$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa File: b939e3a2-b88f-3888-aa78-728ece0ca29b.roa (raw, json) Hash identifier: Zuzcu4E91M9wjbzVQt31hCBudxziVniU2RkUQ3m/0BE= Subject key identifier: 11:70:F4:B7:7C:79:F6:57:98:B9:EE:64:54:9B:DB:3B:09:A0:50:8C Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584F92086F9C6027E4C6E2449240 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 16509 IP address blocks: 165.224.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:6f:9c:60:27:e4:c6:e2:44:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=de7f5d9e-7cb4-4f72-9abb-07b8c12aea40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3d:8e:b3:1f:a9:ff:5c:a2:44:60:94:f2:a0: 30:4a:ae:71:a6:7d:2d:6f:c2:26:d4:96:ce:7c:b9: 6a:6a:0c:de:77:0d:8c:76:71:aa:d0:fb:38:93:a2: 9d:a1:42:0f:d2:8a:c1:a8:83:d2:fd:f8:9a:48:62: a4:12:25:fd:6f:dc:85:26:83:c6:df:ab:b2:83:c6: 0b:62:6a:01:f5:c0:74:65:46:fc:17:a4:73:12:bd: 8e:fc:11:6c:07:6d:ea:cd:e4:bc:71:ef:38:da:c9: 20:f5:a1:83:8d:65:99:b5:90:ae:8d:73:25:97:2b: a0:9d:92:00:9f:14:7d:12:0b:59:08:5e:a3:f8:d5: 3a:52:60:c2:79:f6:c8:5d:f6:6c:cc:53:fe:ab:12: 16:ac:51:ad:61:0a:f7:db:6f:f3:09:c9:aa:ee:1b: 8a:32:9a:cf:b6:d4:c1:75:06:fa:87:89:a0:cc:c7: a6:35:1f:cd:5c:c6:4f:4a:f0:39:fb:2f:b3:3c:33: 34:de:05:38:1c:a1:a0:b2:5b:66:c8:ba:3a:e4:82: e7:f5:ca:d5:75:00:ed:fd:7e:91:e5:2b:d3:4d:a1: 58:5b:a0:3c:13:1d:63:bb:89:90:c5:03:56:f1:19: 58:ac:ca:b3:2f:98:58:3c:b8:7b:6a:48:05:33:de: f5:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:70:F4:B7:7C:79:F6:57:98:B9:EE:64:54:9B:DB:3B:09:A0:50:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/b939e3a2-b88f-3888-aa78-728ece0ca29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:a5:cb:6c:ef:29:df:6a:9a:42:a1:84:ff:4f:92:7f:d4:3c: 52:61:61:79:1c:e1:bd:99:2c:ed:46:03:09:8a:de:1d:51:d9: 68:df:14:01:93:2a:3b:4e:cb:72:94:ae:42:89:fa:8d:f1:5e: 66:b3:76:9b:63:48:d8:5c:06:b5:b6:f3:f7:cd:0d:17:18:0a: 68:33:49:ce:ca:53:cd:df:00:80:23:fc:f9:fa:30:bd:25:7f: 1c:66:a8:10:11:74:77:a1:8c:c3:63:85:3d:0c:a7:e9:13:a8: 0c:52:2d:f7:44:a1:45:70:e6:99:7b:3d:53:22:1b:a8:53:23: 2e:1a:90:28:3b:8d:a5:9c:79:8e:bc:ef:78:2f:2d:1f:48:57: 44:32:1b:c1:63:f2:b1:c4:d0:30:0d:ec:03:8e:f5:18:f6:37: 0b:59:35:a7:8d:ed:cb:2c:9e:0e:08:27:2e:5d:9d:a0:b7:1f: ac:6d:e1:c5:19:5a:b0:78:7f:d3:a4:c2:6b:ed:ef:75:aa:87: 3b:20:db:84:31:cc:6b:ef:4e:de:d7:d5:57:ff:48:35:4f:ca: 4e:98:33:6a:a1:96:52:c6:df:9c:93:9b:d7:4b:7b:b5:c4:72: 50:6f:21:6f:e1:86:9d:0b:ad:79:44:de:58:c5:3e:c3:ee:5f: da:c6:68:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCG+cYCfkxuJEkkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGU3ZjVkOWUtN2NiNC00ZjcyLTlhYmItMDdiOGMxMmFlYTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz2Osx+p/1yiRGCU8qAwSq5xpn0tb8Im1JbO fLlqagzedw2MdnGq0Ps4k6KdoUIP0orBqIPS/fiaSGKkEiX9b9yFJoPG36uyg8YL YmoB9cB0ZUb8F6RzEr2O/BFsB23qzeS8ce842skg9aGDjWWZtZCujXMllyugnZIA nxR9EgtZCF6j+NU6UmDCefbIXfZszFP+qxIWrFGtYQr322/zCcmq7huKMprPttTB dQb6h4mgzMemNR/NXMZPSvA5+y+zPDM03gU4HKGgsltmyLo65ILn9crVdQDt/X6R 5SvTTaFYW6A8Ex1ju4mQxQNW8RlYrMqzL5hYPLh7akgFM971iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFw9Ld8efZXmLnuZFSb2zsJoFCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYjkzOWUzYTItYjg4Zi0z ODg4LWFhNzgtNzI4ZWNlMGNhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApeDMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWly2zvKd9qmkKhhP9Pkn/UPFJhYXkc4b2ZLO1GAwmK3h1R2WjfFAGT KjtOy3KUrkKJ+o3xXmazdptjSNhcBrW28/fNDRcYCmgzSc7KU83fAIAj/Pn6ML0l fxxmqBARdHehjMNjhT0Mp+kTqAxSLfdEoUVw5pl7PVMiG6hTIy4akCg7jaWceY68 73gvLR9IV0QyG8Fj8rHE0DAN7AOO9Rj2NwtZNaeN7cssng4IJy5dnaC3H6xt4cUZ WrB4f9Okwmvt73Wqhzsg24QxzGvvTt7X1Vf/SDVPyk6YM2qhllLG35yTm9dLe7XE clBvIW/hhp0LrXlE3ljFPsPuX9rGaGM= -----END CERTIFICATE-----Generated at Sat Oct 24 07:04:39 2026 by rpki-client