$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa File: a897618a-4040-3184-a2f7-6b8bbb840675.roa (raw, json) Hash identifier: dQsYCOW+dXAJwQQEALHYTs+L3h/ZLxsbvteXvYKRVVc= Subject key identifier: 3C:AC:C7:EE:81:65:C5:0B:EB:C7:F5:04:CF:67:30:8B:5A:34:3A:F5 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EA7926AFBA54D5D9B57460000 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14340 IP address blocks: 140.190.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6a:fb:a5:4d:5d:9b:57:46:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=22199a35-bd12-496c-b255-47e06115114d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:e8:38:99:e2:a2:3d:c4:7e:9b:5e:45:b4: 8f:5a:d9:43:c7:03:ba:bd:29:29:cc:45:79:8d:45: 6f:09:e1:62:bd:da:a6:49:04:08:45:c8:f0:10:ce: 63:4c:a8:7a:4d:02:b5:1e:bd:c4:d0:bc:a4:98:51: 2f:f0:7e:51:44:1a:78:27:c9:d2:a8:77:b5:ec:18: 89:17:d5:35:13:09:c1:7f:43:4d:31:d0:6c:a2:2c: 6f:f2:42:a9:c5:9c:c7:33:55:bf:37:e6:0c:1f:43: db:40:f0:95:fe:19:0a:ff:5d:f1:98:d0:96:39:b6: 6b:df:83:88:83:c9:ee:31:87:55:38:24:cf:60:b5: 6b:13:cd:38:0c:14:1a:83:80:d0:96:66:31:03:73: 4f:b8:d1:94:66:80:b9:6d:6b:f0:d0:67:dd:6d:d3: d5:7c:b9:aa:c7:83:b9:d5:18:aa:f7:1d:ab:d1:4d: cb:26:1f:7b:7e:00:9f:df:ff:45:59:9e:de:d8:37: 1f:f4:52:d8:61:4b:a1:45:1e:e3:8a:c3:d1:f0:ce: 3e:c8:7c:1e:31:fc:22:5f:36:60:03:a4:9e:c9:cb: 8b:de:ab:d7:87:9a:56:fb:08:eb:d8:ab:c8:90:70: fc:fa:aa:61:fb:9b:31:c1:fe:7f:06:75:30:31:7e: 39:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AC:C7:EE:81:65:C5:0B:EB:C7:F5:04:CF:67:30:8B:5A:34:3A:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/a897618a-4040-3184-a2f7-6b8bbb840675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:dd:e3:28:ce:62:ce:73:3e:38:05:80:17:40:57:ab:21:18: fe:98:a9:b1:e9:46:b6:a6:c4:db:40:8b:3f:c7:e6:ff:2d:8e: 7f:75:4b:41:f1:ab:f0:b9:13:8c:e1:06:36:9e:db:b5:31:26: 9a:9d:7b:c3:59:d0:f8:98:e9:f5:85:4b:e9:27:48:ba:2f:2e: c6:4d:b5:2c:eb:6d:ab:b4:68:63:18:08:8c:93:53:8b:19:69: 76:ff:13:02:18:da:c5:63:75:96:77:c5:ba:3f:92:f4:b3:ea: 7a:e6:ae:f9:56:4e:b0:68:cc:8b:35:7b:2f:20:0e:82:33:ac: 6c:67:69:50:08:05:e5:6f:61:7e:fb:56:b5:76:92:69:63:25: a5:98:26:e1:3a:60:30:7a:f0:67:46:3f:cf:70:fb:8d:d3:93: 57:cb:b3:a3:0b:ce:fb:94:d1:16:a5:f2:74:35:a2:28:40:76: 43:de:ee:3f:b2:a5:87:79:9a:bb:f1:f3:e5:be:2b:33:6b:61: 07:a8:16:5c:b9:54:f1:17:55:6b:ef:79:6b:9d:04:be:fd:e3: e2:77:c7:e4:26:2d:92:82:ae:90:03:80:c8:d0:38:70:ea:af: ec:db:67:9e:84:99:e4:1e:40:1b:8f:bc:88:14:a2:28:c6:e5: d0:2c:0e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkmr7pU1dm1dGAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjIxOTlhMzUtYmQxMi00OTZjLWIyNTUtNDdlMDYxMTUxMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWroOJnioj3EfpteRbSPWtlDxwO6vSkpzEV5 jUVvCeFivdqmSQQIRcjwEM5jTKh6TQK1Hr3E0LykmFEv8H5RRBp4J8nSqHe17BiJ F9U1EwnBf0NNMdBsoixv8kKpxZzHM1W/N+YMH0PbQPCV/hkK/13xmNCWObZr34OI g8nuMYdVOCTPYLVrE804DBQag4DQlmYxA3NPuNGUZoC5bWvw0GfdbdPVfLmqx4O5 1Riq9x2r0U3LJh97fgCf3/9FWZ7e2Dcf9FLYYUuhRR7jisPR8M4+yHweMfwiXzZg A6SeycuL3qvXh5pW+wjr2KvIkHD8+qph+5sxwf5/BnUwMX45hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDysx+6BZcUL68f1BM9nMItaNDr1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvYTg5NzYxOGEtNDA0MC0z MTg0LWEyZjctNmI4YmJiODQwNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM7d4yjOYs5zPjgFgBdAV6shGP6YqbHpRramxNtAiz/H5v8tjn91S0Hx q/C5E4zhBjae27UxJpqde8NZ0PiY6fWFS+knSLovLsZNtSzrbau0aGMYCIyTU4sZ aXb/EwIY2sVjdZZ3xbo/kvSz6nrmrvlWTrBozIs1ey8gDoIzrGxnaVAIBeVvYX77 VrV2kmljJaWYJuE6YDB68GdGP89w+43Tk1fLs6MLzvuU0Ral8nQ1oihAdkPe7j+y pYd5mrvx8+W+KzNrYQeoFly5VPEXVWvveWudBL794+J3x+QmLZKCrpADgMjQOHDq r+zbZ56EmeQeQBuPvIgUoijG5dAsDvM= -----END CERTIFICATE-----Generated at Wed Jul 29 05:18:10 2026 by rpki-client