$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa File: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (raw, json) Hash identifier: ju9d/O/CfvmVzW9cjXyGUKT6LloR+s7xauLl76PjC7Y= Subject key identifier: BD:4A:99:7A:8E:CD:81:6A:9B:90:17:0F:11:AF:83:BD:EE:0A:90:AF Certificate issuer: /CN=afac962a-1647-4571-99e5-a23db5fd79d7 Certificate serial: 010D0C9F4328584E640F789FE1D4CCB756817E00 Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa Signing time: Sat 04 Jul 2026 21:00:12 +0000 ROA not before: Sat 04 Jul 2026 21:00:12 +0000 ROA not after: Fri 02 Oct 2026 21:00:12 +0000 asID: 2650 IP address blocks: 165.119.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:64:0f:78:9f:e1:d4:cc:b7:56:81:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7 Validity Not Before: Jul 4 21:00:12 2026 GMT Not After : Oct 2 21:00:12 2026 GMT Subject: CN=9d4099d8-970d-4e7b-bad9-8c0a2a2b826a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:14:4b:33:e5:75:a9:04:ad:19:ed:32:91: 89:3f:dd:6e:38:c9:30:90:32:ad:80:97:91:7f:21: ed:bd:3d:9c:6c:2c:d4:3d:51:8e:75:fe:f4:f4:51: 9a:80:4d:66:33:1f:92:fa:6a:ba:3e:33:9e:2f:32: ab:cf:23:dc:4b:e9:93:3e:8b:56:19:e8:f4:ae:4a: 29:74:60:fa:1e:2c:f2:45:34:fd:3f:1e:74:b6:c2: 57:cd:31:f3:b6:15:84:39:2a:38:d6:0c:1a:22:ce: 57:8d:24:15:78:31:71:0b:c1:a9:72:d9:03:36:25: 76:52:a7:d1:3a:65:ab:a6:c6:95:13:67:5e:fd:7f: 02:99:ba:a3:f0:c9:25:e4:e7:0f:99:e7:17:2c:85: 08:18:1c:1a:44:5e:71:fc:e8:52:a7:e6:70:17:39: 89:b3:e9:60:1a:de:e0:d3:d1:93:47:5d:9b:2f:33: 3b:7f:a2:4b:03:b3:83:5d:f1:53:a6:36:60:8c:90: 7a:cc:21:e4:3e:18:3b:85:d3:00:ec:4c:a4:d8:eb: 11:ca:93:4f:78:42:c0:66:31:24:a7:56:14:72:76: 55:bf:5d:34:05:0f:61:d6:76:b6:84:17:b5:ba:f8: b2:b7:76:40:3d:a1:72:09:1f:51:11:8f:19:a4:75: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4A:99:7A:8E:CD:81:6A:9B:90:17:0F:11:AF:83:BD:EE:0A:90:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/0d8274da-0703-3d0a-ab87-cd190f0a1378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl X509v3 Authority Key Identifier: keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer sbgp-ipAddrBlock: critical IPv4: 165.119.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3d:5f:54:d1:0a:52:27:21:88:77:80:85:a7:e4:33:7d:f1: e0:3c:21:b4:dd:98:38:71:2f:04:ed:76:28:76:0a:68:03:90: 9c:28:de:28:3e:86:28:a0:72:ff:9b:27:e8:86:bb:74:fe:10: a2:85:5a:ba:06:05:bb:df:ad:3d:16:61:85:77:76:35:c6:dc: 8a:e3:a4:7e:29:87:4a:0f:da:52:58:c3:57:50:e1:8a:01:72: 18:90:a1:dd:df:5a:b3:93:42:9a:af:43:e9:b2:38:02:fc:48: 24:31:e7:93:67:e1:96:63:9b:9b:e6:0a:43:d5:fe:5c:19:31: e6:a7:6c:80:2d:e6:fc:30:bd:8a:bf:cf:95:ea:b7:ab:ad:74: 85:a8:03:4e:ba:f2:5e:4e:54:bf:b1:a6:6b:45:b1:c9:18:bb: a7:ac:70:96:0d:a4:dc:73:9b:5c:5c:25:0c:99:c3:13:8e:a4: 30:91:2c:d3:8a:61:db:44:ec:0f:41:12:55:cc:22:c1:fc:d5: b6:da:bd:9c:a0:4d:0e:d8:e9:16:75:41:8d:5f:9c:ad:1d:fc: 52:0e:f8:fe:3a:5c:ff:a6:4e:ad:51:03:8c:a9:2e:62:3a:84: 68:7a:4a:37:26:de:77:46:55:3e:5b:df:b2:64:23:59:07:f9: 99:3b:9f:1c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE5kD3if4dTMt1aBfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3 OWQ3MB4XDTI2MDcwNDIxMDAxMloXDTI2MTAwMjIxMDAxMlowLzEtMCsGA1UEAxMk OWQ0MDk5ZDgtOTcwZC00ZTdiLWJhZDktOGMwYTJhMmI4MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJAUSzPldakErRntMpGJP91uOMkwkDKtgJeR fyHtvT2cbCzUPVGOdf709FGagE1mMx+S+mq6PjOeLzKrzyPcS+mTPotWGej0rkop dGD6HizyRTT9Px50tsJXzTHzthWEOSo41gwaIs5XjSQVeDFxC8GpctkDNiV2UqfR OmWrpsaVE2de/X8Cmbqj8Mkl5OcPmecXLIUIGBwaRF5x/OhSp+ZwFzmJs+lgGt7g 09GTR12bLzM7f6JLA7ODXfFTpjZgjJB6zCHkPhg7hdMA7Eyk2OsRypNPeELAZjEk p1YUcnZVv100BQ9h1na2hBe1uviyt3ZAPaFyCR9REY8ZpHWYxQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL1KmXqOzYFqm5AXDxGvg73uCpCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvMGQ4Mjc0ZGEtMDcwMy0z ZDBhLWFiODctY2QxOTBmMGExMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5 ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk YjVmZDc5ZDcuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApXcwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfT1fVNEKUichiHeAhafkM33x4DwhtN2YOHEvBO12KHYKaAOQnCjeKD6G KKBy/5sn6Ia7dP4QooVaugYFu9+tPRZhhXd2NcbciuOkfimHSg/aUljDV1DhigFy GJCh3d9as5NCmq9D6bI4AvxIJDHnk2fhlmObm+YKQ9X+XBkx5qdsgC3m/DC9ir/P leq3q610hagDTrryXk5Uv7Gma0WxyRi7p6xwlg2k3HObXFwlDJnDE46kMJEs04ph 20TsD0ESVcwiwfzVttq9nKBNDtjpFnVBjV+crR38Ug74/jpc/6ZOrVEDjKkuYjqE aHpKNybed0ZVPlvfsmQjWQf5mTufHA== -----END CERTIFICATE-----Generated at Fri Jul 24 19:55:09 2026 by rpki-client