$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa File: 158788ef-52cb-31cc-9ac3-50df5a8f9263.roa (raw, json) Hash identifier: v3/UApEYxAP5B/L0sE9f4W5ewzgkKyksCN434a/VsyE= Subject key identifier: 4C:C2:73:F8:4D:57:44:71:2B:DF:92:8E:D6:24:7C:D8:97:5D:2D:66 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584D20AF4719CA3990ED62BE3820 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 211440 IP address blocks: 140.235.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:47:19:ca:39:90:ed:62:be:38:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=9baffad6-c5d5-45b2-a45a-d06cb812bdbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7e:b3:75:1e:1c:8a:c1:aa:4a:63:6d:1a:6b: c2:5d:b1:10:1f:e0:03:d6:73:b5:b2:1e:7e:06:b3: 8f:e5:10:f6:7e:f4:9f:12:05:cd:26:1d:a8:78:11: e2:4f:f4:c6:7f:c5:3a:e8:bf:94:40:ee:85:1e:13: 9d:5d:79:56:3f:83:ec:1e:0e:37:c8:0b:9b:d5:f6: 72:5e:99:de:04:ec:d7:bd:84:6f:c1:2b:a2:9f:b1: de:8e:08:92:9c:3c:c1:6b:82:ff:ea:e8:8e:46:60: 35:fb:46:b3:d5:a4:83:e3:3d:e4:6d:ec:30:f8:ca: 4d:43:4c:2b:b3:c9:b0:bc:47:6e:61:3c:08:2b:a9: 5e:ce:cf:1f:1b:60:1a:a1:91:02:46:be:fd:ea:8c: a0:6a:93:af:f9:b3:68:6e:c1:cb:93:95:51:a5:be: 3d:86:17:89:dc:03:1d:e9:8b:f3:28:a4:2d:77:29: 08:98:10:e0:95:94:02:00:c7:a3:73:3c:04:e9:62: 32:f8:e9:01:be:b1:15:13:2e:db:72:8c:0e:96:62: dc:28:40:0d:b4:31:f4:a1:4f:a8:ae:63:91:51:e1: 94:89:e6:87:56:86:9a:a7:7d:49:1b:db:10:ba:47: f9:25:29:26:4a:f9:ce:df:c8:b6:b9:76:c3:1d:1f: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C2:73:F8:4D:57:44:71:2B:DF:92:8E:D6:24:7C:D8:97:5D:2D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/158788ef-52cb-31cc-9ac3-50df5a8f9263.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:bc:9b:25:ef:63:e6:4d:5c:f9:26:48:b2:09:83:ae:0a:5a: b7:55:39:1d:55:f8:cc:b5:6a:3f:3d:7f:eb:39:ed:c1:19:bd: 24:60:59:78:04:88:8f:9f:1c:5c:c7:02:af:af:f2:7f:99:39: f7:eb:28:fe:81:12:7d:00:e0:34:a3:b1:08:c7:b2:90:5f:6f: cd:50:d4:82:82:c6:ce:35:3c:88:82:1c:57:f6:a2:cf:34:bd: c3:5e:1d:83:a6:4d:b0:63:dd:80:0b:fe:1a:65:97:e2:ac:9e: 96:8c:0d:39:1c:20:4a:d9:b0:7d:59:65:25:d9:bd:7b:b4:77: 5b:6b:2e:a8:ab:b6:02:ef:aa:ba:99:64:a4:af:e5:5e:39:de: 12:46:63:88:4e:80:19:f0:2f:02:45:3e:5f:a5:38:8a:5a:d9: c4:73:80:cc:68:65:92:1c:ed:f3:e1:cd:65:8a:33:cc:53:87: 61:12:19:f7:97:76:bd:0e:9d:02:2f:49:f1:af:60:04:ee:a0: 45:04:47:c7:d0:ba:78:07:5c:08:2a:53:ed:d4:aa:0a:53:32: 5f:0a:d8:cb:8a:82:dc:92:ca:bf:ea:72:09:63:e6:59:b9:c6: 12:18:ff:ea:34:67:5b:63:f8:22:77:bf:71:3c:c5:4b:8c:aa: 77:2b:c8:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0cZyjmQ7WK+OCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk OWJhZmZhZDYtYzVkNS00NWIyLWE0NWEtZDA2Y2I4MTJiZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X6zdR4cisGqSmNtGmvCXbEQH+AD1nO1sh5+ BrOP5RD2fvSfEgXNJh2oeBHiT/TGf8U66L+UQO6FHhOdXXlWP4PsHg43yAub1fZy XpneBOzXvYRvwSuin7HejgiSnDzBa4L/6uiORmA1+0az1aSD4z3kbeww+MpNQ0wr s8mwvEduYTwIK6lezs8fG2AaoZECRr796oygapOv+bNobsHLk5VRpb49hheJ3AMd 6YvzKKQtdykImBDglZQCAMejczwE6WIy+OkBvrEVEy7bcowOlmLcKEANtDH0oU+o rmORUeGUieaHVoaap31JG9sQukf5JSkmSvnO38i2uXbDHR+KSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEzCc/hNV0RxK9+SjtYkfNiXXS1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvMTU4Nzg4ZWYtNTJjYi0z MWNjLTlhYzMtNTBkZjVhOGY5MjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHS8myXvY+ZNXPkmSLIJg64KWrdVOR1V+My1aj89f+s57cEZvSRgWXgE iI+fHFzHAq+v8n+ZOffrKP6BEn0A4DSjsQjHspBfb81Q1IKCxs41PIiCHFf2os80 vcNeHYOmTbBj3YAL/hpll+KsnpaMDTkcIErZsH1ZZSXZvXu0d1trLqirtgLvqrqZ ZKSv5V453hJGY4hOgBnwLwJFPl+lOIpa2cRzgMxoZZIc7fPhzWWKM8xTh2ESGfeX dr0OnQIvSfGvYATuoEUER8fQungHXAgqU+3UqgpTMl8K2MuKgtySyr/qcglj5lm5 xhIY/+o0Z1tj+CJ3v3E8xUuMqncryDE= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:38 2026 by rpki-client