$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa File: a897618a-4040-3184-a2f7-6b8bbb840675.roa (raw, json) Hash identifier: JU7MuvjAZaLfewE8zEIJZ08hypgQ/wDT8GGvoHvBrk4= Subject key identifier: 0E:F5:23:67:46:64:A0:39:5A:AD:22:66:4E:1D:F1:5D:45:46:34:8A Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D09125DB31A2668911E507980 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 14340 IP address blocks: 140.190.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5d:b3:1a:26:68:91:1e:50:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=80c2b738-e0d6-4c11-89ed-a8497f36a3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e7:f9:0d:6a:84:4d:10:dd:4f:a1:09:0b:ce: 4b:6f:5b:23:d8:d6:ab:8c:7b:88:9e:ee:eb:71:c1: 34:a0:78:a7:f6:8b:01:64:0b:18:23:7b:85:8a:29: 70:52:16:4a:8f:44:0a:2f:fe:75:c4:5e:2b:47:9c: 5a:2f:66:76:a8:2a:6a:56:7a:1a:b2:54:dd:08:ec: f7:ea:1b:71:5b:50:f6:f5:4d:74:da:c6:2a:4c:fd: 00:db:d5:9d:e0:c1:be:57:88:2c:2b:54:54:96:9f: bd:9e:a3:f4:bc:81:28:a5:b2:40:30:06:82:6e:a6: 3c:5a:cb:2f:61:c2:33:bd:9b:e8:8d:95:40:5e:95: d9:3f:c0:5c:78:84:62:96:73:fd:ba:0a:98:0b:d5: 25:82:54:be:8c:b0:7b:cb:84:b6:3c:0f:32:bb:3a: 32:02:8f:f5:de:3a:40:94:59:9c:9d:14:68:83:bf: 5c:ae:12:3d:a9:5a:34:4e:20:fb:fc:b4:ea:12:63: 47:9a:b7:2f:8f:b8:98:71:fa:66:2e:1d:9d:c7:cf: 86:29:19:44:84:a4:56:9b:19:a2:6d:8c:f6:ba:16: 99:16:71:ac:dc:45:69:ac:07:9b:78:b3:11:91:dc: cd:01:c2:e7:0b:b4:14:24:dc:fd:95:eb:09:1a:1f: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F5:23:67:46:64:A0:39:5A:AD:22:66:4E:1D:F1:5D:45:46:34:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:ce:f0:cd:f4:19:04:a0:ec:89:de:2d:a9:44:94:e9:d4:bf: 22:5e:33:d0:6d:bd:0c:ce:43:63:ec:29:ea:09:1c:5e:67:0e: 21:6c:4e:f8:9c:67:31:73:88:3a:0e:2c:73:b1:69:a6:68:2c: f9:e4:2c:a7:68:c8:25:35:00:78:e4:e3:62:72:f5:ec:3c:82: 17:d8:f0:21:90:bc:34:7c:75:47:d7:0c:91:a5:49:e3:52:cf: e7:06:cd:2c:48:12:50:4b:a8:fc:3b:e6:a5:6b:63:c7:0c:14: c9:9d:0e:10:34:58:5d:4e:9e:a4:a8:26:b0:30:3b:2b:80:b6: c3:7c:1f:ea:e8:78:5a:c7:94:a5:ab:03:1e:39:74:2e:01:e2: 34:4b:b1:e0:f4:27:e1:2a:34:df:93:4d:0f:22:74:4a:39:4a: 89:ed:c7:e2:7a:ba:9c:9a:c3:da:04:fe:f9:46:c5:2b:4a:0b: 68:82:35:55:00:1b:71:f6:e9:c2:4d:77:a9:b6:f8:ef:ff:aa: 70:c7:e8:79:38:0e:bb:98:42:35:19:dd:d4:33:2e:ca:22:57: 6d:55:b2:e9:5f:48:a7:8e:69:81:35:fc:22:d3:2e:96:cf:72: 2c:e8:15:3c:a4:a4:26:af:3a:ae:53:a2:2c:8c:e4:b4:5d:f0: a5:c6:76:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl2zGiZokR5QeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODBjMmI3MzgtZTBkNi00YzExLTg5ZWQtYTg0OTdmMzZhM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+f5DWqETRDdT6EJC85Lb1sj2NarjHuInu7r ccE0oHin9osBZAsYI3uFiilwUhZKj0QKL/51xF4rR5xaL2Z2qCpqVnoaslTdCOz3 6htxW1D29U102sYqTP0A29Wd4MG+V4gsK1RUlp+9nqP0vIEopbJAMAaCbqY8Wssv YcIzvZvojZVAXpXZP8BceIRilnP9ugqYC9UlglS+jLB7y4S2PA8yuzoyAo/13jpA lFmcnRRog79crhI9qVo0TiD7/LTqEmNHmrcvj7iYcfpmLh2dx8+GKRlEhKRWmxmi bYz2uhaZFnGs3EVprAebeLMRkdzNAcLnC7QUJNz9lesJGh9uVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA71I2dGZKA5Wq0iZk4d8V1FRjSKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvYTg5NzYxOGEtNDA0MC0z MTg0LWEyZjctNmI4YmJiODQwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbO8M30GQSg7IneLalElOnUvyJeM9BtvQzOQ2PsKeoJHF5nDiFsTvic ZzFziDoOLHOxaaZoLPnkLKdoyCU1AHjk42Jy9ew8ghfY8CGQvDR8dUfXDJGlSeNS z+cGzSxIElBLqPw75qVrY8cMFMmdDhA0WF1OnqSoJrAwOyuAtsN8H+roeFrHlKWr Ax45dC4B4jRLseD0J+EqNN+TTQ8idEo5Sontx+J6upyaw9oE/vlGxStKC2iCNVUA G3H26cJNd6m2+O//qnDH6Hk4DruYQjUZ3dQzLsoiV21VsulfSKeOaYE1/CLTLpbP cizoFTykpCavOq5ToiyM5LRd8KXGdqU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:31:05 2026 by rpki-client