$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/2546842c-b324-348d-8dde-275c46474281.roa File: 2546842c-b324-348d-8dde-275c46474281.roa (raw, json) Hash identifier: QpWP3nwnITZyqbrMniceOexNbApMiuCNP3d1uMlJpg0= Subject key identifier: BE:D6:01:E8:BD:D2:3F:41:65:E2:49:18:49:BC:C1:35:F4:5D:E2:10 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584F4C3D48863B4A31C0A2872A60 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/2546842c-b324-348d-8dde-275c46474281.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 399275 IP address blocks: 165.140.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:48:86:3b:4a:31:c0:a2:87:2a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=5b5adbc2-625c-479c-8542-a4bfa1c281e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4d:70:25:a2:2c:60:ba:52:03:31:ec:bb:d9: c7:a7:b9:c8:7a:64:03:c9:50:bc:99:25:df:68:ff: 19:28:de:65:69:e2:bf:ed:60:ea:48:7b:9e:b7:52: 62:1e:5d:60:e0:08:a1:35:7f:74:aa:69:a0:0e:94: c5:4d:a2:a9:92:2c:17:ea:46:82:bc:ce:d4:62:36: de:1f:03:7e:2b:a5:67:87:79:1d:82:cf:f9:2a:93: 2c:c9:e3:e3:76:1e:20:af:83:fa:9c:3e:2a:4c:96: 7e:c4:94:e6:9b:68:ed:67:f7:88:91:75:ec:5c:66: 99:d8:0c:21:0d:55:74:eb:3e:24:84:80:96:1d:e7: 8e:2c:d4:39:a7:13:74:89:47:5a:5d:2f:0b:22:db: b5:61:2d:33:9b:08:58:36:41:a2:67:5d:51:e4:da: 74:6e:e4:df:f9:6b:46:72:c9:38:69:d5:66:b2:70: f8:b9:40:52:72:de:66:ca:4d:80:d8:e2:c9:22:db: b3:3c:42:84:36:c5:2d:d3:36:0f:66:4d:07:2f:f3: 04:81:9f:ff:9f:f5:3b:ab:4c:4c:b8:ad:59:44:02: 80:10:63:c3:e9:9e:80:d5:fc:ba:33:0d:c9:5f:7c: cf:e1:5a:50:ca:bf:29:4b:e3:f0:58:fe:1e:f6:cf: ee:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:01:E8:BD:D2:3F:41:65:E2:49:18:49:BC:C1:35:F4:5D:E2:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/2546842c-b324-348d-8dde-275c46474281.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 165.140.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:36:ef:8f:76:aa:84:cb:80:4e:68:da:56:bc:17:70:b8:ac: ad:a5:c8:1d:2d:f5:fa:ee:1c:71:f1:d4:97:b1:0a:7a:6a:13: c5:29:dd:2b:d2:51:25:a4:f5:34:b4:3f:3a:41:f6:4f:9f:d3: fb:35:c7:b8:52:97:9b:55:08:ba:29:de:25:9f:14:b1:29:5d: 12:4c:ed:6b:09:5d:a1:65:f6:04:23:35:92:b8:4e:e8:bd:4e: 61:bc:ff:15:e5:24:c0:e3:2d:7d:70:60:62:87:22:52:44:2b: 2e:56:e5:27:6f:91:33:46:1b:44:f8:5e:5a:96:1b:4e:4d:fd: 67:91:3a:5e:22:40:0f:31:33:89:f8:67:46:58:24:89:0a:6d: 95:93:91:e0:f8:44:ed:1f:92:47:29:f8:ff:41:35:f7:23:1d: ff:c2:4d:a1:34:c8:40:7e:11:5d:2a:c6:5c:57:95:60:5d:00: ab:4d:85:09:0d:d0:97:9e:56:0e:86:b9:a9:88:21:fc:65:4c: 55:24:d8:0b:2a:7c:27:cb:38:59:c5:aa:e0:ce:aa:07:25:d5: 3a:a5:f4:61:43:2f:03:11:6b:ef:77:5b:3d:4b:dc:08:3c:c1: 60:e4:25:9c:82:03:7e:7f:97:bb:3a:b3:0e:c5:73:02:53:b8: ac:27:7c:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUiGO0oxwKKHKmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NWI1YWRiYzItNjI1Yy00NzljLTg1NDItYTRiZmExYzI4MWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk01wJaIsYLpSAzHsu9nHp7nIemQDyVC8mSXf aP8ZKN5laeK/7WDqSHuet1JiHl1g4AihNX90qmmgDpTFTaKpkiwX6kaCvM7UYjbe HwN+K6Vnh3kdgs/5KpMsyePjdh4gr4P6nD4qTJZ+xJTmm2jtZ/eIkXXsXGaZ2Awh DVV06z4khICWHeeOLNQ5pxN0iUdaXS8LItu1YS0zmwhYNkGiZ11R5Np0buTf+WtG csk4adVmsnD4uUBSct5myk2A2OLJItuzPEKENsUt0zYPZk0HL/MEgZ//n/U7q0xM uK1ZRAKAEGPD6Z6A1fy6Mw3JX3zP4VpQyr8pS+PwWP4e9s/uxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7WAei90j9BZeJJGEm8wTX0XeIQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvMjU0Njg0MmMtYjMyNC0z NDhkLThkZGUtMjc1YzQ2NDc0MjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk27492qoTLgE5o2la8F3C4rK2lyB0t9fruHHHx1JexCnpqE8Up3SvS USWk9TS0PzpB9k+f0/s1x7hSl5tVCLop3iWfFLEpXRJM7WsJXaFl9gQjNZK4Tui9 TmG8/xXlJMDjLX1wYGKHIlJEKy5W5SdvkTNGG0T4XlqWG05N/WeROl4iQA8xM4n4 Z0ZYJIkKbZWTkeD4RO0fkkcp+P9BNfcjHf/CTaE0yEB+EV0qxlxXlWBdAKtNhQkN 0JeeVg6GuamIIfxlTFUk2AsqfCfLOFnFquDOqgcl1Tql9GFDLwMRa+93Wz1L3Ag8 wWDkJZyCA35/l7s6sw7FcwJTuKwnfBk= -----END CERTIFICATE-----Generated at Tue Sep 29 02:59:36 2026 by rpki-client