$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa File: 7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa (raw, json) Hash identifier: w/qUOBtNX5m9lRoh+tdCgbAH8AdF5r/sL+3J+9rbIiw= Subject key identifier: 89:BF:A2:BA:44:0A:08:AB:89:3C:C5:9F:4B:D6:25:E0:95:C5:20:EC Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584EA793B73BD88F525F5D703C00 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14618 IP address blocks: 165.1.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:93:b7:3b:d8:8f:52:5f:5d:70:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0f778c47-4cee-45c6-ae6a-df48cfcc24e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:38:84:10:f3:5a:e5:4c:25:1e:78:a9:12:26: 0b:63:b6:0b:3b:50:91:a0:39:75:2f:6e:ee:38:ae: c7:00:ba:1d:76:67:ff:d3:7d:b6:05:15:6c:f9:92: cc:0d:3f:a0:ad:6f:6e:f3:ce:3d:26:a9:22:3c:19: 84:0f:95:bc:9d:79:fd:98:2a:4d:bd:79:0a:6d:9b: cd:49:59:0c:b0:41:f0:1e:79:59:48:85:34:4c:64: 61:1b:e5:0a:1f:7f:78:64:df:37:a7:d8:86:48:d4: eb:ff:c1:f8:fd:17:67:96:20:92:46:5a:af:a7:4a: 4d:2e:38:0c:4e:8d:f7:ea:e1:ec:15:41:09:e2:9e: c7:d8:da:75:5f:b3:07:04:d3:83:86:aa:e6:75:26: 94:fd:dd:7a:bc:c9:5e:4b:d1:24:95:29:f1:53:ed: 3c:6a:97:fd:a9:c7:14:ad:8c:8f:fb:1c:ba:6b:55: 7c:52:18:60:c3:2c:45:29:23:94:98:9f:45:3e:ef: e9:b1:80:c7:a9:de:c2:13:08:08:7f:de:7a:26:2e: 01:c0:a6:12:68:45:ae:a8:a1:37:17:19:25:92:5b: 04:11:ac:be:47:e4:ae:ed:da:e3:42:62:2a:5a:f3: 1b:f7:81:fa:6e:7e:2c:50:89:a6:27:17:ac:9e:fe: 3c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:BF:A2:BA:44:0A:08:AB:89:3C:C5:9F:4B:D6:25:E0:95:C5:20:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/7d75bd8f-2e3d-3d01-83c4-365074c91b07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d2:1d:3b:62:c1:6f:15:28:54:b5:04:e6:38:23:81:9d:40: d3:d7:f5:b9:8d:5b:41:e4:5d:9c:61:02:87:c5:ba:95:42:7c: cf:a8:9b:89:cf:96:40:b3:ea:18:84:d7:01:80:14:8f:d0:25: 01:35:aa:39:1e:7d:cf:8e:34:2d:fd:a8:a8:13:40:c2:35:7d: a2:d1:a6:fe:89:3d:a0:a8:3a:a7:e8:79:e2:12:30:9e:94:60: b8:17:f7:2f:31:9d:f3:d8:d9:e1:65:0a:b7:67:1d:ed:87:ca: 19:c5:80:f5:c7:2c:9d:46:62:b1:11:e6:4c:49:90:d0:3c:54: c6:3a:63:c0:e8:98:22:67:bd:8f:8d:ec:a7:11:ac:87:81:9c: 3c:c3:d8:1b:41:9a:4e:71:dd:10:e0:ed:62:68:8b:73:0e:db: 7f:da:b4:01:22:4c:4a:5c:94:d8:f4:51:42:72:cd:79:37:b2: c8:99:36:30:66:7e:81:79:a8:4d:08:85:4e:b6:08:96:39:3b: 64:5d:eb:70:d5:7a:1c:55:14:9c:54:ca:56:83:ea:e3:d5:6b: 4d:32:51:c8:a8:1a:8d:90:d0:9b:e6:4c:b6:af:42:06:49:50: c5:96:37:53:b8:b2:a9:cb:67:79:bb:26:c3:bd:93:49:ad:84: eb:32:d4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nk7c72I9SX11wPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGY3NzhjNDctNGNlZS00NWM2LWFlNmEtZGY0OGNmY2MyNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDiEEPNa5UwlHnipEiYLY7YLO1CRoDl1L27u OK7HALoddmf/0322BRVs+ZLMDT+grW9u8849JqkiPBmED5W8nXn9mCpNvXkKbZvN SVkMsEHwHnlZSIU0TGRhG+UKH394ZN83p9iGSNTr/8H4/RdnliCSRlqvp0pNLjgM To336uHsFUEJ4p7H2Np1X7MHBNODhqrmdSaU/d16vMleS9EklSnxU+08apf9qccU rYyP+xy6a1V8UhhgwyxFKSOUmJ9FPu/psYDHqd7CEwgIf956Ji4BwKYSaEWuqKE3 FxklklsEEay+R+Su7drjQmIqWvMb94H6bn4sUImmJxesnv48nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIm/orpECgiriTzFn0vWJeCVxSDsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvN2Q3NWJkOGYtMmUzZC0z ZDAxLTgzYzQtMzY1MDc0YzkxYjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzSHTtiwW8VKFS1BOY4I4GdQNPX9bmNW0HkXZxhAofFupVCfM+om4nP lkCz6hiE1wGAFI/QJQE1qjkefc+ONC39qKgTQMI1faLRpv6JPaCoOqfoeeISMJ6U YLgX9y8xnfPY2eFlCrdnHe2HyhnFgPXHLJ1GYrER5kxJkNA8VMY6Y8DomCJnvY+N 7KcRrIeBnDzD2BtBmk5x3RDg7WJoi3MO23/atAEiTEpclNj0UUJyzXk3ssiZNjBm foF5qE0IhU62CJY5O2Rd63DVehxVFJxUylaD6uPVa00yUcioGo2Q0JvmTLavQgZJ UMWWN1O4sqnLZ3m7JsO9k0mthOsy1MQ= -----END CERTIFICATE-----Generated at Thu Aug 20 21:56:40 2026 by rpki-client