$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa File: 1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa (raw, json) Hash identifier: 7feuL58Wl10+e8B2brQxpmjvWO0megpfVr/hGFE64c4= Subject key identifier: 73:77:DA:DD:86:D0:DB:9E:0C:C9:88:D3:C3:FF:DC:37:9B:91:E0:C6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF98578472245534B245780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:85:78:47:22:45:53:4b:24:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=98374ccc-539c-4692-b93f-5622643dbe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:f4:73:13:8f:08:cc:e9:92:72:82:54:1c: 00:6e:c2:75:07:eb:30:3f:6e:41:05:8e:29:7c:d5: f3:6a:21:4d:4a:c3:24:33:04:81:27:64:26:88:5e: 85:9d:0d:12:26:28:37:8a:80:a3:54:46:70:8c:df: 7d:ea:53:07:40:1e:ba:53:db:93:d2:e9:e8:82:5e: 9b:81:16:be:cb:e1:f9:7c:e8:28:df:2d:c0:85:d2: 50:21:d2:16:0a:5a:f7:16:41:79:ef:49:bf:a3:a8: be:9e:8e:92:b4:04:fd:44:a1:16:15:44:a8:d9:c6: 71:19:c5:eb:d8:6f:bf:57:e2:56:5b:35:49:36:9a: d2:71:10:86:45:04:35:e0:05:ab:32:b5:3c:69:e8: 47:7b:2c:b4:f6:ba:e4:ec:fc:85:72:39:93:30:38: a1:7b:8f:b9:f6:fd:80:53:da:7c:34:86:55:92:06: ca:d7:dd:b9:24:3d:28:87:52:ca:d6:2c:ec:3f:95: 67:4f:39:cf:6b:aa:61:ba:48:68:c6:f2:32:a9:4d: 26:12:48:a8:33:0b:fa:98:a0:88:25:04:2c:f2:18: dc:92:36:df:a4:23:00:f8:e0:59:d1:12:4f:23:6e: 34:69:dd:55:a3:3a:1b:0d:07:1c:e8:92:e4:d2:e1: 1e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:77:DA:DD:86:D0:DB:9E:0C:C9:88:D3:C3:FF:DC:37:9B:91:E0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:6f:d0:98:c3:d9:d4:2e:2e:7b:bf:82:8e:ac:a8:91:8d:d4: 38:8b:95:08:a6:b5:f1:3d:25:5f:22:3e:f1:83:29:1b:06:f5: 80:9f:9b:d0:95:da:02:cf:58:f6:a6:fe:3a:e7:70:dc:83:2f: 91:8d:c8:d4:d9:97:cf:5c:6d:ec:78:86:47:20:60:c8:55:bb: 1b:6c:46:f0:aa:06:99:0c:59:32:86:34:18:38:c2:ce:bd:0f: c5:22:94:10:5b:e6:a2:2c:3d:15:ce:6e:6a:4f:43:9e:d3:64: f3:7b:16:fb:48:9e:18:22:27:be:5d:31:6d:2e:f6:02:f2:8c: 93:1b:26:fc:c4:1a:0a:fe:a6:b5:b1:f7:a1:f7:5f:ac:cc:d9: 84:b8:33:8f:d5:4d:45:fd:50:ae:df:e9:99:44:ef:bc:cb:39: 08:8d:00:2e:7e:98:76:93:47:7f:61:ed:4f:10:00:d6:20:fc: b0:1c:e7:62:21:60:87:76:ee:5b:f1:e4:97:d4:f0:40:77:dc: f0:4a:44:78:b7:b7:fc:42:30:d9:c9:b4:46:70:c1:cd:ff:aa: b9:c3:3a:40:5e:3b:48:f6:70:75:2d:4c:71:88:68:e5:29:95: f7:f2:15:62:da:e9:72:95:a8:fb:9a:02:04:8d:e9:72:e2:70: 5c:b2:7e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YV4RyJFU0skV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OTgzNzRjY2MtNTM5Yy00NjkyLWI5M2YtNTYyMjY0M2RiZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAz0cxOPCMzpknKCVBwAbsJ1B+swP25BBY4p fNXzaiFNSsMkMwSBJ2QmiF6FnQ0SJig3ioCjVEZwjN996lMHQB66U9uT0unogl6b gRa+y+H5fOgo3y3AhdJQIdIWClr3FkF570m/o6i+no6StAT9RKEWFUSo2cZxGcXr 2G+/V+JWWzVJNprScRCGRQQ14AWrMrU8aehHeyy09rrk7PyFcjmTMDihe4+59v2A U9p8NIZVkgbK1925JD0oh1LK1izsP5VnTznPa6phukhoxvIyqU0mEkioMwv6mKCI JQQs8hjckjbfpCMA+OBZ0RJPI240ad1VozobDQcc6JLk0uEevQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHN32t2G0NueDMmI08P/3DebkeDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI1MmQ4NmUtY2M3Mi0z NGViLTg5OGUtZjBjYTJhNDU3ZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxv0JjD2dQuLnu/go6sqJGN1DiLlQimtfE9JV8iPvGDKRsG9YCfm9CV 2gLPWPam/jrncNyDL5GNyNTZl89cbex4hkcgYMhVuxtsRvCqBpkMWTKGNBg4ws69 D8UilBBb5qIsPRXObmpPQ57TZPN7FvtInhgiJ75dMW0u9gLyjJMbJvzEGgr+prWx 96H3X6zM2YS4M4/VTUX9UK7f6ZlE77zLOQiNAC5+mHaTR39h7U8QANYg/LAc52Ih YId27lvx5JfU8EB33PBKRHi3t/xCMNnJtEZwwc3/qrnDOkBeO0j2cHUtTHGIaOUp lffyFWLa6XKVqPuaAgSN6XLicFyyfkI= -----END CERTIFICATE-----Generated at Wed May 13 09:02:18 2026 by rpki-client