$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa File: 145fa784-4610-3457-b02b-979db30fed38.roa (raw, json) Hash identifier: uc5HvwdhJ7nf28Z4OzK+Qv85/gwEX2Ln2Ex55E2Esec= Subject key identifier: D5:4E:8D:57:CD:06:AD:79:3A:1D:74:A0:26:66:92:F9:3D:EF:B2:9F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF54F2101CDAD6EA67BDE84 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4f:21:01:cd:ad:6e:a6:7b:de:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ae8e3ccd-e481-4fd7-ad86-add4dbfcd975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:b7:38:d5:dd:a2:a6:ba:7b:1f:05:b0:4d: 02:bf:f6:a1:bf:7f:ae:8f:7c:9f:5a:f3:e1:47:4e: c8:da:b8:2f:bc:fd:40:c5:d6:0d:4e:41:a7:ca:6e: 4b:42:6b:67:64:63:8d:74:bd:55:3d:d1:92:32:09: c9:46:3a:74:cd:96:b6:34:50:a7:0a:93:ff:4f:5d: 05:7c:e1:3d:00:24:64:16:28:5f:7d:ae:de:7b:69: 5a:19:43:d1:12:33:a2:43:d6:fc:99:7a:be:d1:5b: 7e:26:ae:43:3e:ce:d5:1b:2f:34:f9:9e:8b:13:4f: 9a:4b:23:72:4f:df:ed:ee:08:98:91:3a:fe:5c:2b: c0:d1:c4:af:a5:9a:87:4c:a7:5c:75:c8:36:1c:e2: 0c:0e:41:b2:f2:97:36:ec:8f:93:41:8d:fa:7f:08: a2:9d:94:4d:79:77:59:c6:b5:9a:ad:7e:b2:b7:c9: 44:10:0d:95:f6:cd:6b:f6:32:ca:04:d8:d1:b7:fe: 60:85:fd:e5:24:bf:2e:de:95:ca:b2:77:88:99:a5: 90:43:5d:b8:18:f2:91:c4:de:b5:d4:d4:93:76:2f: 79:02:9b:35:c4:c0:88:d6:ce:58:9c:92:b6:f2:82: 1f:7e:e3:41:92:7b:ec:d9:56:ff:00:77:21:01:18: 08:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4E:8D:57:CD:06:AD:79:3A:1D:74:A0:26:66:92:F9:3D:EF:B2:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e8:ff:96:16:51:c7:98:0d:7d:f9:26:c5:eb:7e:51:0c:f7: dd:79:89:ac:91:be:4d:bd:93:dc:d7:c4:93:19:7e:d6:e3:be: 85:91:a6:2d:38:40:b4:33:4b:05:bb:25:7c:fc:f9:eb:b8:fd: b9:c7:fe:d5:63:01:2f:51:1b:37:00:0d:4d:6f:91:6a:32:21: ff:ed:e2:77:b6:2a:d6:81:6b:f6:40:dc:ab:a8:59:90:00:87: c6:5b:3c:87:5e:64:a6:ba:82:44:b7:85:7e:c1:7c:8d:25:e8: 6f:f9:64:9e:b5:2a:56:91:e7:82:b2:c9:1e:82:f2:e9:92:50: d3:ca:f7:b0:50:d8:56:21:61:9f:90:e8:15:da:e7:6c:41:a4: 5c:8b:3f:89:ef:cc:fd:09:ef:46:df:ee:95:23:8f:21:4f:75: c0:b3:63:d6:d6:e2:0d:3e:b1:bf:47:7b:32:13:3a:04:78:31: 4b:c7:3e:2d:ed:0e:5e:df:75:86:f6:bc:f2:b4:19:1b:b4:5e: e0:08:30:e1:3d:04:62:86:58:bd:d8:e2:e5:8b:4c:a9:65:e7: 96:c2:1a:f7:08:7d:9d:8e:cb:5b:02:ef:6a:ec:7a:60:ea:d2: ae:ed:23:b8:c4:c0:c4:f4:d0:dc:09:0b:65:3f:68:08:83:54: 77:f5:81:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9U8hAc2tbqZ73oQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWU4ZTNjY2QtZTQ4MS00ZmQ3LWFkODYtYWRkNGRiZmNkOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbq3ONXdoqa6ex8FsE0Cv/ahv3+uj3yfWvPh R07I2rgvvP1AxdYNTkGnym5LQmtnZGONdL1VPdGSMgnJRjp0zZa2NFCnCpP/T10F fOE9ACRkFihffa7ee2laGUPREjOiQ9b8mXq+0Vt+Jq5DPs7VGy80+Z6LE0+aSyNy T9/t7giYkTr+XCvA0cSvpZqHTKdcdcg2HOIMDkGy8pc27I+TQY36fwiinZRNeXdZ xrWarX6yt8lEEA2V9s1r9jLKBNjRt/5ghf3lJL8u3pXKsneImaWQQ124GPKRxN61 1NSTdi95Aps1xMCI1s5YnJK28oIffuNBknvs2Vb/AHchARgIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVOjVfNBq15Oh10oCZmkvk977KfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQ1ZmE3ODQtNDYxMC0z NDU3LWIwMmItOTc5ZGIzMGZlZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvo/5YWUceYDX35JsXrflEM9915iayRvk29k9zXxJMZftbjvoWRpi04 QLQzSwW7JXz8+eu4/bnH/tVjAS9RGzcADU1vkWoyIf/t4ne2KtaBa/ZA3KuoWZAA h8ZbPIdeZKa6gkS3hX7BfI0l6G/5ZJ61KlaR54KyyR6C8umSUNPK97BQ2FYhYZ+Q 6BXa52xBpFyLP4nvzP0J70bf7pUjjyFPdcCzY9bW4g0+sb9HezITOgR4MUvHPi3t Dl7fdYb2vPK0GRu0XuAIMOE9BGKGWL3Y4uWLTKll55bCGvcIfZ2Oy1sC72rsemDq 0q7tI7jEwMT00NwJC2U/aAiDVHf1gQ0= -----END CERTIFICATE-----Generated at Wed May 13 12:19:28 2026 by rpki-client