$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa File: d1b918b7-6c49-3f1e-b071-32667cd45682.roa (raw, json) Hash identifier: Q8wQMUZxSQeEFMUVvb7c7pWk8vM+WKK9v0vQtPAwCy4= Subject key identifier: BB:A1:FA:17:4C:C1:29:3D:72:99:33:5C:42:B1:AF:38:C5:1A:13:1C Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584E3B9474F117258F1F6B64B900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa Signing time: Sat 20 Jun 2026 09:00:13 +0000 ROA not before: Sat 20 Jun 2026 09:00:13 +0000 ROA not after: Fri 18 Sep 2026 09:00:13 +0000 asID: 22616 IP address blocks: 165.225.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3b:94:74:f1:17:25:8f:1f:6b:64:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 09:00:13 2026 GMT Not After : Sep 18 09:00:13 2026 GMT Subject: CN=5672a676-2aca-4d80-9dc4-5432a57a612d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c2:49:bf:6f:d0:d0:05:34:8a:b5:11:2b:8c: 4a:8f:c8:cc:85:fd:1b:aa:b9:2d:a2:58:26:d2:c4: f9:cc:a8:8a:15:08:47:a1:ca:f5:6b:6a:84:b2:2d: 10:5e:14:4a:b3:f4:13:35:d5:a9:83:b1:0b:54:78: d8:06:a3:73:d7:1f:51:19:68:df:61:ac:24:c7:6a: f6:b1:dd:60:05:f4:20:9a:34:6b:98:2a:5c:9b:99: 70:40:26:2b:fa:74:e3:f3:ad:80:5d:3a:21:b0:9a: f1:0d:d7:fb:ea:7f:1c:fc:60:f2:b5:1c:f0:0c:39: b1:4b:38:51:a7:a5:13:25:92:96:68:85:5f:47:52: 68:ea:bb:a7:79:d1:a9:9c:28:61:f7:e7:81:dc:03: da:d5:d9:5b:84:c2:62:9b:4e:f2:13:48:5d:ae:6a: 7e:26:17:16:28:bf:26:c0:c0:01:42:36:41:f6:29: 5f:94:b5:ae:a6:cb:46:6d:d2:30:2f:5a:f2:bd:19: 83:90:41:63:a7:e4:e2:20:25:80:ad:cc:a7:85:df: c4:2c:83:41:28:bd:24:59:82:c0:a2:69:c1:3c:80: 98:30:8c:f2:1e:3a:a1:06:36:0c:98:b8:14:db:9d: 31:df:76:3a:ed:84:76:f1:9f:77:fa:a0:e3:f7:e7: fb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A1:FA:17:4C:C1:29:3D:72:99:33:5C:42:B1:AF:38:C5:1A:13:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/d1b918b7-6c49-3f1e-b071-32667cd45682.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 165.225.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:ee:6f:ac:88:d0:62:cc:60:97:f5:bc:9a:85:a5:dd:a7:29: a8:ed:47:a9:1c:dc:75:7d:ee:18:4a:22:12:f5:05:9c:d5:1a: ae:4a:77:6b:71:b0:7e:00:aa:bb:7e:38:61:bb:aa:d4:76:98: 8c:40:c3:55:1e:30:8a:a9:11:66:0c:0c:a8:e5:3a:47:c3:f9: 4b:03:59:e1:42:0b:50:6c:b5:46:0c:34:e6:17:f0:28:95:bf: f3:81:6c:34:19:b0:ce:6e:db:bd:d6:24:1f:7b:c3:f2:10:9d: 4f:39:08:d3:da:18:7c:d1:c8:3b:ac:30:db:af:ac:61:5e:09: c0:82:13:37:09:89:b6:5d:5f:30:40:96:e0:2c:c5:e5:eb:8c: 2b:f8:a3:2c:e4:1a:d8:72:16:89:86:55:2b:54:f2:2a:8e:71: 61:7a:92:58:1f:20:41:76:b6:3a:f3:35:26:0c:df:1d:55:fb: 84:ae:fa:67:90:1c:2b:76:a2:a6:0f:57:f4:da:aa:ab:04:bc: d9:d9:aa:ed:ec:5f:8f:41:63:f8:98:a8:22:0a:fd:d8:44:34: f8:6f:24:60:c3:b3:91:08:4b:32:1a:ab:15:7c:4e:ab:09:7a: 1c:af:a3:02:b4:6c:c9:62:9e:94:11:f7:4f:a9:e6:d5:67:11: 87:7c:92:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE47lHTxFyWPH2tkuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDYyMDA5MDAxM1oXDTI2MDkxODA5MDAxM1owLzEtMCsGA1UEAxMk NTY3MmE2NzYtMmFjYS00ZDgwLTlkYzQtNTQzMmE1N2E2MTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusJJv2/Q0AU0irURK4xKj8jMhf0bqrktolgm 0sT5zKiKFQhHocr1a2qEsi0QXhRKs/QTNdWpg7ELVHjYBqNz1x9RGWjfYawkx2r2 sd1gBfQgmjRrmCpcm5lwQCYr+nTj862AXTohsJrxDdf76n8c/GDytRzwDDmxSzhR p6UTJZKWaIVfR1Jo6runedGpnChh9+eB3APa1dlbhMJim07yE0hdrmp+JhcWKL8m wMABQjZB9ilflLWupstGbdIwL1ryvRmDkEFjp+TiICWArcynhd/ELINBKL0kWYLA omnBPICYMIzyHjqhBjYMmLgU250x33Y67YR28Z93+qDj9+f7aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuh+hdMwSk9cpkzXEKxrzjFGhMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZDFiOTE4YjctNmM0OS0z ZjFlLWIwNzEtMzI2NjdjZDQ1NjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/ub6yI0GLMYJf1vJqFpd2nKajtR6kc3HV97hhKIhL1BZzVGq5Kd2tx sH4Aqrt+OGG7qtR2mIxAw1UeMIqpEWYMDKjlOkfD+UsDWeFCC1BstUYMNOYX8CiV v/OBbDQZsM5u273WJB97w/IQnU85CNPaGHzRyDusMNuvrGFeCcCCEzcJibZdXzBA luAsxeXrjCv4oyzkGthyFomGVStU8iqOcWF6klgfIEF2tjrzNSYM3x1V+4Su+meQ HCt2oqYPV/TaqqsEvNnZqu3sX49BY/iYqCIK/dhENPhvJGDDs5EISzIaqxV8TqsJ ehyvowK0bMlinpQR90+p5tVnEYd8kp8= -----END CERTIFICATE-----Generated at Fri Jul 24 10:35:53 2026 by rpki-client