$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/140a2e20-96fa-3776-a467-07ffb57fdd09.roa File: 140a2e20-96fa-3776-a467-07ffb57fdd09.roa (raw, json) Hash identifier: /Hm/hGlzkGhd6I4mj2oKCqPEtW0kTfFm61cq3M2JIK0= Subject key identifier: 72:33:CF:D8:51:7B:1E:C2:8B:D5:D8:4F:79:A7:E7:72:31:AF:28:F7 Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F4328584D39CF7629EA65F6E784CEED80 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/140a2e20-96fa-3776-a467-07ffb57fdd09.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 401944 IP address blocks: 66.187.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:76:29:ea:65:f6:e7:84:ce:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=8bfaa9ec-f2f3-495e-b7a6-adc844934dd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c6:c0:f5:c0:73:16:6a:be:13:c1:bb:42:ed: f3:51:aa:28:dd:13:f5:18:9e:27:00:c5:3e:79:e7: f3:0d:eb:a1:70:9e:8b:8d:a1:45:26:ab:f0:bb:3c: d5:b9:84:4d:01:6d:70:f5:14:18:19:e8:44:2c:92: 72:c3:0c:b9:6f:93:c6:08:67:15:a4:63:47:52:37: 29:91:01:96:32:26:3c:cd:e1:80:2d:7d:c4:0c:a1: 7c:01:2b:7a:5c:12:0d:dc:65:bc:88:0e:53:43:51: a5:47:dc:02:a1:58:d8:81:7e:3c:bb:53:1a:b1:f9: 76:54:e3:46:33:86:fe:19:51:29:c1:24:cb:03:00: 77:9c:a4:c0:98:af:cc:a8:c0:c5:b8:8b:c9:11:3c: 62:70:63:79:04:6f:f4:11:48:92:75:34:f9:74:15: 18:91:71:cb:6e:20:13:10:92:9b:fa:dd:a9:8c:52: 6c:32:b2:a1:ce:b7:03:7e:39:2f:6d:40:64:73:77: df:cc:ed:0c:33:b7:55:b4:52:b6:9c:90:6d:41:0b: 84:7b:76:9a:a0:99:61:57:54:c3:3c:b8:59:5e:3c: 35:13:2f:c0:4f:4a:d2:fd:91:b3:42:ad:20:23:e5: 87:ce:e4:cc:33:b6:ad:ec:ac:16:e8:d3:53:34:a3: bd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:33:CF:D8:51:7B:1E:C2:8B:D5:D8:4F:79:A7:E7:72:31:AF:28:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/140a2e20-96fa-3776-a467-07ffb57fdd09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 66.187.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:45:c9:4d:13:fc:76:27:48:b0:67:1a:fa:25:82:e4:90:ca: ca:0b:ce:1a:f2:38:c5:11:1d:18:a6:c4:56:b8:1b:87:ee:06: 4e:a7:81:b1:f5:a1:a8:d2:2d:cc:13:92:c5:f7:e6:71:1c:6a: f6:d9:a3:b9:aa:72:63:04:f4:5b:27:1d:1e:06:f9:ef:05:d3: f4:5b:29:fb:28:a0:b3:46:0d:2d:92:77:4b:09:b7:3b:6f:a2: 8b:ce:64:d9:1b:0a:a3:fe:8f:e2:7c:fb:92:d7:90:dd:92:6e: 93:71:ff:af:d0:93:c9:ee:7f:5f:81:52:23:ee:1a:66:1b:0f: f7:43:47:14:83:b1:fc:2c:ce:35:9c:77:87:9c:b8:d5:95:62: d0:60:fa:eb:d4:b9:98:46:31:05:8c:65:17:60:b1:4e:80:7b: f5:f4:99:98:fd:8d:f4:80:bf:79:bd:11:ea:db:57:2c:ca:c5: c7:f3:ab:09:20:67:3b:78:f5:f1:18:08:8e:f0:27:dd:e0:6f: 88:eb:0f:0a:9a:f9:1c:67:9e:59:3e:ef:ac:2b:d1:1b:8f:21: a3:da:c0:58:5f:f6:10:70:70:a4:01:b2:ba:80:0c:d2:94:18: 53:f1:6a:30:c3:89:c1:28:77:a2:1b:76:38:c9:07:82:3b:56: 87:d8:33:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z3Yp6mX254TO7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk OGJmYWE5ZWMtZjJmMy00OTVlLWI3YTYtYWRjODQ0OTM0ZGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78bA9cBzFmq+E8G7Qu3zUaoo3RP1GJ4nAMU+ eefzDeuhcJ6LjaFFJqvwuzzVuYRNAW1w9RQYGehELJJywwy5b5PGCGcVpGNHUjcp kQGWMiY8zeGALX3EDKF8ASt6XBIN3GW8iA5TQ1GlR9wCoVjYgX48u1Masfl2VONG M4b+GVEpwSTLAwB3nKTAmK/MqMDFuIvJETxicGN5BG/0EUiSdTT5dBUYkXHLbiAT EJKb+t2pjFJsMrKhzrcDfjkvbUBkc3ffzO0MM7dVtFK2nJBtQQuEe3aaoJlhV1TD PLhZXjw1Ey/AT0rS/ZGzQq0gI+WHzuTMM7at7KwW6NNTNKO9EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHIzz9hRex7Ci9XYT3mn53Ixryj3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvMTQwYTJlMjAtOTZmYS0z Nzc2LWE0NjctMDdmZmI1N2ZkZDA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBFyU0T/HYnSLBnGvolguSQysoLzhryOMURHRimxFa4G4fuBk6ngbH1 oajSLcwTksX35nEcavbZo7mqcmME9FsnHR4G+e8F0/RbKfsooLNGDS2Sd0sJtztv oovOZNkbCqP+j+J8+5LXkN2SbpNx/6/Qk8nuf1+BUiPuGmYbD/dDRxSDsfwszjWc d4ecuNWVYtBg+uvUuZhGMQWMZRdgsU6Ae/X0mZj9jfSAv3m9EerbVyzKxcfzqwkg Zzt49fEYCI7wJ93gb4jrDwqa+Rxnnlk+76wr0RuPIaPawFhf9hBwcKQBsrqADNKU GFPxajDDicEod6IbdjjJB4I7VofYM2A= -----END CERTIFICATE-----Generated at Thu Mar 26 04:44:13 2026 by rpki-client