$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/a402b1c8-438b-321a-ad45-e843ebab4a13.roa File: a402b1c8-438b-321a-ad45-e843ebab4a13.roa (raw, json) Hash identifier: GINnsc+NLD5qpluhctixAmn6n2FPp67ZHE8ckQOQBqk= Subject key identifier: A7:A1:18:89:19:0D:8A:CA:A0:C3:8B:F1:8A:44:57:42:4B:07:CA:98 Certificate issuer: /CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138 Certificate serial: 010D0C9F4328584AE3C4E83A98F02271E8B96E80 Authority key identifier: D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/a402b1c8-438b-321a-ad45-e843ebab4a13.roa Signing time: Sun 17 Aug 2025 19:46:00 +0000 ROA not before: Sun 17 Aug 2025 19:46:00 +0000 ROA not after: Sat 15 Nov 2025 20:46:00 +0000 asID: 215071 IP address blocks: 165.140.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e3:c4:e8:3a:98:f0:22:71:e8:b9:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f65b306f-fd69-46ba-a15d-0b2fd28d6138 Validity Not Before: Aug 17 19:46:00 2025 GMT Not After : Nov 15 20:46:00 2025 GMT Subject: CN=5cbd3d64-da98-47a5-bea3-918161efe6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:e1:bf:c0:c0:06:f6:8a:5e:bd:1d:63:46: 56:9f:6b:6b:fd:08:5d:3e:03:5d:47:3e:09:3a:56: 69:74:6d:6a:14:b5:18:bd:95:bc:a6:b6:b9:3e:cb: f6:10:16:34:13:13:87:74:bb:31:d4:68:32:da:9b: 26:aa:5f:4f:67:1e:0f:d9:8b:af:be:ad:e0:cd:72: 4b:a0:cf:5e:ec:4d:09:de:18:cc:24:4b:2a:56:33: b1:af:fd:35:af:c5:6b:cc:98:00:6e:6a:09:7b:a1: 1d:aa:08:2f:3e:10:95:df:b8:12:32:73:ba:5e:e6: d2:b9:00:91:a2:eb:8b:39:09:be:32:eb:3b:89:04: d1:1b:8a:2c:a1:51:2a:09:27:dd:88:19:33:75:a3: b3:ba:ee:e8:bc:3f:da:1e:f5:5c:b9:fa:96:85:1c: 81:02:c6:e2:b6:e4:1b:bf:11:78:11:17:9c:d7:82: 33:fb:e8:86:c0:06:c7:56:70:9c:a0:8e:95:6b:e8: d6:87:3a:db:97:17:18:62:9e:ad:07:fa:93:0c:ac: dd:b4:80:05:df:6d:cb:c8:19:39:6c:89:45:cf:f3: a1:7a:c2:27:f1:e9:92:8b:cc:b3:de:24:76:bd:1e: 33:04:4c:8e:e8:43:3c:04:8a:d6:d7:9e:d2:0d:e2: 52:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A1:18:89:19:0D:8A:CA:A0:C3:8B:F1:8A:44:57:42:4B:07:CA:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/a402b1c8-438b-321a-ad45-e843ebab4a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138/f65b306f-fd69-46ba-a15d-0b2fd28d6138.crl X509v3 Authority Key Identifier: keyid:D3:CA:A8:8B:D6:AF:6C:55:1F:AC:BD:5F:A3:20:7B:4D:C4:D9:FB:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f65b306f-fd69-46ba-a15d-0b2fd28d6138.cer sbgp-ipAddrBlock: critical IPv4: 165.140.