$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa File: 0335608f-a9cd-3396-90f3-61164a83f73d.roa (raw, json) Hash identifier: t+YZ0L8003+XIT+l2LdclhKvjDExo2bfUahSIk7Zgsc= Subject key identifier: 49:50:5C:24:3B:6D:2E:61:43:A6:CD:A7:9A:1D:8A:88:FC:DA:15:5D Certificate issuer: /CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Certificate serial: 010D0C9F4328584D07ACF4E8861679D5C45F2680 Authority key identifier: D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 400245 IP address blocks: 165.140.124.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:f4:e8:86:16:79:d5:c4:5f:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a1e9734-0a7f-48e6-87d3-ca7d837f4e50 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=2690083b-6e76-433a-9c95-e1ca8511f1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:61:be:29:e5:c5:bd:0e:37:5b:96:8f:18:5f: eb:d1:41:27:42:1a:b1:29:d3:fb:4e:af:21:9d:01: 9f:62:ff:db:74:b2:b3:12:31:10:14:9c:0f:df:84: cd:7c:6b:cd:60:02:90:a0:90:80:55:85:0a:0d:b5: d4:e9:9d:62:15:d0:5a:71:37:d8:03:cb:f8:17:db: 63:ff:ee:cb:8a:12:18:d5:0f:2e:26:fd:3b:9c:d5: 32:b5:fe:73:32:14:2e:06:2e:06:22:06:6e:d2:7a: 81:a5:e8:bb:d6:0d:2a:11:ad:b5:b4:13:25:88:d2: 97:ba:4b:91:5b:88:40:5a:4f:ca:22:a4:a3:d7:86: 77:eb:bf:c5:d2:1c:36:96:b2:68:2f:cd:2b:27:05: 67:24:7d:c7:10:e9:39:36:b1:85:a2:ff:26:ef:97: ae:1d:40:5e:11:a5:3e:a5:d1:0b:3c:27:38:70:b5: 4b:cb:3b:2e:1a:9c:44:e4:de:c7:d0:24:32:f8:38: bb:ce:25:2c:01:1b:77:ea:4a:af:e3:73:4f:17:16: 11:13:19:4a:70:71:fa:62:8b:83:7a:5c:27:27:8c: f5:2d:94:cd:ef:c3:6a:85:96:4c:7f:0e:00:b0:08: c0:7a:10:09:f3:42:96:8a:da:b0:f5:85:a9:05:5b: fc:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:50:5C:24:3B:6D:2E:61:43:A6:CD:A7:9A:1D:8A:88:FC:DA:15:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/0335608f-a9cd-3396-90f3-61164a83f73d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.crl X509v3 Authority Key Identifier: keyid:D9:97:C6:DD:81:55:F9:15:F5:04:63:45:39:D3:6A:51:2C:17:74:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2a1e9734-0a7f-48e6-87d3-ca7d837f4e50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:1e:02:1b:86:10:c4:94:63:58:4b:d2:f0:9c:d1:5e:5b:e0: 1b:2a:8c:c8:31:22:1e:b5:3d:47:99:66:0f:2e:e0:b7:d9:2b: 56:b7:8e:18:97:85:16:7e:07:7a:be:28:2e:77:8c:f6:fc:8f: a8:dc:0e:96:34:b8:e6:ba:3e:1b:b3:17:c4:64:ea:3b:c9:7b: c9:52:4c:86:e1:f6:77:01:29:01:34:ff:43:87:04:e3:ce:ed: e6:ff:07:50:93:fa:cb:1d:92:1b:b9:c9:32:6b:23:1f:b5:8d: 95:b5:f0:77:ed:20:28:32:80:ae:03:f5:7a:70:97:00:cf:45: c5:58:9b:bf:36:d3:98:19:50:52:dd:7d:bc:ad:ff:c8:c5:de: df:8b:73:fd:e8:5a:c9:bf:ba:de:d6:90:53:ef:ba:69:1d:7e: a4:68:3f:ee:ec:3e:b7:d6:28:1e:fb:7a:4f:d7:7b:fd:6a:e4: 66:6f:70:9b:2c:e4:6b:04:6a:f1:b0:25:cd:ea:69:67:cc:a4: 08:eb:63:c5:f6:8b:05:0d:4e:ed:63:50:c2:c3:c8:73:bf:2f: 84:72:df:f2:dc:eb:ad:66:62:84:13:28:5b:f1:48:4e:1e:2c: 74:8b:ec:1b:2c:dc:72:a2:e2:31:99:4f:5d:3b:f3:f0:55:f8: f1:1c:94:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrPTohhZ51cRfJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmExZTk3MzQtMGE3Zi00OGU2LTg3ZDMtY2E3ZDgzN2Y0 ZTUwMB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk MjY5MDA4M2ItNmU3Ni00MzNhLTljOTUtZTFjYTg1MTFmMWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWG+KeXFvQ43W5aPGF/r0UEnQhqxKdP7Tq8h nQGfYv/bdLKzEjEQFJwP34TNfGvNYAKQoJCAVYUKDbXU6Z1iFdBacTfYA8v4F9tj /+7LihIY1Q8uJv07nNUytf5zMhQuBi4GIgZu0nqBpei71g0qEa21tBMliNKXukuR W4hAWk/KIqSj14Z367/F0hw2lrJoL80rJwVnJH3HEOk5NrGFov8m75euHUBeEaU+ pdELPCc4cLVLyzsuGpxE5N7H0CQy+Di7ziUsARt36kqv43NPFxYRExlKcHH6YouD elwnJ4z1LZTN78NqhZZMfw4AsAjAehAJ80KWitqw9YWpBVv8bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElQXCQ7bS5hQ6bNp5odioj82hVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFl OTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdkODM3ZjRlNTAvMDMzNTYwOGYtYTljZC0z Mzk2LTkwZjMtNjExNjRhODNmNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmExZTk3MzQtMGE3Zi00OGU2LTg3 ZDMtY2E3ZDgzN2Y0ZTUwLzJhMWU5NzM0LTBhN2YtNDhlNi04N2QzLWNhN2Q4Mzdm NGU1MC5jcmwwHwYDVR0jBBgwFoAU2ZfG3YFV+RX1BGNFOdNqUSwXdMcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYTFlOTczNC0wYTdmLTQ4ZTYtODdkMy1jYTdk ODM3ZjRlNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYx8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADceAhuGEMSUY1hL0vCc0V5b4BsqjMgxIh61PUeZZg8u4LfZK1a3jhiX hRZ+B3q+KC53jPb8j6jcDpY0uOa6PhuzF8Rk6jvJe8lSTIbh9ncBKQE0/0OHBOPO 7eb/B1CT+ssdkhu5yTJrIx+1jZW18HftICgygK4D9XpwlwDPRcVYm78205gZUFLd fbyt/8jF3t+Lc/3oWsm/ut7WkFPvumkdfqRoP+7sPrfWKB77ek/Xe/1q5GZvcJss 5GsEavGwJc3qaWfMpAjrY8X2iwUNTu1jUMLDyHO/L4Ry3/Lc661mYoQTKFvxSE4e LHSL7Bss3HKi4jGZT1078/BV+PEclDQ= -----END CERTIFICATE-----Generated at Thu Mar 26 06:26:16 2026 by rpki-client