$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db13aef4-9eca-332e-80d9-a582c7494330.roa File: db13aef4-9eca-332e-80d9-a582c7494330.roa (raw, json) Hash identifier: JpNYfFgcajA8rplJ4xQUSir1J9VmRX3+PZuH2g10dUY= Subject key identifier: 8A:02:1C:93:BD:5D:B8:F9:23:BE:D4:65:F6:E3:63:72:63:25:DB:79 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584DB4A58B8FA1DA8B1EDDF1EC00 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db13aef4-9eca-332e-80d9-a582c7494330.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 25846 IP address blocks: 140.228.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:8b:8f:a1:da:8b:1e:dd:f1:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=a3acb1b7-7625-46c0-8bfb-6cd3ae2e087a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0e:90:f4:44:90:58:79:54:82:e6:52:0f:bf: e0:c5:88:86:d3:71:c6:22:e6:71:3f:3b:df:d1:2a: 57:55:99:a5:b1:ba:df:98:15:3d:8f:4e:88:96:41: 4b:fd:34:bf:8f:b6:80:0c:66:dc:64:f1:95:ae:b0: e6:8f:3b:17:db:97:9d:8a:fc:75:59:98:0b:68:e6: c3:21:ab:7a:89:de:34:34:7a:23:cb:30:6d:e3:53: 39:a1:ad:9f:03:8b:2b:32:ef:30:35:04:6d:64:71: 22:f5:16:8a:9a:cc:b8:be:ba:18:04:c1:80:cd:cf: bc:a9:97:e1:87:18:ab:f4:78:1d:77:36:e4:56:5a: 90:56:ba:2f:57:17:c6:5a:56:57:44:e1:74:f0:48: 71:de:c8:63:eb:8f:1d:ab:40:fc:32:81:ce:e5:7f: 9e:87:7f:06:b6:76:e6:ab:17:a5:f5:21:b2:fd:c5: 9f:bb:c9:1e:18:67:f4:60:8e:79:bf:76:13:78:4e: c4:b6:99:1a:a2:74:cf:29:e9:42:5d:cf:99:23:29: 88:57:ae:e0:e3:9d:ec:0d:84:a0:bf:30:6d:34:4c: 96:a6:20:6c:8d:c5:23:20:86:5c:1b:87:2e:57:68: af:ad:27:01:59:67:ca:70:93:61:50:c2:86:41:72: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:02:1C:93:BD:5D:B8:F9:23:BE:D4:65:F6:E3:63:72:63:25:DB:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/db13aef4-9eca-332e-80d9-a582c7494330.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:96:0f:b3:e6:a6:fa:10:d0:66:b1:80:19:46:9f:cc:ef:71: 14:e9:84:f4:23:1f:78:ff:e9:81:54:5c:c1:1f:01:53:cd:8e: 63:24:80:4a:e1:4f:8f:bc:e2:35:5a:35:dc:85:9b:e1:bb:f7: c0:bc:ba:97:eb:c7:0d:ca:7e:78:11:8c:d8:a4:23:1f:5b:20: df:d6:6a:2e:0a:29:92:55:3e:c5:8a:f0:d4:10:ec:8c:6c:cb: 01:39:5f:f4:81:6e:25:bf:57:ef:cf:82:3b:71:f1:e9:c3:8b: 41:57:9a:04:d8:23:f7:ea:14:80:15:52:3a:a7:92:a2:cc:c3: a4:9c:e9:4f:6e:de:66:d9:f3:83:4b:6a:cb:b6:85:8d:b5:9d: 40:63:ad:08:6a:34:c9:fa:db:ae:d0:46:50:e6:f3:7f:6e:d1: c7:17:40:6d:68:93:1c:91:77:6c:fd:2f:6f:3e:90:1e:25:a2: 48:38:6f:08:5d:e1:5b:52:fe:8c:03:fa:55:45:c2:0a:75:b9: 53:c9:5e:55:01:90:c4:cf:f2:6f:53:f3:4d:1a:4d:81:4f:8b: 56:5e:1b:e0:f6:ec:e6:48:bf:54:b1:24:f5:b1:4a:e1:66:aa: 48:bb:09:c8:cf:5d:04:d1:71:02:8a:d3:a7:8e:8a:76:ca:ef: dc:fa:0a:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20pYuPodqLHt3x7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTNhY2IxYjctNzYyNS00NmMwLThiZmItNmNkM2FlMmUwODdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg6Q9ESQWHlUguZSD7/gxYiG03HGIuZxPzvf 0SpXVZmlsbrfmBU9j06IlkFL/TS/j7aADGbcZPGVrrDmjzsX25edivx1WZgLaObD Iat6id40NHojyzBt41M5oa2fA4srMu8wNQRtZHEi9RaKmsy4vroYBMGAzc+8qZfh hxir9HgddzbkVlqQVrovVxfGWlZXROF08Ehx3shj648dq0D8MoHO5X+eh38Gtnbm qxel9SGy/cWfu8keGGf0YI55v3YTeE7EtpkaonTPKelCXc+ZIymIV67g453sDYSg vzBtNEyWpiBsjcUjIIZcG4cuV2ivrScBWWfKcJNhUMKGQXJnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoCHJO9Xbj5I77UZfbjY3JjJdt5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvZGIxM2FlZjQtOWVjYS0z MzJlLTgwZDktYTU4MmM3NDk0MzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICWD7PmpvoQ0GaxgBlGn8zvcRTphPQjH3j/6YFUXMEfAVPNjmMkgErh T4+84jVaNdyFm+G798C8upfrxw3KfngRjNikIx9bIN/Wai4KKZJVPsWK8NQQ7Ixs ywE5X/SBbiW/V+/Pgjtx8enDi0FXmgTYI/fqFIAVUjqnkqLMw6Sc6U9u3mbZ84NL asu2hY21nUBjrQhqNMn6267QRlDm839u0ccXQG1okxyRd2z9L28+kB4lokg4bwhd 4VtS/owD+lVFwgp1uVPJXlUBkMTP8m9T800aTYFPi1ZeG+D27OZIv1SxJPWxSuFm qki7CcjPXQTRcQKK06eOinbK79z6Csg= -----END CERTIFICATE-----Generated at Wed May 13 11:40:45 2026 by rpki-client