$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa File: 2e1742ff-4d69-38f8-846e-d7b85e429836.roa (raw, json) Hash identifier: LXJmn0PrHtg/uwpVb6RlTfSvVL5ZQFVYRzAKpdt4Ct8= Subject key identifier: 49:E5:6D:52:D4:5A:4F:BD:52:E2:E6:C8:00:7F:28:2C:C9:07:39:5E Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D869551C3CE173B0B4D4CD600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 399145 IP address blocks: 140.174.19.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:51:c3:ce:17:3b:0b:4d:4c:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=345bf41d-af9b-4ae6-9103-01092e688820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c1:b6:23:09:96:f1:9d:10:8d:f8:53:64:37: 82:dc:11:cc:f1:65:28:a5:cf:c8:be:35:5f:c9:f3: 89:93:c4:74:6d:8f:f1:75:78:14:09:17:2a:8e:de: 23:ba:b2:66:99:20:9b:af:5f:83:f3:7a:54:a4:28: 93:b6:77:d6:9b:57:4c:f6:16:17:91:44:44:7f:a7: 3c:69:9c:d8:e8:3c:f6:66:5a:1e:4b:44:b9:2a:32: 73:a7:81:92:d1:e9:78:02:8f:1c:dc:56:8c:f9:b9: 58:33:7b:63:69:54:0c:58:87:e0:ea:7c:56:af:ab: f1:40:63:87:6f:c7:fb:30:7c:74:45:d4:cf:72:fc: 52:b2:71:6f:14:eb:55:89:0e:50:65:3a:5f:40:1f: a9:1a:90:8f:9e:db:89:00:13:3f:a1:ff:03:b4:e4: 9d:7f:64:28:95:69:5c:58:77:8d:49:2f:3d:f5:5a: 13:2e:e0:23:fe:df:9a:e8:8b:36:8b:c7:fb:82:35: 34:cf:27:62:f3:21:4f:db:a0:e4:ed:1d:68:a3:42: fd:19:b2:2e:1c:b9:50:dc:6d:29:4f:5c:05:06:fa: c9:a8:55:e3:93:c8:95:66:1c:4e:e6:cf:2b:2d:0a: ac:07:e8:85:37:bd:64:b0:e8:c2:72:73:e9:48:97: 24:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E5:6D:52:D4:5A:4F:BD:52:E2:E6:C8:00:7F:28:2C:C9:07:39:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2e1742ff-4d69-38f8-846e-d7b85e429836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.19.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:13:a5:23:07:7d:23:0c:05:79:3b:cc:33:54:6b:c6:db:5a: d8:9d:f4:a5:b9:6d:8d:7f:93:e7:90:c3:09:26:d2:5f:ed:7b: 24:81:8d:0a:fa:84:cc:f5:a4:c5:9f:56:8b:64:88:30:2b:87: 95:5f:a2:05:27:82:c7:30:75:0e:d4:8f:0e:ea:e4:ba:43:b1: 50:43:d2:0f:d7:e6:28:47:00:0f:df:73:9b:a2:31:37:0e:be: 2b:1b:94:65:48:dd:da:88:fd:a6:fa:c4:5e:ce:3a:fb:d3:1b: b1:97:3f:be:cf:7f:e7:a7:b8:e3:a2:bb:7c:83:09:fd:9d:c1: e9:0f:25:aa:dd:b4:c2:16:1b:a6:80:d9:4a:63:48:56:70:dc: 7b:5f:89:4a:40:23:67:42:f2:3b:e0:46:e3:9c:93:ec:d8:7d: 3f:fc:56:a1:a9:66:bb:57:f8:85:11:42:c9:8a:df:01:ed:18: 36:ed:37:96:bf:5f:94:89:d2:92:78:67:e5:16:7f:4e:29:a5: 88:18:5c:79:7b:b7:a7:66:02:a4:4b:16:de:7b:85:67:55:0d: b2:8b:69:05:9c:0b:e3:37:99:10:2f:6c:d9:39:9d:f1:8a:b3: 66:ae:bd:0b:3e:04:d9:44:b8:59:c7:8c:f7:20:e2:32:d9:d0: 42:13:3f:96 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2GlVHDzhc7C01M1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk MzQ1YmY0MWQtYWY5Yi00YWU2LTkxMDMtMDEwOTJlNjg4ODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMG2IwmW8Z0QjfhTZDeC3BHM8WUopc/IvjVf yfOJk8R0bY/xdXgUCRcqjt4jurJmmSCbr1+D83pUpCiTtnfWm1dM9hYXkUREf6c8 aZzY6Dz2ZloeS0S5KjJzp4GS0el4Ao8c3FaM+blYM3tjaVQMWIfg6nxWr6vxQGOH b8f7MHx0RdTPcvxSsnFvFOtViQ5QZTpfQB+pGpCPntuJABM/of8DtOSdf2QolWlc WHeNSS899VoTLuAj/t+a6Is2i8f7gjU0zydi8yFP26Dk7R1oo0L9GbIuHLlQ3G0p T1wFBvrJqFXjk8iVZhxO5s8rLQqsB+iFN71ksOjCcnPpSJckSwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEnlbVLUWk+9UuLmyAB/KCzJBzleMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMmUxNzQyZmYtNGQ2OS0z OGY4LTg0NmUtZDdiODVlNDI5ODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjK4TgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDME6UjB30jDAV5O8wzVGvG21rYnfSluW2Nf5PnkMMJJtJf7XskgY0K +oTM9aTFn1aLZIgwK4eVX6IFJ4LHMHUO1I8O6uS6Q7FQQ9IP1+YoRwAP33ObojE3 Dr4rG5RlSN3aiP2m+sRezjr70xuxlz++z3/np7jjort8gwn9ncHpDyWq3bTCFhum gNlKY0hWcNx7X4lKQCNnQvI74EbjnJPs2H0//FahqWa7V/iFEULJit8B7Rg27TeW v1+UidKSeGflFn9OKaWIGFx5e7enZgKkSxbee4VnVQ2yi2kFnAvjN5kQL2zZOZ3x irNmrr0LPgTZRLhZx4z3IOIy2dBCEz+W -----END CERTIFICATE-----Generated at Fri Apr 17 11:45:02 2026 by rpki-client