$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa File: 1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa (raw, json) Hash identifier: F5ey4DiksHSXecqqpD+72305w3HTvkG8LLD7VCJd53s= Subject key identifier: D1:A0:E1:8A:5E:8A:8D:F7:83:F6:74:01:67:28:C0:EE:7D:F8:E4:E1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FFE8F911112961D2A3040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 140.204.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fe:8f:91:11:12:96:1d:2a:30:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=70e69809-925f-467c-82f6-ee716d5d8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:37:69:9d:c3:fd:19:d9:e2:51:59:31:44:07: b5:91:1f:7d:21:3a:17:72:a4:84:f9:63:93:49:01: e3:9c:69:fe:c9:95:77:20:1e:d9:bb:32:de:8e:05: bb:7c:e3:e2:ea:69:c0:90:60:67:6e:e3:44:bf:91: 78:41:16:e2:97:7a:97:7b:17:ab:48:bc:c4:07:d7: 1c:5f:44:d5:b8:a8:e8:32:33:25:b8:77:25:64:f8: ad:1d:cf:da:07:62:42:06:12:fa:c6:ec:1c:1f:f8: 0f:0f:71:b9:da:2a:48:42:79:95:99:b3:22:60:bb: 79:12:2b:94:78:41:9d:18:89:c2:60:1b:e9:3a:f1: 30:d4:bf:29:28:06:f8:93:fe:cf:69:32:0e:23:ee: e9:01:a3:2a:c1:06:02:5e:10:d2:8a:91:ae:8e:b4: 20:f7:73:f3:34:0e:28:65:69:d9:17:75:ac:cb:bf: 40:cf:36:5a:26:66:37:a9:3c:43:57:ca:a9:57:25: 7c:28:1a:43:98:65:1d:50:03:f0:d9:fb:af:c5:d1: 52:c8:1a:c7:6e:e9:fc:75:29:06:51:6c:66:26:ff: 0d:6e:b5:16:69:28:02:62:51:df:84:01:76:a5:30: c1:c3:ef:f4:ff:dc:88:f8:54:c2:42:93:64:01:65: 7f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:A0:E1:8A:5E:8A:8D:F7:83:F6:74:01:67:28:C0:EE:7D:F8:E4:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ac:09:92:62:f8:35:e5:13:e5:13:fe:40:37:25:3e:62:14: 15:80:1d:af:02:cc:7e:56:da:1e:6a:bf:f6:67:d0:50:41:61: e2:b8:8e:df:7d:00:0a:21:2a:c4:12:e1:ef:92:11:33:ad:8c: 87:bd:14:71:1d:93:33:06:99:be:c0:bc:3d:5f:32:95:21:bf: 5d:97:d4:45:88:69:d1:7e:1a:3c:20:37:7d:ef:60:56:1f:4e: 21:1e:b4:1c:b3:04:38:ef:d8:0c:41:fe:8d:40:f5:f2:a3:96: a1:15:db:70:ce:35:94:8d:00:85:35:52:31:2f:8f:59:10:5a: fe:a4:df:7f:c8:02:04:82:e7:62:81:e6:e8:d6:cb:94:fa:96: 29:d9:3d:cb:bc:73:27:0f:df:59:91:a2:82:f6:bc:09:b3:50: 33:4e:76:0e:2a:dd:ab:3c:20:7c:7b:99:b2:14:28:95:3b:32: 23:de:09:fe:1e:79:e4:84:45:99:1e:19:f7:fc:e0:9f:74:70: d7:03:3d:ea:30:67:c6:b7:52:0a:f8:0c:7f:17:07:7d:1a:ea: c3:09:62:b1:6a:bb:43:4d:bc:96:89:43:21:da:38:95:21:53: 88:05:a5:b7:5e:79:8e:35:de:ab:6e:0e:f2:8e:d9:4e:e0:c8: 81:60:05:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/6PkRESlh0qMEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NzBlNjk4MDktOTI1Zi00NjdjLTgyZjYtZWU3MTZkNWQ4YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDdpncP9GdniUVkxRAe1kR99IToXcqSE+WOT SQHjnGn+yZV3IB7ZuzLejgW7fOPi6mnAkGBnbuNEv5F4QRbil3qXexerSLzEB9cc X0TVuKjoMjMluHclZPitHc/aB2JCBhL6xuwcH/gPD3G52ipIQnmVmbMiYLt5EiuU eEGdGInCYBvpOvEw1L8pKAb4k/7PaTIOI+7pAaMqwQYCXhDSipGujrQg93PzNA4o ZWnZF3Wsy79AzzZaJmY3qTxDV8qpVyV8KBpDmGUdUAPw2fuvxdFSyBrHbun8dSkG UWxmJv8NbrUWaSgCYlHfhAF2pTDBw+/0/9yI+FTCQpNkAWV/0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGg4Ypeio33g/Z0AWcowO59+OThMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWE0Y2JhYjEtZGZjYi0z YmVlLTgxOTctM2UyNmNmMjg4OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGsCZJi+DXlE+UT/kA3JT5iFBWAHa8CzH5W2h5qv/Zn0FBBYeK4jt99 AAohKsQS4e+SETOtjIe9FHEdkzMGmb7AvD1fMpUhv12X1EWIadF+GjwgN33vYFYf TiEetByzBDjv2AxB/o1A9fKjlqEV23DONZSNAIU1UjEvj1kQWv6k33/IAgSC52KB 5ujWy5T6linZPcu8cycP31mRooL2vAmzUDNOdg4q3as8IHx7mbIUKJU7MiPeCf4e eeSERZkeGff84J90cNcDPeowZ8a3Ugr4DH8XB30a6sMJYrFqu0NNvJaJQyHaOJUh U4gFpbdeeY413qtuDvKO2U7gyIFgBeQ= -----END CERTIFICATE-----Generated at Wed May 13 05:39:09 2026 by rpki-client