$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa File: c40b1190-1515-3cb5-9550-3ac9f9324c14.roa (raw, json) Hash identifier: 5msrItuTyWXysmE6vM6XvSvEgsNGElEJZX4Y6VB/hF0= Subject key identifier: E3:BA:E6:3C:BA:CF:15:C1:0A:67:FA:59:C7:19:AB:EE:06:DC:76:D8 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584E35FF1850D2F68BB1C1CBF0C0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa Signing time: Thu 18 Jun 2026 09:00:12 +0000 ROA not before: Thu 18 Jun 2026 09:00:12 +0000 ROA not after: Wed 16 Sep 2026 09:00:12 +0000 asID: 13443 IP address blocks: 128.241.35.0/24 maxlen: 24 128.242.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 24 Jun 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:ff:18:50:d2:f6:8b:b1:c1:cb:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 18 09:00:12 2026 GMT Not After : Sep 16 09:00:12 2026 GMT Subject: CN=9a66a803-c942-4429-953e-860250cce10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:a8:17:d6:83:b6:94:7a:6d:7e:20:d8:47: 1f:28:af:d3:fe:8e:12:66:a9:4f:1b:54:bb:a9:33: 53:e8:e6:64:a3:15:2a:a0:86:cc:b3:a5:88:79:12: 20:30:c4:11:9d:03:29:01:5f:a6:bc:74:67:50:a3: fe:44:c3:42:4c:83:75:ce:a4:7c:ef:f4:34:8e:7d: c6:04:ae:be:77:cb:f1:a2:ec:f6:8e:ef:7a:e7:41: a0:57:d5:0a:f9:5b:3f:50:7b:11:af:03:12:07:5a: 04:00:4c:5c:07:e5:a9:63:af:38:6c:94:8e:a1:28: 1c:95:23:2b:bd:d7:47:0b:d6:8f:92:8f:3f:83:00: 6a:0d:24:4a:a8:e8:fc:52:81:6f:6a:dd:b1:72:bd: 9f:05:ad:a7:f3:8c:6a:f6:c3:2e:4b:76:1a:65:c7: 2f:7a:c0:ef:92:f6:dc:eb:9e:32:a8:b3:6a:71:5d: 3a:a5:f6:1f:fa:c4:eb:0a:5b:4a:8c:22:f1:76:42: 9f:a8:71:87:87:70:22:eb:3d:15:5a:09:29:b0:bc: ca:98:a2:cb:12:17:31:db:c8:29:48:31:d4:4d:46: 35:9b:ed:cf:0c:f5:41:8e:37:c7:cd:fa:ef:40:72: 10:9e:86:77:b5:8a:4b:bb:7a:61:4d:4a:8b:9b:4d: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BA:E6:3C:BA:CF:15:C1:0A:67:FA:59:C7:19:AB:EE:06:DC:76:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c40b1190-1515-3cb5-9550-3ac9f9324c14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 128.241.35.0/24 128.242.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:2f:a6:27:c3:22:ac:20:13:e6:76:e7:a7:6d:b1:69:65:3e: 0b:43:07:36:82:03:0f:d3:2e:e9:f0:a9:9a:42:96:30:98:32: 1a:fb:01:eb:4f:dd:e0:cd:2b:3b:1e:36:5a:70:44:70:33:b1: f8:a9:0e:27:f5:12:c0:f0:2b:b2:b2:10:c0:ae:de:34:4e:23: 9d:a5:b1:4b:e4:c5:85:64:85:e7:9b:67:cb:a5:d6:02:f2:b7: 5e:fb:79:a3:41:c6:75:9e:35:9d:06:71:77:d3:24:ce:10:79: 2d:4b:e4:8b:d5:d4:e9:ce:e2:23:f8:d5:88:cf:c6:9e:75:61: 9d:1f:9a:6e:2b:67:e9:47:c6:46:32:72:aa:b1:63:da:9f:8c: eb:86:e0:4e:9a:30:c7:61:6a:c6:97:b0:d6:28:47:d4:77:ba: 00:d8:2b:fd:96:6f:54:c4:b2:8f:50:2c:8e:a2:b9:8c:4e:de: c4:a0:81:ea:07:e6:17:5a:34:2f:87:79:2e:22:c7:ca:5a:3e: cf:30:c8:21:8c:42:0b:e2:c0:05:5d:ab:3f:52:37:aa:33:3f: 8e:47:1a:aa:30:8a:f3:bb:e1:e6:86:b1:1a:03:22:02:39:e5: 37:e1:5b:e9:eb:fd:54:dc:39:ca:c0:9f:5d:fc:7c:72:0c:c1: 31:da:3e:fc -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE41/xhQ0vaLscHL8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDYxODA5MDAxMloXDTI2MDkxNjA5MDAxMlowLzEtMCsGA1UEAxMk OWE2NmE4MDMtYzk0Mi00NDI5LTk1M2UtODYwMjUwY2NlMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RioF9aDtpR6bX4g2EcfKK/T/o4SZqlPG1S7 qTNT6OZkoxUqoIbMs6WIeRIgMMQRnQMpAV+mvHRnUKP+RMNCTIN1zqR87/Q0jn3G BK6+d8vxouz2ju9650GgV9UK+Vs/UHsRrwMSB1oEAExcB+WpY684bJSOoSgclSMr vddHC9aPko8/gwBqDSRKqOj8UoFvat2xcr2fBa2n84xq9sMuS3YaZccvesDvkvbc 654yqLNqcV06pfYf+sTrCltKjCLxdkKfqHGHh3Ai6z0VWgkpsLzKmKLLEhcx28gp SDHUTUY1m+3PDPVBjjfHzfrvQHIQnoZ3tYpLu3phTUqLm02EZwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOO65jy6zxXBCmf6WccZq+4G3HbYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzQwYjExOTAtMTUxNS0z Y2I1LTk1NTAtM2FjOWY5MzI0YzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgPEjAwQA gPJfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADMvpifDIqwgE+Z256dtsWllPgtDBzaCAw/TLunwqZpCljCY Mhr7AetP3eDNKzseNlpwRHAzsfipDif1EsDwK7KyEMCu3jROI52lsUvkxYVkheeb Z8ul1gLyt177eaNBxnWeNZ0GcXfTJM4QeS1L5IvV1OnO4iP41YjPxp51YZ0fmm4r Z+lHxkYycqqxY9qfjOuG4E6aMMdhasaXsNYoR9R3ugDYK/2Wb1TEso9QLI6iuYxO 3sSggeoH5hdaNC+HeS4ix8paPs8wyCGMQgviwAVdqz9SN6ozP45HGqowivO74eaG sRoDIgI55TfhW+nr/VTcOcrAn138fHIMwTHaPvw= -----END CERTIFICATE-----Generated at Tue Jun 23 01:17:44 2026 by rpki-client