$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/084d3af5-a0ac-3527-bba8-d66c43e3f1e8.roa File: 084d3af5-a0ac-3527-bba8-d66c43e3f1e8.roa (raw, json) Hash identifier: wrIwYl/iOuKa+v7Xy1l2EksyN+ecL54SRp/5bS4mDgg= Subject key identifier: 20:CE:80:72:BD:5B:DE:40:81:9B:39:98:B5:16:48:DA:05:70:FD:4E Certificate issuer: /CN=f8424ff1-5313-4a68-a60f-9d8217567420 Certificate serial: 010D0C9F4328584D208CD00EE91D63A6B4ED99F8 Authority key identifier: B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/084d3af5-a0ac-3527-bba8-d66c43e3f1e8.roa Signing time: Tue 10 Mar 2026 23:51:10 +0000 ROA not before: Tue 10 Mar 2026 23:51:10 +0000 ROA not after: Mon 08 Jun 2026 23:51:10 +0000 asID: 397731 IP address blocks: 165.140.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:8c:d0:0e:e9:1d:63:a6:b4:ed:99:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8424ff1-5313-4a68-a60f-9d8217567420 Validity Not Before: Mar 10 23:51:10 2026 GMT Not After : Jun 8 23:51:10 2026 GMT Subject: CN=c828213b-c1f0-43e4-a5b8-a0f204791bcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:a3:8b:94:f8:4c:a9:80:da:d1:c6:00:a4: 57:7b:2f:da:06:69:59:e5:43:39:b3:fe:e7:98:f8: ff:fd:57:42:4a:68:c8:08:a0:c2:86:be:5b:63:72: 89:3e:d2:9e:3f:72:e8:bf:9f:89:2e:d3:05:8d:95: 89:69:48:ae:43:6e:2a:48:c6:e9:ef:f6:db:a7:61: 40:7f:d4:ea:51:eb:b3:8e:2a:26:ea:be:58:d1:6f: 4a:a4:f1:7f:1b:90:fe:bf:e6:83:25:5d:13:0c:0c: 58:70:3e:9b:e5:ff:65:75:f5:b0:56:ca:91:8d:05: 87:7a:d0:26:c2:29:8f:9d:bc:c2:12:1c:b8:41:e1: 6f:55:36:b6:9e:62:3a:a9:c8:87:91:f0:9c:fd:ea: 06:a2:1a:53:e2:b5:c7:67:14:4c:ca:15:53:52:49: fe:8d:d9:41:c3:e6:17:b2:20:1f:22:38:fc:b9:dc: 16:70:92:4c:12:9e:88:6f:68:20:3c:5c:d2:8e:dc: fa:45:1c:b4:31:c1:ff:d8:6c:cd:9a:41:f1:a1:89: ed:c7:49:da:5a:7f:7b:c8:d5:a7:9a:64:6a:0f:8d: f4:dc:b0:74:96:73:2c:13:aa:5f:09:5f:25:fb:02: 0a:83:ed:7f:09:30:d9:69:f6:90:cd:6b:ee:70:15: 15:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:CE:80:72:BD:5B:DE:40:81:9B:39:98:B5:16:48:DA:05:70:FD:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/084d3af5-a0ac-3527-bba8-d66c43e3f1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420/f8424ff1-5313-4a68-a60f-9d8217567420.crl X509v3 Authority Key Identifier: keyid:B6:A1:D1:82:72:FD:B1:36:79:17:DB:62:75:CE:17:70:37:20:5D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8424ff1-5313-4a68-a60f-9d8217567420.cer sbgp-ipAddrBlock: critical IPv4: 165.140.