$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa File: 09a170e6-b2b8-30b0-adee-975ab184a379.roa (raw, json) Hash identifier: 0hTdD0IqvaFB1NZZjKl/o3VTj334FJhIrQi1zAxhvv0= Subject key identifier: 9A:50:C6:15:6F:7B:C0:4A:DB:29:8F:46:BF:DC:5E:68:11:04:3C:ED Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584D5234E991AA18AC91D539FF10 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa Signing time: Sat 28 Mar 2026 18:44:28 +0000 ROA not before: Sat 28 Mar 2026 18:44:28 +0000 ROA not after: Mon 25 May 2026 20:04:07 +0000 asID: 3736 IP address blocks: 198.180.140.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:e9:91:aa:18:ac:91:d5:39:ff:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: Mar 28 18:44:28 2026 GMT Not After : May 25 20:04:07 2026 GMT Subject: CN=57720bef-c72e-46b8-82c6-f23ca8198f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4b:08:ff:18:0d:fa:83:8c:8d:fb:91:34:4f: b1:29:6c:0d:e2:43:71:08:44:70:20:e9:a3:82:d8: 30:a8:73:6a:cb:b2:db:bf:b8:69:11:03:cf:6e:fa: 9c:98:aa:ac:06:5f:f3:2d:d3:84:32:f5:85:f4:00: 58:43:80:6a:44:3a:55:dc:1e:48:a9:5f:f7:87:17: 5d:64:24:87:33:26:f9:c4:4a:ce:49:a4:9b:62:bf: d1:71:b8:2b:28:9f:8c:5b:0a:c2:6a:88:29:fe:ad: e9:18:a3:62:f9:28:d4:59:a2:80:eb:d9:44:29:9e: e7:ec:49:06:ab:5a:93:8e:26:9d:ce:6e:c0:ba:13: b7:a2:b8:a9:8f:4c:38:46:4c:93:a5:e7:17:48:fa: 08:14:85:14:1d:7d:38:1a:39:31:6f:13:29:4a:1f: f3:7c:d9:41:44:c5:c9:92:f3:9a:94:d2:4c:38:ee: d8:3a:65:0d:be:41:f6:4a:e6:f3:ae:d9:df:57:6a: b6:56:4a:aa:90:9c:cf:08:03:41:f8:a3:da:2f:e1: 63:a9:24:9f:e6:41:9b:b9:c7:4f:26:e4:f7:af:92: fe:5a:23:75:47:c8:da:1a:e4:13:6e:76:4d:a3:eb: 9d:51:91:b2:1c:cc:b8:c3:9a:32:03:67:f6:12:e3: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:50:C6:15:6F:7B:C0:4A:DB:29:8F:46:BF:DC:5E:68:11:04:3C:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/09a170e6-b2b8-30b0-adee-975ab184a379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 198.180.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:f9:30:36:21:0d:0b:de:91:96:f8:a5:52:63:0b:0e:2b:16: 8b:fd:4c:a3:9c:53:54:c7:91:c4:ce:5a:7b:46:34:ec:59:40: 9d:55:04:eb:8e:b6:79:7b:fa:d2:22:6f:ed:9a:7d:37:42:b5: e1:66:e3:80:62:d8:fa:6e:7e:72:a2:2c:5f:10:aa:f9:12:b5: 99:58:72:93:29:b1:c0:eb:73:54:d2:1b:a8:13:47:da:60:d3: 7f:44:23:03:22:ba:b6:f6:0c:d8:eb:cc:10:1f:b0:fc:c3:d4: 5a:ee:5a:c6:30:a6:69:a4:9b:cd:d2:52:e0:b3:8f:01:4e:55: 3b:ae:9d:ad:d1:58:ed:10:c1:63:2e:85:a0:e9:bd:a1:a4:b7: 94:49:ec:83:92:4a:d1:0a:9f:cc:2f:ec:fa:8d:10:9e:30:86: 3f:54:b3:ad:ee:0c:cf:5d:6c:7c:b3:43:42:99:03:73:f4:7e: 75:66:e4:ac:1e:46:d6:e2:c1:20:f9:c6:e1:83:a1:6e:18:cf: e7:c0:04:91:4b:f8:47:c8:9e:92:23:dd:7a:77:5e:90:fc:53: 36:14:42:9d:c0:97:4f:52:a9:4c:f6:63:d1:d4:c2:8b:4e:a3: e1:74:31:78:ae:2d:26:99:92:65:c7:67:fb:2b:56:54:9b:fb: e3:41:29:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNOmRqhiskdU5/xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDMyODE4NDQyOFoXDTI2MDUyNTIwMDQwN1owLzEtMCsGA1UEAxMk NTc3MjBiZWYtYzcyZS00NmI4LTgyYzYtZjIzY2E4MTk4ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEsI/xgN+oOMjfuRNE+xKWwN4kNxCERwIOmj gtgwqHNqy7Lbv7hpEQPPbvqcmKqsBl/zLdOEMvWF9ABYQ4BqRDpV3B5IqV/3hxdd ZCSHMyb5xErOSaSbYr/RcbgrKJ+MWwrCaogp/q3pGKNi+SjUWaKA69lEKZ7n7EkG q1qTjiadzm7AuhO3oripj0w4RkyTpecXSPoIFIUUHX04GjkxbxMpSh/zfNlBRMXJ kvOalNJMOO7YOmUNvkH2SubzrtnfV2q2VkqqkJzPCANB+KPaL+FjqSSf5kGbucdP JuT3r5L+WiN1R8jaGuQTbnZNo+udUZGyHMy4w5oyA2f2EuMZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpQxhVve8BK2ymPRr/cXmgRBDztMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvMDlhMTcwZTYtYjJiOC0z MGIwLWFkZWUtOTc1YWIxODRhMzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrSMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC75MDYhDQvekZb4pVJjCw4rFov9TKOcU1THkcTOWntGNOxZQJ1VBOuO tnl7+tIib+2afTdCteFm44Bi2PpufnKiLF8QqvkStZlYcpMpscDrc1TSG6gTR9pg 039EIwMiurb2DNjrzBAfsPzD1FruWsYwpmmkm83SUuCzjwFOVTuuna3RWO0QwWMu haDpvaGkt5RJ7IOSStEKn8wv7PqNEJ4whj9Us63uDM9dbHyzQ0KZA3P0fnVm5Kwe RtbiwSD5xuGDoW4Yz+fABJFL+EfInpIj3Xp3XpD8UzYUQp3Al09SqUz2Y9HUwotO o+F0MXiuLSaZkmXHZ/srVlSb++NBKQA= -----END CERTIFICATE-----Generated at Fri Apr 17 09:59:45 2026 by rpki-client