$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa File: 280c97c7-56b8-3514-9a4a-9008c60ea148.roa (raw, json) Hash identifier: UaJenrgrd6Zx5qh8QAxsKZxxeEi2iu/2wSrZFAydG4I= Subject key identifier: 47:C6:7F:63:85:9F:56:69:B6:B1:D1:24:98:36:08:38:5C:10:EA:56 Certificate issuer: /CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Certificate serial: 010D0C9F4328584D3DFFB092BE33B715F44B8D20 Authority key identifier: 59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 14618 IP address blocks: 165.1.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:b0:92:be:33:b7:15:f4:4b:8d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3b07b0c-a30d-4cac-9123-4d459839ea53 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=aee1c284-9716-43d7-b7b0-005145dd208e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:25:c4:cd:2e:8f:bb:b2:95:4b:a4:bf:38:d7: 63:38:e6:2a:9b:3f:08:84:75:c8:79:f4:28:49:8b: 4c:b5:dc:ae:7e:91:50:a2:10:03:ec:43:84:12:bc: e4:c9:cd:30:06:b4:45:e7:33:c2:78:ac:3a:b8:e3: 19:89:f4:d0:13:c2:d1:d9:b8:3f:fa:0c:7e:b4:0b: a9:ef:3d:87:f3:ab:6e:53:2d:f5:a6:77:86:7d:4e: 92:33:d5:50:8b:1a:5c:4b:34:7f:a3:9c:71:79:bd: 2c:a8:a7:db:ed:63:ca:3f:33:d2:db:d0:a4:24:e5: d5:ab:ec:4e:6f:c1:06:64:45:14:e2:f7:a4:19:eb: 7c:bb:a0:28:6d:22:1e:ec:87:14:24:05:af:a3:a0: 59:99:cd:b0:8d:42:92:3b:cd:49:7a:d4:3f:5e:24: 35:b0:c4:14:26:b1:06:a0:4c:83:a6:13:5d:a5:57: 99:f2:9a:62:16:8f:76:3c:4f:36:d9:1d:3a:81:52: 89:e6:e4:5b:df:67:53:ea:92:a4:b9:87:91:6c:9b: 1b:13:fd:0b:0a:5d:e9:06:fb:5e:f9:5c:e6:ca:2f: a4:7c:33:96:28:03:a0:96:04:39:c9:df:24:6e:cb: 82:fc:1c:75:7d:6c:f7:78:76:d8:7a:f9:5d:75:ed: c7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:C6:7F:63:85:9F:56:69:B6:B1:D1:24:98:36:08:38:5C:10:EA:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/280c97c7-56b8-3514-9a4a-9008c60ea148.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53/b3b07b0c-a30d-4cac-9123-4d459839ea53.crl X509v3 Authority Key Identifier: keyid:59:24:E7:34:C0:E9:1A:2B:B8:76:B7:09:36:1F:7C:7F:77:37:22:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b3b07b0c-a30d-4cac-9123-4d459839ea53.cer sbgp-ipAddrBlock: critical IPv4: 165.1.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:5c:d0:b5:17:00:fd:78:6c:47:43:46:a1:5c:ad:af:8d:51: 67:39:35:dc:ce:1c:00:66:ec:c0:5f:40:e4:ab:ee:f1:f0:9f: 84:33:61:ab:49:49:92:61:fc:9d:15:89:09:42:44:09:ff:98: 77:b7:0c:fb:1b:81:78:33:e5:30:70:1d:9a:0c:24:15:89:65: da:c3:a5:69:31:a1:32:49:7f:cc:23:f3:3b:cd:0d:05:38:97: 59:50:50:7d:5e:9f:3b:50:52:ee:12:20:b0:5f:eb:fa:9f:2b: 82:82:16:24:3f:fe:0f:75:e5:7a:19:32:d1:39:f8:bf:ec:24: 7f:35:54:76:08:08:ba:57:10:21:79:2b:fa:16:89:1f:6d:b3: 1d:a9:32:34:b2:6c:37:70:50:22:19:c9:47:33:c1:fb:23:3f: ac:ad:6c:34:9d:98:74:53:4f:8d:bf:c6:58:4d:f7:91:13:5b: 74:52:a9:5a:13:91:22:9d:22:cf:f6:6c:15:7d:11:e4:f2:2b: fa:dc:7d:0e:a3:41:7b:51:c2:ca:d4:89:76:88:46:ea:ab:d1: fc:07:ba:36:55:54:18:95:bc:34:b2:a9:34:4d:89:9a:5c:33: ee:7f:81:d6:eb:2e:70:35:c0:48:fd:f0:c4:fe:31:97:30:cf: 5a:8e:20:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/7CSvjO3FfRLjSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjNiMDdiMGMtYTMwZC00Y2FjLTkxMjMtNGQ0NTk4Mzll YTUzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk YWVlMWMyODQtOTcxNi00M2Q3LWI3YjAtMDA1MTQ1ZGQyMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSXEzS6Pu7KVS6S/ONdjOOYqmz8IhHXIefQo SYtMtdyufpFQohAD7EOEErzkyc0wBrRF5zPCeKw6uOMZifTQE8LR2bg/+gx+tAup 7z2H86tuUy31pneGfU6SM9VQixpcSzR/o5xxeb0sqKfb7WPKPzPS29CkJOXVq+xO b8EGZEUU4vekGet8u6AobSIe7IcUJAWvo6BZmc2wjUKSO81JetQ/XiQ1sMQUJrEG oEyDphNdpVeZ8ppiFo92PE822R06gVKJ5uRb32dT6pKkuYeRbJsbE/0LCl3pBvte +Vzmyi+kfDOWKAOglgQ5yd8kbsuC/Bx1fWz3eHbYevldde3HnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEfGf2OFn1ZptrHRJJg2CDhcEOpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iM2Iw N2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1OTgzOWVhNTMvMjgwYzk3YzctNTZiOC0z NTE0LTlhNGEtOTAwOGM2MGVhMTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjNiMDdiMGMtYTMwZC00Y2FjLTkx MjMtNGQ0NTk4MzllYTUzL2IzYjA3YjBjLWEzMGQtNGNhYy05MTIzLTRkNDU5ODM5 ZWE1My5jcmwwHwYDVR0jBBgwFoAUWSTnNMDpGiu4drcJNh98f3c3It8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iM2IwN2IwYy1hMzBkLTRjYWMtOTEyMy00ZDQ1 OTgzOWVhNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpQEQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxc0LUXAP14bEdDRqFcra+NUWc5NdzOHABm7MBfQOSr7vHwn4QzYatJ SZJh/J0ViQlCRAn/mHe3DPsbgXgz5TBwHZoMJBWJZdrDpWkxoTJJf8wj8zvNDQU4 l1lQUH1enztQUu4SILBf6/qfK4KCFiQ//g915XoZMtE5+L/sJH81VHYICLpXECF5 K/oWiR9tsx2pMjSybDdwUCIZyUczwfsjP6ytbDSdmHRTT42/xlhN95ETW3RSqVoT kSKdIs/2bBV9EeTyK/rcfQ6jQXtRwsrUiXaIRuqr0fwHujZVVBiVvDSyqTRNiZpc M+5/gdbrLnA1wEj98MT+MZcwz1qOIAM= -----END CERTIFICATE-----Generated at Thu Mar 26 02:02:20 2026 by rpki-client