$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa File: 0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa (raw, json) Hash identifier: 0m0jJWBMe+wpuIQlbKL3sKKXtNvjXRo+X37nHne/7rI= Subject key identifier: 7E:D0:49:F8:61:18:DA:C6:50:E0:CA:C6:9C:18:2C:88:3A:AF:07:87 Certificate issuer: /CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97 Certificate serial: 010D0C9F4328584FA5933FC0A388DBADD9A1AC00 Authority key identifier: 46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa Signing time: Wed 28 Oct 2026 01:00:13 +0000 ROA not before: Wed 28 Oct 2026 01:00:13 +0000 ROA not after: Tue 26 Jan 2027 02:00:13 +0000 asID: 4185 IP address blocks: 165.135.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a5:93:3f:c0:a3:88:db:ad:d9:a1:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf016678-dab3-43d1-b7ea-5d3ad8148e97 Validity Not Before: Oct 28 01:00:13 2026 GMT Not After : Jan 26 02:00:13 2027 GMT Subject: CN=cc8e9d82-c6b8-4e20-b0ce-10ab23428435 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:08:08:41:d7:2b:2a:a5:18:58:f5:ce:cd: e4:23:ef:37:69:96:4f:6e:ca:a8:eb:e8:62:61:b5: d4:ac:bb:92:05:04:03:4d:44:46:50:57:d4:cc:4a: 2f:0e:7e:66:11:93:18:a6:a7:0e:73:63:89:00:be: 3d:53:10:9d:4b:58:62:73:71:8a:85:71:cd:e8:ad: ab:99:fc:8c:af:98:cd:eb:cd:23:07:95:14:94:54: ee:76:54:18:71:b1:75:d2:8c:5d:76:5b:8a:51:8b: 45:7f:b1:e1:9b:da:26:d7:78:56:37:cc:05:2e:d0: 98:62:d2:28:1f:b7:9d:8e:58:16:27:8a:2a:3f:62: c3:59:ef:e0:c0:83:ce:2a:99:f0:70:6b:d8:58:02: 97:f0:26:67:b0:ce:24:8e:61:74:f9:0e:1d:71:a5: e2:42:48:13:bd:1e:87:55:8d:63:7a:c8:76:1c:c2: 4e:d5:5f:50:95:f2:e2:7d:75:a6:3c:0a:43:2f:5b: be:06:ed:26:85:19:c5:eb:90:a5:b8:bd:33:b1:28: 73:4b:d4:25:5a:0b:64:27:ff:44:b8:5a:97:47:20: b6:2b:25:8c:70:85:a3:e4:df:c6:d7:8d:b2:49:74: 74:11:f7:07:fb:cf:64:78:8f:94:9e:44:5a:67:37: d7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D0:49:F8:61:18:DA:C6:50:E0:CA:C6:9C:18:2C:88:3A:AF:07:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/0d6c589a-daa5-32ac-b4eb-de44bdc1b5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97/cf016678-dab3-43d1-b7ea-5d3ad8148e97.crl X509v3 Authority Key Identifier: keyid:46:85:D2:50:6B:90:50:D3:17:93:6E:11:71:EA:C3:8B:99:E5:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cf016678-dab3-43d1-b7ea-5d3ad8148e97.cer sbgp-ipAddrBlock: critical IPv4: 165.135.