$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa File: 971c721e-2148-3a91-aae8-d902249a3b48.roa (raw, json) Hash identifier: lA+VXpSqX+oXnu//T0HrFX/I+VSAH+DrZCxrBOFfabY= Subject key identifier: C8:3D:06:A6:B9:CD:94:F5:44:4E:64:7E:84:12:14:7B:D8:EC:BC:D0 Certificate issuer: /CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Certificate serial: 010D0C9F4328584D6AAA7307D84295AC96CCBB00 Authority key identifier: 41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa Signing time: Mon 06 Apr 2026 13:00:30 +0000 ROA not before: Mon 06 Apr 2026 13:00:30 +0000 ROA not after: Sun 05 Jul 2026 13:00:30 +0000 asID: 397388 IP address blocks: 140.228.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:6a:aa:73:07:d8:42:95:ac:96:cc:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e4e9332-b3fa-4993-b1e0-b3204976405f Validity Not Before: Apr 6 13:00:30 2026 GMT Not After : Jul 5 13:00:30 2026 GMT Subject: CN=e48d80e5-0fe7-4bd4-aac7-41fb8352bf65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:4d:ad:12:ad:61:6f:c4:ac:ac:0d:d4:dd: 56:00:72:d3:a5:9c:db:35:e9:4a:da:19:4f:c6:7b: 03:d5:51:01:5a:09:4f:25:e4:cc:c0:b7:7a:55:b7: 6f:0b:20:c6:56:de:c8:34:23:d2:7d:74:fc:70:34: c0:09:9d:ae:be:f5:a3:f0:05:a5:67:61:a4:1f:d4: 1e:80:f7:d3:5f:27:ec:16:12:73:1f:17:61:81:e4: 01:26:5f:8e:46:2f:25:60:66:11:fa:d1:27:9e:8c: fa:53:c0:6e:d1:4c:2b:a0:a6:55:69:a3:22:28:13: 2b:fd:06:c1:d6:1a:08:af:d5:f0:f1:59:bb:4e:e6: e0:f1:0d:ac:a1:ef:65:16:04:2e:fc:2d:26:4d:e4: ef:d3:3f:a5:0f:fb:b6:e5:7d:1e:1f:cf:25:3f:71: fb:36:a4:97:30:1d:8a:98:39:e8:43:a1:5e:73:a8: 2b:6f:82:5b:cb:8f:e2:85:92:9a:44:f7:be:64:33: 31:47:54:c5:01:0f:df:0e:3f:37:f9:72:62:74:0b: 91:ac:6a:67:34:42:a3:05:5b:6d:76:1d:16:96:26: f4:3b:ef:fa:bc:be:af:46:38:3d:35:2d:6f:dd:cd: a1:6c:c5:59:f3:1a:4f:53:4a:9b:6e:74:12:ce:37: 0c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3D:06:A6:B9:CD:94:F5:44:4E:64:7E:84:12:14:7B:D8:EC:BC:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/971c721e-2148-3a91-aae8-d902249a3b48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f/2e4e9332-b3fa-4993-b1e0-b3204976405f.crl X509v3 Authority Key Identifier: keyid:41:A4:3C:BD:61:0C:4B:19:7C:37:1C:1F:E4:82:A3:DE:78:0E:18:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2e4e9332-b3fa-4993-b1e0-b3204976405f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:34:9c:7b:b8:05:6f:73:2d:c5:78:36:ee:26:ec:d5:cc:e9: 8d:03:1a:9a:ca:57:34:ed:51:d5:82:3a:b9:69:49:af:0a:f4: