$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa File: 086c1071-1294-3436-beef-cfe7cef951e5.roa (raw, json) Hash identifier: aBeLpE++Qnz1HJGFrQKd6xJJ0cqe6njKoJgpcUB5KY4= Subject key identifier: 13:49:67:ED:61:1D:62:E6:8C:5F:00:08:C6:47:F9:5E:B4:E0:00:09 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584DC995AAA2CFAD61EB12366A80 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 136796 IP address blocks: 141.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:aa:a2:cf:ad:61:eb:12:36:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=c7b4a67b-b709-4003-b362-c892d36e54a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:1a:1c:6e:6e:89:c2:8b:20:af:40:a7:ce:fb: ff:dd:ae:d3:33:c9:e3:77:41:f4:cc:96:bd:38:5e: f6:67:e3:c6:7a:a2:de:ae:37:11:0a:1b:69:43:a4: 43:18:ef:33:60:d8:d1:03:17:26:e3:4f:b4:cd:72: b1:d8:32:e8:bd:ae:ff:6e:36:97:48:b4:19:98:da: b5:9a:5b:c3:a5:ef:94:bb:fb:37:88:d6:fb:a5:47: 1d:fc:b8:c3:47:10:86:13:ac:53:2a:f6:2f:14:d5: c2:84:74:57:97:ba:d7:94:34:2c:68:1b:34:4f:b1: 51:c8:f2:20:31:6f:66:06:cc:bb:54:ad:37:4d:ff: c3:b5:81:2e:b7:5a:6b:96:a7:ef:7e:3d:fd:c1:af: 8a:7c:80:21:21:24:59:1c:11:5f:76:ed:55:cf:7a: 78:97:5c:59:10:88:df:8a:0e:b1:76:8d:69:f7:88: f5:2c:45:fc:2a:d2:82:f9:06:29:0f:ec:81:33:e8: 65:9f:09:29:aa:87:22:8d:df:04:60:c5:9f:97:44: 55:e8:51:57:31:71:14:e0:d3:9a:b4:46:90:31:6d: bd:2a:77:7c:e1:1d:b5:d5:35:6f:d0:53:e5:46:77: 7e:95:87:7c:ea:61:64:8b:0e:74:19:f5:71:1e:d3: 22:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:49:67:ED:61:1D:62:E6:8C:5F:00:08:C6:47:F9:5E:B4:E0:00:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:6b:5e:a6:4a:37:76:69:f1:0b:7f:4d:91:9f:5b:29:e7:12: f3:65:0f:64:b8:a0:72:14:54:e5:ba:ab:c4:fe:8b:87:45:45: a9:bc:d2:c2:27:78:45:9b:6b:f1:02:56:2c:f3:98:4c:99:13: d3:7d:5c:0a:39:7f:c0:6e:1a:fe:9d:af:25:de:c7:f8:6d:1f: 86:a2:b2:62:8d:ab:e1:76:6a:88:c5:49:06:43:6f:b0:26:d3: b0:11:e3:14:47:5c:7e:e9:34:00:92:3b:32:71:47:93:c4:a3: 05:12:84:af:01:be:80:bd:37:94:3e:bd:ba:fb:e7:74:4d:b6: ce:b8:dd:c5:14:b5:71:e9:52:69:b0:63:94:29:c1:dd:b5:aa: 34:f9:26:f3:40:c1:e5:a9:ad:a2:40:aa:d7:db:92:95:28:a8: ca:61:1b:03:7b:0f:fe:4a:40:50:26:21:79:83:89:a3:c0:11: 5b:58:6c:a5:ce:52:ff:43:b1:e9:2f:e6:84:9b:8a:37:78:d8: 6f:9d:c2:de:64:12:fc:f2:e2:e2:f4:e2:4f:df:99:47:13:9b: 0a:ba:6e:c7:ed:5b:e5:91:5b:6a:92:24:42:3a:b9:28:fc:0a: a6:e1:fb:ff:c0:b2:2a:61:4c:a1:25:78:19:35:c9:36:ee:6c: bc:d5:a9:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlaqiz61h6xI2aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk YzdiNGE2N2ItYjcwOS00MDAzLWIzNjItYzg5MmQzNmU1NGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhocbm6Jwosgr0Cnzvv/3a7TM8njd0H0zJa9 OF72Z+PGeqLerjcRChtpQ6RDGO8zYNjRAxcm40+0zXKx2DLova7/bjaXSLQZmNq1 mlvDpe+Uu/s3iNb7pUcd/LjDRxCGE6xTKvYvFNXChHRXl7rXlDQsaBs0T7FRyPIg MW9mBsy7VK03Tf/DtYEut1prlqfvfj39wa+KfIAhISRZHBFfdu1Vz3p4l1xZEIjf ig6xdo1p94j1LEX8KtKC+QYpD+yBM+hlnwkpqocijd8EYMWfl0RV6FFXMXEU4NOa tEaQMW29Knd84R211TVv0FPlRnd+lYd86mFkiw50GfVxHtMivQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNJZ+1hHWLmjF8ACMZH+V604AAJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDg2YzEwNzEtMTI5NC0z NDM2LWJlZWYtY2ZlN2NlZjk1MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhrXqZKN3Zp8Qt/TZGfWynnEvNlD2S4oHIUVOW6q8T+i4dFRam80sIn eEWba/ECVizzmEyZE9N9XAo5f8BuGv6dryXex/htH4aismKNq+F2aojFSQZDb7Am 07AR4xRHXH7pNACSOzJxR5PEowUShK8BvoC9N5Q+vbr753RNts643cUUtXHpUmmw Y5Qpwd21qjT5JvNAweWpraJAqtfbkpUoqMphGwN7D/5KQFAmIXmDiaPAEVtYbKXO Uv9Dsekv5oSbijd42G+dwt5kEvzy4uL04k/fmUcTmwq6bsftW+WRW2qSJEI6uSj8 Cqbh+//AsiphTKEleBk1yTbubLzVqUc= -----END CERTIFICATE-----Generated at Wed May 13 12:21:37 2026 by rpki-client