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:f9:49:d3:4e:bc:13:af:70:cc:f9:04:51:fb:52:0b:d5:63: 9f:db:12:c4:de:53:fa:da:7d:1b:e2:e5:22:5d:2e:ae:75:83: ae:0d:f5:8b:c6:84:c0:ad:90:e4:9e:00:74:3c:ad:d4:ad:db: a2:55:b6:8b:af:60:20:ee:58:6b:a8:80:30:c1:19:b5:5d:16: a8:6e:cb:fa:dc:f4:82:83:36:71:e0:41:e1:56:14:c2:84:d3: df:0d:ca:aa:5e:58:c1:71:9b:2b:7c:2d:6e:c2:74:f0:47:db: 34:1b:a8:f1:bc:77:a5:1f:54:53:64:8d:f9:7c:7c:4a:c3:1c: c7:4f:20:b1:0f:53:9c:72:b1:e4:c7:62:06:64:a7:e0:f3:a5: ed:06:2b:47:76:78:89:ef:66:42:54:ce:6f:08:f9:58:5e:cd: 6a:c4:ef:e3:d3:59:38:24:b7:70:81:b3:3d:86:99:89:75:8f: 1c:9a:2b:97:6f:6f:da:5f:4c:89:97:80:57:0f:c8:46:70:5e: 7d:92:bc:f4:1f:5c:4f:e4:d9:d8:79:1f:1c:49:78:aa:c2:66: 27:da:42:de:dc:5e:13:2d:0e:5f:b2:2c:16:5e:bb:b4:ba:ab: aa:ec:92:56:00:c9:81:6b:2b:57:c1:44:20:c3:a4:08:46:33: f9:b4:4b:98 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+lkz/Ao4jbrdmhrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwMTY2NzgtZGFiMy00M2QxLWI3ZWEtNWQzYWQ4MTQ4 ZTk3MB4XDTI2MTAyODAxMDAxM1oXDTI3MDEyNjAyMDAxM1owLzEtMCsGA1UEAxMk Y2M4ZTlkODItYzZiOC00ZTIwLWIwY2UtMTBhYjIzNDI4NDM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztUICEHXKyqlGFj1zs3kI+83aZZPbsqo6+hi YbXUrLuSBQQDTURGUFfUzEovDn5mEZMYpqcOc2OJAL49UxCdS1hic3GKhXHN6K2r mfyMr5jN680jB5UUlFTudlQYcbF10oxddluKUYtFf7Hhm9om13hWN8wFLtCYYtIo H7edjlgWJ4oqP2LDWe/gwIPOKpnwcGvYWAKX8CZnsM4kjmF0+Q4dcaXiQkgTvR6H VY1jesh2HMJO1V9QlfLifXWmPApDL1u+Bu0mhRnF65CluL0zsShzS9QlWgtkJ/9E uFqXRyC2KyWMcIWj5N/G142ySXR0EfcH+89keI+UnkRaZzfXYQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFH7QSfhhGNrGUODKxpwYLIg6rweHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jZjAx NjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNhZDgxNDhlOTcvMGQ2YzU4OWEtZGFhNS0z MmFjLWI0ZWItZGU0NGJkYzFiNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2YwMTY2NzgtZGFiMy00M2QxLWI3 ZWEtNWQzYWQ4MTQ4ZTk3L2NmMDE2Njc4LWRhYjMtNDNkMS1iN2VhLTVkM2FkODE0 OGU5Ny5jcmwwHwYDVR0jBBgwFoAURoXSUGuQUNMXk24RcerDi5nlATYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jZjAxNjY3OC1kYWIzLTQzZDEtYjdlYS01ZDNh ZDgxNDhlOTcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApYcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAc/lJ0068E69wzPkEUftSC9Vjn9sSxN5T+tp9G+LlIl0urnWDrg31i8aE wK2Q5J4AdDyt1K3bolW2i69gIO5Ya6iAMMEZtV0WqG7L+tz0goM2ceBB4VYUwoTT 3w3Kql5YwXGbK3wtbsJ08EfbNBuo8bx3pR9UU2SN+Xx8SsMcx08gsQ9TnHKx5Mdi BmSn4POl7QYrR3Z4ie9mQlTObwj5WF7NasTv49NZOCS3cIGzPYaZiXWPHJorl29v 2l9MiZeAVw/IRnBefZK89B9cT+TZ2HkfHEl4qsJmJ9pC3txeEy0OX7IsFl67tLqr quySVgDJgWsrV8FEIMOkCEYz+bRLmA== -----END CERTIFICATE-----Generated at Mon Nov 2 08:30:53 2026 by rpki-client