:25:b5: 5a:f5:34:8c:79:ea:9b:28:f8:09:96:c7:c1:71:b9:6d:c8:32: a6:54:f4:38:e1:be:b6:60:2c:a7:40:ab:36:b3:f5:e1:2b:cd: 0e:ee:96:4b:24:ab:79:84:ba:e3:c0:fd:01:81:b0:46:f9:73: a6:d9:09:45:0a:e5:4c:73:92:40:18:fa:c3:46:2c:e9:52:58: 66:bf:07:b3:a6:9c:d4:4c:dd:cb:21:50:dd:89:6f:13:21:22: ec:2e:a9:7b:b4:14:29:a8:a6:8e:6e:61:ff:af:c3:80:9f:92: cf:92:f1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17aoiQu4VahmTBbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzBkZGFkMzMtNTVlYi00MTI1LTkyMjEtMDEyOTE2OGE2 NDViMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk YjMxNTIxZjEtMGFmYi00NWNmLWJhZDgtMjc0ZTBhNzMxZWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFzS5M36u4dFfq4eK+ZC2lUT/W8DnSAiqhBv 7w3ZqE8/a+wO0kCdK0KV8ocRWZ0Gesbev2Sc9+xLmiA7Tzn3sIJHpu6hKtdZ9vSz ifsuO14S5S44pYRxFBzREt4ob9S19lm45E3Sb/BlzAg+I6cVOEa5feUq2nCKgdl+ oJHBw/V10NkCuQM/oNmAU2VPmjOvspmMSfkkOHDC4rbRZOivMUWNCCaAviP6Ywjr 8JIKM1pNlJCJrdStEYQfcsSZrR+l+MxUU8DoVkCbCDuiGPzfZLRmcZhebHcsayKz cabK1XP26vQWgCos3p6QRV3C0e+OYEGGcsB5acmb9cUHK0mVrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF87S9SkyP/0JdtWpgo2COtqb5MOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83MGRk YWQzMy01NWViLTQxMjUtOTIyMS0wMTI5MTY4YTY0NWIvNDExMzg3MjgtNGIwYS0z M2U3LWE1YmQtZWE3Y2I0MmE2MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzBkZGFkMzMtNTVlYi00MTI1LTky MjEtMDEyOTE2OGE2NDViLzcwZGRhZDMzLTU1ZWItNDEyNS05MjIxLTAxMjkxNjhh NjQ1Yi5jcmwwHwYDVR0jBBgwFoAUf0ykIqPLu6XWd5wlAfN/5dkOtL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83MGRkYWQzMy01NWViLTQxMjUtOTIyMS0wMTI5 MTY4YTY0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9z+VnwBYedWUJsQU5xpm3zNFfT/N9Ah1y/xvowhVcXn1weHtqAnkLO L9+lipfRCOiDA2RNXQmKFIbMTvFVFvkKMiSjcf+rHyvLoJp8QYZylYa27CptHngI Bt0DHDer8N0wfwXopGyFnBFYl2PRHN3WEXRFUE1BImtxLUaDmL2NVzESZk3MmTu/ jjehJDsltVr1NIx56pso+AmWx8FxuW3IMqZU9DjhvrZgLKdAqzaz9eErzQ7ulksk q3mEuuPA/QGBsEb5c6bZCUUK5UxzkkAY+sNGLOlSWGa/B7OmnNRM3cshUN2JbxMh IuwuqXu0FCmopo5uYf+vw4Cfks+S8T4= -----END CERTIFICATE-----Generated at Fri Apr 17 20:53:14 2026 by rpki-client