$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa File: db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa (raw, json) Hash identifier: qVK4xDu7yaWIxtzfqexX6qlTb/0RDwW0qasBtXuL+UI= Subject key identifier: 49:09:5E:90:91:C7:A4:AC:F3:87:C3:3F:B7:E4:CC:D9:AA:BA:42:C3 Certificate issuer: /CN=f25c48f2-c7df-4c6b-b214-2e741959995d Certificate serial: 010D0C9F4328584DBFD05D02BBC70BE45A66C380 Authority key identifier: FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa Signing time: Thu 07 May 2026 01:00:23 +0000 ROA not before: Thu 07 May 2026 01:00:23 +0000 ROA not after: Wed 05 Aug 2026 01:00:23 +0000 asID: 398427 IP address blocks: 185.165.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bf:d0:5d:02:bb:c7:0b:e4:5a:66:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f25c48f2-c7df-4c6b-b214-2e741959995d Validity Not Before: May 7 01:00:23 2026 GMT Not After : Aug 5 01:00:23 2026 GMT Subject: CN=e9d7148e-e3fa-487f-bafe-8e38e711ecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8f:02:f0:a9:5b:e1:7a:eb:91:37:8c:b7:db: 24:8a:62:a5:5f:f9:68:65:66:ac:30:ad:e7:ea:a0: e2:3f:09:59:5a:80:67:93:44:c3:e3:2d:18:05:94: b7:15:47:71:16:30:c1:fe:87:2b:c8:8d:b2:b3:c2: b0:28:79:24:09:6b:f9:c0:af:15:9b:3c:23:4f:bf: 10:41:cf:51:b3:35:29:59:13:78:8a:ef:7e:24:1f: ed:7e:a4:c2:45:76:f1:5b:b9:a6:c0:2c:49:35:d1: 64:df:9b:e1:e4:4f:60:f0:7f:bd:a0:0a:b7:55:37: c0:ba:50:02:9f:18:40:f0:fa:32:f5:d5:f5:8b:cb: 1e:c2:a9:bb:50:86:fe:f2:09:66:32:b5:5f:cf:c9: 55:29:98:4c:3c:fb:68:52:18:b4:80:57:75:93:1c: 9a:80:6a:61:26:5f:43:26:bd:f9:af:30:6b:f2:1c: e1:3a:78:dc:26:4c:33:4d:04:30:f6:5c:17:ef:54: 8b:95:46:93:6a:03:3f:dc:41:75:81:cd:e0:4f:23: 67:46:c4:6b:27:b8:62:c1:7f:3f:57:eb:1f:ec:1e: 95:a8:cc:e9:4f:a4:8e:6b:3c:2f:ac:a8:55:e7:48: 4b:10:dc:e1:d1:1c:e0:55:c4:63:3d:42:c1:65:a9: 44:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:09:5E:90:91:C7:A4:AC:F3:87:C3:3F:B7:E4:CC:D9:AA:BA:42:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/db1f4cd5-c18c-33c7-85ee-308c3e85032d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d/f25c48f2-c7df-4c6b-b214-2e741959995d.crl X509v3 Authority Key Identifier: keyid:FA:C7:D2:71:6B:E2:3D:95:90:54:87:C6:95:76:1D:21:F8:50:9A:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f25c48f2-c7df-4c6b-b214-2e741959995d.cer sbgp-ipAddrBlock: critical IPv4: 185.165.