$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json) Hash identifier: aqZ8WaXP7Kc7Q0oeJEL2HQeNfgRf7AII/FKxImcIZqg= Subject key identifier: 2B:F0:7F:A6:BC:9B:57:12:98:DC:20:67:25:55:85:F7:D6:24:11:C0 Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Certificate serial: 010D0C9F4328584D20AF50D06F296BFA8D2AA600 Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 168.100.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:50:d0:6f:29:6b:fa:8d:2a:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=b6b5e317-01ef-4f44-9a38-0d20e5ba2162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:ce:f5:70:cc:cc:ad:27:b1:b4:84:d2:2f: 27:0a:9e:d0:d8:46:67:d8:0b:60:35:11:47:92:50: da:bd:f5:03:1e:d1:8c:4f:57:86:82:29:95:69:1d: 6d:8c:06:63:21:e7:47:32:de:7d:b4:f3:37:55:4e: a5:08:e7:50:69:9d:74:66:82:8b:dd:f2:30:d8:88: ea:e0:c6:a3:93:3f:aa:47:5a:41:74:e9:99:ce:5a: 32:56:63:8d:16:46:58:2b:93:eb:a2:d0:7f:27:d0: b7:4d:b0:8b:4b:f9:05:70:1d:1a:4a:29:63:f3:b4: c9:ad:41:f3:9e:e0:15:71:6c:8b:e6:ac:f2:b8:ee: 80:be:d0:46:f3:63:e3:2e:5a:5b:85:c2:db:28:17: 14:be:d8:e7:e3:52:7c:90:a0:e3:9d:54:47:76:2e: af:c2:90:69:97:c5:9f:a0:8b:33:9e:13:c6:09:0d: 91:64:89:75:ec:5d:e6:b1:c2:0d:90:c0:82:31:5d: 9a:2a:04:2d:b6:d6:10:e3:85:6c:28:02:54:53:c8: 20:39:47:0a:9e:dc:fe:6f:6e:d5:67:cc:8b:2c:66: 1f:4b:da:4f:4e:e6:05:32:b6:c0:bc:38:54:a6:91: dd:91:05:05:ef:1f:f6:ca:44:0f:e9:21:d6:b9:2f: a3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:F0:7F:A6:BC:9B:57:12:98:DC:20:67:25:55:85:F7:D6:24:11:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl X509v3 Authority Key Identifier: keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer sbgp-ipAddrBlock: critical IPv4: 168.100.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:87:b7:29:83:cb:d3:d2:3b:27:fe:28:5b:60:4c:05:ac:3d: 4b:b7:f6:c4:3c:a3:cf:5c:76:50:4e:2d:fe:92:e5:ae:c3:49: a0:99:3b:b3:a0:5b:50:1e:4b:48:15:82:10:d5:69:a6:6a:47: 7e:8c:e1:62:e2:03:0b:fb:34:40:25:ba:0b:e1:e3:e3:30:b1: 04:bb:3f:9c:e4:6b:05:b7:04:88:97:8d:45:c7:1e:74:e5:62: 75:d4:15:75:62:63:25:de:ab:99:c5:10:27:07:95:dd:19:94: 7a:57:0b:79:15:7d:3c:57:cc:67:29:dd:8a:a0:72:13:5e:f1: f5:c8:38:d7:59:a3:ff:02:de:c7:03:ac:33:96:7e:a8:cb:f9: 0f:b4:ed:21:b5:78:df:f4:1c:2a:0b:5e:c6:d6:13:66:f2:76: ba:96:d5:e1:5d:1a:07:67:be:a5:c2:35:14:2d:aa:99:1b:c7: ab:ae:46:1c:e4:39:6a:32:d6:4d:75:f3:e3:a6:40:55:90:47: 44:de:05:d2:25:5c:5c:5f:87:92:a9:3a:d4:05:03:1a:9c:59: 22:43:30:a9:54:d1:4b:ec:7a:9b:51:6d:9e:80:9f:5f:94:db: a0:cd:72:d7:20:9f:d4:a7:de:43:24:d7:d1:34:f3:4c:05:ca: 09:69:b2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr1DQbylr+o0qpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj OWRlMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk YjZiNWUzMTctMDFlZi00ZjQ0LTlhMzgtMGQyMGU1YmEyMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIvO9XDMzK0nsbSE0i8nCp7Q2EZn2AtgNRFH klDavfUDHtGMT1eGgimVaR1tjAZjIedHMt59tPM3VU6lCOdQaZ10ZoKL3fIw2Ijq 4Majkz+qR1pBdOmZzloyVmONFkZYK5ProtB/J9C3TbCLS/kFcB0aSilj87TJrUHz nuAVcWyL5qzyuO6AvtBG82PjLlpbhcLbKBcUvtjn41J8kKDjnVRHdi6vwpBpl8Wf oIsznhPGCQ2RZIl17F3mscINkMCCMV2aKgQtttYQ44VsKAJUU8ggOUcKntz+b27V Z8yLLGYfS9pPTuYFMrbAvDhUppHdkQUF7x/2ykQP6SHWuS+j9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvwf6a8m1cSmNwgZyVVhffWJBHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1 ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvYWZlYzQ5NTgtZjkwYy0z MjRkLTgzNjUtMWIwYzAyYjgzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4 N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJOHtymDy9PSOyf+KFtgTAWsPUu39sQ8o89cdlBOLf6S5a7DSaCZO7Og W1AeS0gVghDVaaZqR36M4WLiAwv7NEAlugvh4+MwsQS7P5zkawW3BIiXjUXHHnTl YnXUFXViYyXeq5nFECcHld0ZlHpXC3kVfTxXzGcp3YqgchNe8fXIONdZo/8C3scD rDOWfqjL+Q+07SG1eN/0HCoLXsbWE2bydrqW1eFdGgdnvqXCNRQtqpkbx6uuRhzk OWoy1k118+OmQFWQR0TeBdIlXFxfh5KpOtQFAxqcWSJDMKlU0UvseptRbZ6An1+U 26DNctcgn9Sn3kMk19E080wFyglpslw= -----END CERTIFICATE-----Generated at Thu Mar 19 15:35:41 2026 by rpki-client