$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa File: cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa (raw, json) Hash identifier: MX0syEXxVQ+GDdNZXsJcieRySHhsjDUSIOw7CtC77Dw= Subject key identifier: AF:D7:7E:70:76:63:3C:9F:A8:0B:43:D2:DF:60:D1:62:A7:4F:0B:42 Certificate issuer: /CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Certificate serial: 010D0C9F4328584D204E309447A06EAAFE8C0880 Authority key identifier: E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa Signing time: Tue 10 Mar 2026 21:44:59 +0000 ROA not before: Tue 10 Mar 2026 21:44:59 +0000 ROA not after: Mon 08 Jun 2026 21:44:59 +0000 asID: 20014 IP address blocks: 140.235.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:4e:30:94:47:a0:6e:aa:fe:8c:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cca3c9b-1147-4e91-8480-37ed1becb13e Validity Not Before: Mar 10 21:44:59 2026 GMT Not After : Jun 8 21:44:59 2026 GMT Subject: CN=6a4972aa-efc1-422d-9bc6-31db659c25f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f4:1a:5e:ed:d6:30:11:00:6d:30:75:ad:c5: 18:35:4d:48:17:18:4c:47:1f:5c:24:f1:cd:a8:ca: df:77:89:b2:a6:e2:fa:5b:7a:03:5c:eb:c9:bc:b4: f4:30:b9:cd:35:de:a1:80:63:d8:90:fe:d6:c6:2e: 7b:0e:8e:62:10:ba:a6:96:ca:c2:3c:6e:b1:e9:b8: e5:5b:cc:ce:41:29:99:ed:7b:0f:f6:29:31:49:f6: 24:24:72:54:fa:05:b1:ef:25:11:10:13:b9:63:c5: 1b:1a:1a:b6:34:fa:e8:89:98:c9:31:c3:d8:93:e3: 12:97:ce:43:b5:0d:6f:7e:11:2f:cd:b5:44:91:2d: 11:98:4e:9c:d8:30:6d:4e:87:ab:5a:0d:6d:cc:48: f4:b5:7c:14:ab:fe:db:fc:c9:a6:99:6d:e4:98:08: b9:c4:92:3e:87:11:9d:09:fc:96:65:28:ae:c7:40: 3d:1f:ca:3b:0d:8e:18:f8:05:18:d4:bb:a4:d5:29: 06:41:ad:b9:8b:dd:07:5e:0f:ba:09:e8:36:16:99: 35:38:01:13:54:96:19:e3:0f:65:7e:58:7d:6e:4b: b2:03:de:22:83:ab:4b:5b:bc:30:75:bb:ad:79:ae: af:b0:11:76:76:99:52:55:89:0e:bb:91:92:d5:b4: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D7:7E:70:76:63:3C:9F:A8:0B:43:D2:DF:60:D1:62:A7:4F:0B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/cca3d96b-3f8b-3542-807d-2f334bfa86b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e/1cca3c9b-1147-4e91-8480-37ed1becb13e.crl X509v3 Authority Key Identifier: keyid:E5:94:82:D9:C4:5D:CB:E1:04:02:F2:BF:BF:5A:61:A7:8C:A2:2E:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1cca3c9b-1147-4e91-8480-37ed1becb13e.cer sbgp-ipAddrBlock: critical IPv4: 140.235.