$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa File: b89d1083-da50-3eaf-b7d8-f77234560bfb.roa (raw, json) Hash identifier: WdcLhf2RQWCmlC3lFszOHWF9whtu+bD+3oLIT1MTwsk= Subject key identifier: 13:5B:51:A2:6C:43:35:7B:21:00:02:45:80:BE:84:46:FA:BC:37:9A Certificate issuer: /CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Certificate serial: 010D0C9F4328584D6EDA63A12CF42CD40C2C80E0 Authority key identifier: ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa Signing time: Wed 08 Apr 2026 01:00:24 +0000 ROA not before: Wed 08 Apr 2026 01:00:24 +0000 ROA not after: Tue 07 Jul 2026 01:00:24 +0000 asID: 16509 IP address blocks: 140.98.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6e:da:63:a1:2c:f4:2c:d4:0c:2c:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6511a5cc-df0b-4c6e-a228-2902fbea4263 Validity Not Before: Apr 8 01:00:24 2026 GMT Not After : Jul 7 01:00:24 2026 GMT Subject: CN=c52745c0-fdba-4f53-b3cb-cc6f56060b09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:28:44:c3:9e:6a:4c:c5:db:cb:15:38:91: b0:2d:fc:f8:10:be:f5:3a:ea:94:5a:87:6e:3a:68: cf:f7:5f:54:73:49:ba:71:74:99:92:d0:d2:40:c0: 06:25:a7:a4:61:7d:2e:34:d6:43:f1:d9:ec:b5:24: 55:76:e1:65:22:91:99:aa:55:34:fc:fd:b8:89:61: ad:cc:c0:b1:3b:a3:7d:87:f7:e4:ed:9a:18:eb:90: a2:c4:c5:f6:65:ec:8d:23:be:df:2b:21:bb:16:ba: 6e:36:73:72:6f:be:9e:3e:aa:b6:0f:40:51:57:85: 22:58:73:a6:93:71:26:44:93:90:10:2c:65:03:5a: 64:8b:9c:52:49:b2:b2:87:a4:a1:d9:a7:b4:41:bb: 9c:29:08:c6:63:55:91:5b:f9:30:7c:3d:8c:69:27: d0:34:a6:43:aa:eb:2b:2f:fe:d0:a1:2b:68:81:d1: e3:c2:45:ff:9a:ac:f3:20:3b:9e:19:14:53:1c:b9: dd:65:7e:31:62:88:58:1c:29:5a:1b:cd:76:13:59: 32:d7:17:64:7d:fc:7a:cb:bb:09:56:8e:41:23:de: fd:52:95:6d:32:9c:e2:0c:32:7d:c0:a7:9d:a0:fd: 17:51:2f:fe:96:75:91:c4:c6:e1:76:24:de:3e:65: c8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:5B:51:A2:6C:43:35:7B:21:00:02:45:80:BE:84:46:FA:BC:37:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/b89d1083-da50-3eaf-b7d8-f77234560bfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263/6511a5cc-df0b-4c6e-a228-2902fbea4263.crl X509v3 Authority Key Identifier: keyid:ED:B2:04:0A:65:F6:8A:00:34:25:EC:FC:AB:A5:2B:F8:26:99:1B:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6511a5cc-df0b-4c6e-a228-2902fbea4263.cer sbgp-ipAddrBlock: critical IPv4: 140.98.