$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa File: 07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa (raw, json) Hash identifier: 0rblaI5F2OrVnNX37Y2bAOb+pVbyFWbir/5PaMmEPSs= Subject key identifier: 97:D0:65:50:A9:4C:B5:D7:E9:FB:C4:D8:37:F5:9B:08:AB:BD:5C:49 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF5485B612FBCB8BB464820 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:48:5b:61:2f:bc:b8:bb:46:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=568ab105-15e3-4b30-a6bc-666eef8f24d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:eb:42:e2:a3:68:29:45:90:72:6f:6d:d7:0b: 4f:80:a1:fa:26:96:bd:a3:aa:66:02:4e:ae:b9:62: 24:cd:c2:01:18:7b:ca:21:bd:d5:a9:79:65:cd:4a: 35:c5:fd:28:62:d5:df:67:84:f8:5e:06:9f:35:81: d1:d1:07:3a:22:66:a2:3c:2e:dd:cb:fb:7a:5d:1b: a9:72:66:ed:3a:cf:6a:bd:a3:fe:c0:83:23:88:d7: 9c:92:5a:64:8a:47:a9:94:5c:74:98:21:b4:9c:25: ba:a9:44:4a:53:4e:8f:fb:2e:9c:34:71:db:51:79: 36:b0:03:d3:50:87:13:0c:45:0b:70:8d:a9:b1:2e: 54:4e:c7:d4:43:3a:df:ba:fc:f2:5e:f4:cd:3c:43: 3d:2f:97:7e:d0:5c:59:f6:1e:70:ef:0a:dd:a0:a8: 69:55:a6:af:86:00:69:88:9b:65:7a:5b:99:ad:a7: eb:64:07:62:7c:43:c9:c8:0a:dd:f1:6e:58:5e:f1: e1:c8:fb:4d:e9:78:78:0d:4a:0c:e9:5b:db:31:6f: 87:4f:d2:cc:93:4d:34:73:d2:f7:1b:a8:27:5b:25: f0:a0:3e:9c:ca:7c:81:e6:af:16:a3:77:4f:2c:b2: 34:e9:be:3c:75:3a:1a:46:da:f8:a5:db:21:6d:c9: 54:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D0:65:50:A9:4C:B5:D7:E9:FB:C4:D8:37:F5:9B:08:AB:BD:5C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/07e30db8-d9b1-32a4-83ac-b194565b3a5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0a:a3:8a:0a:df:35:3c:94:38:a0:df:8b:73:b1:5c:01:93: d3:fd:43:76:f1:94:ff:3f:55:e0:81:8c:1f:9d:d4:09:5c:1f: 4a:f5:89:c5:96:ee:d9:0b:f4:da:71:39:fe:9f:27:3b:4b:13: 07:37:1a:b4:59:24:c8:16:97:ae:47:11:2f:52:b8:10:b4:d7: 6c:46:e0:5b:a3:cf:75:78:c4:af:20:13:76:8c:e7:5a:4d:e9: 92:d1:79:7c:1b:23:b9:52:a3:87:1d:b9:7a:37:ea:4f:1c:c8: a5:47:47:3d:84:ad:00:11:b9:4f:b8:cd:29:e8:f8:a6:60:6d: 64:c7:11:fb:3d:67:5c:9e:4d:41:48:82:72:b1:3e:b6:7e:fc: 4b:96:e3:c4:c9:a6:5c:c8:4d:f3:47:9a:9f:7d:43:78:9a:9d: 63:81:0f:6b:ad:d6:92:34:57:67:b9:ca:e2:b5:6c:30:8b:f9: 0b:d9:f8:de:22:2b:d9:27:96:c9:b7:51:e7:2a:97:46:1e:cf: 4d:1c:61:a1:e1:41:0f:5d:21:f8:d9:4d:6d:08:9d:b4:be:8a: 0f:ab:87:ed:4d:01:c4:1c:54:a2:c8:17:8e:4e:74:d5:87:9f: 00:04:27:b9:ab:c0:20:0e:03:9f:72:30:d1:16:02:b4:c2:63: 9a:ce:24:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UhbYS+8uLtGSCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTY4YWIxMDUtMTVlMy00YjMwLWE2YmMtNjY2ZWVmOGYyNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkutC4qNoKUWQcm9t1wtPgKH6Jpa9o6pmAk6u uWIkzcIBGHvKIb3VqXllzUo1xf0oYtXfZ4T4XgafNYHR0Qc6ImaiPC7dy/t6XRup cmbtOs9qvaP+wIMjiNecklpkikeplFx0mCG0nCW6qURKU06P+y6cNHHbUXk2sAPT UIcTDEULcI2psS5UTsfUQzrfuvzyXvTNPEM9L5d+0FxZ9h5w7wrdoKhpVaavhgBp iJtleluZrafrZAdifEPJyArd8W5YXvHhyPtN6Xh4DUoM6VvbMW+HT9LMk000c9L3 G6gnWyXwoD6cynyB5q8Wo3dPLLI06b48dToaRtr4pdshbclUTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfQZVCpTLXX6fvE2Df1mwirvVxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDdlMzBkYjgtZDliMS0z MmE0LTgzYWMtYjE5NDU2NWIzYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Ko4oK3zU8lDig34tzsVwBk9P9Q3bxlP8/VeCBjB+d1AlcH0r1icWW 7tkL9NpxOf6fJztLEwc3GrRZJMgWl65HES9SuBC012xG4Fujz3V4xK8gE3aM51pN 6ZLReXwbI7lSo4cduXo36k8cyKVHRz2ErQARuU+4zSno+KZgbWTHEfs9Z1yeTUFI gnKxPrZ+/EuW48TJplzITfNHmp99Q3ianWOBD2ut1pI0V2e5yuK1bDCL+QvZ+N4i K9knlsm3Uecql0Yez00cYaHhQQ9dIfjZTW0InbS+ig+rh+1NAcQcVKLIF45OdNWH nwAEJ7mrwCAOA59yMNEWArTCY5rOJEs= -----END CERTIFICATE-----Generated at Wed May 13 06:42:39 2026 by rpki-client