$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa File: c7104701-4f2e-3aea-861b-63f63faf668f.roa (raw, json) Hash identifier: AUHdRzZaxGhQjNc/UdVud67DGnMYdF+Wr8nD0zDKbZM= Subject key identifier: 78:3D:76:52:75:5A:C7:9A:76:AF:10:5E:BF:7C:13:AD:01:E0:FC:D4 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D386A4654D24E802C723D7A00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 272122 IP address blocks: 140.174.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:46:54:d2:4e:80:2c:72:3d:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=3158f709-4331-4666-a222-bc57acd62871 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:96:0f:96:af:80:30:a0:56:82:8d:e9:0e: 29:1f:25:4d:01:b2:b0:77:41:cc:25:50:b3:67:06: 81:2a:41:82:d4:dd:95:31:3f:a4:b5:8b:ec:a8:4a: 56:c8:c5:97:42:56:cf:ff:88:02:91:2c:3e:37:b1: 04:5a:e9:40:55:e6:52:ed:ad:5d:ee:33:d0:bf:28: d2:6d:0f:50:52:3b:32:35:53:d3:e6:99:c8:82:89: 60:71:d2:dd:6d:dc:96:d5:b6:20:8f:07:19:27:4b: 65:de:78:f0:fa:68:9e:4e:67:18:28:d9:95:b4:34: 96:e0:7a:40:c9:63:92:8a:0a:7e:ac:2e:09:59:55: 0b:38:4f:54:67:16:09:6a:52:f9:56:40:e6:3d:d5: 2a:7a:97:98:cc:a8:cc:a9:53:ec:cf:33:c8:a1:85: a2:bb:b7:23:f8:e9:2f:b1:af:34:a7:30:f2:0b:07: 15:7b:ab:e9:c3:da:87:41:a9:f2:d1:21:9c:94:20: 5d:05:43:47:ea:4e:af:69:d6:1a:ed:6a:3d:30:50: 0a:78:23:d3:5d:cd:4b:74:fb:b2:c1:34:a8:ae:ad: f6:80:c1:53:73:1e:14:70:a5:73:22:ea:3e:aa:45: 30:31:26:3c:5c:df:cf:d4:ca:c3:a5:44:6c:72:cc: 68:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3D:76:52:75:5A:C7:9A:76:AF:10:5E:BF:7C:13:AD:01:E0:FC:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/c7104701-4f2e-3aea-861b-63f63faf668f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:f2:a1:a6:68:72:3c:09:d0:05:b0:40:dd:74:6a:d4:21:04: ac:00:11:b4:bd:4f:9e:aa:29:f9:51:91:39:41:7d:3f:7f:b4: 47:6e:f9:3e:f6:bb:23:55:f7:70:01:e8:e8:ec:ff:31:04:03: ee:3a:3f:4f:46:7a:73:98:00:42:fa:4d:b0:f7:3d:a2:21:2e: 47:71:ce:8f:e2:c8:e1:87:c9:c1:18:5c:33:58:bc:d9:70:f9: e9:87:af:74:26:f8:c7:20:d2:0f:7b:93:d3:8f:b0:2a:ea:71: b4:e0:84:df:0d:6a:5e:db:2f:26:c1:72:15:ea:5c:56:47:e2: 2e:c5:38:15:e1:32:e3:5d:62:48:8b:3a:72:c8:8f:ed:34:6b: a5:da:31:c1:b7:b7:32:ac:ea:3e:a5:7e:58:04:1f:17:8f:0b: 5c:0b:26:b1:1e:0b:f9:aa:e3:d5:4b:9b:e0:30:f9:c7:6d:b8: 93:20:d6:89:4d:f9:36:79:5a:ab:88:64:b0:9a:3c:b8:17:d4: 3f:c6:00:50:9b:9a:91:02:23:84:44:1f:02:7f:99:63:20:df: 80:41:30:fc:4d:54:6e:68:29:5a:2e:f2:24:12:9d:76:15:20: 03:f7:f2:89:eb:a2:95:c5:83:df:b6:d0:ef:5a:48:24:a3:69: 5b:2c:76:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akZU0k6ALHI9egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MzE1OGY3MDktNDMzMS00NjY2LWEyMjItYmM1N2FjZDYyODcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LaWD5avgDCgVoKN6Q4pHyVNAbKwd0HMJVCz ZwaBKkGC1N2VMT+ktYvsqEpWyMWXQlbP/4gCkSw+N7EEWulAVeZS7a1d7jPQvyjS bQ9QUjsyNVPT5pnIgolgcdLdbdyW1bYgjwcZJ0tl3njw+mieTmcYKNmVtDSW4HpA yWOSigp+rC4JWVULOE9UZxYJalL5VkDmPdUqepeYzKjMqVPszzPIoYWiu7cj+Okv sa80pzDyCwcVe6vpw9qHQany0SGclCBdBUNH6k6vadYa7Wo9MFAKeCPTXc1LdPuy wTSorq32gMFTcx4UcKVzIuo+qkUwMSY8XN/P1MrDpURscsxoAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHg9dlJ1Wseadq8QXr98E60B4PzUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYzcxMDQ3MDEtNGYyZS0z YWVhLTg2MWItNjNmNjNmYWY2NjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjK4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDyoaZocjwJ0AWwQN10atQhBKwAEbS9T56qKflRkTlBfT9/tEdu+T72 uyNV93AB6Ojs/zEEA+46P09GenOYAEL6TbD3PaIhLkdxzo/iyOGHycEYXDNYvNlw +emHr3Qm+Mcg0g97k9OPsCrqcbTghN8Nal7bLybBchXqXFZH4i7FOBXhMuNdYkiL OnLIj+00a6XaMcG3tzKs6j6lflgEHxePC1wLJrEeC/mq49VLm+Aw+cdtuJMg1olN +TZ5WquIZLCaPLgX1D/GAFCbmpECI4REHwJ/mWMg34BBMPxNVG5oKVou8iQSnXYV IAP38onropXFg9+20O9aSCSjaVssdts= -----END CERTIFICATE-----Generated at Thu Mar 26 07:53:58 2026 by rpki-client