$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa File: b939e3a2-b88f-3888-aa78-728ece0ca29b.roa (raw, json) Hash identifier: d+haAn+yieXMKFj3AXSsXg86vuo1V7pbvht8QTg8qpA= Subject key identifier: 36:5F:A4:36:5C:8F:17:BF:40:02:50:30:C6:48:4C:B0:10:D3:50:0E Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584EF01CA4132F8A4635CA313070 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 16509 IP address blocks: 165.224.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a4:13:2f:8a:46:35:ca:31:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=3a81ffea-a984-482b-92d8-5b00968760b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:59:28:ae:a8:91:a4:e8:b5:78:78:a9:d8:68: 85:4d:8a:60:52:d5:0c:ec:f8:c7:7f:7e:51:d9:98: fa:10:fb:37:4c:8b:31:6f:84:af:81:74:79:42:1f: 59:e2:65:09:15:5a:c2:b4:75:08:c2:e0:8c:71:dc: e2:e9:44:61:99:76:85:63:d5:3d:26:85:14:aa:2a: a5:37:ca:dd:72:cc:bf:8d:dc:52:eb:8a:9c:89:fb: f9:1a:ac:b6:86:91:c4:b4:cf:d3:97:7d:0a:d1:bd: f0:98:de:b7:3c:fc:a9:2c:47:38:85:7b:ba:9f:97: 47:6a:fa:d7:0a:7f:b4:1f:f7:c6:d2:a0:40:ba:03: 96:d9:c4:31:d7:1e:f6:d3:da:95:09:62:ad:7b:9f: 7f:63:20:b9:75:02:54:0e:dc:50:93:a0:b6:70:a9: 17:47:5a:3b:3f:a6:79:56:4f:3c:65:c9:90:67:7f: 56:ea:f9:49:50:b2:39:e7:b5:33:a0:8b:04:dc:90: 42:ea:ad:b9:78:86:9c:13:4a:52:4d:2b:99:b2:6f: 82:21:22:1f:e9:24:74:63:a5:9d:4f:cc:e4:a3:8e: 61:8d:57:31:b1:85:83:98:94:05:d7:78:14:7f:17: b3:ea:2d:38:b5:0f:3a:1a:dd:50:06:23:d2:1a:4b: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5F:A4:36:5C:8F:17:BF:40:02:50:30:C6:48:4C:B0:10:D3:50:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:bb:5b:3c:97:1a:21:a9:1d:29:6a:14:c6:db:45:79:96:5d: da:63:81:57:cd:b5:fc:f9:ff:c0:c4:f6:d5:35:dc:da:af:3d: e4:cf:4a:c5:2c:91:af:08:97:55:8c:f9:1b:90:2d:ab:d7:5c: 2c:70:fc:95:47:b9:f2:31:5b:b1:33:8c:33:24:4c:f4:aa:1c: 3a:d9:29:cf:1c:b1:3a:16:bc:fc:b6:8b:42:16:94:62:7c:5f: a9:f4:08:d8:0f:c6:08:2e:8f:c3:36:f5:d1:48:8c:4d:b0:27: cb:06:0b:ed:14:42:a0:36:25:ef:75:6b:87:45:fa:40:f3:e9: c5:61:2c:df:8b:b8:32:d1:35:59:9a:8d:06:a5:eb:6f:ce:cd: 88:0d:09:b3:63:ae:8d:26:3f:4f:88:0f:df:96:d0:1f:5c:07: fd:46:28:1f:36:a1:da:d2:c2:dd:7a:49:05:ef:95:ff:af:c4: 16:2a:39:ab:67:51:e0:ee:1c:f3:e5:9b:39:cd:54:c3:90:5b: 23:6b:a3:aa:af:c8:0d:7d:08:bf:6d:4c:03:ca:dd:9e:fd:52: ba:5b:41:b3:b6:97:60:20:44:59:38:8a:03:b6:c4:d4:65:91: 8b:62:3e:55:39:f9:d4:7f:4e:fc:0d:ab:39:9e:70:44:cc:8f: 41:42:e4:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKQTL4pGNcoxMHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk M2E4MWZmZWEtYTk4NC00ODJiLTkyZDgtNWIwMDk2ODc2MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31korqiRpOi1eHip2GiFTYpgUtUM7PjHf35R 2Zj6EPs3TIsxb4SvgXR5Qh9Z4mUJFVrCtHUIwuCMcdzi6URhmXaFY9U9JoUUqiql N8rdcsy/jdxS64qcifv5Gqy2hpHEtM/Tl30K0b3wmN63PPypLEc4hXu6n5dHavrX Cn+0H/fG0qBAugOW2cQx1x7209qVCWKte59/YyC5dQJUDtxQk6C2cKkXR1o7P6Z5 Vk88ZcmQZ39W6vlJULI557UzoIsE3JBC6q25eIacE0pSTSuZsm+CISIf6SR0Y6Wd T8zko45hjVcxsYWDmJQF13gUfxez6i04tQ86Gt1QBiPSGktHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZfpDZcjxe/QAJQMMZITLAQ01AOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYjkzOWUzYTItYjg4Zi0z ODg4LWFhNzgtNzI4ZWNlMGNhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+7WzyXGiGpHSlqFMbbRXmWXdpjgVfNtfz5/8DE9tU13NqvPeTPSsUs ka8Il1WM+RuQLavXXCxw/JVHufIxW7EzjDMkTPSqHDrZKc8csToWvPy2i0IWlGJ8 X6n0CNgPxgguj8M29dFIjE2wJ8sGC+0UQqA2Je91a4dF+kDz6cVhLN+LuDLRNVma jQal62/OzYgNCbNjro0mP0+ID9+W0B9cB/1GKB82odrSwt16SQXvlf+vxBYqOatn UeDuHPPlmznNVMOQWyNro6qvyA19CL9tTAPK3Z79UrpbQbO2l2AgRFk4igO2xNRl kYtiPlU5+dR/TvwNqzmecETMj0FC5Cc= -----END CERTIFICATE-----Generated at Sat Sep 5 01:45:48 2026 by rpki-client