$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa File: 25dcf021-d643-33d2-b7c8-9a3520f1b453.roa (raw, json) Hash identifier: FdTWRwMHU5MnE2v2sS2oaMuTFd0ZrOg8bFZuuO54wlU= Subject key identifier: 4F:ED:45:04:7B:B0:7E:0C:BC:D1:D9:7D:09:85:87:E4:9D:82:A7:B6 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584D300A41E60D61C5864855F180 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 40623 IP address blocks: 140.208.0.0/18 maxlen: 18 140.208.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:41:e6:0d:61:c5:86:48:55:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=11922021-3e1a-490b-b0d9-817bb211b31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:58:3e:f4:67:4e:da:40:9f:30:70:94:56:02: ef:0b:26:bd:7e:ef:e8:2f:d3:22:ed:7f:4f:a0:49: 8c:4b:3b:6c:78:4e:21:cd:6c:aa:cc:ef:73:0a:64: 4e:40:3b:df:69:1b:9a:3d:20:fb:34:e4:31:f0:85: 55:96:c5:c9:e6:91:c4:9f:9b:09:0e:6f:b4:4e:9e: 40:25:04:ea:1c:55:05:3c:1f:a7:51:b3:0b:6e:f9: 90:aa:b8:99:d8:92:a5:20:7f:ae:0c:70:09:ee:5a: 39:ad:43:78:27:cf:b3:31:64:e1:8e:52:0f:84:50: 89:88:d6:1a:2b:93:4f:0e:25:d0:0a:96:39:85:fc: bd:57:14:c4:1b:e7:80:1b:f6:7a:60:da:5b:66:59: 58:d2:9f:42:4e:57:25:45:e6:78:f5:26:86:91:27: ce:9f:fc:7e:c6:4c:14:d0:19:f5:9b:f3:54:af:72: 53:cf:83:38:6c:a5:21:5d:8d:25:a8:6d:1e:cf:6e: 3f:3c:97:6d:c7:67:a5:a5:49:f1:ce:88:1e:a5:bb: f7:a2:e8:30:44:66:8e:01:4a:9f:8a:0b:1c:67:d2: b7:50:dd:9c:d2:6c:96:34:60:88:4c:e1:f6:ab:a9: 49:0b:a3:11:68:2c:6b:77:c1:68:b0:3e:e9:d2:6c: d5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:ED:45:04:7B:B0:7E:0C:BC:D1:D9:7D:09:85:87:E4:9D:82:A7:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.0.0/18 140.208.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:18:ca:d5:98:c5:0d:94:ee:a1:05:2a:84:f2:7f:05:2b:74: 61:49:c5:a0:75:fd:34:b7:4a:49:eb:d1:00:40:5e:31:7e:27: 3b:57:33:68:ee:d0:2a:de:a7:2b:70:a4:1e:5e:15:31:48:b1: 89:cd:ae:3e:da:a0:f6:7d:42:9f:c5:e8:f4:c2:fd:7b:42:e7: e1:9a:2d:04:85:a5:62:87:52:92:fc:a9:43:57:53:74:56:53: d9:99:51:c2:1e:5e:b1:b9:0e:94:62:af:84:29:6c:e4:5b:62: 8e:76:cd:75:d4:fd:c1:a9:b4:ee:11:2e:83:79:4e:ca:f4:71: 39:37:87:e1:12:9c:e7:3e:d3:9c:0d:12:b3:42:32:86:05:02: 98:2f:8a:a4:2f:63:ff:77:2b:1c:be:68:24:74:2a:d3:d7:03: 32:20:08:92:02:ef:82:45:3b:45:b6:d1:45:9d:2e:d4:d1:af: e4:c7:26:1a:5d:98:8c:ca:03:09:12:e4:71:d0:19:96:75:c1: 54:2b:93:ff:f9:e4:fb:cb:3e:1e:1f:0f:e0:51:4a:8c:27:44: d1:d8:32:45:83:5f:40:f3:62:b2:f3:2b:09:8b:b7:84:67:fe: 6d:b0:a9:e1:ae:a0:21:20:29:c3:c3:95:e1:7f:06:4b:82:9a: 1a:d7:77:a2 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0wCkHmDWHFhkhV8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MTE5MjIwMjEtM2UxYS00OTBiLWIwZDktODE3YmIyMTFiMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1g+9GdO2kCfMHCUVgLvCya9fu/oL9Mi7X9P oEmMSztseE4hzWyqzO9zCmROQDvfaRuaPSD7NOQx8IVVlsXJ5pHEn5sJDm+0Tp5A JQTqHFUFPB+nUbMLbvmQqriZ2JKlIH+uDHAJ7lo5rUN4J8+zMWThjlIPhFCJiNYa K5NPDiXQCpY5hfy9VxTEG+eAG/Z6YNpbZllY0p9CTlclReZ49SaGkSfOn/x+xkwU 0Bn1m/NUr3JTz4M4bKUhXY0lqG0ez24/PJdtx2elpUnxzogepbv3ougwRGaOAUqf igscZ9K3UN2c0myWNGCITOH2q6lJC6MRaCxrd8FosD7p0mzVtwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFE/tRQR7sH4MvNHZfQmFh+Sdgqe2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvMjVkY2YwMjEtZDY0My0z M2QyLWI3YzgtOWEzNTIwZjFiNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGjNAAAwQE jNCQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEYYytWYxQ2U7qEFKoTyfwUrdGFJxaB1/TS3Sknr0QBAXjF+ JztXM2ju0CrepytwpB5eFTFIsYnNrj7aoPZ9Qp/F6PTC/XtC5+GaLQSFpWKHUpL8 qUNXU3RWU9mZUcIeXrG5DpRir4QpbORbYo52zXXU/cGptO4RLoN5Tsr0cTk3h+ES nOc+05wNErNCMoYFApgviqQvY/93Kxy+aCR0KtPXAzIgCJIC74JFO0W20UWdLtTR r+THJhpdmIzKAwkS5HHQGZZ1wVQrk//55PvLPh4fD+BRSownRNHYMkWDX0DzYrLz KwmLt4Rn/m2wqeGuoCEgKcPDleF/BkuCmhrXd6I= -----END CERTIFICATE-----Generated at Sun Mar 22 09:58:21 2026 by rpki-client