$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/7be2f89d-a41a-3046-a10b-2f3b19a3e422.roa File: 7be2f89d-a41a-3046-a10b-2f3b19a3e422.roa (raw, json) Hash identifier: +NOYLf9+nnXi7JSwIgZ1HjMXTcvunwMs3Pqjud5QCng= Subject key identifier: 68:84:EF:56:45:78:E7:75:B6:9E:F8:87:63:9B:CA:47:73:2D:22:FA Certificate issuer: /CN=8fc21c27-e8e6-433a-86da-315992f3e55a Certificate serial: 010D0C9F4328584DD8F07738C6CEFE5ACB5E0C80 Authority key identifier: 95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/7be2f89d-a41a-3046-a10b-2f3b19a3e422.roa Signing time: Sat 16 May 2026 01:00:26 +0000 ROA not before: Sat 16 May 2026 01:00:26 +0000 ROA not after: Fri 14 Aug 2026 01:00:26 +0000 asID: 14537 IP address blocks: 140.228.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d8:f0:77:38:c6:ce:fe:5a:cb:5e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc21c27-e8e6-433a-86da-315992f3e55a Validity Not Before: May 16 01:00:26 2026 GMT Not After : Aug 14 01:00:26 2026 GMT Subject: CN=89d4a15b-a05a-4f6e-9224-cbd925bc8bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7e:ea:ef:a8:a3:39:6e:3e:8e:80:69:e8:49: 72:31:67:35:91:fe:e3:38:21:82:ec:57:d4:9e:ee: 3b:e1:69:45:cb:93:6c:38:bb:54:86:ce:62:40:f7: cc:55:d5:98:53:8d:04:01:09:64:92:25:04:4d:40: 9c:91:c9:0a:bb:70:82:ae:3d:ef:5e:fc:23:32:47: f0:e5:c1:50:88:6b:3f:0c:33:10:83:b9:62:4c:a1: ce:c0:28:24:31:80:41:71:1b:7d:96:cc:45:fc:0b: a5:08:ba:07:a1:ff:cd:37:f3:03:23:45:53:94:fd: 52:04:53:f3:a2:22:7f:1f:9f:13:41:be:55:ee:92: f8:4b:e2:58:ea:f6:42:25:4c:44:fa:52:c0:44:ab: ad:f1:9c:c6:db:56:eb:89:1c:46:ad:ef:ae:9a:d0: b7:78:1e:8b:87:ac:f1:cf:dd:4e:11:c6:66:df:e7: 8a:47:56:c0:74:5e:40:5c:a9:9c:52:2b:f4:78:37: 4f:3c:a1:dc:e4:25:cd:b4:13:16:4a:7c:ce:af:73: 0b:a2:83:bc:e3:ba:e0:f8:f5:b4:92:cd:fc:aa:3d: 6b:0b:dd:ec:b0:be:f4:37:9f:db:c1:98:d4:ae:b1: ec:1b:e0:74:65:b3:55:e6:e1:bb:6a:ad:d3:95:4e: 83:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:84:EF:56:45:78:E7:75:B6:9E:F8:87:63:9B:CA:47:73:2D:22:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/7be2f89d-a41a-3046-a10b-2f3b19a3e422.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a/8fc21c27-e8e6-433a-86da-315992f3e55a.crl X509v3 Authority Key Identifier: keyid:95:48:71:EE:B6:BF:34:3A:E4:8E:9C:4B:5E:42:E3:3A:58:1B:F5:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8fc21c27-e8e6-433a-86da-315992f3e55a.cer sbgp-ipAddrBlock: critical IPv4: 140.228.