$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa File: 31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa (raw, json) Hash identifier: zP+N5R9BTqGuJ6kpkyKzVNl4sfB3QySs2z15wh9Jb4I= Subject key identifier: D3:F9:0C:DD:91:C0:38:32:DB:C3:E3:73:8E:82:06:2A:93:A6:F4:D5 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F4328584D300A5B8FBF7FF23E5EA59500 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27370 IP address blocks: 140.241.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5b:8f:bf:7f:f2:3e:5e:a5:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=3e1b33e4-d186-4476-92c4-a1058e5c825d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c5:72:05:00:39:3f:7d:65:83:c1:d8:a4:31: 0a:47:88:57:d2:d7:b5:e5:97:a4:f8:3f:d6:95:a3: 2c:90:98:36:dc:40:64:39:32:33:ed:d5:6c:3b:5c: 2d:cb:49:c6:c7:5e:ba:4a:f6:ef:0b:87:01:d4:7e: a8:86:75:6a:14:0c:e9:05:40:dc:c0:6b:78:b0:4e: 96:46:6e:85:08:56:83:39:43:5f:8b:3c:2a:9e:b1: 4b:85:68:18:8e:99:45:4c:5b:40:0e:73:33:8d:6b: 75:ad:7d:c3:f8:ea:6d:0d:9c:73:20:7b:12:7f:57: f0:4a:71:b5:a5:39:21:e6:c0:bf:b1:ce:98:94:fa: bc:8e:27:59:ea:7e:58:65:0a:09:96:d9:18:07:2e: 58:92:20:90:79:ea:5e:e8:b5:ee:46:b5:a5:82:00: 07:d4:e3:a1:03:77:94:82:5e:69:4d:76:04:8b:90: 6b:55:73:06:89:48:23:44:a2:9c:f7:a5:bd:8e:c5: 0b:c8:6c:23:82:d7:e8:09:c2:35:8d:59:98:b0:6d: 8b:ec:49:4d:21:8b:cb:7b:fa:79:65:11:aa:23:ae: 58:02:41:6c:4a:c1:26:79:e9:dd:9a:8b:de:6b:0a: fe:9b:81:40:ea:28:de:dc:33:e1:4d:ce:b9:2d:07: 49:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F9:0C:DD:91:C0:38:32:DB:C3:E3:73:8E:82:06:2A:93:A6:F4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/31abc324-39c0-35e7-a764-f0e2dc1ea1e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:23:fc:1e:51:08:f7:cf:c6:20:3e:d6:ad:ff:d8:81:b5:10: cb:31:98:25:2b:fa:84:ce:13:ee:94:de:9e:ff:c6:f6:26:c5: 41:83:c1:78:38:6c:a5:49:71:0e:92:c7:19:7a:70:2b:7f:54: 91:2b:7f:b6:af:3f:2e:e3:19:68:7e:86:53:bd:a0:f7:01:84: ed:d3:cf:05:d3:89:ac:b0:79:a7:41:e8:80:bb:5f:13:f3:52: bd:42:99:fb:69:6f:eb:6a:0b:de:f8:6c:a2:18:a0:e3:d7:86: 7b:2e:24:f2:e0:82:a9:e0:ce:9e:78:e8:30:4b:98:28:4c:71: 3f:b4:38:6d:20:e3:bb:41:1f:90:46:ed:e0:20:59:c2:b6:91: 98:d4:68:a4:bd:86:51:00:ac:e7:2d:12:6a:6c:8e:22:e5:55: 8d:ed:65:b2:87:73:06:54:a2:30:9c:d8:28:a6:8f:94:11:e6: 29:79:9e:f6:0c:5f:2c:ea:c8:ca:3c:71:dd:78:94:e6:df:b6: ff:47:51:b3:4d:32:d2:a0:80:f9:0b:e1:1a:d8:bd:1f:d4:37: b1:4a:a3:f1:0d:82:ab:03:79:7b:ee:02:85:a5:a9:50:dd:ab: ef:3d:06:5b:32:e2:51:4c:a9:cc:65:7e:6c:79:f8:04:f4:b7: 18:26:72:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCluPv3/yPl6llQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk M2UxYjMzZTQtZDE4Ni00NDc2LTkyYzQtYTEwNThlNWM4MjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcVyBQA5P31lg8HYpDEKR4hX0te15Zek+D/W laMskJg23EBkOTIz7dVsO1wty0nGx166SvbvC4cB1H6ohnVqFAzpBUDcwGt4sE6W Rm6FCFaDOUNfizwqnrFLhWgYjplFTFtADnMzjWt1rX3D+OptDZxzIHsSf1fwSnG1 pTkh5sC/sc6YlPq8jidZ6n5YZQoJltkYBy5YkiCQeepe6LXuRrWlggAH1OOhA3eU gl5pTXYEi5BrVXMGiUgjRKKc96W9jsULyGwjgtfoCcI1jVmYsG2L7ElNIYvLe/p5 ZRGqI65YAkFsSsEmeendmoveawr+m4FA6ije3DPhTc65LQdJlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNP5DN2RwDgy28Pjc46CBiqTpvTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvMzFhYmMzMjQtMzljMC0z NWU3LWE3NjQtZjBlMmRjMWVhMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8j/B5RCPfPxiA+1q3/2IG1EMsxmCUr+oTOE+6U3p7/xvYmxUGDwXg4 bKVJcQ6Sxxl6cCt/VJErf7avPy7jGWh+hlO9oPcBhO3TzwXTiayweadB6IC7XxPz Ur1Cmftpb+tqC974bKIYoOPXhnsuJPLggqngzp546DBLmChMcT+0OG0g47tBH5BG 7eAgWcK2kZjUaKS9hlEArOctEmpsjiLlVY3tZbKHcwZUojCc2Cimj5QR5il5nvYM XyzqyMo8cd14lObftv9HUbNNMtKggPkL4RrYvR/UN7FKo/ENgqsDeXvuAoWlqVDd q+89Blsy4lFMqcxlfmx5+AT0txgmcno= -----END CERTIFICATE-----Generated at Thu Mar 26 16:11:13 2026 by rpki-client