$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa File: 8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa (raw, json) Hash identifier: SJ6stXJnSnmsLgonGxNYVkhMvHIe6qjvKkgr0hV71BQ= Subject key identifier: 3A:90:72:EE:60:B2:C5:B6:E1:9E:6D:76:93:67:3A:E8:61:00:82:46 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D95F006790AA36F3B6B0F2D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 20940 IP address blocks: 165.254.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:06:79:0a:a3:6f:3b:6b:0f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=3caf6b8c-4fd9-41da-ab30-673ed94cdda3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ca:5e:6e:91:64:f6:9e:23:f4:dd:3b:c6:8c: 79:fd:62:c0:dd:4b:e5:ea:cd:e3:4b:a9:4c:58:5f: 78:13:9d:75:08:ad:e3:53:38:2a:64:f9:a6:21:d1: c2:16:50:d1:73:09:33:ca:92:34:e1:12:00:09:3b: d4:54:68:4c:94:8b:4f:df:8c:af:30:f3:76:75:d0: be:1b:66:e0:46:d6:6e:fe:52:de:32:52:ec:d6:7c: 81:24:55:a3:c9:62:7a:1b:e1:92:75:ce:1a:ba:d9: b2:4e:07:5a:9f:87:e1:ac:a9:21:16:29:28:7a:eb: 8a:11:c0:57:37:19:ff:e0:70:f2:8f:c3:f9:19:12: 3e:86:80:38:36:29:3e:d5:a7:77:74:6a:05:a0:d6: ad:56:42:b9:0c:c9:29:21:8f:ad:45:27:c4:36:56: bb:b9:63:f2:41:b5:71:bf:91:5f:72:9e:82:e5:de: b4:df:10:50:04:6c:23:11:9d:78:9a:df:77:eb:cb: 98:11:d6:47:ee:27:2b:0e:db:9e:69:b1:87:5b:34: 03:b5:4d:a7:cf:d6:50:60:9c:3f:ce:c7:e0:37:4c: 93:8c:4b:35:fe:e6:1c:da:f0:6f:c6:a7:d5:5d:0c: 87:76:65:7c:a5:fb:43:44:52:50:e2:87:8d:d1:52: 54:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:72:EE:60:B2:C5:B6:E1:9E:6D:76:93:67:3A:E8:61:00:82:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8a9d4cc9-27cb-3c00-9636-84f6b4fda619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 165.254.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:7f:c7:1e:d1:1c:19:85:2a:59:42:c3:1a:d8:83:82:b5:a9: 33:78:d3:17:ba:7b:01:d4:dd:91:a9:d3:e8:4f:04:ee:98:39: 62:10:f6:b4:56:8c:bb:24:f5:91:09:2e:de:53:5f:67:78:a3: 90:d5:b3:3d:88:75:66:7b:d1:49:7e:98:04:60:9e:ae:cd:d0: d0:f9:90:fe:48:a0:51:4f:93:ff:ba:0e:3c:74:f2:5d:a9:32: 7c:af:50:ab:b0:49:7a:e7:c9:9c:fb:35:c6:f0:b7:3c:17:47: 09:f1:fb:fa:e4:c6:be:3e:b2:ad:66:b3:af:df:8a:91:e8:06: aa:9f:70:1d:12:d3:f5:17:a5:f9:cd:db:b9:8f:e3:26:55:83: 7c:24:61:51:a8:c3:0f:58:33:1c:42:30:e8:05:45:3c:ea:aa: e5:84:6c:6a:9d:01:2b:fc:3b:c9:04:58:24:99:c2:7b:77:99: c6:67:ab:37:e2:4e:87:e3:31:7c:e4:e0:dd:b7:5f:7a:14:b6: 26:fb:b5:72:81:5c:1c:46:1d:5a:0b:1c:31:68:ae:ba:7e:a9: 68:59:1e:ae:f2:11:4c:01:93:3e:75:d0:7c:cc:b0:4f:34:98: 98:9d:14:45:0a:3c:99:be:8f:f1:90:04:db:5d:28:a9:c0:c4: 2a:1b:49:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8AZ5CqNvO2sPLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk M2NhZjZiOGMtNGZkOS00MWRhLWFiMzAtNjczZWQ5NGNkZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8pebpFk9p4j9N07xox5/WLA3Uvl6s3jS6lM WF94E511CK3jUzgqZPmmIdHCFlDRcwkzypI04RIACTvUVGhMlItP34yvMPN2ddC+ G2bgRtZu/lLeMlLs1nyBJFWjyWJ6G+GSdc4autmyTgdan4fhrKkhFikoeuuKEcBX Nxn/4HDyj8P5GRI+hoA4Nik+1ad3dGoFoNatVkK5DMkpIY+tRSfENla7uWPyQbVx v5Ffcp6C5d603xBQBGwjEZ14mt9368uYEdZH7icrDtueabGHWzQDtU2nz9ZQYJw/ zsfgN0yTjEs1/uYc2vBvxqfVXQyHdmV8pftDRFJQ4oeN0VJUowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqQcu5gssW24Z5tdpNnOuhhAIJGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvOGE5ZDRjYzktMjdjYi0z YzAwLTk2MzYtODRmNmI0ZmRhNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpf4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ/xx7RHBmFKllCwxrYg4K1qTN40xe6ewHU3ZGp0+hPBO6YOWIQ9rRW jLsk9ZEJLt5TX2d4o5DVsz2IdWZ70Ul+mARgnq7N0ND5kP5IoFFPk/+6Djx08l2p MnyvUKuwSXrnyZz7NcbwtzwXRwnx+/rkxr4+sq1ms6/fipHoBqqfcB0S0/UXpfnN 27mP4yZVg3wkYVGoww9YMxxCMOgFRTzqquWEbGqdASv8O8kEWCSZwnt3mcZnqzfi TofjMXzk4N23X3oUtib7tXKBXBxGHVoLHDForrp+qWhZHq7yEUwBkz510HzMsE80 mJidFEUKPJm+j/GQBNtdKKnAxCobSeE= -----END CERTIFICATE-----Generated at Wed May 13 09:24:55 2026 by rpki-client