$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa File: 158788ef-52cb-31cc-9ac3-50df5a8f9263.roa (raw, json) Hash identifier: uHOsfaKpXbYX4F7f1I7e2AZIrbCXE+7gBRmTxbA2wJA= Subject key identifier: 08:18:8E:D9:4C:49:43:07:26:B3:F2:ED:20:B9:EB:AB:16:7C:73:96 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584E016B2659FFCB0120F8DCFC80 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa Signing time: Sat 30 May 2026 13:00:10 +0000 ROA not before: Sat 30 May 2026 13:00:10 +0000 ROA not after: Fri 28 Aug 2026 13:00:10 +0000 asID: 211440 IP address blocks: 140.235.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:6b:26:59:ff:cb:01:20:f8:dc:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: May 30 13:00:10 2026 GMT Not After : Aug 28 13:00:10 2026 GMT Subject: CN=780c8c16-49a8-4cf7-ac3d-860b5937e864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:96:e7:5f:e4:97:62:48:09:ee:44:9c:54:15: 56:3e:1b:d3:24:97:1a:fb:b5:c9:54:d0:a9:4d:41: a4:33:2e:e7:0d:00:66:35:4b:6f:17:83:8a:22:ad: 29:fa:6d:dc:22:f3:75:d3:17:e8:29:de:65:bd:d0: 53:a5:71:d1:f5:be:72:27:3e:b9:81:06:f7:cd:14: 56:43:cb:6e:04:14:b0:ab:bf:e1:a2:54:be:fb:9c: 8c:48:0a:be:6d:6f:72:f2:68:a5:9e:ee:05:79:00: 19:17:ca:a9:76:25:20:cc:7b:55:21:a3:02:e2:70: da:a1:38:7c:6b:e7:11:54:71:b0:d6:e5:0c:62:12: c6:ae:cf:d7:9f:ef:ee:aa:e0:f7:12:58:ea:7d:b7: 25:14:38:1d:d0:d2:da:1c:24:1b:0b:a7:00:9c:86: 24:03:0e:27:b0:62:2a:ab:0a:c7:f4:b2:a3:b7:21: 05:82:6f:4f:73:ff:25:6f:7b:b6:c5:cf:30:a5:1a: b7:88:7d:f6:8c:ca:f3:b4:8f:b6:81:99:fa:49:ab: cc:aa:06:3b:95:c0:b0:8a:6b:5d:3f:86:20:3b:f2: 43:78:be:4e:f0:26:5f:0f:49:62:56:06:48:84:71: c5:b1:af:e8:90:3f:52:c7:e0:5f:d6:3b:bc:ca:0b: 99:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:18:8E:D9:4C:49:43:07:26:B3:F2:ED:20:B9:EB:AB:16:7C:73:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a2:8a:0d:e6:8f:4a:9f:1e:f7:1d:da:1d:06:2c:88:51:1a: 20:65:97:55:f6:3f:07:7e:d4:de:59:ca:39:df:bf:ca:06:af: 59:13:07:00:e4:18:47:38:9b:fd:d1:1c:0d:31:35:15:bd:e9: 2e:36:3c:0c:3d:d5:85:39:3b:09:e2:53:86:86:08:a0:e0:da: b5:83:09:04:7b:f9:f4:ae:75:12:85:e5:88:e9:a8:f7:db:9f: 02:53:74:10:a1:cc:5a:78:46:09:ad:76:68:9d:b6:0c:b7:c6: 14:59:55:c0:4f:e3:c1:6a:e7:5f:b2:36:a2:31:ca:10:24:04: 31:57:77:34:a2:84:3b:3d:3b:ae:cd:3a:90:49:24:aa:25:fa: f4:81:c2:af:83:2f:c8:6d:f5:a0:8b:a5:00:2c:9b:79:83:17: aa:52:3f:45:8a:c2:bf:36:bd:7f:d1:8c:62:66:a9:ee:cd:fc: d9:d6:88:93:1d:f4:37:cf:88:3b:ee:b6:e1:22:9b:e7:5c:50: 7b:2f:fa:23:1b:dd:3d:2a:ef:65:57:67:19:47:cb:ea:7b:4f: 1a:f5:fb:d8:e6:47:d8:b8:43:f2:ca:b1:20:37:a3:3e:56:62: ed:67:8f:3d:2d:b0:5e:d8:68:6b:1f:ab:1b:90:5d:d0:af:9e: 78:56:74:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4BayZZ/8sBIPjc/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI2MDUzMDEzMDAxMFoXDTI2MDgyODEzMDAxMFowLzEtMCsGA1UEAxMk NzgwYzhjMTYtNDlhOC00Y2Y3LWFjM2QtODYwYjU5MzdlODY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5bnX+SXYkgJ7kScVBVWPhvTJJca+7XJVNCp TUGkMy7nDQBmNUtvF4OKIq0p+m3cIvN10xfoKd5lvdBTpXHR9b5yJz65gQb3zRRW Q8tuBBSwq7/holS++5yMSAq+bW9y8milnu4FeQAZF8qpdiUgzHtVIaMC4nDaoTh8 a+cRVHGw1uUMYhLGrs/Xn+/uquD3EljqfbclFDgd0NLaHCQbC6cAnIYkAw4nsGIq qwrH9LKjtyEFgm9Pc/8lb3u2xc8wpRq3iH32jMrztI+2gZn6SavMqgY7lcCwimtd P4YgO/JDeL5O8CZfD0liVgZIhHHFsa/okD9Sx+Bf1ju8yguZiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgYjtlMSUMHJrPy7SC566sWfHOWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMTU4Nzg4ZWYtNTJjYi0z MWNjLTlhYzMtNTBkZjVhOGY5MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGiig3mj0qfHvcd2h0GLIhRGiBll1X2Pwd+1N5Zyjnfv8oGr1kTBwDk GEc4m/3RHA0xNRW96S42PAw91YU5OwniU4aGCKDg2rWDCQR7+fSudRKF5YjpqPfb nwJTdBChzFp4Rgmtdmidtgy3xhRZVcBP48Fq51+yNqIxyhAkBDFXdzSihDs9O67N OpBJJKol+vSBwq+DL8ht9aCLpQAsm3mDF6pSP0WKwr82vX/RjGJmqe7N/NnWiJMd 9DfPiDvutuEim+dcUHsv+iMb3T0q72VXZxlHy+p7Txr1+9jmR9i4Q/LKsSA3oz5W Yu1njz0tsF7YaGsfqxuQXdCvnnhWdGA= -----END CERTIFICATE-----Generated at Thu Jun 4 08:04:03 2026 by rpki-client