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:35:a1:d6:76:9b:1c:62:bd:fb:34:59:d2:49:40:f7:c5:20: 93:71:0a:cd:8c:ee:e9:e0:8b:13:c9:7b:04:cc:2d:19:c3:ce: 55:1c:60:a8:ab:a2:f7:b0:b2:f4:67:ad:38:a5:b8:85:29:c3: 69:28:13:88:fa:42:24:d9:93:1a:8d:99:3d:37:1d:bb:65:5d: c8:3a:86:84:75:02:e5:ec:6d:78:cf:aa:6e:21:81:68:9f:9c: 36:ad:4b:d5:23:57:39:86:f3:00:a8:c9:37:5b:13:48:ab:f4: c2:45:c0:f7:72:f1:9c:5a:e7:fa:85:9a:15:fa:50:cb:5d:51: 26:2a:80:a7:2b:e6:53:6d:d6:81:47:29:b4:f4:a0:d0:d1:29: b6:5c:f2:a2:7f:8a:f9:b9:99:c1:19:56:61:85:2b:95:76:26: ce:94:5c:ee:3c:c9:88:de:c4:3b:99:d2:fd:59:d6:da:e8:f1: 18:83:1f:fe:8e:2a:3c:c9:9f:87:d2:38:e7:3d:b2:bb:9c:b4: 26:d3:dd:ea:2a:ed:9e:c0:89:d5:06:5f:fa:70:b4:77:76:e0: aa:ad:d7:6c:df:ca:2b:5d:89:de:f6:bb:6b:4f:4f:6d:23:9e: 35:5a:5f:0a:00:6a:eb:bc:61:3b:ef:d5:29:1a:a0:e2:73:ef: c1:5e:9e:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErjxOg6mPAicei5boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjY1YjMwNmYtZmQ2OS00NmJhLWExNWQtMGIyZmQyOGQ2 MTM4MB4XDTI1MDgxNzE5NDYwMFoXDTI1MTExNTIwNDYwMFowLzEtMCsGA1UEAxMk NWNiZDNkNjQtZGE5OC00N2E1LWJlYTMtOTE4MTYxZWZlNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNvhv8DABvaKXr0dY0ZWn2tr/QhdPgNdRz4J OlZpdG1qFLUYvZW8pra5Psv2EBY0ExOHdLsx1Ggy2psmql9PZx4P2Yuvvq3gzXJL oM9e7E0J3hjMJEsqVjOxr/01r8VrzJgAbmoJe6EdqggvPhCV37gSMnO6XubSuQCR ouuLOQm+Mus7iQTRG4osoVEqCSfdiBkzdaOzuu7ovD/aHvVcufqWhRyBAsbituQb vxF4ERec14Iz++iGwAbHVnCcoI6Va+jWhzrblxcYYp6tB/qTDKzdtIAF323LyBk5 bIlFz/OhesIn8emSi8yz3iR2vR4zBEyO6EM8BIrW157SDeJSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKehGIkZDYrKoMOL8YpEV0JLB8qYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjVi MzA2Zi1mZDY5LTQ2YmEtYTE1ZC0wYjJmZDI4ZDYxMzgvYTQwMmIxYzgtNDM4Yi0z MjFhLWFkNDUtZTg0M2ViYWI0YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjY1YjMwNmYtZmQ2OS00NmJhLWEx NWQtMGIyZmQyOGQ2MTM4L2Y2NWIzMDZmLWZkNjktNDZiYS1hMTVkLTBiMmZkMjhk NjEzOC5jcmwwHwYDVR0jBBgwFoAU08qoi9avbFUfrL1foyB7TcTZ+0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjViMzA2Zi1mZDY5LTQ2YmEtYTE1ZC0wYjJm ZDI4ZDYxMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYwaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABk1odZ2mxxivfs0WdJJQPfFIJNxCs2M7ungixPJewTMLRnDzlUcYKir ovewsvRnrTiluIUpw2koE4j6QiTZkxqNmT03HbtlXcg6hoR1AuXsbXjPqm4hgWif nDatS9UjVzmG8wCoyTdbE0ir9MJFwPdy8Zxa5/qFmhX6UMtdUSYqgKcr5lNt1oFH KbT0oNDRKbZc8qJ/ivm5mcEZVmGFK5V2Js6UXO48yYjexDuZ0v1Z1tro8RiDH/6O KjzJn4fSOOc9sructCbT3eoq7Z7AidUGX/pwtHd24Kqt12zfyitdid72u2tPT20j njVaXwoAauu8YTvv1SkaoOJz78Fenvg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:44:51 2025 by rpki-client