$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa File: 3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa (raw, json) Hash identifier: f+1fHCZVrhI6NVpQGob8GlbgDZVdm7yGl6GOiwjFXek= Subject key identifier: B4:22:3E:D9:59:3D:A7:33:CC:4E:1D:D3:E2:2B:51:70:02:E3:BC:36 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D09125DC9DA797E5CF215EB80 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 14340 IP address blocks: 140.190.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5d:c9:da:79:7e:5c:f2:15:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=3c246cd0-4b23-4326-be7f-a6d5e3c89fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:87:90:70:57:a8:ec:ae:66:f6:d3:c0:a6:67: 89:57:0a:44:45:0d:53:02:eb:c8:a3:4d:8f:d5:7d: 28:f0:27:46:36:07:46:b8:fc:b8:26:1f:8d:17:01: 8e:5a:df:e5:b6:ff:91:b3:ff:f1:04:81:d9:21:d5: c4:76:5f:cd:5e:cd:7d:0c:d4:ee:f5:fc:d8:90:6b: b9:d4:a1:10:e0:97:41:e0:cb:37:76:65:a5:8a:7a: 54:ad:7e:57:69:e5:3c:98:b7:96:0b:4e:21:ec:e4: 5a:71:e4:d3:53:44:3d:7e:4b:6e:72:e6:ec:c0:79: 97:eb:7a:15:30:e7:66:e3:02:4c:31:b3:7b:90:6f: 1e:68:7e:00:79:85:b8:25:60:95:f6:ff:fe:18:d4: 86:29:89:91:91:6c:d9:3f:56:5a:26:a1:4c:41:8e: 00:e1:9a:ea:85:17:4a:e9:51:6b:ef:4e:ad:54:fa: 50:4a:cc:25:b1:8f:58:61:b4:9a:27:a8:e7:d3:1f: 4b:f8:3b:ee:c4:6a:4b:fc:b0:6d:86:f8:ef:24:08: 7d:ab:db:e4:ee:6f:98:14:58:1a:40:ab:40:ba:86: 4d:fe:98:b1:fb:1d:4a:04:60:d9:51:55:c8:98:f3: 45:45:c8:5c:ae:13:3e:c4:55:be:f4:47:57:f7:c4: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:22:3E:D9:59:3D:A7:33:CC:4E:1D:D3:E2:2B:51:70:02:E3:BC:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/3c6171b5-f200-3902-9504-6b5f9eb4fa1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:23:28:7f:a3:bc:ed:ca:1c:8f:50:ca:49:de:fb:b0:4a:ab: d2:3e:51:ff:80:95:23:39:db:91:76:65:39:99:a2:3c:15:bc: 27:42:d8:77:55:7d:a9:47:71:7f:2d:02:2d:49:8f:82:57:fc: 61:9c:c9:96:5e:a8:d7:cf:4e:43:fd:e0:5b:4c:2e:cc:4f:3d: 98:72:2d:d8:51:6a:85:84:ec:72:15:43:e7:52:82:bc:55:5e: e2:c0:86:cf:59:89:80:9f:0f:d5:ba:f0:83:63:4c:b5:e0:22: c0:c9:8f:86:a8:25:c2:1b:77:03:d0:8d:f7:b0:40:d2:3a:1b: f4:20:5c:95:0c:07:e3:41:b1:34:0b:0f:35:86:97:a3:db:8e: 33:05:9b:24:90:27:35:13:45:43:1a:81:6d:94:c0:e1:16:d6: e7:e5:1a:d3:cb:98:63:12:4e:92:e0:4f:7b:60:3b:9c:d5:82: 19:a5:27:a7:a0:10:8f:8e:75:e3:9e:8c:eb:e0:71:57:e3:df: 19:00:be:72:7a:da:17:6b:2f:67:86:89:d9:e9:2b:3e:b5:85: fa:74:19:8b:8b:43:bb:91:a4:88:55:3f:af:5e:bd:65:04:96: 7c:50:18:2a:ed:59:e9:fd:dd:62:a0:ed:b1:e6:6a:d2:67:38: aa:a7:de:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl3J2nl+XPIV64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk M2MyNDZjZDAtNGIyMy00MzI2LWJlN2YtYTZkNWUzYzg5ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYeQcFeo7K5m9tPApmeJVwpERQ1TAuvIo02P 1X0o8CdGNgdGuPy4Jh+NFwGOWt/ltv+Rs//xBIHZIdXEdl/NXs19DNTu9fzYkGu5 1KEQ4JdB4Ms3dmWlinpUrX5XaeU8mLeWC04h7ORaceTTU0Q9fktucubswHmX63oV MOdm4wJMMbN7kG8eaH4AeYW4JWCV9v/+GNSGKYmRkWzZP1ZaJqFMQY4A4ZrqhRdK 6VFr706tVPpQSswlsY9YYbSaJ6jn0x9L+DvuxGpL/LBthvjvJAh9q9vk7m+YFFga QKtAuoZN/pix+x1KBGDZUVXImPNFRchcrhM+xFW+9EdX98TFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQiPtlZPaczzE4d0+IrUXAC47w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvM2M2MTcxYjUtZjIwMC0z OTAyLTk1MDQtNmI1ZjllYjRmYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4jKH+jvO3KHI9Qykne+7BKq9I+Uf+AlSM525F2ZTmZojwVvCdC2HdV falHcX8tAi1Jj4JX/GGcyZZeqNfPTkP94FtMLsxPPZhyLdhRaoWE7HIVQ+dSgrxV XuLAhs9ZiYCfD9W68INjTLXgIsDJj4aoJcIbdwPQjfewQNI6G/QgXJUMB+NBsTQL DzWGl6PbjjMFmySQJzUTRUMagW2UwOEW1uflGtPLmGMSTpLgT3tgO5zVghmlJ6eg EI+OdeOejOvgcVfj3xkAvnJ62hdrL2eGidnpKz61hfp0GYuLQ7uRpIhVP69evWUE lnxQGCrtWen93WKg7bHmatJnOKqn3oo= -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:28 2026 by rpki-client