$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa File: c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa (raw, json) Hash identifier: SkqBamjdEK9VTNYL0Xn5Z4m79bCWFmY+JrnNj74JMJg= Subject key identifier: D4:3E:DE:51:42:AF:CD:21:B2:34:B3:61:68:EB:75:A8:39:E3:A6:82 Certificate issuer: /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Certificate serial: 010D0C9F4328584F331D2B30A0189520A70FF300 Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 8075 IP address blocks: 165.224.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2b:30:a0:18:95:20:a7:0f:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=3c774548-fd30-425b-bf70-01bebd0cc90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:08:6a:a8:28:5e:54:fe:2d:23:ce:2a:04: d8:fb:35:2f:61:fd:39:a7:97:79:93:83:ef:00:79: f6:87:51:dd:b1:4e:9a:0b:f9:c3:ba:28:d1:71:93: e6:bd:fc:b4:9b:ea:00:ed:5e:9b:fd:69:e7:97:30: 48:38:f9:d2:64:8f:54:bf:47:cb:fa:ca:19:6d:54: 2a:56:f2:8d:c9:33:9d:e9:2e:0e:7c:17:e1:30:3c: 38:b5:bc:5c:bc:71:ca:68:0e:8f:b6:31:f6:75:ad: d1:e3:10:f8:3d:41:3c:9b:b4:1c:e7:40:70:60:50: 87:a4:61:1e:78:14:fc:0e:c1:e8:77:a9:0d:66:27: 71:6c:fd:6e:bb:54:9f:9d:3b:1e:9d:2a:3d:33:7e: 1d:60:c8:ea:d1:a2:37:d5:f8:72:fa:f3:b2:d9:a9: b7:03:39:a8:91:99:95:52:9d:38:3d:f4:d7:38:a4: 12:8d:95:a3:3b:08:33:ac:ce:e0:e6:96:58:d3:3c: d1:c7:55:08:a8:58:96:8c:c0:ee:d6:78:f2:0c:a3: 39:e4:cc:88:eb:b6:7b:00:45:3a:f3:f8:70:5b:48: 4d:a4:09:87:e4:ed:03:4a:99:0e:9d:4b:15:75:a2: dd:c3:15:40:c6:f9:09:c3:dc:4d:88:3c:ed:d6:d2: a5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:3E:DE:51:42:AF:CD:21:B2:34:B3:61:68:EB:75:A8:39:E3:A6:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/c03d52e7-7083-36c6-85dc-12a66ca4b8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl X509v3 Authority Key Identifier: keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer sbgp-ipAddrBlock: critical IPv4: 165.224.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:fb:52:d3:49:1f:7f:dd:50:8a:ef:a9:da:ae:80:48:2a:68: 48:11:50:c7:c8:d7:45:7d:8b:f2:92:90:9f:39:c9:a8:d5:0a: af:c3:58:36:dc:d2:47:f1:94:62:46:fc:ab:40:52:ca:e0:75: 36:55:6e:30:ba:9e:14:d3:18:db:8f:1f:66:29:bd:3d:9d:89: 7d:9d:b2:ca:7e:f1:5e:bf:23:1e:34:44:49:14:b2:37:93:5c: db:2f:70:b2:5f:a1:92:c1:28:0f:7b:06:97:6b:39:a6:f4:c8: c2:f7:d7:3d:a5:07:0e:7f:a2:20:47:91:80:4a:9a:52:04:ec: 49:a2:b6:ae:5d:f1:45:00:99:9e:18:d3:30:13:43:07:82:70: 7f:26:64:cc:02:98:27:61:ae:5d:5d:2f:c4:be:32:56:ee:4b: 17:5e:7c:99:9e:c3:b9:18:3c:de:da:71:33:25:fc:dc:ca:01: 56:c7:91:59:cf:58:7f:b3:0e:17:ed:76:84:66:63:8e:b0:e0: a6:56:d1:f8:24:d5:72:44:56:a7:64:a1:d8:52:9f:ff:33:a4: 8d:72:31:d3:04:e3:35:ac:87:61:f3:23:c6:6f:8d:27:31:e7: cf:af:ad:59:ca:cc:14:cf:cc:84:ac:42:36:1b:ab:83:3c:81: 29:85:6f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSswoBiVIKcP8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTM5NDI1YzUtNTJlOC00ZWFjLTllMWQtYjA3MDc5Yzg0 ZDdiMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk M2M3NzQ1NDgtZmQzMC00MjViLWJmNzAtMDFiZWJkMGNjOTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2kIaqgoXlT+LSPOKgTY+zUvYf05p5d5k4Pv AHn2h1HdsU6aC/nDuijRcZPmvfy0m+oA7V6b/WnnlzBIOPnSZI9Uv0fL+soZbVQq VvKNyTOd6S4OfBfhMDw4tbxcvHHKaA6PtjH2da3R4xD4PUE8m7Qc50BwYFCHpGEe eBT8DsHod6kNZidxbP1uu1SfnTsenSo9M34dYMjq0aI31fhy+vOy2am3AzmokZmV Up04PfTXOKQSjZWjOwgzrM7g5pZY0zzRx1UIqFiWjMDu1njyDKM55MyI67Z7AEU6 8/hwW0hNpAmH5O0DSpkOnUsVdaLdwxVAxvkJw9xNiDzt1tKlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQ+3lFCr80hsjSzYWjrdag546aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0 MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcwNzljODRkN2IvYzAzZDUyZTctNzA4My0z NmM2LTg1ZGMtMTJhNjZjYTRiOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTM5NDI1YzUtNTJlOC00ZWFjLTll MWQtYjA3MDc5Yzg0ZDdiL2UzOTQyNWM1LTUyZTgtNGVhYy05ZTFkLWIwNzA3OWM4 NGQ3Yi5jcmwwHwYDVR0jBBgwFoAUBiGHe0/vkdqGTfcX0R/RGNKyU6swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lMzk0MjVjNS01MmU4LTRlYWMtOWUxZC1iMDcw NzljODRkN2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpeBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED7UtNJH3/dUIrvqdqugEgqaEgRUMfI10V9i/KSkJ85yajVCq/DWDbc 0kfxlGJG/KtAUsrgdTZVbjC6nhTTGNuPH2YpvT2diX2dssp+8V6/Ix40REkUsjeT XNsvcLJfoZLBKA97BpdrOab0yML31z2lBw5/oiBHkYBKmlIE7Emitq5d8UUAmZ4Y 0zATQweCcH8mZMwCmCdhrl1dL8S+MlbuSxdefJmew7kYPN7acTMl/NzKAVbHkVnP WH+zDhftdoRmY46w4KZW0fgk1XJEVqdkodhSn/8zpI1yMdME4zWsh2HzI8ZvjScx 58+vrVnKzBTPzISsQjYbq4M8gSmFb24= -----END CERTIFICATE-----Generated at Wed Sep 23 23:56:06 2026 by rpki-client