ff:99:0f:e3:43:02:88:bf:3a:5c:f8:83:6b:d9:1e:47:7c:a3: 95:75:89:37:45:c9:ee:e3:6a:1e:54:cf:ab:12:4d:f8:5e:cf: 81:8b:15:ff:f2:6e:98:ab:4b:ee:8c:ff:46:3e:ce:7f:12:9e: 3d:27:77:e6:4a:b3:f0:bd:74:14:fd:c0:0f:0e:68:0d:53:83: a6:b4:1f:3e:77:51:a4:d3:3d:a3:f8:fb:47:42:e4:14:2d:a5: 58:a2:95:3e:c2:e4:79:26:04:86:15:9c:95:f1:4d:1a:9b:3d: 7a:56:e7:74:b1:82:82:8e:11:a6:cc:9b:8c:d3:16:93:64:57: 67:fb:0a:5f:3f:53:3d:4c:29:63:92:00:ba:22:67:73:0d:f0: 1f:f4:28:78:f8:9a:cf:46:2d:f5:79:d9:f6:20:b6:6c:5e:06: f5:b5:2d:34:9e:a2:07:e2:49:04:14:f6:b2:76:46:49:63:39: 86:6e:ae:6c:dd:b2:42:44:4f:1f:96:31:c4:67:72:64:d7:bd: ad:c4:1e:45:6f:2c:15:e4:94:ca:76:7b:29:67:93:ca:35:22: 3d:51:93:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1qqnMH2EKVrJbMuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU0ZTkzMzItYjNmYS00OTkzLWIxZTAtYjMyMDQ5NzY0 MDVmMB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk ZTQ4ZDgwZTUtMGZlNy00YmQ0LWFhYzctNDFmYjgzNTJiZjY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHRNrRKtYW/ErKwN1N1WAHLTpZzbNelK2hlP xnsD1VEBWglPJeTMwLd6VbdvCyDGVt7INCPSfXT8cDTACZ2uvvWj8AWlZ2GkH9Qe gPfTXyfsFhJzHxdhgeQBJl+ORi8lYGYR+tEnnoz6U8Bu0UwroKZVaaMiKBMr/QbB 1hoIr9Xw8Vm7Tubg8Q2soe9lFgQu/C0mTeTv0z+lD/u25X0eH88lP3H7NqSXMB2K mDnoQ6Fec6grb4Jby4/ihZKaRPe+ZDMxR1TFAQ/fDj83+XJidAuRrGpnNEKjBVtt dh0Wlib0O+/6vL6vRjg9NS1v3c2hbMVZ8xpPU0qbbnQSzjcM0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMg9Bqa5zZT1RE5kfoQSFHvY7LzQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRl OTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIwNDk3NjQwNWYvOTcxYzcyMWUtMjE0OC0z YTkxLWFhZTgtZDkwMjI0OWEzYjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmU0ZTkzMzItYjNmYS00OTkzLWIx ZTAtYjMyMDQ5NzY0MDVmLzJlNGU5MzMyLWIzZmEtNDk5My1iMWUwLWIzMjA0OTc2 NDA1Zi5jcmwwHwYDVR0jBBgwFoAUQaQ8vWEMSxl8Nxwf5IKj3ngOGKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8yZTRlOTMzMi1iM2ZhLTQ5OTMtYjFlMC1iMzIw NDk3NjQwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjORwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw0nHu4BW9zLcV4Nu4m7NXM6Y0DGprKVzTtUdWCOrlpSa8K9P+ZD+ND Aoi/Olz4g2vZHkd8o5V1iTdFye7jah5Uz6sSTfhez4GLFf/ybpirS+6M/0Y+zn8S nj0nd+ZKs/C9dBT9wA8OaA1Tg6a0Hz53UaTTPaP4+0dC5BQtpViilT7C5HkmBIYV nJXxTRqbPXpW53SxgoKOEabMm4zTFpNkV2f7Cl8/Uz1MKWOSALoiZ3MN8B/0KHj4 ms9GLfV52fYgtmxeBvW1LTSeogfiSQQU9rJ2RkljOYZurmzdskJETx+WMcRncmTX va3EHkVvLBXklMp2eylnk8o1Ij1RkwU= -----END CERTIFICATE-----Generated at Thu Apr 9 02:27:45 2026 by rpki-client