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:1b:1d:36:db:ad:f1:6b:54:b6:96:a7:c7:51:73:09:ff:d4: 6a:6f:e6:e4:54:0f:00:8e:32:b8:54:43:af:7a:37:75:bb:43: e7:15:1d:71:2d:84:41:fe:2a:b8:49:d2:2f:1c:6d:83:1f:bb: eb:97:53:8a:00:14:16:7f:18:ca:1b:96:73:49:ec:f2:05:76: 2a:47:78:06:17:fb:91:f7:c9:c7:4f:8a:7c:75:11:ae:07:a5: 27:c9:b6:68:da:69:1b:9b:bc:59:f8:9a:af:c9:93:04:54:bf: bf:4b:fc:21:a6:a9:50:ee:1a:23:94:2f:12:1b:f7:83:08:de: dc:5a:3a:c6:15:00:0b:06:fc:01:9d:96:9e:2c:85:20:28:9d: e7:40:26:c1:64:82:4b:f1:64:79:49:44:69:d6:0d:e1:ad:da: 90:c0:56:a7:48:ef:46:34:d1:de:cf:2a:89:df:2f:a9:27:a4: 80:0c:72:f3:9f:43:81:19:db:4a:82:7b:05:fa:76:0e:5f:20: 72:58:80:5f:db:e2:8c:08:4d:43:d9:d0:2c:5b:41:0b:27:b3: 19:c0:c3:a2:eb:f9:9b:05:2e:18:ac:0f:70:1d:34:6e:d7:2e: 3e:9b:03:8e:ae:20:c8:41:d5:ad:56:5c:25:f8:19:a0:1e:08: 4f:90:3b:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1u2mOhLPQs1AwsgOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUxMWE1Y2MtZGYwYi00YzZlLWEyMjgtMjkwMmZiZWE0 MjYzMB4XDTI2MDQwODAxMDAyNFoXDTI2MDcwNzAxMDAyNFowLzEtMCsGA1UEAxMk YzUyNzQ1YzAtZmRiYS00ZjUzLWIzY2ItY2M2ZjU2MDYwYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6EoRMOeakzF28sVOJGwLfz4EL71OuqUWodu OmjP919Uc0m6cXSZktDSQMAGJaekYX0uNNZD8dnstSRVduFlIpGZqlU0/P24iWGt zMCxO6N9h/fk7ZoY65CixMX2ZeyNI77fKyG7FrpuNnNyb76ePqq2D0BRV4UiWHOm k3EmRJOQECxlA1pki5xSSbKyh6Sh2ae0QbucKQjGY1WRW/kwfD2MaSfQNKZDqusr L/7QoStogdHjwkX/mqzzIDueGRRTHLndZX4xYohYHClaG812E1ky1xdkffx6y7sJ Vo5BI979UpVtMpziDDJ9wKedoP0XUS/+lnWRxMbhdiTePmXIWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNbUaJsQzV7IQACRYC+hEb6vDeaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NTEx YTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAyZmJlYTQyNjMvYjg5ZDEwODMtZGE1MC0z ZWFmLWI3ZDgtZjc3MjM0NTYwYmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjUxMWE1Y2MtZGYwYi00YzZlLWEy MjgtMjkwMmZiZWE0MjYzLzY1MTFhNWNjLWRmMGItNGM2ZS1hMjI4LTI5MDJmYmVh NDI2My5jcmwwHwYDVR0jBBgwFoAU7bIECmX2igA0Jez8q6Ur+CaZGxQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy82NTExYTVjYy1kZjBiLTRjNmUtYTIyOC0yOTAy ZmJlYTQyNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjGIZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsbHTbbrfFrVLaWp8dRcwn/1Gpv5uRUDwCOMrhUQ696N3W7Q+cVHXEt hEH+KrhJ0i8cbYMfu+uXU4oAFBZ/GMoblnNJ7PIFdipHeAYX+5H3ycdPinx1Ea4H pSfJtmjaaRubvFn4mq/JkwRUv79L/CGmqVDuGiOULxIb94MI3txaOsYVAAsG/AGd lp4shSAonedAJsFkgkvxZHlJRGnWDeGt2pDAVqdI70Y00d7PKonfL6knpIAMcvOf Q4EZ20qCewX6dg5fIHJYgF/b4owITUPZ0CxbQQsnsxnAw6Lr+ZsFLhisD3AdNG7X Lj6bA46uIMhB1a1WXCX4GaAeCE+QO9g= -----END CERTIFICATE-----Generated at Sat Apr 18 07:32:58 2026 by rpki-client