$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b9bc4e6-dcce-3253-8c92-9bc052c5ffc6.roa File: 0b9bc4e6-dcce-3253-8c92-9bc052c5ffc6.roa (raw, json) Hash identifier: AFtqnCc6d4tED+5jT0QcTBo2D0j5DjY2UjIYe0G5I6s= Subject key identifier: DE:5D:C6:E4:BB:36:46:9E:6D:84:79:78:1E:30:96:EF:D5:DC:E5:2C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D5B4FA29FEBF1ABE666916680 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b9bc4e6-dcce-3253-8c92-9bc052c5ffc6.roa Signing time: Wed 01 Apr 2026 01:00:23 +0000 ROA not before: Wed 01 Apr 2026 01:00:23 +0000 ROA not after: Tue 30 Jun 2026 01:00:23 +0000 asID: 20940 IP address blocks: 165.254.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5b:4f:a2:9f:eb:f1:ab:e6:66:91:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 1 01:00:23 2026 GMT Not After : Jun 30 01:00:23 2026 GMT Subject: CN=23b560b1-defb-4773-93c9-e85beba8a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fc:81:32:1d:0c:13:91:f1:1d:3f:34:47:46: 8f:69:92:38:e2:7f:fd:7e:d8:21:69:4f:c4:61:02: 56:24:a6:4d:90:96:ba:83:6e:79:b9:b6:17:4a:ac: 74:a6:df:32:6e:d2:1f:60:9f:90:bd:3a:20:38:e5: 77:96:8d:80:2b:d5:eb:25:e3:72:2a:17:bf:3d:4d: 73:1c:72:c0:39:da:97:10:a8:67:a9:a6:ab:8e:c8: e7:03:3b:02:86:57:78:09:f5:0f:5b:9b:ea:1d:6c: 96:de:20:8b:62:fc:cf:5d:87:4f:4a:0c:c2:9c:1a: fc:fa:5b:38:73:8f:f8:53:3e:b3:2e:98:bb:f3:3f: 78:40:7f:03:7b:c4:13:d2:d8:75:92:91:6b:93:42: 84:7b:06:e2:85:33:28:4b:e3:9c:4b:cd:f0:92:be: 7d:1f:d7:73:94:39:1a:20:dd:75:b9:cc:db:78:dc: 71:47:68:46:0c:07:1c:08:57:1b:06:33:3d:b2:6d: 3e:b4:57:1a:2b:b4:75:71:fb:f0:e4:2d:6e:00:58: b5:5f:49:0f:f8:00:15:bd:4c:39:a4:f1:aa:8f:9f: 9b:e7:02:0a:bb:48:85:3e:54:2f:4f:2d:d3:56:b9: 86:b2:3a:40:9d:7d:c4:db:38:ce:e0:41:af:d2:1b: 84:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5D:C6:E4:BB:36:46:9E:6D:84:79:78:1E:30:96:EF:D5:DC:E5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/0b9bc4e6-dcce-3253-8c92-9bc052c5ffc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d6:e2:3f:23:e4:43:b9:53:15:81:49:8f:d6:ab:ce:0c:93: 81:b7:a4:b4:f3:31:71:4e:41:52:1d:ba:11:f3:fa:8f:b3:65: 21:62:90:1b:46:68:c7:86:a3:bf:21:4b:c1:58:f4:93:d3:da: 62:58:2d:c9:95:28:11:0a:3d:2b:92:2f:c3:5e:50:3b:be:94: 69:71:a4:24:8c:95:f6:f4:09:e5:9f:1d:30:6e:f6:ec:2c:47: 69:28:af:96:7d:bb:7a:12:c0:2d:1a:b4:23:f5:16:b9:7e:ab: 47:d9:1b:97:98:6a:8d:ca:e8:d2:75:6e:a6:01:bb:a6:69:ae: d1:37:7b:fe:9c:46:01:e5:eb:df:e3:31:ec:d8:f2:66:16:7b: 58:63:b7:70:76:50:e5:6b:cd:25:f4:85:8a:07:71:2a:2e:da: 60:be:8a:67:37:24:68:07:46:40:38:54:9d:a9:90:36:5d:56: 69:e1:dd:c9:b7:26:4f:5b:08:0b:6a:50:67:06:a9:01:00:26: f7:5d:9a:39:7a:26:89:2d:47:19:ee:ef:1d:2f:47:e9:1d:07: fe:4c:ae:4e:7f:85:a5:78:cb:08:82:45:cb:46:95:0a:1c:71: f4:78:7b:2e:57:22:48:fe:97:d7:34:c6:85:eb:d5:9c:3b:66: 5a:9f:57:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1bT6Kf6/Gr5maRZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQwMTAxMDAyM1oXDTI2MDYzMDAxMDAyM1owLzEtMCsGA1UEAxMk MjNiNTYwYjEtZGVmYi00NzczLTkzYzktZTg1YmViYThhNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvyBMh0ME5HxHT80R0aPaZI44n/9ftghaU/E YQJWJKZNkJa6g255ubYXSqx0pt8ybtIfYJ+QvTogOOV3lo2AK9XrJeNyKhe/PU1z HHLAOdqXEKhnqaarjsjnAzsChld4CfUPW5vqHWyW3iCLYvzPXYdPSgzCnBr8+ls4 c4/4Uz6zLpi78z94QH8De8QT0th1kpFrk0KEewbihTMoS+OcS83wkr59H9dzlDka IN11uczbeNxxR2hGDAccCFcbBjM9sm0+tFcaK7R1cfvw5C1uAFi1X0kP+AAVvUw5 pPGqj5+b5wIKu0iFPlQvTy3TVrmGsjpAnX3E2zjO4EGv0huEJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN5dxuS7NkaebYR5eB4wlu/V3OUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMGI5YmM0ZTYtZGNjZS0z MjUzLThjOTItOWJjMDUyYzVmZmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApf6LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADW4j8j5EO5UxWBSY/Wq84Mk4G3pLTzMXFOQVIduhHz+o+zZSFikBtG aMeGo78hS8FY9JPT2mJYLcmVKBEKPSuSL8NeUDu+lGlxpCSMlfb0CeWfHTBu9uws R2kor5Z9u3oSwC0atCP1Frl+q0fZG5eYao3K6NJ1bqYBu6ZprtE3e/6cRgHl69/j MezY8mYWe1hjt3B2UOVrzSX0hYoHcSou2mC+imc3JGgHRkA4VJ2pkDZdVmnh3cm3 Jk9bCAtqUGcGqQEAJvddmjl6JoktRxnu7x0vR+kdB/5Mrk5/haV4ywiCRctGlQoc cfR4ey5XIkj+l9c0xoXr1Zw7ZlqfV+0= -----END CERTIFICATE-----Generated at Wed Apr 8 13:29:56 2026 by rpki-client