$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa File: de22897c-840c-3a3c-8bf3-76213668b782.roa (raw, json) Hash identifier: V0rTc9K0F/D0bQIFL1VnoZlQZfthvhBBsp2xAz1M874= Subject key identifier: 2E:95:EB:50:C8:B4:32:CF:59:F1:61:8A:2F:7D:80:66:F3:17:A2:82 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D09125D9C56413F509155FF80 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 14340 IP address blocks: 140.190.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:5d:9c:56:41:3f:50:91:55:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=c47d9a61-903a-45cf-b0ff-0b0a3bfeec2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:21:16:6d:d1:ab:91:7f:a6:3c:93:11:7b:9b: 25:ab:3c:b7:99:d8:fa:06:32:1b:54:41:9f:9a:c4: 34:e7:ee:eb:e6:05:f2:47:e3:ea:74:56:25:19:65: 93:46:a7:0c:30:58:cb:d0:84:32:ef:8e:36:f2:b5: 40:1d:d9:d7:d7:46:09:1c:90:fa:8b:8f:99:6b:b0: 35:23:a8:56:a8:ec:77:53:bb:78:4e:7b:02:79:47: 1a:5f:76:41:2d:f0:1c:a2:c1:6d:d0:55:0c:8f:20: da:c0:70:dd:d6:e8:3f:e4:82:45:7c:2a:20:84:79: cb:68:e4:c2:5b:0e:e5:0e:4b:7d:c7:b9:2c:2a:83: d3:c0:70:4a:b8:39:35:99:05:fa:83:86:5a:5c:a1: 42:90:73:65:44:94:77:43:7d:a3:9a:b4:77:67:e0: bc:a0:59:c4:fa:b9:f5:cb:b3:54:8e:00:04:a1:fd: a7:86:ff:b4:c3:14:db:71:21:e9:1d:f1:53:f7:18: 1b:f5:0c:16:f5:0b:9a:2f:8b:42:8b:b0:ff:80:f5: f3:0b:99:e1:15:d1:ec:74:fd:66:da:3b:9d:97:87: 0f:35:26:c6:1c:8e:96:b2:82:92:08:bb:1f:33:81: 63:d4:e3:20:b5:34:c1:21:0b:b7:19:d3:a0:32:47: 54:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:EB:50:C8:B4:32:CF:59:F1:61:8A:2F:7D:80:66:F3:17:A2:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/de22897c-840c-3a3c-8bf3-76213668b782.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:85:81:c6:97:d5:86:8c:c7:b6:29:94:aa:21:14:55:da:d4: 86:3a:e4:69:60:ec:ec:f8:5e:f4:0d:59:d2:f3:f4:19:33:cc: 35:02:dd:af:74:d6:b6:49:0a:8f:dc:37:d5:1d:98:0c:50:68: de:c7:b9:ea:a2:44:6b:83:25:a6:b6:2b:e0:0a:6b:93:7f:6f: 04:b3:47:58:4d:6d:75:97:b1:84:c0:39:c4:37:b9:b3:a3:45: 31:d1:74:9e:eb:40:7b:0a:c8:3a:e2:ab:1a:67:b4:96:b9:80: c2:4b:50:7c:f6:17:54:75:d6:53:2a:5c:3a:bf:ee:15:c4:03: 9b:cb:d9:e4:77:24:17:fe:b4:a0:b4:cd:da:57:55:75:64:53: ca:31:b2:d7:51:6a:7a:0f:4e:cc:4b:6e:76:b1:67:5c:8d:86: 8d:db:47:9b:29:ff:3d:87:20:a9:b9:41:84:28:70:07:84:25: b9:1e:bb:b0:75:a2:b9:e5:21:57:e3:04:86:a0:e9:a8:eb:52: 0e:99:9c:d1:3a:fc:44:0b:a8:26:aa:64:36:51:73:f4:33:d8: 87:25:21:0d:78:18:27:ef:04:10:53:e9:6d:77:52:19:c4:44: 91:de:00:31:64:51:28:ac:e5:67:c7:af:61:45:30:22:d1:ff: 3a:d7:f3:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEl2cVkE/UJFV/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk YzQ3ZDlhNjEtOTAzYS00NWNmLWIwZmYtMGIwYTNiZmVlYzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCEWbdGrkX+mPJMRe5slqzy3mdj6BjIbVEGf msQ05+7r5gXyR+PqdFYlGWWTRqcMMFjL0IQy74428rVAHdnX10YJHJD6i4+Za7A1 I6hWqOx3U7t4TnsCeUcaX3ZBLfAcosFt0FUMjyDawHDd1ug/5IJFfCoghHnLaOTC Ww7lDkt9x7ksKoPTwHBKuDk1mQX6g4ZaXKFCkHNlRJR3Q32jmrR3Z+C8oFnE+rn1 y7NUjgAEof2nhv+0wxTbcSHpHfFT9xgb9QwW9QuaL4tCi7D/gPXzC5nhFdHsdP1m 2judl4cPNSbGHI6WsoKSCLsfM4Fj1OMgtTTBIQu3GdOgMkdU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6V61DItDLPWfFhii99gGbzF6KCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvZGUyMjg5N2MtODQwYy0z YTNjLThiZjMtNzYyMTM2NjhiNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjL5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCFgcaX1YaMx7YplKohFFXa1IY65Glg7Oz4XvQNWdLz9BkzzDUC3a90 1rZJCo/cN9UdmAxQaN7HueqiRGuDJaa2K+AKa5N/bwSzR1hNbXWXsYTAOcQ3ubOj RTHRdJ7rQHsKyDriqxpntJa5gMJLUHz2F1R11lMqXDq/7hXEA5vL2eR3JBf+tKC0 zdpXVXVkU8oxstdRanoPTsxLbnaxZ1yNho3bR5sp/z2HIKm5QYQocAeEJbkeu7B1 ornlIVfjBIag6ajrUg6ZnNE6/EQLqCaqZDZRc/Qz2IclIQ14GCfvBBBT6W13UhnE RJHeADFkUSis5WfHr2FFMCLR/zrX8/M= -----END CERTIFICATE-----Generated at Mon Mar 2 15:55:41 2026 by rpki-client