$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa File: a126dc2a-ea12-360f-884a-c034289f0aee.roa (raw, json) Hash identifier: BMR27j/H08yer6Mz11+qvnqUxljbaefgCq43YfQMb5I= Subject key identifier: E1:F1:A6:B0:39:67:57:3A:0A:06:D1:F7:41:91:63:76:AF:98:D8:11 Certificate issuer: /CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Certificate serial: 010D0C9F4328584D9E5003BC41B0092B31D72E80 Authority key identifier: BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 397423 IP address blocks: 165.140.84.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:03:bc:41:b0:09:2b:31:d7:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9aaf11-1c74-496e-99c6-6152cb292b86 Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=6ddf2c32-029a-4130-b72f-ed2c35eadcd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:e7:0b:44:2b:0b:aa:6e:d9:10:2c:3c:6e: 59:7e:b2:6b:70:09:b7:d3:98:02:52:82:23:5e:58: 5f:aa:0a:03:0d:aa:98:a6:36:ce:7f:79:76:04:b4: aa:94:cf:4f:ad:21:9a:f3:78:28:a8:ab:11:ca:27: 8c:d2:81:2a:12:e1:e5:64:59:68:1d:7e:7b:ab:45: 42:79:5b:d5:3e:ca:e0:d0:53:13:cd:cc:1d:5c:88: a9:19:8d:9d:87:38:fc:5a:9b:ea:60:9f:fd:d2:13: cd:e5:4a:c3:cf:5b:27:43:5e:57:ab:cd:b5:4b:71: c2:e8:e6:37:28:23:75:0a:38:4a:2b:77:e4:11:34: 07:17:56:a3:17:1e:fa:11:2c:c0:c9:02:6a:3b:20: 0d:a2:92:26:88:8b:cc:7a:97:51:ed:ec:fe:5d:1b: 6f:a5:42:60:5d:c9:aa:14:b4:a2:e0:57:3e:4f:9d: b5:f4:2d:6f:fc:8b:9b:bc:8d:c5:a0:8d:e1:8e:37: f0:ff:15:2a:f9:2e:f7:3e:cc:aa:e6:75:61:8b:e7: f5:ff:0d:da:a9:2b:ee:64:ff:43:d0:6f:0b:41:64: c3:5d:05:39:3d:df:38:c6:af:2a:41:b8:32:40:24: 20:c0:bf:ea:bb:96:d7:18:b4:82:77:cf:37:8a:8e: cf:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F1:A6:B0:39:67:57:3A:0A:06:D1:F7:41:91:63:76:AF:98:D8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/a126dc2a-ea12-360f-884a-c034289f0aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86/5d9aaf11-1c74-496e-99c6-6152cb292b86.crl X509v3 Authority Key Identifier: keyid:BD:FD:6A:A4:49:4C:E0:97:EA:5A:15:44:E2:94:69:A1:B9:1F:04:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9aaf11-1c74-496e-99c6-6152cb292b86.cer sbgp-ipAddrBlock: critical IPv4: 165.140.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:a7:09:02:c9:26:fd:a7:7e:77:a5:86:af:fc:fa:ad:46:97: d5:d9:48:cc:5b:e8:c6:41:2f:27:ae:31:f7:b9:73:61:fc:5a: 8f:55:04:d1:a7:a2:bd:4b:9e:a4:d4:44:e3:69:22:44:39:56: 49:5b:32:fb:72:7c:0b:2a:fb:3a:58:9b:2c:d0:68:7f:3d:4d: 83:f3:c3:ad:01:57:02:86:4b:3f:14:19:86:0a:f6:0f:cb:b1: 32:a5:6a:36:ca:6b:ae:39:0c:75:bb:99:88:95:0b:cc:90:6e: d1:fd:cb:28:2d:e8:1b:10:17:f6:47:ec:a8:4e:ab:29:d0:ad: f7:99:34:ce:30:57:c6:74:04:4d:bd:ac:2a:69:70:3b:29:36: 44:60:f4:76:24:7f:70:ee:9e:27:94:6f:c0:c2:95:ca:3e:46: 31:03:f4:5d:f7:f0:9e:c8:0a:0f:92:1c:8f:e7:2a:dd:f5:66: e8:05:bd:31:d9:36:a8:11:45:be:0b:a8:7f:68:d3:e7:35:a9: e5:82:f1:74:18:5b:3a:3f:d0:07:0c:a2:44:f0:55:8a:bb:a4: a1:36:15:dd:1c:f9:44:fa:05:f7:3d:c9:0b:96:70:02:e7:b0: 4c:b6:50:df:a0:cb:07:33:6d:69:78:59:5c:2f:70:43:cf:b8: c3:87:12:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUAO8QbAJKzHXLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YWFmMTEtMWM3NC00OTZlLTk5YzYtNjE1MmNiMjky Yjg2MB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NmRkZjJjMzItMDI5YS00MTMwLWI3MmYtZWQyYzM1ZWFkY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhXnC0QrC6pu2RAsPG5ZfrJrcAm305gCUoIj XlhfqgoDDaqYpjbOf3l2BLSqlM9PrSGa83goqKsRyieM0oEqEuHlZFloHX57q0VC eVvVPsrg0FMTzcwdXIipGY2dhzj8WpvqYJ/90hPN5UrDz1snQ15Xq821S3HC6OY3 KCN1CjhKK3fkETQHF1ajFx76ESzAyQJqOyANopImiIvMepdR7ez+XRtvpUJgXcmq FLSi4Fc+T5219C1v/IubvI3FoI3hjjfw/xUq+S73Psyq5nVhi+f1/w3aqSvuZP9D 0G8LQWTDXQU5Pd84xq8qQbgyQCQgwL/qu5bXGLSCd883io7P5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHxprA5Z1c6CgbR90GRY3avmNgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlh YWYxMS0xYzc0LTQ5NmUtOTljNi02MTUyY2IyOTJiODYvYTEyNmRjMmEtZWExMi0z NjBmLTg4NGEtYzAzNDI4OWYwYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YWFmMTEtMWM3NC00OTZlLTk5 YzYtNjE1MmNiMjkyYjg2LzVkOWFhZjExLTFjNzQtNDk2ZS05OWM2LTYxNTJjYjI5 MmI4Ni5jcmwwHwYDVR0jBBgwFoAUvf1qpElM4JfqWhVE4pRpobkfBIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlhYWYxMS0xYzc0LTQ5NmUtOTljNi02MTUy Y2IyOTJiODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKunCQLJJv2nfnelhq/8+q1Gl9XZSMxb6MZBLyeuMfe5c2H8Wo9VBNGn or1LnqTURONpIkQ5VklbMvtyfAsq+zpYmyzQaH89TYPzw60BVwKGSz8UGYYK9g/L sTKlajbKa645DHW7mYiVC8yQbtH9yygt6BsQF/ZH7KhOqynQrfeZNM4wV8Z0BE29 rCppcDspNkRg9HYkf3DunieUb8DClco+RjED9F338J7ICg+SHI/nKt31ZugFvTHZ NqgRRb4LqH9o0+c1qeWC8XQYWzo/0AcMokTwVYq7pKE2Fd0c+UT6Bfc9yQuWcALn sEy2UN+gywczbWl4WVwvcEPPuMOHEiM= -----END CERTIFICATE-----Generated at Tue Apr 28 03:49:33 2026 by rpki-client