$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa File: 745cf059-f6d3-336e-a7cf-2547681d7221.roa (raw, json) Hash identifier: Fhm0KFrb7A2kBqb2Oy1kgZ0aH2YpZhF0nslvB9XzNrw= Subject key identifier: 3B:51:3C:CC:32:B8:76:D0:27:08:8F:CD:5B:16:0E:E3:5D:75:70:11 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584F71ED9F9311F97D72C209D2C0 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:93:11:f9:7d:72:c2:09:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=0289c2d0-b293-45d1-851a-a5191883f020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7b:a4:15:29:09:9c:1e:a1:d7:ad:f7:41:92: f5:6b:de:55:35:e6:6a:b7:d1:aa:b6:35:b3:ce:ed: a3:c7:4b:37:d2:31:9d:d5:de:a3:83:71:14:4f:97: 5d:94:ff:02:0b:9c:cd:a5:25:e8:2d:e2:14:42:e7: b6:cb:0a:1b:88:ae:7e:6d:f4:85:d9:52:f1:ea:b1: 1a:21:0d:95:e8:7e:ab:de:02:e4:f0:fd:78:e7:82: 4d:f8:a4:84:29:7e:d9:34:b4:dd:12:2d:fb:45:29: 43:85:39:c6:20:ba:d5:11:7b:31:01:51:f5:0b:b2: 1c:08:4c:a6:a7:13:a8:9d:ec:29:65:a8:03:92:3f: 8e:ed:c2:bf:80:ea:d1:6c:f6:e0:54:07:ac:29:28: 26:77:27:b4:13:62:be:81:ce:dd:cb:fe:11:3b:31: d3:14:1d:c0:ea:58:29:0a:4f:9d:3d:02:91:5e:f3: ef:59:c7:30:1d:aa:9b:9b:ca:23:f4:34:5f:c5:9a: 70:f9:fc:a1:7c:0e:39:90:ad:36:bc:e4:6b:ce:1c: 72:f5:0e:85:5e:ad:01:cf:37:0d:90:c8:e0:cc:bd: 22:87:ad:c1:17:57:cd:c4:53:67:53:98:5f:a5:91: 5a:43:b9:72:c0:81:50:9b:8d:a0:3f:60:a2:a8:ac: c8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:51:3C:CC:32:B8:76:D0:27:08:8F:CD:5B:16:0E:E3:5D:75:70:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:e7:02:d4:2e:af:bb:84:7a:0a:d8:79:aa:4d:bc:2b:8e:74: bf:a3:34:44:04:7c:72:9a:7c:cf:90:21:67:e7:ae:fe:d5:a4: 6c:bb:a0:d3:ef:a7:53:24:77:f5:ea:55:08:42:4c:d6:b7:8e: b3:85:33:f2:ad:b4:cc:ad:24:d5:0c:26:db:14:67:89:e4:ce: 87:d6:7f:8e:b0:19:c9:98:62:f7:64:0d:28:1a:15:ae:96:90: ec:fa:56:4c:59:d2:c1:89:9a:6b:f5:09:3c:72:99:9a:09:2e: 2c:ac:48:fe:c8:ec:fa:1a:50:53:ea:1a:40:73:25:9e:7d:39: 50:0e:86:e0:88:16:08:52:10:a1:1e:be:a5:89:c5:54:ed:53: fb:8e:43:91:8b:2a:07:a7:08:1a:e0:7b:48:9c:34:d2:a8:cc: f8:91:2c:99:d9:91:12:83:38:6b:0e:99:2d:1d:ad:e6:1f:02: 54:a3:b3:e8:40:5a:ea:e1:60:6b:e2:d5:62:d6:f1:9a:de:28: 21:47:f2:1f:3b:11:39:26:75:90:0c:e0:0d:2e:08:b3:54:2d: d9:c6:b3:72:d1:56:e8:15:d6:2b:f4:9b:e8:98:b3:eb:8f:ad: c3:75:cc:2c:fe:31:28:b5:06:71:ae:10:97:1f:6a:07:40:b9: 06:6e:12:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z+TEfl9csIJ0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MDI4OWMyZDAtYjI5My00NWQxLTg1MWEtYTUxOTE4ODNmMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXukFSkJnB6h1633QZL1a95VNeZqt9GqtjWz zu2jx0s30jGd1d6jg3EUT5ddlP8CC5zNpSXoLeIUQue2ywobiK5+bfSF2VLx6rEa IQ2V6H6r3gLk8P1454JN+KSEKX7ZNLTdEi37RSlDhTnGILrVEXsxAVH1C7IcCEym pxOonewpZagDkj+O7cK/gOrRbPbgVAesKSgmdye0E2K+gc7dy/4ROzHTFB3A6lgp Ck+dPQKRXvPvWccwHaqbm8oj9DRfxZpw+fyhfA45kK02vORrzhxy9Q6FXq0BzzcN kMjgzL0ih63BF1fNxFNnU5hfpZFaQ7lywIFQm42gP2CiqKzIkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtRPMwyuHbQJwiPzVsWDuNddXARMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvNzQ1Y2YwNTktZjZkMy0z MzZlLWE3Y2YtMjU0NzY4MWQ3MjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrnAtQur7uEegrYeapNvCuOdL+jNEQEfHKafM+QIWfnrv7VpGy7oNPv p1Mkd/XqVQhCTNa3jrOFM/KttMytJNUMJtsUZ4nkzofWf46wGcmYYvdkDSgaFa6W kOz6VkxZ0sGJmmv1CTxymZoJLiysSP7I7PoaUFPqGkBzJZ59OVAOhuCIFghSEKEe vqWJxVTtU/uOQ5GLKgenCBrge0icNNKozPiRLJnZkRKDOGsOmS0dreYfAlSjs+hA WurhYGvi1WLW8ZreKCFH8h87ETkmdZAM4A0uCLNULdnGs3LRVugV1iv0m+iYs+uP rcN1zCz+MSi1BnGuEJcfagdAuQZuEjY= -----END CERTIFICATE-----Generated at Sat Oct 24 16:43:27 2026 by rpki-client