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c5:7b:47:7d:f2:d0:4c:75:3b:d7:e5:f6:38:d3:cb:d2:2b: 26:da:d0:7f:7d:d1:51:ea:f8:25:40:de:fa:04:5e:0c:a2:7e: 9f:13:31:04:bf:37:a5:41:c6:1e:a4:bb:7c:7f:ea:65:e9:50: b9:bc:17:76:25:ec:45:b0:99:88:e2:2f:15:95:0b:9c:b3:3f: 23:f9:ed:9d:90:a9:7a:28:b3:88:ea:73:70:4d:af:78:5b:dd: d5:76:43:b8:c3:04:0e:2a:42:8e:85:bc:5e:b0:35:bb:b1:01: 71:70:22:91:97:fb:f4:51:0d:b4:28:26:8d:e3:8f:bb:71:27: 18:87:3f:a6:01:83:70:7c:43:f2:1a:12:eb:d2:5e:1c:14:05: b6:ba:56:ea:20:df:ba:f3:88:13:bc:b3:4b:a9:24:78:b8:61: df:ac:e5:69:9b:45:dc:0c:cb:5c:5b:d8:8c:d6:ab:fc:86:45: 84:e8:d7:ae:12:91:f4:8c:4b:36:92:d4:7c:ad:e4:e1:71:73: 99:35:1b:4c:0f:28:36:10:5a:f9:a0:7e:e0:f7:77:48:ec:fd: de:ba:77:2d:94:71:b9:1f:89:7c:0c:0f:d6:59:bf:17:07:15: db:f1:cb:07:c0:4f:9e:12:7f:e7:86:75:24:4e:c4:5e:63:92: cc:1a:64:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gTjCUR6Buqv6MCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjYTNjOWItMTE0Ny00ZTkxLTg0ODAtMzdlZDFiZWNi MTNlMB4XDTI2MDMxMDIxNDQ1OVoXDTI2MDYwODIxNDQ1OVowLzEtMCsGA1UEAxMk NmE0OTcyYWEtZWZjMS00MjJkLTliYzYtMzFkYjY1OWMyNWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvQaXu3WMBEAbTB1rcUYNU1IFxhMRx9cJPHN qMrfd4mypuL6W3oDXOvJvLT0MLnNNd6hgGPYkP7Wxi57Do5iELqmlsrCPG6x6bjl W8zOQSmZ7XsP9ikxSfYkJHJU+gWx7yUREBO5Y8UbGhq2NProiZjJMcPYk+MSl85D tQ1vfhEvzbVEkS0RmE6c2DBtToerWg1tzEj0tXwUq/7b/MmmmW3kmAi5xJI+hxGd CfyWZSiux0A9H8o7DY4Y+AUY1Luk1SkGQa25i90HXg+6Ceg2Fpk1OAETVJYZ4w9l flh9bkuyA94ig6tLW7wwdbutea6vsBF2dplSVYkOu5GS1bT/GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/XfnB2YzyfqAtD0t9g0WKnTwtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xY2Nh M2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2VkMWJlY2IxM2UvY2NhM2Q5NmItM2Y4Yi0z NTQyLTgwN2QtMmYzMzRiZmE4NmI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWNjYTNjOWItMTE0Ny00ZTkxLTg0 ODAtMzdlZDFiZWNiMTNlLzFjY2EzYzliLTExNDctNGU5MS04NDgwLTM3ZWQxYmVj YjEzZS5jcmwwHwYDVR0jBBgwFoAU5ZSC2cRdy+EEAvK/v1php4yiLqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xY2NhM2M5Yi0xMTQ3LTRlOTEtODQ4MC0zN2Vk MWJlY2IxM2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPFe0d98tBMdTvX5fY408vSKyba0H990VHq+CVA3voEXgyifp8TMQS/ N6VBxh6ku3x/6mXpULm8F3Yl7EWwmYjiLxWVC5yzPyP57Z2QqXoos4jqc3BNr3hb 3dV2Q7jDBA4qQo6FvF6wNbuxAXFwIpGX+/RRDbQoJo3jj7txJxiHP6YBg3B8Q/Ia EuvSXhwUBba6Vuog37rziBO8s0upJHi4Yd+s5WmbRdwMy1xb2IzWq/yGRYTo164S kfSMSzaS1Hyt5OFxc5k1G0wPKDYQWvmgfuD3d0js/d66dy2UcbkfiXwMD9ZZvxcH FdvxywfAT54Sf+eGdSROxF5jkswaZMc= -----END CERTIFICATE-----Generated at Fri Mar 27 05:18:53 2026 by rpki-client