$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa File: 28c297e9-6701-3a4f-bea0-343929f7fbc3.roa (raw, json) Hash identifier: TMWFHJiyHS9s00qVilf1tAZ5rMHISX4nRdHdM+uNotg= Subject key identifier: 9F:48:5C:7E:B5:DA:F9:23:BB:AF:E0:FD:A5:95:14:25:A4:32:2F:97 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584D091257091C601B419E10A800 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 14340 IP address blocks: 140.190.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:57:09:1c:60:1b:41:9e:10:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=9f8ae1b6-5931-4d18-87d9-ce969493349a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:79:f0:87:1d:31:d1:b3:c8:fe:8e:36:01: b9:4a:12:ce:75:e8:77:3c:25:be:43:57:d2:96:05: de:9b:c4:7f:3e:c8:38:9f:2b:bb:50:51:f5:4c:f5: f4:0a:37:71:bc:af:0d:7f:90:90:3d:8f:92:88:2c: 16:fe:09:ad:70:d9:98:4f:d6:94:dc:48:52:71:80: 6f:7e:e6:6e:04:70:46:37:45:f9:dc:11:47:63:bc: 55:2d:ef:6a:19:ea:c2:eb:6e:f6:fb:e2:e9:a0:15: 92:8d:2a:c0:d9:4d:20:03:e4:7b:59:f7:61:4e:ce: 94:ae:6c:2b:e6:a4:14:52:85:bc:2d:1b:bd:ee:28: f4:f1:2c:94:84:1d:0a:06:1a:68:f3:07:ac:ee:79: 00:1f:0a:a2:6c:b0:66:3a:e9:13:67:7a:9a:db:f8: 11:be:99:e4:79:d3:48:2b:91:c3:56:62:3e:1a:7c: d7:1d:86:bc:2f:f0:6f:e1:f9:41:7f:ea:fe:33:4c: 5b:d2:c0:69:a7:eb:e1:98:17:cc:10:44:66:1e:62: bf:85:f7:d0:fd:eb:e0:84:96:d4:e7:e2:7e:d0:dd: 31:8c:d5:86:92:f0:14:10:0a:77:8b:fe:e1:56:59: 20:d7:82:7a:95:1e:3e:cc:37:d9:09:59:9b:73:8e: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:48:5C:7E:B5:DA:F9:23:BB:AF:E0:FD:A5:95:14:25:A4:32:2F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/28c297e9-6701-3a4f-bea0-343929f7fbc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 140.190.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a4:66:60:44:72:70:9e:0a:f2:00:86:fe:5b:45:7c:01:6e: ca:e6:4a:94:e2:d7:6a:09:d3:39:a1:ff:4d:01:1e:09:56:81: e5:17:00:c9:5b:91:92:55:1b:e3:d7:13:0a:8e:1c:2f:e7:ca: ca:b1:09:b4:3f:2d:9a:0d:47:7b:ab:70:9a:20:99:03:eb:93: 1a:87:40:0d:35:5e:29:c9:5c:e2:c5:4f:1c:93:a1:58:c7:07: e4:88:5d:a7:84:2f:40:16:5f:e3:68:2f:f4:6b:11:37:7d:3d: 51:bb:e2:37:78:b8:c3:56:e7:a2:6b:1c:a7:14:8c:d0:47:2d: d9:59:01:1c:cb:95:04:8b:a1:1e:49:0f:12:03:ec:27:12:f1: 08:fc:1e:0b:51:b6:23:b5:54:90:87:4a:5a:9a:2a:60:63:7c: 56:36:5f:bc:ba:d3:16:f7:9d:76:26:34:92:90:a9:c8:24:03: e9:7a:f5:3a:1f:2a:da:86:5b:ec:9d:4a:78:70:f7:f6:6d:e1: 6d:71:71:d8:9c:f1:f8:19:49:e0:9e:3b:b4:b0:88:31:9a:3a: 51:f0:c8:f2:2f:9e:b5:e3:8a:b4:ce:e5:de:d4:9c:82:58:09: 2d:4f:bc:ff:7b:3b:f2:56:70:bc:b0:67:00:35:75:99:7a:d8: 39:75:14:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JElcJHGAbQZ4QqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk OWY4YWUxYjYtNTkzMS00ZDE4LTg3ZDktY2U5Njk0OTMzNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMp58IcdMdGzyP6ONgG5ShLOdeh3PCW+Q1fS lgXem8R/Psg4nyu7UFH1TPX0CjdxvK8Nf5CQPY+SiCwW/gmtcNmYT9aU3EhScYBv fuZuBHBGN0X53BFHY7xVLe9qGerC6272++LpoBWSjSrA2U0gA+R7WfdhTs6Urmwr 5qQUUoW8LRu97ij08SyUhB0KBhpo8wes7nkAHwqibLBmOukTZ3qa2/gRvpnkedNI K5HDVmI+GnzXHYa8L/Bv4flBf+r+M0xb0sBpp+vhmBfMEERmHmK/hffQ/evghJbU 5+J+0N0xjNWGkvAUEAp3i/7hVlkg14J6lR4+zDfZCVmbc46yXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9IXH612vkju6/g/aWVFCWkMi+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvMjhjMjk3ZTktNjcwMS0z YTRmLWJlYTAtMzQzOTI5ZjdmYmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjL5wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+kZmBEcnCeCvIAhv5bRXwBbsrmSpTi12oJ0zmh/00BHglWgeUXAMlb kZJVG+PXEwqOHC/nysqxCbQ/LZoNR3urcJogmQPrkxqHQA01XinJXOLFTxyToVjH B+SIXaeEL0AWX+NoL/RrETd9PVG74jd4uMNW56JrHKcUjNBHLdlZARzLlQSLoR5J DxID7CcS8Qj8HgtRtiO1VJCHSlqaKmBjfFY2X7y60xb3nXYmNJKQqcgkA+l69Tof KtqGW+ydSnhw9/Zt4W1xcdic8fgZSeCeO7SwiDGaOlHwyPIvnrXjirTO5d7UnIJY CS1PvP97O/JWcLywZwA1dZl62Dl1FCc= -----END CERTIFICATE-----Generated at Thu Mar 5 18:45:49 2026 by rpki-client