$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa File: dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa (raw, json) Hash identifier: NwHpzh7/ihsjWP8RMpbEMs6BBGEvHMB0JHDI1nO4fQo= Subject key identifier: 08:9B:45:94:42:03:B0:BA:0B:E5:63:F6:FF:86:A3:1B:B3:1A:CC:D2 Certificate issuer: /CN=825ee845-e910-434b-9fb6-239bbc2774f6 Certificate serial: 010D0C9F4328584D44FA3AAD486152CD5BBC59A0 Authority key identifier: 1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 20130 IP address blocks: 140.192.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 26 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:3a:ad:48:61:52:cd:5b:bc:59:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825ee845-e910-434b-9fb6-239bbc2774f6 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=5f72ad9d-7a32-49b8-bae8-b3eeb8528e1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:b6:26:01:59:f7:87:6a:91:5e:5f:10:de: 31:f8:c8:21:48:8c:85:17:b4:09:3a:d6:c9:0f:5e: 45:29:51:d9:71:2a:b3:7c:30:a2:7c:58:52:e1:f7: f0:ae:1e:cc:08:f7:26:fe:80:97:d6:9c:8b:ee:35: ce:a9:f8:aa:0c:be:33:ff:46:5d:d2:80:29:e8:b5: d4:d1:fa:eb:e0:64:1e:8e:85:a6:2f:c7:66:46:94: 10:17:6d:60:f1:d3:bd:61:26:3f:05:14:9f:a7:27: 3b:c7:48:79:02:c7:67:a4:d3:1c:95:72:6a:ab:d3: 23:3c:fa:37:9c:6b:1c:0e:8c:ac:24:91:05:b7:24: da:4e:ca:7a:e7:7b:01:6b:0c:3d:22:eb:ae:35:14: 0f:f1:b2:b2:ab:b5:a5:fc:9f:d8:88:3b:e4:35:e7: aa:13:65:e1:7b:31:d2:86:69:10:63:ff:a3:7c:c9: a1:93:07:ea:89:ba:56:45:08:d8:df:b4:9c:f0:48: 5e:db:46:79:02:b4:7e:d2:53:84:63:d5:a5:4c:7f: 19:45:7b:43:87:95:04:30:72:b5:9f:8d:44:71:49: d3:7f:9d:bf:0e:49:ad:08:73:64:d7:7a:42:0a:a3: 08:5f:c9:bc:dc:0b:a3:86:9c:4c:12:24:cf:22:77: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9B:45:94:42:03:B0:BA:0B:E5:63:F6:FF:86:A3:1B:B3:1A:CC:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/dd9388eb-93e3-3f6e-b57c-9ee6f9aff8b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6/825ee845-e910-434b-9fb6-239bbc2774f6.crl X509v3 Authority Key Identifier: keyid:1B:4E:F9:6F:A3:67:CD:DA:19:D7:FE:34:2A:24:AF:1F:5A:FE:6E:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/825ee845-e910-434b-9fb6-239bbc2774f6.cer sbgp-ipAddrBlock: critical IPv4: 140.192.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6c:38:57:1e:6d:38:c6:67:ca:00:be:be:8d:77:1b:3e:61: f8:f4:eb:d5:72:e2:2b:7b:db:bf:d4:c5:51:c9:85:f6:4e:30: eb:a8:9a:c2:0d:9a:83:59:7c:f2:13:13:ad:7d:e4:a5:e6:c7: ff:82:0f:02:e0:98:1b:af:9e:7f:bc:5e:9c:97:ce:4c:5e:6e: a0:e1:a3:a5:73:50:a9:f6:c5:11:0f:fa:c8:7c:f2:66:16:9b: e9:f1:af:a1:45:23:e5:fb:fb:39:4b:40:76:e1:32:19:5c:1b: cf:25:4d:13:89:2d:e4:76:dd:57:61:fb:e4:44:25:50:19:fc: 72:c9:58:b6:82:71:68:0f:92:7e:09:a6:62:00:b6:f4:51:81: e8:fb:4d:73:25:5b:72:6e:58:12:23:26:42:5b:96:e5:ed:0d: 2c:88:e3:13:5f:61:ec:7f:01:90:67:d1:36:7c:d7:6d:94:78: 39:3b:5e:f9:cc:44:b5:b7:ae:97:80:14:23:c0:a1:03:ec:d3: ba:fc:c9:30:4d:13:9a:d6:1e:24:4c:a6:65:86:3b:f1:6f:0a: 59:93:24:af:7c:a0:df:62:ba:c6:ba:d7:fe:1c:8c:96:ea:ce: 39:13:2f:f3:8c:35:d0:d1:06:3a:f0:a7:ba:ef:d8:b5:0b:f4: bd:8b:d2:db -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE1E+jqtSGFSzVu8WaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODI1ZWU4NDUtZTkxMC00MzRiLTlmYjYtMjM5YmJjMjc3 NGY2MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NWY3MmFkOWQtN2EzMi00OWI4LWJhZTgtYjNlZWI4NTI4ZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSa2JgFZ94dqkV5fEN4x+MghSIyFF7QJOtbJ D15FKVHZcSqzfDCifFhS4ffwrh7MCPcm/oCX1pyL7jXOqfiqDL4z/0Zd0oAp6LXU 0frr4GQejoWmL8dmRpQQF21g8dO9YSY/BRSfpyc7x0h5AsdnpNMclXJqq9MjPPo3 nGscDoysJJEFtyTaTsp653sBaww9IuuuNRQP8bKyq7Wl/J/YiDvkNeeqE2XhezHS hmkQY/+jfMmhkwfqibpWRQjY37Sc8Ehe20Z5ArR+0lOEY9WlTH8ZRXtDh5UEMHK1 n41EcUnTf52/DkmtCHNk13pCCqMIX8m83AujhpxMEiTPInePdwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAibRZRCA7C6C+Vj9v+GoxuzGszSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjVl ZTg0NS1lOTEwLTQzNGItOWZiNi0yMzliYmMyNzc0ZjYvZGQ5Mzg4ZWItOTNlMy0z ZjZlLWI1N2MtOWVlNmY5YWZmOGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI1ZWU4NDUtZTkxMC00MzRiLTlm YjYtMjM5YmJjMjc3NGY2LzgyNWVlODQ1LWU5MTAtNDM0Yi05ZmI2LTIzOWJiYzI3 NzRmNi5jcmwwHwYDVR0jBBgwFoAUG075b6NnzdoZ1/40KiSvH1r+bmwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS84MjVlZTg0NS1lOTEwLTQzNGItOWZiNi0yMzli YmMyNzc0ZjYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjMAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAmWw4Vx5tOMZnygC+vo13Gz5h+PTr1XLiK3vbv9TFUcmF9k4w66iawg2a g1l88hMTrX3kpebH/4IPAuCYG6+ef7xenJfOTF5uoOGjpXNQqfbFEQ/6yHzyZhab 6fGvoUUj5fv7OUtAduEyGVwbzyVNE4kt5HbdV2H75EQlUBn8cslYtoJxaA+Sfgmm YgC29FGB6PtNcyVbcm5YEiMmQluW5e0NLIjjE19h7H8BkGfRNnzXbZR4OTte+cxE tbeul4AUI8ChA+zTuvzJME0TmtYeJEymZYY78W8KWZMkr3yg32K6xrrX/hyMlurO ORMv84w10NEGOvCnuu/YtQv0vYvS2w== -----END CERTIFICATE-----Generated at Wed Mar 25 00:39:34 2026 by rpki-client