$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa File: 0663f5ef-ecad-3f07-a038-d349e0737666.roa (raw, json) Hash identifier: 1VSF3br0VWdxP0K4ZkXrLWAE25gQloYS8SuJXGSBAJo= Subject key identifier: 4D:12:73:07:53:EC:E9:78:1E:AD:2E:0E:04:83:E2:85:CF:53:46:C6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BAA00FDD8D931D10E8D480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:a0:0f:dd:8d:93:1d:10:e8:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=8136f5a8-8b8f-4d53-8a52-a983b825c88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:10:ed:42:82:5e:b5:36:28:87:e2:c7:8e: 55:71:7f:ae:aa:ad:61:32:e7:d7:f8:a8:ea:8d:9b: 95:81:99:5f:61:3d:4a:5e:00:b1:d8:35:26:bf:3c: 7b:69:cb:ba:6d:ed:f2:01:d5:8c:40:12:ba:f5:d0: 23:24:04:a5:74:42:b6:aa:57:be:95:67:18:90:8c: 68:38:e3:8b:d6:94:1f:e2:a7:5e:68:bd:c6:40:85: 88:47:0c:30:a0:27:44:31:85:d7:2c:3d:fb:f0:fa: e4:ae:91:34:25:a9:c7:5c:67:1d:e5:7c:d9:78:de: d2:c5:98:5f:eb:9e:e9:ef:d6:70:98:cc:fc:6f:3e: 01:27:03:55:df:9b:d5:26:fa:95:ce:ee:b5:21:57: d5:69:5b:a5:d3:83:57:45:02:07:ca:3f:d0:70:7f: 4c:e1:7b:77:a9:45:0a:0a:1e:a8:57:25:cf:2e:dd: 7f:a7:4f:48:fe:9c:7d:77:f7:f4:d8:b4:d8:3b:f1: 5e:f6:1e:fc:d9:c0:22:b8:2c:4a:26:9f:b0:97:36: 2b:b1:2d:26:7d:13:85:f4:18:80:a8:4d:e9:7f:ca: b5:28:1f:f7:eb:5a:0b:19:a1:2c:9a:b1:30:6d:50: 4b:ef:99:7b:9a:70:c9:09:e2:1b:f0:21:5e:66:3f: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:73:07:53:EC:E9:78:1E:AD:2E:0E:04:83:E2:85:CF:53:46:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0663f5ef-ecad-3f07-a038-d349e0737666.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:e9:f6:b0:5d:92:ba:ae:dc:c3:4e:bd:2a:37:b2:b8:18: 67:9d:1b:67:23:bf:e3:f5:d7:55:33:ba:3d:f7:95:5f:b6:1f: 59:74:84:39:60:b4:eb:37:15:7e:7a:fc:a5:9a:8c:d4:bd:5a: 78:aa:7d:03:e2:c3:73:a1:bc:a6:15:c1:b1:4c:75:3c:c9:cf: 85:68:24:6f:42:4c:a9:94:e1:24:87:d2:76:53:4a:d4:e4:9d: 16:92:d5:ac:f7:b9:e6:9f:f9:fb:6c:13:52:6c:4d:6a:33:a5: cb:ab:6d:f2:47:e9:0c:33:9c:72:f3:a0:67:b7:c4:03:d7:57: e0:6a:6f:a5:c6:25:8d:07:e0:68:13:77:cc:3f:8b:11:a2:b1: b7:95:30:78:b1:b0:65:1b:3c:9b:4c:bf:b3:f8:7c:88:52:ac: 07:32:fe:ef:15:2b:11:f8:0f:e3:7e:da:67:0d:f0:d7:f3:99: 5a:99:ec:bb:62:27:b4:4d:bd:4a:1b:25:2a:d9:90:ec:61:ae: 26:3a:81:8c:0b:14:6b:e2:1d:37:c4:1f:ac:0b:96:74:d5:95: f9:35:ff:9a:6e:45:94:de:e6:2f:22:7d:07:8e:4f:5f:eb:9b: 1a:10:4a:bf:42:ee:18:d6:d2:ff:b6:fc:3d:7d:e1:59:48:f1: 9a:1a:eb:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YuqAP3Y2THRDo1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk ODEzNmY1YTgtOGI4Zi00ZDUzLThhNTItYTk4M2I4MjVjODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGgQ7UKCXrU2KIfix45VcX+uqq1hMufX+Kjq jZuVgZlfYT1KXgCx2DUmvzx7acu6be3yAdWMQBK69dAjJASldEK2qle+lWcYkIxo OOOL1pQf4qdeaL3GQIWIRwwwoCdEMYXXLD378PrkrpE0JanHXGcd5XzZeN7SxZhf 657p79ZwmMz8bz4BJwNV35vVJvqVzu61IVfVaVul04NXRQIHyj/QcH9M4Xt3qUUK Ch6oVyXPLt1/p09I/px9d/f02LTYO/Fe9h782cAiuCxKJp+wlzYrsS0mfROF9BiA qE3pf8q1KB/361oLGaEsmrEwbVBL75l7mnDJCeIb8CFeZj9QpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0ScwdT7Ol4Hq0uDgSD4oXPU0bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDY2M2Y1ZWYtZWNhZC0z ZjA3LWEwMzgtZDM0OWUwNzM3NjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFq6fawXZK6rtzDTr0qN7K4GGedG2cjv+P111Uzuj33lV+2H1l0hDlg tOs3FX56/KWajNS9WniqfQPiw3OhvKYVwbFMdTzJz4VoJG9CTKmU4SSH0nZTStTk nRaS1az3ueaf+ftsE1JsTWozpcurbfJH6QwznHLzoGe3xAPXV+Bqb6XGJY0H4GgT d8w/ixGisbeVMHixsGUbPJtMv7P4fIhSrAcy/u8VKxH4D+N+2mcN8NfzmVqZ7Lti J7RNvUobJSrZkOxhriY6gYwLFGviHTfEH6wLlnTVlfk1/5puRZTe5i8ifQeOT1/r mxoQSr9C7hjW0v+2/D194VlI8Zoa68A= -----END CERTIFICATE-----Generated at Wed May 13 07:52:28 2026 by rpki-client