$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa File: 1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa (raw, json) Hash identifier: S3nIgS9dmeu1SE8Ad9Ug5hU8qvkLXFF4GQWU1XgG3RE= Subject key identifier: 70:01:A3:21:C9:9C:0C:9B:B3:01:8F:20:64:CE:08:20:73:BA:5F:18 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F23C25CF8B17B1137CD07CB00 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 399275 IP address blocks: 165.140.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5c:f8:b1:7b:11:37:cd:07:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=872ace85-7c6d-4e82-8af8-7d7b9f42ba15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:f9:ee:4d:fd:4e:fd:cc:02:f8:63:55:06: 33:97:2a:0b:2c:15:56:c9:8c:eb:34:a3:1d:96:dc: 6c:20:8a:31:a4:e1:2d:ce:b5:da:5d:d8:ca:d8:8a: 25:1f:49:ac:4a:19:31:ee:3a:24:3c:44:56:c1:ec: 6d:81:3a:10:d4:63:a0:54:dc:47:e6:ca:82:cf:8c: 0d:93:2d:16:2e:4f:6c:14:9c:09:3d:ee:31:67:60: a6:0d:68:a2:88:f9:fc:a8:ed:51:ff:89:ff:b9:02: e6:97:35:fe:1b:dc:22:be:c2:93:94:31:4a:95:b3: 4c:84:29:df:9b:74:0b:55:13:61:87:94:49:16:dc: 2b:b2:c5:fa:24:87:2e:24:3f:28:26:5e:69:ab:f6: 07:70:38:04:a4:66:2d:5d:d1:53:4d:05:8e:4e:36: d9:ff:17:27:65:91:17:79:b5:20:85:28:46:27:a1: a1:82:d9:52:6d:31:12:05:1c:d7:ce:45:cb:38:15: 02:e7:49:84:bd:b3:32:47:79:74:c7:0b:83:b8:c7: 6c:c0:98:50:dd:56:8f:d9:67:d2:98:f7:8d:02:1e: d0:12:6c:07:d4:25:d7:fe:d0:cf:41:dd:42:4b:fb: f1:d5:58:f3:9d:8e:52:6a:30:4f:a1:86:52:30:93: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:01:A3:21:C9:9C:0C:9B:B3:01:8F:20:64:CE:08:20:73:BA:5F:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/1b6c62e1-eb55-361a-9aef-1a8a2d91a599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3a:29:6b:58:77:0d:f1:3e:84:5a:d3:6c:a7:ed:96:90:d6: c0:db:16:56:d8:c9:df:93:d6:1d:6c:5f:d2:da:ef:4e:f3:37: b8:28:d7:b1:da:69:fc:85:19:97:18:d3:06:5b:5d:af:8d:8b: 2e:ca:40:71:02:57:02:5e:14:14:93:a7:5d:06:ee:4b:59:ed: b5:78:66:42:a3:7e:8e:ab:bc:a4:fc:cf:b2:a8:c7:a8:bc:48: f1:70:c5:db:b8:3a:df:ca:37:42:62:10:79:7b:95:09:7f:62: a5:0b:ec:a2:d2:c9:b4:55:38:35:93:c6:7c:ed:8b:93:91:50: f8:4e:ba:5b:5e:81:05:77:c8:bd:36:68:de:92:e9:67:80:fa: 68:f2:90:1a:54:c1:fa:1f:0a:78:1d:74:5a:85:cf:c7:4b:c8: 21:b4:c2:25:ec:c6:d9:d3:73:df:00:5b:0f:f7:88:5a:71:06: 25:7f:6c:a2:cc:46:e3:81:a7:a7:7e:ef:d7:4c:01:2f:3e:18: d8:a1:40:02:78:3b:ed:ae:95:64:1a:5c:6e:2e:3a:2e:db:0a: 92:02:1d:8f:21:94:85:a0:a2:90:13:b2:3e:89:13:fc:93:27: 4b:47:61:a3:dd:8c:cf:0a:54:94:f6:d4:b5:1f:02:bc:f6:9f: d3:e6:18:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwlz4sXsRN80HywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ODcyYWNlODUtN2M2ZC00ZTgyLThhZjgtN2Q3YjlmNDJiYTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPf57k39Tv3MAvhjVQYzlyoLLBVWyYzrNKMd ltxsIIoxpOEtzrXaXdjK2IolH0msShkx7jokPERWwextgToQ1GOgVNxH5sqCz4wN ky0WLk9sFJwJPe4xZ2CmDWiiiPn8qO1R/4n/uQLmlzX+G9wivsKTlDFKlbNMhCnf m3QLVRNhh5RJFtwrssX6JIcuJD8oJl5pq/YHcDgEpGYtXdFTTQWOTjbZ/xcnZZEX ebUghShGJ6GhgtlSbTESBRzXzkXLOBUC50mEvbMyR3l0xwuDuMdswJhQ3VaP2WfS mPeNAh7QEmwH1CXX/tDPQd1CS/vx1VjznY5SajBPoYZSMJNNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHABoyHJnAybswGPIGTOCCBzul8YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMWI2YzYyZTEtZWI1NS0z NjFhLTlhZWYtMWE4YTJkOTFhNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY6KWtYdw3xPoRa02yn7ZaQ1sDbFlbYyd+T1h1sX9La707zN7go17Ha afyFGZcY0wZbXa+Niy7KQHECVwJeFBSTp10G7ktZ7bV4ZkKjfo6rvKT8z7Kox6i8 SPFwxdu4Ot/KN0JiEHl7lQl/YqUL7KLSybRVODWTxnzti5ORUPhOultegQV3yL02 aN6S6WeA+mjykBpUwfofCngddFqFz8dLyCG0wiXsxtnTc98AWw/3iFpxBiV/bKLM RuOBp6d+79dMAS8+GNihQAJ4O+2ulWQaXG4uOi7bCpICHY8hlIWgopATsj6JE/yT J0tHYaPdjM8KVJT21LUfArz2n9PmGMs= -----END CERTIFICATE-----Generated at Tue Sep 22 03:32:54 2026 by rpki-client