$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa File: 1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa (raw, json) Hash identifier: 4dMrzGhrea33MZB3Ub+dA9K4z68g5THScwfP88liSsY= Subject key identifier: 19:47:9C:41:EA:CA:5C:82:05:00:F8:79:33:78:A7:A7:DB:2C:68:00 Certificate issuer: /CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Certificate serial: 010D0C9F4328584D91C0176E1B612C7CAA14E780 Authority key identifier: 5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 398781 IP address blocks: 165.140.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:17:6e:1b:61:2c:7c:aa:14:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d728b4fd-6e8b-46c7-b58e-81fdea6be61f Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=0b1e41b8-6817-42ef-9289-f8586cb82332 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1e:a5:c9:04:a5:a5:86:56:22:31:ea:58:4d: d8:27:9c:3d:82:6b:d8:f7:fa:61:b9:8a:f6:96:90: 19:98:ff:bb:64:4d:53:b0:82:b9:9c:fd:be:1f:4b: 88:f0:9b:8d:ea:de:6c:f4:90:fc:c5:73:15:74:7b: 14:d9:74:70:ee:e3:c0:9c:1e:60:69:e6:01:af:c1: f0:f5:81:ef:9f:38:32:ce:88:c5:4a:12:cc:7e:1a: 41:a0:5b:ea:51:df:76:69:8d:a5:d8:34:7b:5d:d2: a9:3a:3b:01:88:60:b4:67:e8:cc:49:a9:df:bf:bc: 48:f7:18:f1:7b:94:f8:ee:c7:c4:d8:ed:27:21:42: ae:fc:a8:76:96:8b:51:a3:2e:f7:ae:27:c4:e7:82: ce:1e:25:a9:56:9f:31:31:ff:30:4d:da:93:b0:68: b7:c9:2f:a9:06:82:d5:d4:79:5d:05:5a:36:1b:4b: e5:26:35:d8:4b:1e:ae:f7:d3:06:04:93:7c:55:57: 95:ae:62:4f:cb:b1:e2:f8:a8:ce:4f:6b:a8:9f:a3: 9a:46:19:db:0e:71:33:bd:be:9c:a3:8d:06:e0:7e: 3e:4d:12:26:0e:a3:e6:c8:e7:83:f5:67:c7:08:bd: 91:a3:e4:4c:d4:83:fa:96:54:cd:4f:7b:17:ff:61: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:47:9C:41:EA:CA:5C:82:05:00:F8:79:33:78:A7:A7:DB:2C:68:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/1acb3e17-b2a2-32de-a5b1-fbd7bfa56870.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.crl X509v3 Authority Key Identifier: keyid:5E:AB:B9:1F:C7:01:DE:EE:4A:2D:40:20:72:79:74:A3:FE:09:B0:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d728b4fd-6e8b-46c7-b58e-81fdea6be61f.cer sbgp-ipAddrBlock: critical IPv4: 165.140.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:57:c3:f3:09:f9:de:be:f9:da:31:09:8c:12:76:38:17:f9: be:e2:4d:47:64:de:93:d1:32:7f:1d:df:04:ab:ff:03:be:5a: 15:c2:60:03:08:da:83:81:40:75:91:de:5c:9c:e1:9c:7b:e0: 29:62:1b:a9:b7:6d:10:92:36:56:99:66:89:21:f4:62:19:91: 00:cd:6a:44:b7:fa:c2:dc:4b:ce:76:37:e6:39:be:ae:4a:7f: b5:05:6c:51:6d:7a:6f:36:8d:50:fd:02:5a:fa:b1:81:80:96: 57:a2:73:ff:fe:1a:8e:87:b4:c0:7d:47:df:66:5a:04:67:29: 7e:b3:b7:2b:88:04:d8:3a:7b:74:b1:69:a2:f7:3e:4a:0b:cb: b1:f6:dd:8d:6a:b2:3f:2a:9e:ef:dc:08:7f:ee:54:b6:74:e9: 2f:41:73:d4:a6:9f:f9:dc:4f:1f:3d:a1:42:98:fd:53:49:b9: 7d:23:c8:d6:3d:44:fd:75:fd:77:3f:d4:7b:f4:33:06:d0:09: 07:ca:17:95:a9:e7:0c:3e:4f:7a:e4:77:cb:ff:3e:8f:ea:1e: 37:a3:ae:72:99:ec:11:ab:5f:c5:48:b7:41:52:45:76:ec:5b: eb:c5:8f:6d:5d:7f:f8:38:9a:8c:ad:7c:7e:6a:eb:67:5f:16: 35:0b:3c:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBduG2EsfKoU54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcyOGI0ZmQtNmU4Yi00NmM3LWI1OGUtODFmZGVhNmJl NjFmMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MGIxZTQxYjgtNjgxNy00MmVmLTkyODktZjg1ODZjYjgyMzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB6lyQSlpYZWIjHqWE3YJ5w9gmvY9/phuYr2 lpAZmP+7ZE1TsIK5nP2+H0uI8JuN6t5s9JD8xXMVdHsU2XRw7uPAnB5gaeYBr8Hw 9YHvnzgyzojFShLMfhpBoFvqUd92aY2l2DR7XdKpOjsBiGC0Z+jMSanfv7xI9xjx e5T47sfE2O0nIUKu/Kh2lotRoy73rifE54LOHiWpVp8xMf8wTdqTsGi3yS+pBoLV 1HldBVo2G0vlJjXYSx6u99MGBJN8VVeVrmJPy7Hi+KjOT2uon6OaRhnbDnEzvb6c o40G4H4+TRImDqPmyOeD9WfHCL2Ro+RM1IP6llTNT3sX/2HD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlHnEHqylyCBQD4eTN4p6fbLGgAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4 YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZkZWE2YmU2MWYvMWFjYjNlMTctYjJhMi0z MmRlLWE1YjEtZmJkN2JmYTU2ODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDcyOGI0ZmQtNmU4Yi00NmM3LWI1 OGUtODFmZGVhNmJlNjFmL2Q3MjhiNGZkLTZlOGItNDZjNy1iNThlLTgxZmRlYTZi ZTYxZi5jcmwwHwYDVR0jBBgwFoAUXqu5H8cB3u5KLUAgcnl0o/4JsCEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kNzI4YjRmZC02ZThiLTQ2YzctYjU4ZS04MWZk ZWE2YmU2MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Xw/MJ+d6++doxCYwSdjgX+b7iTUdk3pPRMn8d3wSr/wO+WhXCYAMI 2oOBQHWR3lyc4Zx74CliG6m3bRCSNlaZZokh9GIZkQDNakS3+sLcS852N+Y5vq5K f7UFbFFtem82jVD9Alr6sYGAlleic//+Go6HtMB9R99mWgRnKX6ztyuIBNg6e3Sx aaL3PkoLy7H23Y1qsj8qnu/cCH/uVLZ06S9Bc9Smn/ncTx89oUKY/VNJuX0jyNY9 RP11/Xc/1Hv0MwbQCQfKF5Wp5ww+T3rkd8v/Po/qHjejrnKZ7BGrX8VIt0FSRXbs W+vFj21df/g4moytfH5q62dfFjULPIY= -----END CERTIFICATE-----Generated at Wed May 13 13:18:17 2026 by rpki-client