$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa File: c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa (raw, json) Hash identifier: C59orNFpZ/GqgeXCI0hNQRDEXrAXHgDrEEcSm/xkoHM= Subject key identifier: 34:FD:B9:E6:1B:4F:0D:33:CA:6C:C5:17:35:B5:15:E5:A2:18:49:83 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584F71ED9F9E6E02246193FD36C0 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:9e:6e:02:24:61:93:fd:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=2369d228-1c8d-4209-bd62-44523883f720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:11:20:e1:0f:52:6c:30:46:51:b7:82:e9:b6: 0a:63:be:84:7a:3a:6c:70:c8:18:ac:02:82:15:39: a7:52:ed:3f:8c:fb:8f:0b:eb:e3:18:69:c1:fe:01: 33:6b:59:05:0b:e8:34:5c:8b:b9:fa:f3:ce:13:5d: 9f:f0:49:86:bd:0a:22:27:21:8b:f9:4a:c1:77:61: 15:30:20:79:a6:2c:c5:4e:9d:ea:46:9e:0e:df:fe: d2:0c:4f:62:78:0b:93:92:a7:05:72:bd:cb:58:bf: 8d:b8:40:ed:dd:a4:e0:21:06:5f:e6:29:2c:2d:e6: 61:ea:37:f7:f0:15:4c:d8:97:dd:e4:9d:a0:6e:89: 6d:d2:8f:33:98:95:a2:14:c0:63:76:1a:89:8f:3e: 1f:85:9a:3f:3e:91:31:4b:87:42:62:ca:59:49:0e: cd:d7:90:bf:63:7c:07:69:86:ce:fe:df:f2:6d:0a: ec:08:03:c4:9b:9f:1c:fe:d6:36:54:78:47:c7:71: a0:af:44:01:48:cd:75:e5:3b:db:d2:e2:10:fc:7b: f4:67:64:47:1c:4d:8b:05:b7:2e:82:22:e8:83:1b: 93:75:61:a8:bb:6c:26:00:b7:e8:87:8e:7b:63:b9: 7b:7f:1a:5d:f6:ca:84:65:65:61:32:7b:e4:aa:38: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:FD:B9:E6:1B:4F:0D:33:CA:6C:C5:17:35:B5:15:E5:A2:18:49:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c987648e-5bc5-3c91-9972-ee7c86e9a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f8:66:55:d6:f2:eb:b5:40:80:fe:f3:6f:28:18:15:0e:84: 1c:7b:9a:c7:b5:d3:1c:d0:4b:03:21:48:d7:bb:84:4b:ce:f7: 69:82:a6:79:af:37:39:6b:d0:58:57:f2:e5:56:7a:e0:84:6a: e5:e1:19:bf:77:e7:9e:a0:01:0c:c6:e1:ac:f5:4e:4f:24:b5: 07:97:20:0d:27:3e:c5:8c:de:51:39:9a:a0:93:09:22:76:c1: 5a:e7:cc:c3:8e:65:e7:13:74:bd:c7:a9:b7:86:3a:85:91:f6: 4e:82:8e:e8:77:68:78:6d:d4:ea:39:d9:af:1c:93:0b:0c:8c: 95:2f:22:28:c6:64:6c:25:c3:8a:6e:fa:31:a2:04:9c:95:a7: 33:dd:eb:3d:0e:d5:b2:f1:51:85:c7:73:19:41:30:f5:8d:6b: 45:ca:b9:c0:a5:09:b5:c3:00:39:08:09:73:08:e9:08:b2:2f: d1:bc:64:6b:f0:07:75:b7:99:36:ac:89:9a:23:08:de:02:2b: 9e:36:30:e4:58:f9:21:23:62:c8:fe:0b:86:e3:8c:0a:e2:af: 54:19:f6:aa:2b:8f:b0:12:17:21:eb:0a:dd:67:d6:74:52:58: 81:b6:9b:ac:8b:34:af:03:d2:e3:88:80:af:98:d7:52:95:7e: d0:de:9f:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z+ebgIkYZP9NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MjM2OWQyMjgtMWM4ZC00MjA5LWJkNjItNDQ1MjM4ODNmNzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwREg4Q9SbDBGUbeC6bYKY76EejpscMgYrAKC FTmnUu0/jPuPC+vjGGnB/gEza1kFC+g0XIu5+vPOE12f8EmGvQoiJyGL+UrBd2EV MCB5pizFTp3qRp4O3/7SDE9ieAuTkqcFcr3LWL+NuEDt3aTgIQZf5iksLeZh6jf3 8BVM2Jfd5J2gbolt0o8zmJWiFMBjdhqJjz4fhZo/PpExS4dCYspZSQ7N15C/Y3wH aYbO/t/ybQrsCAPEm58c/tY2VHhHx3Ggr0QBSM115Tvb0uIQ/Hv0Z2RHHE2LBbcu giLogxuTdWGou2wmALfoh457Y7l7fxpd9sqEZWVhMnvkqjg5uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDT9ueYbTw0zymzFFzW1FeWiGEmDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzk4NzY0OGUtNWJjNS0z YzkxLTk5NzItZWU3Yzg2ZTlhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADT4ZlXW8uu1QID+828oGBUOhBx7mse10xzQSwMhSNe7hEvO92mCpnmv Nzlr0FhX8uVWeuCEauXhGb93556gAQzG4az1Tk8ktQeXIA0nPsWM3lE5mqCTCSJ2 wVrnzMOOZecTdL3HqbeGOoWR9k6Cjuh3aHht1Oo52a8ckwsMjJUvIijGZGwlw4pu +jGiBJyVpzPd6z0O1bLxUYXHcxlBMPWNa0XKucClCbXDADkICXMI6QiyL9G8ZGvw B3W3mTasiZojCN4CK542MORY+SEjYsj+C4bjjArir1QZ9qorj7ASFyHrCt1n1nRS WIG2m6yLNK8D0uOIgK+Y11KVftDenyg= -----END CERTIFICATE-----Generated at Sun Oct 25 21:59:24 2026 by rpki-client