$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: mXhaBoQm+lilLFE1jGG706J33Vukeqp6sTgRjSuh2wk= Subject key identifier: A4:68:11:15:65:90:C5:E5:74:24:FF:B2:58:33:D0:B4:FB:A7:B0:E5 Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584EA791AD866975B5824F92DA80 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 11 Aug 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:91:ad:86:69:75:b5:82:4f:92:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4594b898-f6ff-4dc8-89d1-01a6265e6e0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:aa:d6:a3:82:c3:3e:2f:4d:4d:31:1f:3f:72: 4b:ae:83:41:b7:7f:ba:87:9e:78:7b:19:6b:cd:70: 85:21:06:f5:bf:95:bf:9b:11:c9:d0:04:41:ff:4b: 3d:c8:15:64:b8:d0:62:74:30:9c:8e:9a:fc:55:04: 28:e7:2d:bd:a9:ae:6b:49:0b:24:ee:8b:09:ba:11: f1:bd:7b:6f:db:29:61:16:9e:49:f7:a4:c4:f1:f7: 89:27:5f:e2:3c:ab:f1:46:0b:ad:8d:de:aa:14:ed: ab:4d:28:4f:50:a3:52:80:bf:74:3f:43:16:d6:60: 03:44:fd:3f:1a:bb:6e:b5:be:b6:5a:c5:e5:fb:c4: d6:72:4b:f4:b4:83:a3:44:f0:7e:a5:9a:a8:83:50: b9:c3:ae:6f:c2:bc:c8:79:f8:08:c8:27:63:8d:4f: 47:af:45:da:44:41:96:10:ec:d6:0e:f3:a3:72:03: 97:e5:4c:00:aa:38:c4:df:89:83:1f:cc:48:ca:14: 23:cb:15:b2:61:70:5e:e9:8e:bd:dd:23:3a:10:a6: b1:a2:2d:7f:0c:6e:06:1f:65:34:1e:05:d7:8c:bd: 53:15:43:1f:99:12:85:66:93:d6:4d:64:a3:d5:8b: 7c:c2:2e:6c:9d:8c:30:e8:b3:92:90:1a:03:66:9b: c1:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:68:11:15:65:90:C5:E5:74:24:FF:B2:58:33:D0:B4:FB:A7:B0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:87:98:04:9c:79:31:66:0e:b5:dd:65:dc:c4:af:8a:8e:e6: ee:fd:46:f4:07:07:a9:e4:9a:98:d7:c6:39:35:92:24:a7:8a: a0:35:cc:4c:9f:fc:6c:b8:d4:c6:66:04:d0:28:30:5f:f6:3e: 6a:5a:16:17:97:93:82:b5:22:4c:03:f1:c6:cf:af:a5:45:96: f8:ed:96:83:b4:ea:af:92:70:30:51:d6:ca:df:2c:93:d5:4a: e9:21:9e:24:36:61:ae:3f:a8:d2:34:75:0f:cb:6e:df:91:ec: 67:4c:4e:33:31:7b:19:4c:a0:f0:f6:44:d8:43:a1:c5:37:a5: 3a:43:dd:ef:94:c7:03:57:de:4f:f6:81:af:95:55:23:a8:0f: 0f:69:a2:27:ad:b7:68:0b:ce:ab:b4:a4:a3:8b:be:c7:fd:c5: b4:09:06:ab:14:8c:dd:de:fe:ad:ef:e9:68:1c:46:3a:a5:99: 8f:85:ab:38:70:e6:08:0a:6f:91:f2:0d:ff:53:a2:0d:76:fd: 79:93:94:9e:03:67:ca:5f:ac:bf:31:d2:83:9d:ee:8a:3a:7f: 64:0a:94:10:1d:3e:c5:33:46:c8:09:63:77:62:4b:54:23:0b: 1c:83:a0:55:43:22:9d:a9:39:5b:ea:2b:39:a5:15:98:d6:67: d8:8d:f1:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nka2GaXW1gk+S2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDU5NGI4OTgtZjZmZi00ZGM4LTg5ZDEtMDFhNjI2NWU2ZTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKrWo4LDPi9NTTEfP3JLroNBt3+6h554exlr zXCFIQb1v5W/mxHJ0ARB/0s9yBVkuNBidDCcjpr8VQQo5y29qa5rSQsk7osJuhHx vXtv2ylhFp5J96TE8feJJ1/iPKvxRgutjd6qFO2rTShPUKNSgL90P0MW1mADRP0/ Grtutb62WsXl+8TWckv0tIOjRPB+pZqog1C5w65vwrzIefgIyCdjjU9Hr0XaREGW EOzWDvOjcgOX5UwAqjjE34mDH8xIyhQjyxWyYXBe6Y693SM6EKaxoi1/DG4GH2U0 HgXXjL1TFUMfmRKFZpPWTWSj1Yt8wi5snYww6LOSkBoDZpvBYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRoERVlkMXldCT/slgz0LT7p7DlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeHmASceTFmDrXdZdzEr4qO5u79RvQHB6nkmpjXxjk1kiSniqA1zEyf /Gy41MZmBNAoMF/2PmpaFheXk4K1IkwD8cbPr6VFlvjtloO06q+ScDBR1srfLJPV SukhniQ2Ya4/qNI0dQ/Lbt+R7GdMTjMxexlMoPD2RNhDocU3pTpD3e+UxwNX3k/2 ga+VVSOoDw9poiett2gLzqu0pKOLvsf9xbQJBqsUjN3e/q3v6WgcRjqlmY+Fqzhw 5ggKb5HyDf9Tog12/XmTlJ4DZ8pfrL8x0oOd7oo6f2QKlBAdPsUzRsgJY3diS1Qj CxyDoFVDIp2pOVvqKzmlFZjWZ9iN8RQ= -----END CERTIFICATE-----Generated at Mon Aug 10 09:58:42 2026 by rpki-client