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:1a:17:34:89:0b:3c:d9:18:c4:44:ac:fc:ea:91:5a:33:6b: 69:b6:af:79:48:5b:22:48:e9:d3:7c:1b:97:21:a4:d7:32:b1: 02:8a:de:69:3c:a4:4c:06:68:d4:83:bd:5b:06:33:b9:fb:89: 12:43:5b:43:c4:25:61:fc:e0:fc:06:e5:17:69:29:6f:63:35: de:a3:a3:6a:18:b1:99:5a:e4:97:27:72:86:43:4c:75:23:76: 6d:1e:fc:37:9d:3d:44:4b:ae:71:16:ec:af:df:d0:6f:80:c0: 13:32:20:cc:4e:ba:78:c3:7b:4b:0d:2c:be:ae:46:77:c1:c8: 62:d4:f0:10:e4:6b:65:19:9b:8d:0f:bf:9c:4f:84:6e:4d:89: a8:3d:29:db:03:a4:48:d2:62:8b:73:0a:de:eb:96:6b:6e:02: e0:72:40:bc:36:7c:96:2f:5d:54:ed:20:e4:40:34:76:0d:ec: b4:67:89:8d:a7:09:e4:8a:f1:20:bc:14:05:b5:81:5e:81:9a: 97:df:16:09:99:d8:f4:90:bc:9d:bc:26:8f:94:0b:75:3c:ba: 8e:3c:0a:a1:5f:f2:33:82:28:ef:45:bb:98:4a:8c:42:eb:77: 93:da:e5:39:10:81:a0:ba:85:2a:11:50:0e:72:02:20:2f:b7: ff:c7:b5:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Y8Hc4xs7+WsteDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZjMjFjMjctZThlNi00MzNhLTg2ZGEtMzE1OTkyZjNl NTVhMB4XDTI2MDUxNjAxMDAyNloXDTI2MDgxNDAxMDAyNlowLzEtMCsGA1UEAxMk ODlkNGExNWItYTA1YS00ZjZlLTkyMjQtY2JkOTI1YmM4YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX7q76ijOW4+joBp6ElyMWc1kf7jOCGC7FfU nu474WlFy5NsOLtUhs5iQPfMVdWYU40EAQlkkiUETUCckckKu3CCrj3vXvwjMkfw 5cFQiGs/DDMQg7liTKHOwCgkMYBBcRt9lsxF/AulCLoHof/NN/MDI0VTlP1SBFPz oiJ/H58TQb5V7pL4S+JY6vZCJUxE+lLARKut8ZzG21briRxGre+umtC3eB6Lh6zx z91OEcZm3+eKR1bAdF5AXKmcUiv0eDdPPKHc5CXNtBMWSnzOr3MLooO847rg+PW0 ks38qj1rC93ssL70N5/bwZjUrrHsG+B0ZbNV5uG7aq3TlU6DuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGiE71ZFeOd1tp74h2ObykdzLSL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMy MWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5OTJmM2U1NWEvN2JlMmY4OWQtYTQxYS0z MDQ2LWExMGItMmYzYjE5YTNlNDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGZjMjFjMjctZThlNi00MzNhLTg2 ZGEtMzE1OTkyZjNlNTVhLzhmYzIxYzI3LWU4ZTYtNDMzYS04NmRhLTMxNTk5MmYz ZTU1YS5jcmwwHwYDVR0jBBgwFoAUlUhx7ra/NDrkjpxLXkLjOlgb9bUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZmMyMWMyNy1lOGU2LTQzM2EtODZkYS0zMTU5 OTJmM2U1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8aFzSJCzzZGMRErPzqkVoza2m2r3lIWyJI6dN8G5chpNcysQKK3mk8 pEwGaNSDvVsGM7n7iRJDW0PEJWH84PwG5RdpKW9jNd6jo2oYsZla5JcncoZDTHUj dm0e/DedPURLrnEW7K/f0G+AwBMyIMxOunjDe0sNLL6uRnfByGLU8BDka2UZm40P v5xPhG5Niag9KdsDpEjSYotzCt7rlmtuAuByQLw2fJYvXVTtIORANHYN7LRniY2n CeSK8SC8FAW1gV6BmpffFgmZ2PSQvJ28Jo+UC3U8uo48CqFf8jOCKO9Fu5hKjELr d5Pa5TkQgaC6hSoRUA5yAiAvt//HtZg= -----END CERTIFICATE-----Generated at Sat Jun 13 17:09:36 2026 by rpki-client