$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa File: a8c305b3-f0d4-3040-a02d-ba315034a174.roa (raw, json) Hash identifier: 9omcMV/nM46YthmaxhDDflDBjqGWXX8H3tXO+s4hNbM= Subject key identifier: 02:6B:B1:92:C9:9C:58:70:34:97:D7:CB:6A:7C:34:1F:97:12:DD:D9 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F4328584D300A5B7EF4D0222766C9CF80 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 27370 IP address blocks: 140.241.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:5b:7e:f4:d0:22:27:66:c9:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=72ee3d3d-cb48-4863-b2a1-e78c0184977d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:45:fe:70:c8:9f:5e:7b:f7:c5:69:59:00:3d: 23:a8:eb:f9:01:26:43:99:01:88:e0:b1:20:ee:59: 47:c8:2d:df:32:ee:2f:a5:b1:8d:30:3f:95:2c:33: d3:5f:6a:57:11:a7:5e:f6:a1:e5:30:f3:d4:2b:2f: 81:08:e1:2e:65:a9:11:d4:92:d4:39:b7:68:55:d5: 02:a2:73:28:df:27:5b:03:00:8e:08:de:fa:61:5c: 29:e8:c6:7f:74:7f:de:ca:d2:60:ea:ea:0d:1f:84: a9:11:4e:1e:36:c8:04:4a:c2:a0:7f:dc:0c:be:d5: 00:7b:ae:42:13:15:6f:a3:4c:99:7f:e5:30:d2:db: 23:d1:14:5a:e3:d7:e7:58:b4:d6:d1:62:47:d7:3b: b2:35:8b:b4:92:6b:81:a5:39:41:d5:30:90:df:5e: 7d:e9:19:44:1b:b7:78:0e:ac:41:02:27:e2:1b:92: fd:82:76:20:c4:02:b9:27:ed:e7:9b:08:52:d5:f6: 8f:aa:02:95:13:37:9c:66:e1:93:5a:9a:50:ac:76: a1:69:97:b8:d1:45:ab:01:0b:95:7a:5b:3f:e9:94: 5a:0c:bb:dd:5f:76:f5:f1:85:d6:93:02:fb:8e:49: 47:7c:fe:a9:c6:33:08:bf:37:9d:53:79:cf:35:07: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:6B:B1:92:C9:9C:58:70:34:97:D7:CB:6A:7C:34:1F:97:12:DD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a8c305b3-f0d4-3040-a02d-ba315034a174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f7:a2:02:26:1e:d9:6d:80:fc:36:9c:2e:e2:1e:99:03:a8: 24:c2:ba:24:97:cd:1b:b7:a4:45:1a:d7:d3:df:8b:6a:6e:23: e2:45:e9:ab:73:c2:36:2e:08:0e:35:c5:0f:4b:7f:91:8c:1b: 7b:97:72:d6:46:40:22:51:43:2d:ef:19:44:82:d8:2b:d6:bc: bd:ad:51:73:cd:01:cb:fa:22:7b:44:b4:f4:75:b4:3e:46:10: ff:f0:04:1b:e5:d7:fa:fd:9b:d7:88:6d:09:97:61:e9:b2:2a: ba:19:b7:42:e0:df:8f:08:d7:f9:f1:e5:2e:46:78:8c:63:63: 74:96:22:4f:69:c3:de:8a:fc:9b:af:78:2e:63:4b:b0:05:bf: a9:12:6c:ab:74:bc:9b:df:48:9c:5d:31:d8:97:66:0b:c1:9f: 65:2d:a6:4a:95:f7:5c:19:39:79:e3:8d:31:c2:92:a5:8a:7f: 5d:b9:3d:7e:e2:45:c2:d1:34:04:fd:9c:bb:03:b3:ad:0b:7a: 69:25:1b:b0:47:5d:d1:1a:52:32:97:a7:89:7a:e4:61:a9:4a: c4:21:77:77:0b:31:35:bd:a7:bd:ee:99:4c:14:54:d6:c5:8e: 39:b4:e2:6f:f7:5a:b4:5b:2d:e0:ec:c3:51:1f:12:be:21:aa: 46:65:2a:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClt+9NAiJ2bJz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NzJlZTNkM2QtY2I0OC00ODYzLWIyYTEtZTc4YzAxODQ5NzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkX+cMifXnv3xWlZAD0jqOv5ASZDmQGI4LEg 7llHyC3fMu4vpbGNMD+VLDPTX2pXEade9qHlMPPUKy+BCOEuZakR1JLUObdoVdUC onMo3ydbAwCOCN76YVwp6MZ/dH/eytJg6uoNH4SpEU4eNsgESsKgf9wMvtUAe65C ExVvo0yZf+Uw0tsj0RRa49fnWLTW0WJH1zuyNYu0kmuBpTlB1TCQ31596RlEG7d4 DqxBAifiG5L9gnYgxAK5J+3nmwhS1faPqgKVEzecZuGTWppQrHahaZe40UWrAQuV els/6ZRaDLvdX3b18YXWkwL7jklHfP6pxjMIvzedU3nPNQddhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJrsZLJnFhwNJfXy2p8NB+XEt3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvYThjMzA1YjMtZjBkNC0z MDQwLWEwMmQtYmEzMTUwMzRhMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADz3ogImHtltgPw2nC7iHpkDqCTCuiSXzRu3pEUa19Pfi2puI+JF6atz wjYuCA41xQ9Lf5GMG3uXctZGQCJRQy3vGUSC2CvWvL2tUXPNAcv6IntEtPR1tD5G EP/wBBvl1/r9m9eIbQmXYemyKroZt0Lg348I1/nx5S5GeIxjY3SWIk9pw96K/Juv eC5jS7AFv6kSbKt0vJvfSJxdMdiXZgvBn2UtpkqV91wZOXnjjTHCkqWKf125PX7i RcLRNAT9nLsDs60LemklG7BHXdEaUjKXp4l65GGpSsQhd3cLMTW9p73umUwUVNbF jjm04m/3WrRbLeDsw1EfEr4hqkZlKtA= -----END CERTIFICATE-----Generated at Thu Mar 26 21:58:49 2026 by rpki-client