$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa File: cde87bfa-7d06-34bf-9c03-15214404e72e.roa (raw, json) Hash identifier: oQssJGuew+GKd9kfGTwGdmODIButFMkJTmtEynx7i6Q= Subject key identifier: 10:9F:67:5E:CC:F3:08:B5:1F:71:36:D6:74:1F:7C:F9:08:14:AC:47 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C8741A78D0C2BBB665EB03600 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa Signing time: Thu 15 Jan 2026 02:00:31 +0000 ROA not before: Thu 15 Jan 2026 02:00:31 +0000 ROA not after: Wed 15 Apr 2026 01:00:31 +0000 asID: 29852 IP address blocks: 140.174.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:87:41:a7:8d:0c:2b:bb:66:5e:b0:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jan 15 02:00:31 2026 GMT Not After : Apr 15 01:00:31 2026 GMT Subject: CN=bec60e4b-4fef-4c58-b8e8-e058a08cc387 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:68:b2:45:55:b0:eb:12:0a:2f:4e:a3:08:09: e1:65:a2:6f:05:b3:60:c2:0d:38:93:68:c0:5b:a1: ff:7f:ea:87:66:0a:b0:ee:cd:00:aa:3b:ad:31:ad: b4:a7:8d:af:46:38:fd:43:49:11:01:71:da:79:f8: 82:60:e7:e9:6a:57:58:ca:c7:b4:0c:45:29:37:45: 2d:df:7f:9d:f3:a8:48:b9:72:23:4e:56:16:ff:db: 81:2b:ac:31:18:89:eb:91:d7:cd:93:89:0b:cf:6d: a2:e9:1b:38:e8:03:6f:3f:f1:d6:2f:4c:38:6c:6c: 81:f4:b2:19:5e:c4:c2:b3:fa:30:3e:7a:47:d8:13: 52:0c:44:0b:31:28:2e:b5:1d:30:d0:d6:d8:2c:a5: 1f:d5:f1:be:b3:49:8c:4c:c9:be:48:b5:00:d6:0a: 11:36:0a:c8:db:b0:e5:27:99:8f:b0:81:1c:7f:c4: eb:5c:c2:9e:b1:bb:b9:34:e1:f6:5d:bb:28:35:ae: 14:0f:3f:74:ef:52:c7:4c:fd:97:19:14:5f:77:36: 6d:17:33:f9:30:68:b0:7f:56:ef:f3:e0:0b:87:a4: 13:95:56:9c:9f:11:77:81:49:be:45:33:d7:e2:71: e2:e9:2e:71:3a:1d:41:fc:0b:39:98:fc:62:fd:2b: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:9F:67:5E:CC:F3:08:B5:1F:71:36:D6:74:1F:7C:F9:08:14:AC:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cde87bfa-7d06-34bf-9c03-15214404e72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b5:43:94:6d:9d:76:19:ab:c0:cd:f4:c7:f7:07:09:e9:0d: 52:45:99:bb:33:2a:ca:ce:73:38:cf:b4:46:e9:82:f9:e1:50: aa:cb:d6:53:45:cc:fa:ee:73:77:58:92:b6:6a:5d:c4:15:30: 84:9b:64:bd:f4:76:4a:95:ab:6f:3b:63:61:3e:80:08:47:57: 92:e1:4a:2f:d5:40:7b:38:40:39:8e:0c:d0:f0:20:72:78:e3: ba:bb:37:cb:11:0e:61:be:26:eb:f3:12:1c:ef:e5:58:59:6d: 24:b2:7a:60:c8:f4:86:02:3a:04:28:c9:d4:b8:1f:5a:d8:66: 8d:af:e1:4d:21:ae:4e:61:0c:71:d1:13:a5:d8:87:24:03:26: 0d:6a:d4:e6:de:0f:db:48:74:14:78:bb:25:23:6d:3f:54:ac: 43:ce:f2:83:8f:18:be:ef:10:39:7f:66:ec:ae:f0:5d:5e:9c: fc:ae:01:bd:03:fa:bc:16:ed:74:2d:91:ab:49:64:d5:15:07: c7:2a:79:c7:36:6f:36:e5:cb:33:33:89:2c:86:05:80:0c:26: 2f:cf:c2:42:ba:89:35:1a:65:a3:ad:c0:d7:ab:57:64:c9:06: 6b:46:22:8b:77:47:dd:58:aa:a1:b9:33:e9:c6:a4:a2:7b:0f: ea:b5:46:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyHQaeNDCu7Zl6wNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDExNTAyMDAzMVoXDTI2MDQxNTAxMDAzMVowLzEtMCsGA1UEAxMk YmVjNjBlNGItNGZlZi00YzU4LWI4ZTgtZTA1OGEwOGNjMzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2miyRVWw6xIKL06jCAnhZaJvBbNgwg04k2jA W6H/f+qHZgqw7s0AqjutMa20p42vRjj9Q0kRAXHaefiCYOfpaldYyse0DEUpN0Ut 33+d86hIuXIjTlYW/9uBK6wxGInrkdfNk4kLz22i6Rs46ANvP/HWL0w4bGyB9LIZ XsTCs/owPnpH2BNSDEQLMSgutR0w0NbYLKUf1fG+s0mMTMm+SLUA1goRNgrI27Dl J5mPsIEcf8TrXMKesbu5NOH2XbsoNa4UDz9071LHTP2XGRRfdzZtFzP5MGiwf1bv 8+ALh6QTlVacnxF3gUm+RTPX4nHi6S5xOh1B/As5mPxi/StgkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCfZ17M8wi1H3E21nQffPkIFKxHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2RlODdiZmEtN2QwNi0z NGJmLTljMDMtMTUyMTQ0MDRlNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjK5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC1Q5RtnXYZq8DN9Mf3BwnpDVJFmbszKsrOczjPtEbpgvnhUKrL1lNF zPruc3dYkrZqXcQVMISbZL30dkqVq287Y2E+gAhHV5LhSi/VQHs4QDmODNDwIHJ4 47q7N8sRDmG+JuvzEhzv5VhZbSSyemDI9IYCOgQoydS4H1rYZo2v4U0hrk5hDHHR E6XYhyQDJg1q1ObeD9tIdBR4uyUjbT9UrEPO8oOPGL7vEDl/Zuyu8F1enPyuAb0D +rwW7XQtkatJZNUVB8cqecc2bzblyzMziSyGBYAMJi/PwkK6iTUaZaOtwNerV2TJ BmtGIot3R91YqqG5M+nGpKJ7D+q1Rrs= -----END CERTIFICATE-----Generated at Mon Mar 2 02:24:36 2026 by rpki-client