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:c5:7b:be:e5:6a:64:a4:74:22:4b:02:68:78:b9:a3:fe:69: 9a:7c:bc:86:b1:dc:dc:b5:4a:7a:99:b7:17:12:e6:fa:10:2f: ab:7e:f4:67:8d:68:2e:d7:e6:d4:f2:ab:b8:f4:3a:f1:14:cc: f5:57:9d:8f:8c:7f:e6:cb:1b:11:39:9b:83:28:4f:44:3b:07: 37:79:c1:45:0a:19:36:9d:d2:e4:42:3e:3a:5c:7c:da:fc:fd: 56:f0:0e:b6:4f:3c:02:86:1f:57:d5:77:24:42:aa:28:a7:36: d4:01:78:6b:07:47:8b:76:20:b1:46:17:10:da:ce:05:cb:8f: 70:39:40:2c:68:fb:02:c7:3c:d6:97:e5:89:e0:28:66:5d:cc: 24:16:52:42:00:76:ed:82:5c:79:5a:8b:21:ea:68:8a:f4:c7: 55:1f:1c:82:0b:b5:ad:73:5b:c2:05:d9:92:14:01:0f:4d:60: 5f:71:09:7e:50:87:45:b4:a7:98:82:72:dc:53:3e:a8:a2:78: df:03:14:bb:07:e5:26:1c:12:37:d7:0f:85:1f:56:a5:97:29: 1e:95:11:b3:74:ef:9a:d5:9e:07:80:b6:ff:f6:16:04:1f:44: 15:e7:9c:89:8e:97:ea:1e:75:66:cf:e4:91:e1:8b:eb:be:a3: b2:f9:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gjNAO6R1jprTtmfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg0MjRmZjEtNTMxMy00YTY4LWE2MGYtOWQ4MjE3NTY3 NDIwMB4XDTI2MDMxMDIzNTExMFoXDTI2MDYwODIzNTExMFowLzEtMCsGA1UEAxMk YzgyODIxM2ItYzFmMC00M2U0LWE1YjgtYTBmMjA0NzkxYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLSji5T4TKmA2tHGAKRXey/aBmlZ5UM5s/7n mPj//VdCSmjICKDChr5bY3KJPtKeP3Lov5+JLtMFjZWJaUiuQ24qSMbp7/bbp2FA f9TqUeuzjiom6r5Y0W9KpPF/G5D+v+aDJV0TDAxYcD6b5f9ldfWwVsqRjQWHetAm wimPnbzCEhy4QeFvVTa2nmI6qciHkfCc/eoGohpT4rXHZxRMyhVTUkn+jdlBw+YX siAfIjj8udwWcJJMEp6Ib2ggPFzSjtz6RRy0McH/2GzNmkHxoYntx0naWn97yNWn mmRqD4303LB0lnMsE6pfCV8l+wIKg+1/CTDZafaQzWvucBUVmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDOgHK9W95AgZs5mLUWSNoFcP1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODQy NGZmMS01MzEzLTRhNjgtYTYwZi05ZDgyMTc1Njc0MjAvMDg0ZDNhZjUtYTBhYy0z NTI3LWJiYTgtZDY2YzQzZTNmMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjg0MjRmZjEtNTMxMy00YTY4LWE2 MGYtOWQ4MjE3NTY3NDIwL2Y4NDI0ZmYxLTUzMTMtNGE2OC1hNjBmLTlkODIxNzU2 NzQyMC5jcmwwHwYDVR0jBBgwFoAUtqHRgnL9sTZ5F9tidc4XcDcgXaowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODQyNGZmMS01MzEzLTRhNjgtYTYwZi05ZDgy MTc1Njc0MjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYzsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbFe77lamSkdCJLAmh4uaP+aZp8vIax3Ny1SnqZtxcS5voQL6t+9GeN aC7X5tTyq7j0OvEUzPVXnY+Mf+bLGxE5m4MoT0Q7Bzd5wUUKGTad0uRCPjpcfNr8 /VbwDrZPPAKGH1fVdyRCqiinNtQBeGsHR4t2ILFGFxDazgXLj3A5QCxo+wLHPNaX 5YngKGZdzCQWUkIAdu2CXHlaiyHqaIr0x1UfHIILta1zW8IF2ZIUAQ9NYF9xCX5Q h0W0p5iCctxTPqiieN8DFLsH5SYcEjfXD4UfVqWXKR6VEbN075rVngeAtv/2FgQf RBXnnImOl+oedWbP5JHhi+u+o7L5aak= -----END CERTIFICATE-----Generated at Thu Mar 26 21:02:38 2026 by rpki-client