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:ef:45:70:30:b9:e3:f1:05:b9:df:5d:8d:32:76:47:94:6e: 23:5c:67:00:02:b3:31:09:22:d6:22:ee:a2:33:d6:5f:19:ad: da:a3:ab:f5:62:c4:a5:16:0f:50:dd:73:ca:97:03:2e:19:d2: e4:6b:42:a0:83:d4:b7:af:35:a1:75:16:26:e1:4b:ea:b4:2b: 80:1f:ba:1d:36:f1:89:cb:99:3b:9a:47:bf:fc:61:90:2d:53: 96:b0:72:31:37:ae:bf:19:b7:e1:a4:66:4d:13:88:c1:4c:4c: a4:53:a3:53:1d:2b:83:30:4e:f4:88:c5:c4:bc:bf:03:fc:9a: c0:79:35:6f:e4:0b:70:a7:db:2b:48:5a:a6:5a:7f:7e:83:42: c7:07:27:05:17:5c:c5:76:23:97:f9:b0:cb:14:c4:23:ce:f4: f6:cc:ae:fb:19:52:c2:0c:cc:6a:48:58:cb:89:fe:71:b4:9d: 75:a9:a2:86:13:b1:d1:ea:24:54:ce:32:ff:70:1a:67:2a:5e: 5c:b2:74:48:03:77:83:b5:c6:fd:ae:a6:3d:9d:bb:e5:2e:86: 70:53:89:87:ee:ce:d0:7a:41:c1:d0:27:17:85:1c:f7:d3:3e: 9d:8e:5d:24:22:dc:77:7a:8f:f3:29:15:97:b4:70:44:01:e2: 35:56:b1:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2/0F0Cu8cL5Fpmw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI1YzQ4ZjItYzdkZi00YzZiLWIyMTQtMmU3NDE5NTk5 OTVkMB4XDTI2MDUwNzAxMDAyM1oXDTI2MDgwNTAxMDAyM1owLzEtMCsGA1UEAxMk ZTlkNzE0OGUtZTNmYS00ODdmLWJhZmUtOGUzOGU3MTFlY2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk48C8Klb4XrrkTeMt9skimKlX/loZWasMK3n 6qDiPwlZWoBnk0TD4y0YBZS3FUdxFjDB/ocryI2ys8KwKHkkCWv5wK8VmzwjT78Q Qc9RszUpWRN4iu9+JB/tfqTCRXbxW7mmwCxJNdFk35vh5E9g8H+9oAq3VTfAulAC nxhA8Poy9dX1i8sewqm7UIb+8glmMrVfz8lVKZhMPPtoUhi0gFd1kxyagGphJl9D Jr35rzBr8hzhOnjcJkwzTQQw9lwX71SLlUaTagM/3EF1gc3gTyNnRsRrJ7hiwX8/ V+sf7B6VqMzpT6SOazwvrKhV50hLENzh0RzgVcRjPULBZalEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkJXpCRx6Ss84fDP7fkzNmqukLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVj NDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0MTk1OTk5NWQvZGIxZjRjZDUtYzE4Yy0z M2M3LTg1ZWUtMzA4YzNlODUwMzJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjI1YzQ4ZjItYzdkZi00YzZiLWIy MTQtMmU3NDE5NTk5OTVkL2YyNWM0OGYyLWM3ZGYtNGM2Yi1iMjE0LTJlNzQxOTU5 OTk1ZC5jcmwwHwYDVR0jBBgwFoAU+sfScWviPZWQVIfGlXYdIfhQmnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMjVjNDhmMi1jN2RmLTRjNmItYjIxNC0yZTc0 MTk1OTk5NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjvRXAwuePxBbnfXY0ydkeUbiNcZwACszEJItYi7qIz1l8Zrdqjq/Vi xKUWD1Ddc8qXAy4Z0uRrQqCD1LevNaF1FibhS+q0K4Afuh028YnLmTuaR7/8YZAt U5awcjE3rr8Zt+GkZk0TiMFMTKRTo1MdK4MwTvSIxcS8vwP8msB5NW/kC3Cn2ytI WqZaf36DQscHJwUXXMV2I5f5sMsUxCPO9PbMrvsZUsIMzGpIWMuJ/nG0nXWpooYT sdHqJFTOMv9wGmcqXlyydEgDd4O1xv2upj2du+UuhnBTiYfuztB6QcHQJxeFHPfT Pp2OXSQi3Hd6j/MpFZe0cEQB4jVWsZg= -----END CERTIFICATE-----Generated at Wed May 13 14:12:19 2026 by rpki-client