$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa File: e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa (raw, json) Hash identifier: 2BssJBLb5sLa/0I/4PZ+xUSnJR2IjEl1bM6IRABOR48= Subject key identifier: 45:AE:C7:B5:09:C6:5C:94:26:DC:3F:E3:07:0F:D1:24:31:D4:71:D4 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584F71ED9F871D0ABB78385E2D98 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 8987 IP address blocks: 165.224.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:9f:87:1d:0a:bb:78:38:5e:2d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=1f902622-e2f1-43b7-a369-5897012779ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:0a:80:08:9d:d6:62:41:bb:54:f7:c2:b3: ea:5e:07:87:cc:58:f1:a6:49:9e:3d:8b:51:7a:f2: 13:69:24:7a:76:0a:63:96:f9:d5:d6:bb:08:77:64: fc:a1:7d:b8:a3:81:ee:6e:4f:61:fe:ff:79:48:a1: 3c:53:41:94:3e:07:3b:5f:81:14:40:a5:d1:7c:ad: de:83:08:8b:45:eb:e4:ad:88:96:c1:33:f0:97:bf: 3c:a5:ec:3b:1c:f0:1f:9d:bc:c4:d5:f5:92:a6:8e: 4d:07:f0:b3:90:aa:7e:c4:be:6b:cc:2f:1e:35:06: 14:36:a2:c2:a7:93:7e:89:a1:61:ad:33:24:20:e6: 28:2b:2d:3c:34:95:fb:dd:cc:ec:c6:13:11:d0:73: 8e:20:c2:c0:25:a7:67:c6:ea:f2:44:9c:ce:51:6c: f6:05:09:e4:82:27:21:84:2b:1b:be:20:ed:16:5a: 7a:f0:60:32:9c:9a:a7:0e:f1:a4:61:04:37:9c:31: b4:97:8d:13:19:d3:32:6a:d3:51:42:65:19:9c:f0: ba:5b:98:a1:8e:36:d4:c7:74:0d:e9:b0:5c:1c:36: 7c:08:30:9b:db:0d:05:64:4c:1d:26:7a:8e:32:4c: a2:18:81:1c:bf:82:26:2b:0d:14:99:b1:81:3c:31: 0b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AE:C7:B5:09:C6:5C:94:26:DC:3F:E3:07:0F:D1:24:31:D4:71:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e0e44970-2f87-36be-b4b8-6e3dae9f117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:ce:dc:e4:c6:d6:c0:9e:5a:8a:ec:a0:18:c7:df:58:26:c2: a1:ad:68:ef:17:a4:68:84:dc:b8:bf:52:f4:ce:fe:3a:0d:28: 35:2a:dd:f4:cf:a6:50:4d:eb:29:40:e3:70:a5:d9:c0:70:92: 35:e3:c3:47:dd:73:cb:b6:34:98:2a:5e:9e:a4:9c:a0:fa:a2: bb:c1:82:c9:48:73:ed:e6:f3:2b:30:94:aa:a3:39:74:1a:ab: 51:75:64:85:58:b6:a4:2b:6c:17:ca:91:31:e9:9a:1f:64:63: 18:85:e7:5d:cd:60:5c:c7:fb:b2:13:36:10:97:87:2b:80:fc: 44:f9:c0:87:b4:2b:6c:94:db:fc:1b:6d:38:45:56:2f:5d:ae: 6a:7a:f0:de:4e:0c:c2:c7:a2:cf:b4:ad:77:b0:ed:a4:47:1f: ae:b3:c8:61:86:05:5a:ef:4a:69:d9:a2:b4:18:1e:ba:fe:83: a2:00:c4:a1:07:0e:9b:b4:6b:a6:4c:5b:9f:46:aa:6d:c8:31: 2a:52:4d:11:8b:8e:92:61:ae:20:0e:2f:f5:2e:f6:1f:b6:dd: bc:a9:26:60:da:9d:bd:93:52:3d:75:7a:24:8b:13:47:75:a7: 39:fe:b5:47:91:92:76:26:cd:86:f8:7f:3c:ff:77:85:7c:7c: 3c:64:c0:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Z+HHQq7eDheLZgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MWY5MDI2MjItZTJmMS00M2I3LWEzNjktNTg5NzAxMjc3OWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfIKgAid1mJBu1T3wrPqXgeHzFjxpkmePYtR evITaSR6dgpjlvnV1rsId2T8oX24o4Hubk9h/v95SKE8U0GUPgc7X4EUQKXRfK3e gwiLRevkrYiWwTPwl788pew7HPAfnbzE1fWSpo5NB/CzkKp+xL5rzC8eNQYUNqLC p5N+iaFhrTMkIOYoKy08NJX73czsxhMR0HOOIMLAJadnxuryRJzOUWz2BQnkgich hCsbviDtFlp68GAynJqnDvGkYQQ3nDG0l40TGdMyatNRQmUZnPC6W5ihjjbUx3QN 6bBcHDZ8CDCb2w0FZEwdJnqOMkyiGIEcv4ImKw0UmbGBPDELOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEWux7UJxlyUJtw/4wcP0SQx1HHUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvZTBlNDQ5NzAtMmY4Ny0z NmJlLWI0YjgtNmUzZGFlOWYxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpeBEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnO3OTG1sCeWorsoBjH31gmwqGtaO8XpGiE3Li/UvTO/joNKDUq3fTP plBN6ylA43Cl2cBwkjXjw0fdc8u2NJgqXp6knKD6orvBgslIc+3m8yswlKqjOXQa q1F1ZIVYtqQrbBfKkTHpmh9kYxiF513NYFzH+7ITNhCXhyuA/ET5wIe0K2yU2/wb bThFVi9drmp68N5ODMLHos+0rXew7aRHH66zyGGGBVrvSmnZorQYHrr+g6IAxKEH Dpu0a6ZMW59Gqm3IMSpSTRGLjpJhriAOL/Uu9h+23bypJmDanb2TUj11eiSLE0d1 pzn+tUeRknYmzYb4fzz/d4V8fDxkwAE= -----END CERTIFICATE-----Generated at Sat Oct 24 10:24:02 2026 by rpki-client