$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa File: 0122ee3f-e947-3c1e-888d-9590ebad2788.roa (raw, json) Hash identifier: Xk/oUOjlrdYJvUxdq7KuUwO4WpyJGj3+GJLdIerHt3A= Subject key identifier: D9:22:9D:4E:8E:61:D5:7C:74:72:28:C6:79:D6:8E:70:F5:CE:1F:63 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5542D56488B476BBCD680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.238.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:54:2d:56:48:8b:47:6b:bc:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=a2964bb5-6b62-4514-9d9d-0f609c952500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7c:ba:a3:7f:27:e2:c6:9e:87:45:c3:ce:bc: 4e:fe:22:32:78:b7:70:7a:05:01:90:a5:c3:c9:9a: 20:a7:16:6c:7c:49:ad:4c:a4:92:fa:95:a8:d4:fe: 2b:b6:fa:c8:2c:4f:50:65:12:fb:ad:d3:9e:82:e2: 30:15:48:42:ea:72:ee:ef:1b:3a:43:13:b1:b2:50: 8c:f1:2c:ff:4a:f9:8f:e3:30:e6:15:7f:8b:0e:45: b5:86:89:dc:61:09:66:9d:bf:b2:40:52:9e:6a:83: b1:f5:59:9c:36:e1:76:d9:27:07:ed:a2:c1:d8:d4: 37:e1:57:f8:f1:65:23:55:83:5f:70:1a:06:6b:b8: fb:89:b9:5e:da:d0:23:85:fb:6f:1f:58:1a:be:c0: 18:ef:04:26:7d:e6:6a:29:90:1d:b7:81:12:e6:d0: 02:2c:88:5b:31:a9:5a:9b:92:39:68:d4:56:d1:f7: 75:c3:e2:e9:44:bf:c5:7d:b1:10:85:dc:2f:ff:f8: ca:8c:84:30:f0:56:93:48:8e:d1:75:d3:33:3c:ba: cb:3f:fa:65:96:b0:a8:73:1e:f0:d3:67:2a:d7:14: 9b:b1:0d:32:51:8d:05:cd:79:e6:6e:dd:17:73:79: fb:5c:49:88:25:0d:94:8f:57:53:d6:23:16:82:62: 7d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:22:9D:4E:8E:61:D5:7C:74:72:28:C6:79:D6:8E:70:F5:CE:1F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:f6:f3:5a:a9:b8:82:be:8b:6b:50:74:b6:0d:c1:33:a4:89: f9:b1:1e:bf:86:7b:31:49:fd:90:41:d5:d8:0e:0f:db:be:97: e8:46:89:59:08:86:b8:4b:79:1d:72:e9:db:61:80:7d:46:b3: c6:b6:41:de:a0:fb:57:25:5f:a9:28:0e:5f:c8:03:a5:de:bc: 57:3e:d6:48:22:b0:b1:db:70:6e:08:3b:41:90:f8:70:ed:9f: 3c:c1:23:fe:a5:6b:05:e6:c4:ac:48:64:67:dc:1b:78:d2:72: 5f:ef:82:4a:1d:2c:60:c3:32:a0:c8:e6:5e:73:6c:e8:6c:ef: d9:89:35:39:ee:90:5b:3e:1e:b8:2c:86:37:80:31:01:e5:3d: 2b:1e:77:80:93:8a:b1:e1:04:c6:be:06:e9:ab:0a:90:5c:31: 0a:59:55:c9:4e:fc:da:31:b7:85:c0:b1:11:ee:77:9e:a9:ba: c2:0f:5a:76:a6:da:c6:9f:20:24:82:31:84:49:56:a2:9a:be: a9:29:3f:c3:2d:6f:39:ef:30:a0:73:0a:ca:77:9e:42:7f:06: c5:eb:5a:ed:bc:ea:15:84:e7:04:ad:a9:73:39:d4:17:99:d5: e8:cb:37:ef:cb:fe:52:2f:6c:16:a3:a7:3b:25:50:78:41:89: d2:a4:55:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVQtVkiLR2u81oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YTI5NjRiYjUtNmI2Mi00NTE0LTlkOWQtMGY2MDljOTUyNTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlny6o38n4saeh0XDzrxO/iIyeLdwegUBkKXD yZogpxZsfEmtTKSS+pWo1P4rtvrILE9QZRL7rdOeguIwFUhC6nLu7xs6QxOxslCM 8Sz/SvmP4zDmFX+LDkW1honcYQlmnb+yQFKeaoOx9VmcNuF22ScH7aLB2NQ34Vf4 8WUjVYNfcBoGa7j7ible2tAjhftvH1gavsAY7wQmfeZqKZAdt4ES5tACLIhbMala m5I5aNRW0fd1w+LpRL/FfbEQhdwv//jKjIQw8FaTSI7RddMzPLrLP/pllrCocx7w 02cq1xSbsQ0yUY0FzXnmbt0Xc3n7XEmIJQ2Uj1dT1iMWgmJ9LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkinU6OYdV8dHIoxnnWjnD1zh9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDEyMmVlM2YtZTk0Ny0z YzFlLTg4OGQtOTU5MGViYWQyNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAj281qpuIK+i2tQdLYNwTOkifmxHr+GezFJ/ZBB1dgOD9u+l+hGiVkI hrhLeR1y6dthgH1Gs8a2Qd6g+1clX6koDl/IA6XevFc+1kgisLHbcG4IO0GQ+HDt nzzBI/6lawXmxKxIZGfcG3jScl/vgkodLGDDMqDI5l5zbOhs79mJNTnukFs+Hrgs hjeAMQHlPSsed4CTirHhBMa+BumrCpBcMQpZVclO/Noxt4XAsRHud56pusIPWnam 2safICSCMYRJVqKavqkpP8MtbznvMKBzCsp3nkJ/BsXrWu286hWE5wStqXM51BeZ 1ejLN+/L/lIvbBajpzslUHhBidKkVTY= -----END CERTIFICATE-----Generated at Wed May 13 06:40:07 2026 by rpki-client