$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa File: 65cdfa75-652e-3198-9d41-4b83dc5660e1.roa (raw, json) Hash identifier: SKJGIYozpq38Umz3fkjMLTKuGx3uEmKURCFdoIYXBb4= Subject key identifier: D0:96:9A:DB:BE:17:02:02:35:3F:C9:BC:1A:3A:62:51:50:5C:17:33 Certificate issuer: /CN=44e39417-e931-4514-89dc-a42b5b458fb5 Certificate serial: 010D0C9F4328584D237A2E55DE6A89AD74533B80 Authority key identifier: 44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 8075 IP address blocks: 168.137.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2e:55:de:6a:89:ad:74:53:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e39417-e931-4514-89dc-a42b5b458fb5 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=ed0a124d-63cd-41b8-aaf3-ce7cb2b84e1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:2d:9e:80:3f:38:93:32:46:b7:48:79:29:83: 97:a3:7c:e2:09:02:27:58:1c:bb:6b:8a:c5:e2:af: ae:b3:aa:cb:5d:56:03:28:9d:94:41:c8:1f:e6:13: 9b:f5:5b:15:3d:85:38:36:a3:4b:26:89:66:25:fd: 42:9f:07:12:c6:2e:d9:a7:eb:63:79:56:1f:79:7b: 3d:48:9e:93:8c:95:40:f9:3d:94:35:22:07:fb:1a: 8b:72:00:8d:ff:0b:68:a9:70:54:16:bd:93:7c:53: be:ee:08:77:8d:fa:67:e1:29:40:b4:02:11:91:ca: 43:bc:0e:ab:a1:6e:d6:d1:95:b8:9f:ef:03:86:9f: 21:80:41:18:41:c5:b9:b7:a6:cc:7c:4f:96:72:e7: 98:ef:e8:07:0e:12:94:6f:e2:4a:90:12:fe:e5:fb: 57:8d:5d:d5:d2:cc:b9:c8:9a:43:bf:c5:0e:45:fa: 17:8d:12:46:da:97:ed:43:84:a6:fc:1d:89:26:b3: 61:b8:cd:06:d8:5d:48:c9:bc:88:e9:ab:67:c6:82: 68:3a:01:c2:36:e3:d0:59:e7:59:be:f6:c6:c0:da: ee:36:01:c6:7c:47:c0:ee:d8:1c:3d:a3:9f:38:13: f0:cb:dd:4a:82:1a:c2:4a:97:91:24:8b:18:ad:84: 30:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:96:9A:DB:BE:17:02:02:35:3F:C9:BC:1A:3A:62:51:50:5C:17:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/65cdfa75-652e-3198-9d41-4b83dc5660e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5/44e39417-e931-4514-89dc-a42b5b458fb5.crl X509v3 Authority Key Identifier: keyid:44:9D:B2:B5:1C:CA:4C:8C:77:44:9C:66:77:47:66:84:A2:C6:5F:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/44e39417-e931-4514-89dc-a42b5b458fb5.cer sbgp-ipAddrBlock: critical IPv4: 168.137.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:6c:c5:ba:14:ed:3d:7a:df:1a:79:41:a8:8d:69:11:fb:45: 8e:c3:ee:63:f9:4f:b6:73:4e:b9:d3:ab:c5:10:85:86:72:b8: 05:69:bc:bf:82:1b:18:86:55:ff:50:46:60:b7:53:84:e8:08: b8:0b:f8:e5:d4:77:86:4a:a4:6a:7b:e1:9b:c1:0b:c2:a7:54: 6c:51:5c:69:ee:e3:a6:e7:db:07:af:9c:84:3b:d4:b7:ff:d8: f1:79:8f:74:45:ac:2b:45:dd:42:ef:2b:a0:fd:a9:bf:3c:5c: 82:31:ef:bc:97:1f:73:1a:2e:69:cc:21:ef:f0:dc:55:4c:17: 1f:a7:b6:dd:3d:0c:41:1d:89:99:54:b1:83:3f:b5:bf:d4:9a: 5e:35:1c:80:58:52:29:6a:0c:83:9d:91:0a:4d:5d:1d:40:59: 9a:8c:f7:da:93:27:d2:5c:f6:43:d3:74:44:6f:cb:9a:2d:06: 98:06:25:86:2e:e7:91:b3:32:36:f4:20:33:46:1a:3f:42:2d: 54:68:d9:2c:bb:5e:8a:48:20:a6:c3:48:67:68:b5:74:fd:ac: 80:16:ca:09:c7:f5:3b:04:59:b5:2a:f7:9f:c0:8a:8e:74:94: e1:42:59:0c:b3:7a:34:55:02:cd:89:2c:4e:c9:1b:f1:0e:06: 8b:c0:e4:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jei5V3mqJrXRTO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDRlMzk0MTctZTkzMS00NTE0LTg5ZGMtYTQyYjViNDU4 ZmI1MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ZWQwYTEyNGQtNjNjZC00MWI4LWFhZjMtY2U3Y2IyYjg0ZTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki2egD84kzJGt0h5KYOXo3ziCQInWBy7a4rF 4q+us6rLXVYDKJ2UQcgf5hOb9VsVPYU4NqNLJolmJf1CnwcSxi7Zp+tjeVYfeXs9 SJ6TjJVA+T2UNSIH+xqLcgCN/wtoqXBUFr2TfFO+7gh3jfpn4SlAtAIRkcpDvA6r oW7W0ZW4n+8Dhp8hgEEYQcW5t6bMfE+WcueY7+gHDhKUb+JKkBL+5ftXjV3V0sy5 yJpDv8UORfoXjRJG2pftQ4Sm/B2JJrNhuM0G2F1IybyI6atnxoJoOgHCNuPQWedZ vvbGwNruNgHGfEfA7tgcPaOfOBPwy91KghrCSpeRJIsYrYQwgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCWmtu+FwICNT/JvBo6YlFQXBczMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80NGUz OTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJiNWI0NThmYjUvNjVjZGZhNzUtNjUyZS0z MTk4LTlkNDEtNGI4M2RjNTY2MGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDRlMzk0MTctZTkzMS00NTE0LTg5 ZGMtYTQyYjViNDU4ZmI1LzQ0ZTM5NDE3LWU5MzEtNDUxNC04OWRjLWE0MmI1YjQ1 OGZiNS5jcmwwHwYDVR0jBBgwFoAURJ2ytRzKTIx3RJxmd0dmhKLGX/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80NGUzOTQxNy1lOTMxLTQ1MTQtODlkYy1hNDJi NWI0NThmYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqIlAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhsxboU7T163xp5QaiNaRH7RY7D7mP5T7ZzTrnTq8UQhYZyuAVpvL+C GxiGVf9QRmC3U4ToCLgL+OXUd4ZKpGp74ZvBC8KnVGxRXGnu46bn2wevnIQ71Lf/ 2PF5j3RFrCtF3ULvK6D9qb88XIIx77yXH3MaLmnMIe/w3FVMFx+ntt09DEEdiZlU sYM/tb/Uml41HIBYUilqDIOdkQpNXR1AWZqM99qTJ9Jc9kPTdERvy5otBpgGJYYu 55GzMjb0IDNGGj9CLVRo2Sy7XopIIKbDSGdotXT9rIAWygnH9TsEWbUq95/Aio50 lOFCWQyzejRVAs2JLE7JG/EOBovA5Pg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:58:07 2026 by rpki-client