$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa File: de22897c-840c-3a3c-8bf3-76213668b782.roa (raw, json) Hash identifier: i4RuY7bCqYn8RjnlEUU300No11c2qegVZU3xaIt8/cg= Subject key identifier: 6E:76:FF:A8:DB:6D:A3:16:02:F2:15:23:67:DF:2E:0F:2B:B0:1D:E5 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584EA7926AD0CB0C7224C0C4B920 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 14340 IP address blocks: 140.190.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:92:6a:d0:cb:0c:72:24:c0:c4:b9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d134d20a-47e4-4c5e-b092-199f39caa84e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ae:f1:74:77:eb:e0:b3:85:e9:f8:41:79:c9: fd:ad:e2:58:fd:95:15:57:e3:09:86:28:54:eb:df: fe:a2:36:b8:25:a2:be:e0:21:85:a5:55:20:6b:de: a1:29:e8:14:74:87:d1:c6:86:78:69:03:48:e3:d2: b4:f9:81:1d:95:90:cf:5f:4a:18:45:0a:81:17:70: a5:2a:f9:65:a4:69:41:d8:9a:52:a4:ce:ec:57:51: ef:c5:3d:80:16:80:6e:48:c4:fa:11:84:f3:4b:9e: 4e:95:99:1b:51:c2:82:91:32:fc:31:0c:0c:bc:b8: 58:f4:e5:7b:3b:89:55:16:8e:10:10:41:36:c1:5b: 3c:e3:29:3a:35:8d:ce:18:57:6e:75:a7:b3:47:5f: 74:66:50:97:1f:0d:12:d4:aa:fa:5c:b3:80:91:7f: e4:d3:36:bd:54:cf:41:51:6a:2a:52:03:1e:53:21: 1d:12:90:23:fc:16:69:69:d2:a8:78:94:0e:a2:34: 8d:7f:b0:55:1a:e2:2b:c4:6c:ec:ab:d5:bd:b9:c6: 14:0f:9b:1b:e2:bb:84:55:4f:bd:aa:6b:d2:69:b4: 46:cc:7f:0f:cf:34:9b:ae:c7:44:a7:79:97:b1:66: 20:37:56:7a:2d:ef:67:8b:eb:e3:7d:52:85:63:61: 15:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:76:FF:A8:DB:6D:A3:16:02:F2:15:23:67:DF:2E:0F:2B:B0:1D:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:5b:af:67:55:3a:e9:08:d7:47:f0:54:fb:40:5b:25:ea:28: 3c:79:87:5b:0d:75:81:10:97:3c:ef:80:dc:cf:5c:ac:e1:f1: 51:e3:45:e1:87:e5:07:79:88:a2:9c:1c:17:2c:dc:25:7b:db: b9:42:e9:62:ad:b9:c7:7f:20:98:1a:3b:73:cd:46:cb:f3:71: f5:fc:ef:53:9e:fd:32:28:ab:ae:34:f5:b6:6b:96:6f:50:a8: d0:b3:93:a7:41:cc:93:84:e9:4f:ec:50:fc:26:ac:4c:8e:23: bc:64:0b:7c:0c:24:1c:3f:6e:31:b9:30:5f:2b:70:56:76:e8: 71:e4:2a:31:a7:0b:14:a1:84:d8:a1:9d:b9:d4:24:80:d7:d9: 60:68:b4:88:45:a5:02:20:db:42:fe:f7:ee:13:25:65:03:3b: bb:41:69:c9:0a:0b:c2:e9:e7:64:1d:11:aa:f4:6a:cc:51:b3: ba:48:42:36:05:8b:f5:df:8e:ed:a1:0d:24:7d:f2:90:cb:98: 17:57:d5:d5:1f:8a:29:f4:4b:52:66:ef:aa:50:bd:2a:21:0c: e9:29:b7:ec:15:8e:16:ee:4f:1d:28:d2:02:eb:0a:5c:fb:2a: 2d:65:2e:6c:f0:d6:f4:d2:64:9f:f2:fa:e8:2f:41:4b:8b:00: 64:b5:25:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkmrQywxyJMDEuSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDEzNGQyMGEtNDdlNC00YzVlLWIwOTItMTk5ZjM5Y2FhODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha7xdHfr4LOF6fhBecn9reJY/ZUVV+MJhihU 69/+oja4JaK+4CGFpVUga96hKegUdIfRxoZ4aQNI49K0+YEdlZDPX0oYRQqBF3Cl KvllpGlB2JpSpM7sV1HvxT2AFoBuSMT6EYTzS55OlZkbUcKCkTL8MQwMvLhY9OV7 O4lVFo4QEEE2wVs84yk6NY3OGFdudaezR190ZlCXHw0S1Kr6XLOAkX/k0za9VM9B UWoqUgMeUyEdEpAj/BZpadKoeJQOojSNf7BVGuIrxGzsq9W9ucYUD5sb4ruEVU+9 qmvSabRGzH8PzzSbrsdEp3mXsWYgN1Z6Le9ni+vjfVKFY2EVRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG52/6jbbaMWAvIVI2ffLg8rsB3lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGUyMjg5N2MtODQwYy0z YTNjLThiZjMtNzYyMTM2NjhiNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMpbr2dVOukI10fwVPtAWyXqKDx5h1sNdYEQlzzvgNzPXKzh8VHjReGH 5Qd5iKKcHBcs3CV727lC6WKtucd/IJgaO3PNRsvzcfX871Oe/TIoq6409bZrlm9Q qNCzk6dBzJOE6U/sUPwmrEyOI7xkC3wMJBw/bjG5MF8rcFZ26HHkKjGnCxShhNih nbnUJIDX2WBotIhFpQIg20L+9+4TJWUDO7tBackKC8Lp52QdEar0asxRs7pIQjYF i/Xfju2hDSR98pDLmBdX1dUfiin0S1Jm76pQvSohDOkpt+wVjhbuTx0o0gLrClz7 Ki1lLmzw1vTSZJ/y+ugvQUuLAGS1JQE= -----END CERTIFICATE-----Generated at Wed Jul 29 05:18:50 2026 by rpki-client