$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa File: 720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa (raw, json) Hash identifier: s/bTyOBLOrmTQFI6JBSpG8mVOgrm1Hu+Pt+XMDhM76U= Subject key identifier: 1F:B2:2F:4F:A1:E1:03:26:EA:A5:2E:88:D9:DF:D2:40:2D:AD:3B:E2 Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F4328584DA6B0160935E56547815C0800 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 833 IP address blocks: 165.140.200.0/24 maxlen: 24 165.140.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:16:09:35:e5:65:47:81:5c:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=e8592679-c946-4940-b624-66d2a16290f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0a:d7:43:44:59:c6:88:84:36:46:34:3d:33: 29:79:58:c0:bc:8b:5a:54:9e:82:4b:ef:0b:21:2b: e3:37:f8:64:fd:3a:41:aa:89:79:a7:b0:34:33:1d: 91:a9:cb:15:a3:f5:18:ff:75:b9:1e:87:be:ef:1f: 1b:56:65:2a:67:a6:9f:ed:89:9c:15:68:81:02:fd: 71:ef:e1:1b:bb:ec:41:79:ac:9a:b7:06:c6:bf:dc: 4f:6a:45:e7:95:ba:87:55:c7:28:98:79:3f:81:38: f3:61:ec:ef:79:1a:dc:74:e5:1f:5b:68:d7:1e:10: 67:77:1a:3a:7a:db:3b:1e:70:c5:ec:7f:ed:6d:30: 00:4e:56:46:23:2b:a5:79:bf:fb:15:1a:5b:e5:2c: c6:e3:57:fc:d7:a8:22:2a:d0:36:1d:94:ff:a7:37: df:51:e0:90:be:80:7b:c3:0b:ce:6c:ef:0c:a8:76: 4e:5b:97:97:e5:02:b6:b3:7a:c9:44:ad:51:a6:d9: 13:c3:b9:86:57:dc:09:7f:ee:75:34:4f:22:50:b9: cb:cf:00:d9:8b:0c:c0:ed:6d:95:49:63:d4:91:97: 83:61:be:93:91:d4:58:b4:fd:24:d8:30:0a:69:e4: 30:07:e7:66:07:9b:bc:54:50:9c:08:90:b5:5f:76: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:2F:4F:A1:E1:03:26:EA:A5:2E:88:D9:DF:D2:40:2D:AD:3B:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/720d3e9c-e80b-3989-a9d7-4b35f1d1009e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:f2:4a:ba:8b:50:1d:89:cb:3a:7d:98:e2:a8:45:80:8f:c7: fe:83:2c:3f:f5:04:75:f6:11:25:30:02:d0:2e:25:0f:16:1d: 9a:09:e4:c1:9a:83:1b:39:39:3c:0b:a5:fb:b6:89:e5:1e:33: e9:6d:4e:78:68:b4:83:d1:10:65:b6:87:f0:01:c7:03:c6:dc: 68:f1:a1:19:0c:3a:db:91:d9:e6:06:98:58:ae:75:66:7c:a0: 39:f5:9a:a0:41:38:e5:7f:65:31:fe:2f:e3:6e:38:82:47:df: 4f:cf:66:7f:33:61:6a:d0:f3:4e:8c:7b:4f:ea:3c:d4:b8:f1: 85:78:83:ff:69:ef:4b:2f:c4:89:c0:7c:a2:0d:69:9e:22:c6: d1:bc:68:8f:bd:c8:dd:d9:9c:e6:cd:bd:9e:a3:fe:0c:ae:da: dd:c3:b4:4b:85:f6:86:2b:11:90:ba:fa:c2:16:70:50:c4:e3: 69:0d:db:fc:54:ef:69:f4:17:22:90:63:0e:86:76:c9:d3:ba: 97:80:16:88:0e:09:4c:b9:24:ea:ae:1f:d2:c8:7e:ae:54:cb: 67:cd:75:1e:c1:4b:96:01:b7:03:d0:1f:a5:ad:04:68:bc:c3: e5:a4:1d:85:e0:c6:55:13:f7:f6:0c:02:b3:6b:a0:41:73:81: 5d:13:d6:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBYJNeVlR4FcCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZTg1OTI2NzktYzk0Ni00OTQwLWI2MjQtNjZkMmExNjI5MGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwrXQ0RZxoiENkY0PTMpeVjAvItaVJ6CS+8L ISvjN/hk/TpBqol5p7A0Mx2RqcsVo/UY/3W5Hoe+7x8bVmUqZ6af7YmcFWiBAv1x 7+Ebu+xBeayatwbGv9xPakXnlbqHVccomHk/gTjzYezveRrcdOUfW2jXHhBndxo6 ets7HnDF7H/tbTAATlZGIyuleb/7FRpb5SzG41f816giKtA2HZT/pzffUeCQvoB7 wwvObO8MqHZOW5eX5QK2s3rJRK1RptkTw7mGV9wJf+51NE8iULnLzwDZiwzA7W2V SWPUkZeDYb6TkdRYtP0k2DAKaeQwB+dmB5u8VFCcCJC1X3baAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+yL0+h4QMm6qUuiNnf0kAtrTviMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvNzIwZDNlOWMtZTgwYi0z OTg5LWE5ZDctNGIzNWYxZDEwMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpYzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPySrqLUB2Jyzp9mOKoRYCPx/6DLD/1BHX2ESUwAtAuJQ8WHZoJ5MGa gxs5OTwLpfu2ieUeM+ltTnhotIPREGW2h/ABxwPG3GjxoRkMOtuR2eYGmFiudWZ8 oDn1mqBBOOV/ZTH+L+NuOIJH30/PZn8zYWrQ806Me0/qPNS48YV4g/9p70svxInA fKINaZ4ixtG8aI+9yN3ZnObNvZ6j/gyu2t3DtEuF9oYrEZC6+sIWcFDE42kN2/xU 72n0FyKQYw6GdsnTupeAFogOCUy5JOquH9LIfq5Uy2fNdR7BS5YBtwPQH6WtBGi8 w+WkHYXgxlUT9/YMArNroEFzgV0T1s0= -----END CERTIFICATE-----Generated at Sun May 3 18:36:51 2026 by rpki-client