$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa File: 2cf973ac-9292-3942-9252-f179184447a4.roa (raw, json) Hash identifier: roR2h4QjcTVR1BPbCoXjc72c8JzRFXsSl9NOvlp6KCg= Subject key identifier: CC:3E:F3:53:95:DA:B3:75:CB:5C:2E:59:D0:D2:A3:3D:65:AC:8B:AD Certificate issuer: /CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Certificate serial: 010D0C9F4328584F497608ADC42CF73ABA445800 Authority key identifier: AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 1002 IP address blocks: 165.140.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:08:ad:c4:2c:f7:3a:ba:44:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b118eb4a-df16-4ce5-adf1-adaaea128c50 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=151be156-4540-4f04-abdb-f46afbd347b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:06:97:2f:b2:11:77:9b:5d:02:8d:20:f6:41: 87:e6:33:70:e3:d9:99:9e:82:4c:db:c3:44:17:f4: 3f:5d:9b:2e:8a:78:45:40:29:7e:e3:79:e0:25:64: 65:a9:40:57:40:48:b3:38:4b:9d:a1:26:eb:33:93: 4b:2c:6d:f5:79:84:26:77:df:82:2a:09:f1:f3:38: 03:e6:70:2a:a7:62:92:a1:44:73:3f:50:57:f0:99: 4b:16:05:42:5d:ba:a7:4b:35:73:60:2d:b2:99:c2: 83:27:c4:fe:f5:da:8a:b5:25:e7:2e:e7:7b:3e:f7: 84:a4:ac:75:3a:78:e4:83:ff:cd:f1:61:65:ba:14: ae:75:bd:d2:98:dc:12:29:d1:25:8e:4d:99:2b:02: 87:28:08:7a:bf:4e:ca:93:f9:05:7f:45:c2:cb:62: e4:3c:ab:e0:27:45:a8:77:d6:2b:65:1c:58:ae:1b: 1a:4c:7f:9e:4c:10:d8:8b:c0:87:78:68:72:fa:23: 7c:98:b0:94:6f:e2:a3:39:08:00:44:46:0f:e0:7c: 5e:0d:5e:ad:ed:be:21:68:81:76:6f:e3:7f:ac:59: 8c:9e:37:e7:4c:27:15:d6:73:63:84:94:c7:2b:c8: a3:76:dc:1a:98:3d:2a:10:ca:40:e4:60:74:55:ce: b8:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:3E:F3:53:95:DA:B3:75:CB:5C:2E:59:D0:D2:A3:3D:65:AC:8B:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/2cf973ac-9292-3942-9252-f179184447a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50/b118eb4a-df16-4ce5-adf1-adaaea128c50.crl X509v3 Authority Key Identifier: keyid:AF:A2:58:43:A9:7F:6B:15:A7:AD:AC:56:D8:31:CA:58:87:FD:0D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b118eb4a-df16-4ce5-adf1-adaaea128c50.cer sbgp-ipAddrBlock: critical IPv4: 165.140.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:ae:2f:bd:c2:66:ef:09:de:db:ee:53:be:95:d8:5a:2d:f3: 50:b5:5a:df:7f:b3:07:8c:27:de:6f:91:38:d3:2d:68:13:96: cd:16:45:e5:dc:64:0a:8c:78:ed:b1:01:ed:ee:9a:c0:b7:f5: 6d:03:20:e1:43:62:a6:49:ce:42:d1:54:b2:0b:63:53:a6:8e: 2c:d3:e2:f1:06:94:be:2a:e1:bb:32:9c:90:4c:be:61:c5:4f: 69:63:f5:6a:71:d6:0d:ec:85:4f:50:ca:2d:61:e1:48:7c:04: 7a:bf:8d:0c:3b:6a:2f:21:0b:15:2e:fc:3f:72:1d:6d:fb:51: 0a:0d:1d:16:2c:86:b6:3a:75:83:07:0f:d2:75:16:39:86:d3: f7:a4:ec:89:7b:5a:8c:d9:25:24:a4:5a:de:50:95:7a:e1:d4: f2:e9:cd:f2:5f:24:a6:f5:da:94:53:32:9d:77:63:dc:da:d1: d3:85:57:f8:44:cf:22:1a:79:ed:d6:8b:73:b1:9e:67:d3:63: 8a:78:cd:f4:e7:b0:00:19:2b:ac:7c:b8:c5:ec:e4:52:1c:53: a8:c0:1f:0c:73:b9:b2:c0:78:7c:4c:48:39:18:38:ee:a8:d4: cd:71:4c:30:a2:00:87:1f:5d:17:ce:b4:46:7d:f9:45:0e:97: 4c:fc:6f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgitxCz3OrpEWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjExOGViNGEtZGYxNi00Y2U1LWFkZjEtYWRhYWVhMTI4 YzUwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTUxYmUxNTYtNDU0MC00ZjA0LWFiZGItZjQ2YWZiZDM0N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggaXL7IRd5tdAo0g9kGH5jNw49mZnoJM28NE F/Q/XZsuinhFQCl+43ngJWRlqUBXQEizOEudoSbrM5NLLG31eYQmd9+CKgnx8zgD 5nAqp2KSoURzP1BX8JlLFgVCXbqnSzVzYC2ymcKDJ8T+9dqKtSXnLud7PveEpKx1 Onjkg//N8WFluhSudb3SmNwSKdEljk2ZKwKHKAh6v07Kk/kFf0XCy2LkPKvgJ0Wo d9YrZRxYrhsaTH+eTBDYi8CHeGhy+iN8mLCUb+KjOQgAREYP4HxeDV6t7b4haIF2 b+N/rFmMnjfnTCcV1nNjhJTHK8ijdtwamD0qEMpA5GB0Vc64uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMw+81OV2rN1y1wuWdDSoz1lrIutMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4 ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFhZWExMjhjNTAvMmNmOTczYWMtOTI5Mi0z OTQyLTkyNTItZjE3OTE4NDQ0N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjExOGViNGEtZGYxNi00Y2U1LWFk ZjEtYWRhYWVhMTI4YzUwL2IxMThlYjRhLWRmMTYtNGNlNS1hZGYxLWFkYWFlYTEy OGM1MC5jcmwwHwYDVR0jBBgwFoAUr6JYQ6l/axWnraxW2DHKWIf9Dc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMTE4ZWI0YS1kZjE2LTRjZTUtYWRmMS1hZGFh ZWExMjhjNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIKuL73CZu8J3tvuU76V2Fot81C1Wt9/sweMJ95vkTjTLWgTls0WReXc ZAqMeO2xAe3umsC39W0DIOFDYqZJzkLRVLILY1OmjizT4vEGlL4q4bsynJBMvmHF T2lj9Wpx1g3shU9Qyi1h4Uh8BHq/jQw7ai8hCxUu/D9yHW37UQoNHRYshrY6dYMH D9J1FjmG0/ek7Il7WozZJSSkWt5QlXrh1PLpzfJfJKb12pRTMp13Y9za0dOFV/hE zyIaee3Wi3OxnmfTY4p4zfTnsAAZK6x8uMXs5FIcU6jAHwxzubLAeHxMSDkYOO6o 1M1xTDCiAIcfXRfOtEZ9+UUOl0z8bzg= -----END CERTIFICATE-----Generated at Sun Oct 11 22:06:07 2026 by rpki-client