$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa File: 065f485a-2efe-31d5-8788-a9a1e337735d.roa (raw, json) Hash identifier: x8RCNfohodenukDL3WrJ/pXsS7nZzlh+KB4qE7/4HCo= Subject key identifier: 3C:84:50:8D:2B:69:64:50:87:7F:96:61:81:57:AD:86:19:AD:B3:5D Certificate issuer: /CN=ff45396e-5aed-48af-b337-95d4dc567afb Certificate serial: 010D0C9F4328584D07ACF219B9412DE86E179A80 Authority key identifier: 6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 6377 IP address blocks: 158.165.0.0/16 maxlen: 16 192.135.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f2:19:b9:41:2d:e8:6e:17:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff45396e-5aed-48af-b337-95d4dc567afb Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=a6f4761e-5ad2-4f11-99d9-a1e357928012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:4b:9e:31:9b:2d:9b:8c:39:e8:fc:9f:c6: a1:36:40:1e:f1:74:26:68:b1:83:d9:4a:79:1b:8d: 82:1a:ec:d4:2a:5f:e0:26:45:8f:cb:d2:83:d1:49: e4:7a:a0:63:1c:f5:07:72:b0:78:fd:27:49:97:35: 3e:84:6b:9b:c1:c9:f9:bb:b2:1c:79:60:b9:63:45: e8:f5:39:89:23:bb:83:cd:6b:0d:ad:bb:a8:04:5e: 1d:7d:12:3a:5b:2f:23:b9:f6:1e:35:c4:db:8e:4a: bc:88:2f:bc:df:44:4e:ac:66:ea:7b:04:53:38:15: 0a:cb:f1:05:20:24:c0:cd:54:b8:30:a4:dc:1f:3d: c2:45:0a:a8:70:bd:4d:59:50:59:3d:84:5f:41:8e: fc:94:ec:03:47:97:83:96:76:30:c3:d2:b5:b8:df: 92:d3:18:65:b1:57:e5:80:22:c7:97:35:97:3e:f9: 8e:98:70:8e:45:88:b2:8b:49:3b:ae:b6:bd:a8:67: d5:9b:f5:64:a4:2d:d6:ad:02:c8:27:e1:75:73:40: 49:01:c0:85:23:71:fb:85:53:03:9c:b8:ce:69:aa: 8b:e7:d7:5b:1f:af:c0:66:cf:2f:1c:12:fe:d3:f0: 8b:eb:a9:41:70:f8:8b:ad:00:2c:b2:34:b0:4d:77: 6d:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:84:50:8D:2B:69:64:50:87:7F:96:61:81:57:AD:86:19:AD:B3:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/065f485a-2efe-31d5-8788-a9a1e337735d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb/ff45396e-5aed-48af-b337-95d4dc567afb.crl X509v3 Authority Key Identifier: keyid:6D:DA:18:FE:0C:52:9B:FC:40:09:7E:3F:D7:75:88:E5:A1:FD:5C:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ff45396e-5aed-48af-b337-95d4dc567afb.cer sbgp-ipAddrBlock: critical IPv4: 158.165.0.0/16 192.135.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2a:ca:26:c9:35:df:21:f1:02:3a:db:6f:6e:89:58:ab:8b: 6d:96:f9:42:40:c5:9f:7b:79:f5:ae:ca:30:71:bf:32:9c:d3: 02:5e:6f:6e:db:df:96:8a:87:ea:d5:cd:9b:63:5c:80:c6:04: 23:24:fd:7d:9d:05:81:12:2d:59:a0:23:78:0e:38:aa:1f:e9: 01:31:88:dc:6f:2c:66:4f:97:62:41:ca:49:aa:95:f2:e4:a2: 46:16:2f:2e:27:04:58:80:3c:15:7b:34:44:93:9b:e8:2c:d4: ec:27:27:8e:ee:ff:4d:89:81:ee:0e:7c:79:72:54:33:51:66: 23:89:8c:ab:85:9e:59:22:70:ac:3e:2b:e8:cf:4c:dd:56:b9: 78:f4:2f:5b:fb:dc:09:7e:1d:43:21:a4:c1:95:f8:ee:05:d2: 66:01:91:1e:73:44:2b:dc:a8:05:03:c7:66:b7:fb:b9:6c:ba: e9:94:03:81:21:f1:fc:c1:f6:55:a9:d5:7f:f7:1c:7b:95:17: 8a:52:01:f8:2c:ab:73:e6:10:52:07:4b:82:f7:80:6c:4d:45: 78:23:f5:ee:a5:28:9a:25:17:25:e7:6f:2a:27:b3:4f:ae:b5: 45:aa:4c:0f:a2:b5:00:92:4b:b5:b5:56:22:94:0c:0c:22:7c: f8:7f:d8:8c -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE0HrPIZuUEt6G4XmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmY0NTM5NmUtNWFlZC00OGFmLWIzMzctOTVkNGRjNTY3 YWZiMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk YTZmNDc2MWUtNWFkMi00ZjExLTk5ZDktYTFlMzU3OTI4MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqxLnjGbLZuMOej8n8ahNkAe8XQmaLGD2Up5 G42CGuzUKl/gJkWPy9KD0UnkeqBjHPUHcrB4/SdJlzU+hGubwcn5u7IceWC5Y0Xo 9TmJI7uDzWsNrbuoBF4dfRI6Wy8jufYeNcTbjkq8iC+830ROrGbqewRTOBUKy/EF ICTAzVS4MKTcHz3CRQqocL1NWVBZPYRfQY78lOwDR5eDlnYww9K1uN+S0xhlsVfl gCLHlzWXPvmOmHCORYiyi0k7rra9qGfVm/VkpC3WrQLIJ+F1c0BJAcCFI3H7hVMD nLjOaaqL59dbH6/AZs8vHBL+0/CL66lBcPiLrQAssjSwTXdt9wIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFDyEUI0raWRQh3+WYYFXrYYZrbNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1 Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0ZGM1NjdhZmIvMDY1ZjQ4NWEtMmVmZS0z MWQ1LTg3ODgtYTlhMWUzMzc3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZmY0NTM5NmUtNWFlZC00OGFmLWIz MzctOTVkNGRjNTY3YWZiL2ZmNDUzOTZlLTVhZWQtNDhhZi1iMzM3LTk1ZDRkYzU2 N2FmYi5jcmwwHwYDVR0jBBgwFoAUbdoY/gxSm/xACX4/13WI5aH9XLswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mZjQ1Mzk2ZS01YWVkLTQ4YWYtYjMzNy05NWQ0 ZGM1NjdhZmIuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAnqUDBADA h7cwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEAEyrKJsk13yHxAjrbb26JWKuLbZb5QkDFn3t59a7KMHG/MpzT Al5vbtvfloqH6tXNm2NcgMYEIyT9fZ0FgRItWaAjeA44qh/pATGI3G8sZk+XYkHK SaqV8uSiRhYvLicEWIA8FXs0RJOb6CzU7Ccnju7/TYmB7g58eXJUM1FmI4mMq4We WSJwrD4r6M9M3Va5ePQvW/vcCX4dQyGkwZX47gXSZgGRHnNEK9yoBQPHZrf7uWy6 6ZQDgSHx/MH2VanVf/cce5UXilIB+Cyrc+YQUgdLgveAbE1FeCP17qUomiUXJedv KiezT661RapMD6K1AJJLtbVWIpQMDCJ8+H/YjA== -----END CERTIFICATE-----Generated at Sun Mar 22 09:31:04 2026 by rpki-client