$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa File: 25dcf021-d643-33d2-b7c8-9a3520f1b453.roa (raw, json) Hash identifier: z+CrWNGHZCbpwzJABgOwXspItDx133aGhF1TgUxoOIY= Subject key identifier: EE:46:93:ED:B9:3B:1C:EC:DB:DC:4F:47:9A:B2:39:E7:AE:59:63:52 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584E104F308AE6718435C5C21480 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 40623 IP address blocks: 140.208.0.0/18 maxlen: 18 140.208.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:30:8a:e6:71:84:35:c5:c2:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=dd51cbe1-b884-48f2-a403-3a41abe13372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ac:c2:f9:ef:c4:9f:8e:e3:cf:77:f9:9e:72: 1a:64:4a:40:4b:b6:fe:e1:34:ca:3e:69:d2:5b:3b: 29:5e:7f:8c:34:57:01:cc:0f:3c:24:7d:01:3b:93: ff:85:18:c0:e2:d2:42:d0:1d:45:26:87:b6:b3:53: 09:7e:f9:e8:83:74:53:3d:d5:74:c5:76:2c:27:11: ca:ad:68:ad:bc:8c:e9:f6:5c:c3:8c:8b:e4:10:3e: d2:37:22:57:2f:24:4b:65:4e:32:f5:11:ed:29:3e: 56:29:db:c3:c8:66:97:e0:f8:1e:a8:dd:ff:14:dc: 3c:29:39:3b:eb:e3:35:56:b7:09:77:bd:8c:1e:54: c7:5e:40:4e:6a:90:c7:60:c2:b0:1b:7d:dd:b3:60: 10:16:d6:ad:83:61:af:a4:fd:38:2e:8c:6d:6d:62: 31:09:98:d1:ed:80:74:77:65:e6:e3:1c:49:26:ea: 5c:e5:ca:e8:70:ed:a1:73:95:73:8a:80:e7:f4:b6: 70:90:f3:86:b9:8b:7c:1c:03:7c:ec:94:ba:c2:51: 74:71:ea:82:23:4f:e3:aa:f6:37:3a:db:f4:82:d5: 77:a5:90:39:13:d3:97:83:4a:d4:c7:6f:ee:45:73: 2f:dc:98:46:a5:6e:bb:97:da:b9:a9:1b:14:00:51: 0f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:46:93:ED:B9:3B:1C:EC:DB:DC:4F:47:9A:B2:39:E7:AE:59:63:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.0.0/18 140.208.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:ad:81:ed:6a:5e:ad:2a:1f:df:93:c9:e6:f2:97:23:7d:3e: 3e:26:4b:2e:69:e6:83:d2:94:47:25:72:88:09:59:79:90:80: c8:2c:29:5d:af:b5:19:a3:e2:25:03:c9:56:77:55:1d:4c:d3: f3:e0:29:8e:77:7f:38:9e:07:41:1f:e8:ec:5d:6b:13:32:8f: d7:3b:b9:25:f3:78:5c:5c:e0:55:09:7e:98:f8:4b:e1:3d:5f: 9a:73:71:b5:41:56:88:a8:56:d5:4f:8f:58:bf:bd:c0:39:29: 13:48:a4:6a:f7:85:78:d2:9f:7f:56:ea:6c:cf:1c:61:50:bd: 70:80:0c:7c:03:a4:10:9f:9f:4c:6d:eb:ab:ee:7b:3a:3d:99: 5b:2a:4d:b5:8a:46:34:ae:06:f5:df:bd:ee:fd:ff:e2:2b:d5: 81:c1:85:3a:96:f5:23:9d:b1:8e:16:37:22:a6:c4:63:03:2f: 99:2e:dc:57:cd:90:99:86:6c:c1:4b:45:2b:58:25:ba:a2:16: c1:50:3a:82:9b:b6:50:78:8a:ff:9d:b2:95:59:25:f9:27:ba: bc:ef:3f:12:4c:9e:a9:db:77:d8:f7:e6:af:39:94:f4:96:86: 51:d3:63:3c:3e:10:c9:d7:da:0e:cd:fc:71:19:cd:5e:a5:d7: e8:0b:ef:f2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE4QTzCK5nGENcXCFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZGQ1MWNiZTEtYjg4NC00OGYyLWE0MDMtM2E0MWFiZTEzMzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6zC+e/En47jz3f5nnIaZEpAS7b+4TTKPmnS WzspXn+MNFcBzA88JH0BO5P/hRjA4tJC0B1FJoe2s1MJfvnog3RTPdV0xXYsJxHK rWitvIzp9lzDjIvkED7SNyJXLyRLZU4y9RHtKT5WKdvDyGaX4PgeqN3/FNw8KTk7 6+M1VrcJd72MHlTHXkBOapDHYMKwG33ds2AQFtatg2GvpP04LoxtbWIxCZjR7YB0 d2Xm4xxJJupc5crocO2hc5VzioDn9LZwkPOGuYt8HAN87JS6wlF0ceqCI0/jqvY3 Otv0gtV3pZA5E9OXg0rUx2/uRXMv3JhGpW67l9q5qRsUAFEPKwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFO5Gk+25Oxzs29xPR5qyOeeuWWNSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvMjVkY2YwMjEtZDY0My0z M2QyLWI3YzgtOWEzNTIwZjFiNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGjNAAAwQE jNCQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGStge1qXq0qH9+TyebylyN9Pj4mSy5p5oPSlEclcogJWXmQ gMgsKV2vtRmj4iUDyVZ3VR1M0/PgKY53fzieB0Ef6OxdaxMyj9c7uSXzeFxc4FUJ fpj4S+E9X5pzcbVBVoioVtVPj1i/vcA5KRNIpGr3hXjSn39W6mzPHGFQvXCADHwD pBCfn0xt66vuezo9mVsqTbWKRjSuBvXfve79/+Ir1YHBhTqW9SOdsY4WNyKmxGMD L5ku3FfNkJmGbMFLRStYJbqiFsFQOoKbtlB4iv+dspVZJfknurzvPxJMnqnbd9j3 5q85lPSWhlHTYzw+EMnX2g7N/HEZzV6l1+gL7/I= -----END CERTIFICATE-----Generated at Sun Jun 14 00:05:23 2026 by rpki-client