$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1c1651f4-f91f-3dcc-8667-0a45dafef96e.roa File: 1c1651f4-f91f-3dcc-8667-0a45dafef96e.roa (raw, json) Hash identifier: pc2f6GKF2Ed/QGzgz3N06SgkjRbN3nr/wW0346InjT8= Subject key identifier: D5:E7:3E:62:9A:10:C7:A6:D8:F9:2B:76:40:7C:82:3A:43:34:EE:25 Certificate issuer: /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Certificate serial: 010D0C9F4328584D286D98A6696C753C48D00F80 Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1c1651f4-f91f-3dcc-8667-0a45dafef96e.roa Signing time: Fri 13 Mar 2026 19:34:44 +0000 ROA not before: Fri 13 Mar 2026 19:34:44 +0000 ROA not after: Thu 11 Jun 2026 19:34:44 +0000 asID: 19527 IP address blocks: 57.140.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:6d:98:a6:69:6c:75:3c:48:d0:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Validity Not Before: Mar 13 19:34:44 2026 GMT Not After : Jun 11 19:34:44 2026 GMT Subject: CN=6b4eca86-dd92-4bbb-bb55-dadb069ff363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:37:9b:45:ec:e9:e5:16:52:be:2e:a3:84: 44:d8:84:fa:ab:ff:2b:18:ab:ee:10:f6:2e:5c:0b: 86:a0:c9:21:79:8e:5b:75:aa:dd:7d:fc:c6:49:fc: 07:83:20:06:47:ab:31:9f:47:4d:99:fa:22:d7:2a: 8b:32:8d:38:75:cb:ba:5e:52:40:d8:67:ce:fe:60: f3:08:8b:a6:fd:9d:6a:43:d6:9d:38:3d:07:a5:1f: a0:a8:28:8d:f4:4a:30:fb:48:65:15:ea:08:31:81: 80:f7:45:66:d9:d2:0d:0f:d9:fa:59:4b:8e:69:99: 81:22:7e:6b:9c:3f:b6:4a:a0:d5:25:a1:65:a7:e7: 0e:3a:70:8c:44:0d:24:2a:b4:d5:bf:7c:ae:19:a0: 9d:ac:67:73:92:6f:02:95:fe:9b:7a:2c:f6:01:80: 2e:00:0b:71:c8:62:cb:54:54:19:b6:bc:ce:53:3c: 28:dc:23:64:09:2b:d2:95:d8:9b:18:df:65:4e:41: 22:0e:a0:6b:2e:fa:7f:31:7c:5d:a0:cd:d4:76:56: 47:50:41:df:e1:82:d5:29:5d:7f:3e:ae:ec:31:28: 75:31:34:d6:1f:4a:dc:77:15:aa:d3:81:66:cb:60: 67:54:b3:d7:73:12:08:71:ab:f2:f5:b9:b5:1a:18: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E7:3E:62:9A:10:C7:A6:D8:F9:2B:76:40:7C:82:3A:43:34:EE:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/1c1651f4-f91f-3dcc-8667-0a45dafef96e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl X509v3 Authority Key Identifier: keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer sbgp-ipAddrBlock: critical IPv4: 57.140.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:52:0b:c9:88:5b:06:6a:98:ec:8e:4d:03:29:44:cc:95:7d: 91:50:65:54:2b:89:3a:fc:7f:4f:b3:77:2a:70:a7:30:27:3d: 8d:8b:3f:5b:6d:00:a7:ea:06:54:f1:1b:ec:70:f2:5c:c1:a9: cf:35:0a:de:e5:b5:a3:22:d0:62:c1:90:a9:04:c9:1c:01:3d: ba:8d:87:41:01:26:6a:f6:09:f7:2d:1f:b6:c8:9a:b2:70:db: 57:00:d0:39:52:b2:45:2c:55:08:8f:54:ec:df:22:e3:80:bf: b5:bc:a2:c3:06:36:61:d0:e0:8d:68:a0:d8:3e:72:be:bd:41: d7:a3:eb:63:7d:cd:51:a0:16:12:15:87:34:43:12:f0:e3:79: 41:bf:14:fe:05:1f:de:72:5c:16:c6:d1:7c:4d:60:29:71:53: 7c:b5:92:ce:c0:66:88:de:47:b7:6d:60:05:a8:f2:fb:60:68: 6c:c9:c4:ba:ec:1a:5c:c2:8b:da:62:26:65:10:49:14:bb:fe: fa:5e:aa:09:5c:3d:4e:65:04:a6:26:d9:7c:01:fd:dc:e0:74: 68:6a:db:13:65:63:ea:90:e4:97:44:b8:a5:62:2d:b1:4d:62: f9:86:ba:42:96:9e:fc:9c:55:14:ee:34:07:1e:57:27:b9:c6: 97:23:8d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0obZimaWx1PEjQD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0 ODYyMB4XDTI2MDMxMzE5MzQ0NFoXDTI2MDYxMTE5MzQ0NFowLzEtMCsGA1UEAxMk NmI0ZWNhODYtZGQ5Mi00YmJiLWJiNTUtZGFkYjA2OWZmMzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzc3m0Xs6eUWUr4uo4RE2IT6q/8rGKvuEPYu XAuGoMkheY5bdardffzGSfwHgyAGR6sxn0dNmfoi1yqLMo04dcu6XlJA2GfO/mDz CIum/Z1qQ9adOD0HpR+gqCiN9Eow+0hlFeoIMYGA90Vm2dIND9n6WUuOaZmBIn5r nD+2SqDVJaFlp+cOOnCMRA0kKrTVv3yuGaCdrGdzkm8Clf6beiz2AYAuAAtxyGLL VFQZtrzOUzwo3CNkCSvSldibGN9lTkEiDqBrLvp/MXxdoM3UdlZHUEHf4YLVKV1/ Pq7sMSh1MTTWH0rcdxWq04Fmy2BnVLPXcxIIcavy9bm1GhjgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXnPmKaEMem2PkrdkB8gjpDNO4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYy OWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvMWMxNjUxZjQtZjkxZi0z ZGNjLTg2NjctMGE0NWRhZmVmOTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmMjlhMTYtZTdiMS00MGM4LTg3 YmMtMzRlMmM1NjI0ODYyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04N2JjLTM0ZTJjNTYy NDg2Mi5jcmwwHwYDVR0jBBgwFoAU2/qD/m2Wzcxs3joVtCCYnWPXtjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUy YzU2MjQ4NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAOYyrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdSC8mIWwZqmOyOTQMpRMyVfZFQZVQriTr8f0+zdypwpzAnPY2LP1tt AKfqBlTxG+xw8lzBqc81Ct7ltaMi0GLBkKkEyRwBPbqNh0EBJmr2CfctH7bImrJw 21cA0DlSskUsVQiPVOzfIuOAv7W8osMGNmHQ4I1ooNg+cr69Qdej62N9zVGgFhIV hzRDEvDjeUG/FP4FH95yXBbG0XxNYClxU3y1ks7AZojeR7dtYAWo8vtgaGzJxLrs GlzCi9piJmUQSRS7/vpeqglcPU5lBKYm2XwB/dzgdGhq2xNlY+qQ5JdEuKViLbFN YvmGukKWnvycVRTuNAceVye5xpcjja4= -----END CERTIFICATE-----Generated at Thu Mar 26 04:46:39 2026 by rpki-client