$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/25975321-92d3-3d63-b7ca-6b0239721efd.roa File: 25975321-92d3-3d63-b7ca-6b0239721efd.roa (raw, json) Hash identifier: gye7VU9RzwAujxWgGw7xLol+w3U0VVH7W5DO+S81LtY= Subject key identifier: C3:95:FE:22:91:39:85:30:CF:A1:4A:4E:9E:A6:77:C7:F2:0A:C6:39 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584E842A30BC0462D8DDAAB35A80 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/25975321-92d3-3d63-b7ca-6b0239721efd.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 212384 IP address blocks: 140.235.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:30:bc:04:62:d8:dd:aa:b3:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=cad89dcd-028e-4d6b-a02a-37745153fce5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:49:3e:86:ca:71:db:eb:85:4c:3a:d9:e7:74: 93:64:4f:51:63:88:2f:4c:aa:5c:f2:7a:20:07:fd: 6a:ae:26:9f:ea:53:90:50:93:d8:aa:32:37:66:0a: 30:9b:6c:be:28:9e:9e:08:32:dc:e8:79:e6:ba:05: fd:92:86:8d:2c:f4:e9:2b:46:d8:02:3f:df:3f:08: db:51:4c:19:c9:13:c6:27:9e:11:d7:29:55:d4:b8: ac:a2:7a:2e:02:c4:dd:e6:d2:22:0e:87:3b:e6:38: e4:ef:c2:20:d2:5e:56:2d:9e:60:1b:8e:a9:00:7f: 15:ac:86:ae:e3:49:6b:20:c2:09:6c:d6:06:e6:b4: 83:9f:38:ee:8e:b0:19:a8:b6:51:d4:26:f7:e2:cd: c1:f8:1a:99:01:eb:0b:01:96:43:ae:5a:24:d4:d0: 68:dc:53:43:66:da:93:94:23:c7:7e:1c:f0:27:7d: ed:d9:7c:ac:b6:b1:7c:f8:31:7c:53:57:14:0d:02: 90:b1:83:08:38:37:6a:c4:49:7d:93:92:dd:1c:93: 97:2d:f1:eb:3f:e3:89:91:d1:8c:40:e0:86:8c:3a: 38:70:5a:93:1d:23:43:29:d0:6e:5e:ed:3d:b7:2d: dd:3b:2c:bd:5e:bb:07:be:bb:15:66:cc:51:1e:94: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:95:FE:22:91:39:85:30:CF:A1:4A:4E:9E:A6:77:C7:F2:0A:C6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/25975321-92d3-3d63-b7ca-6b0239721efd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:cb:39:e4:5e:01:91:ed:77:c7:2b:44:36:05:86:9b:2a:ba: 19:05:71:c0:f7:5d:65:de:10:ee:14:35:74:63:1e:ea:ab:d3: 2d:72:18:79:2d:d5:c3:65:2f:6c:6d:f3:27:1e:03:f3:1a:57: d6:5a:c6:2c:62:f2:72:5f:60:b7:81:fc:6f:64:ed:e8:ee:d9: 95:17:89:e2:f0:e6:d7:64:dc:e6:b4:0c:bb:8f:8d:7f:fd:6f: 77:43:05:9f:9c:15:bf:c5:f0:e8:e7:66:c3:02:58:83:4b:38: de:e4:28:ff:07:58:a3:32:fa:7b:ba:b5:22:04:91:4b:01:8d: 9f:fc:ec:91:59:37:a2:fc:3e:44:a3:cd:23:a5:c8:08:58:ad: 5e:d2:6e:e0:b8:bd:30:4e:a1:3f:af:86:f8:6b:ca:61:f2:eb: f3:17:c8:45:29:80:f3:5e:a2:f1:eb:66:d0:ec:b0:c1:51:2e: 02:94:e0:c2:68:ca:22:2c:b1:b6:5e:4d:30:f3:ac:b2:ab:74: c1:50:18:79:ec:6d:ef:ca:06:1a:de:bc:1d:d4:c7:46:bb:0a: 67:a2:c8:ed:56:64:be:c8:3b:83:da:f0:47:39:b0:78:e7:88: b0:4c:eb:51:12:9f:a6:f7:a8:7c:66:91:00:4b:9c:51:77:8b: 54:d0:a0:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjC8BGLY3aqzWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2FkODlkY2QtMDI4ZS00ZDZiLWEwMmEtMzc3NDUxNTNmY2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0k+hspx2+uFTDrZ53STZE9RY4gvTKpc8nog B/1qriaf6lOQUJPYqjI3Zgowm2y+KJ6eCDLc6HnmugX9koaNLPTpK0bYAj/fPwjb UUwZyRPGJ54R1ylV1LisonouAsTd5tIiDoc75jjk78Ig0l5WLZ5gG46pAH8VrIau 40lrIMIJbNYG5rSDnzjujrAZqLZR1Cb34s3B+BqZAesLAZZDrlok1NBo3FNDZtqT lCPHfhzwJ33t2XystrF8+DF8U1cUDQKQsYMIODdqxEl9k5LdHJOXLfHrP+OJkdGM QOCGjDo4cFqTHSNDKdBuXu09ty3dOyy9XrsHvrsVZsxRHpRd0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOV/iKROYUwz6FKTp6md8fyCsY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMjU5NzUzMjEtOTJkMy0z ZDYzLWI3Y2EtNmIwMjM5NzIxZWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOtvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFvLOeReAZHtd8crRDYFhpsquhkFccD3XWXeEO4UNXRjHuqr0y1yGHkt 1cNlL2xt8yceA/MaV9Zaxixi8nJfYLeB/G9k7eju2ZUXieLw5tdk3Oa0DLuPjX/9 b3dDBZ+cFb/F8OjnZsMCWINLON7kKP8HWKMy+nu6tSIEkUsBjZ/87JFZN6L8PkSj zSOlyAhYrV7SbuC4vTBOoT+vhvhrymHy6/MXyEUpgPNeovHrZtDssMFRLgKU4MJo yiIssbZeTTDzrLKrdMFQGHnsbe/KBhrevB3Ux0a7CmeiyO1WZL7IO4Pa8Ec5sHjn iLBM61ESn6b3qHxmkQBLnFF3i1TQoFc= -----END CERTIFICATE-----Generated at Tue Jul 21 14:44:04 2026 by rpki-client