$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa File: 25fbf774-9154-37cb-822a-4b1468f102d0.roa (raw, json) Hash identifier: b1nsdqHZezpAr4bi7RWVIlaitU8ojFIgyUzT7pR0Cc8= Subject key identifier: 4E:56:BB:C9:81:58:FA:C7:BD:C6:A3:AC:90:35:B9:53:4C:26:89:73 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D905A95415C4FB2B1D9C0CB50 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa Signing time: Mon 20 Apr 2026 01:00:24 +0000 ROA not before: Mon 20 Apr 2026 01:00:24 +0000 ROA not after: Sun 19 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:90:5a:95:41:5c:4f:b2:b1:d9:c0:cb:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 20 01:00:24 2026 GMT Not After : Jul 19 01:00:24 2026 GMT Subject: CN=d71624fa-45f6-49e9-bff2-91ca02b63a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:62:95:7f:82:70:0e:0c:91:80:92:ad:3f: 5a:07:96:ae:a4:70:1e:b8:94:22:08:a7:f2:6e:3b: 03:e9:9f:f7:ec:3c:ad:5e:13:8e:6c:4e:99:eb:ef: f5:04:e2:78:6e:0d:95:c9:0d:42:35:d8:c4:96:40: c8:5d:fa:53:fb:6a:26:3a:b2:4b:2c:7c:1d:77:0a: 8a:0f:ae:21:93:eb:28:49:ff:73:fe:b5:d0:7c:da: ac:af:0d:77:24:0c:bf:a1:d5:b8:97:55:b7:f5:26: 62:e8:ff:32:a4:d7:8e:a2:d3:e4:db:60:e0:6f:60: 81:34:98:8a:bd:20:d2:ad:7c:0b:5e:4c:e0:77:7e: 12:aa:a7:a1:22:33:56:6d:26:e4:6c:0a:6c:50:ab: b5:1f:33:f3:18:0e:9b:42:cc:de:4e:99:3a:89:03: 79:4f:90:3e:dd:10:8b:e1:c4:ea:d1:3c:5d:df:59: 44:d2:46:79:e3:f2:49:97:e8:50:c6:44:d5:3d:3e: 8f:46:5c:e5:1f:3f:3b:ae:ac:76:47:ef:d4:3f:b4: f8:7e:74:f1:71:5c:47:a3:b9:70:da:29:41:8a:02: 19:4e:3b:7f:0e:db:83:49:40:95:56:15:33:2f:80: cb:02:ab:e6:e0:44:89:e0:8d:b0:6d:3f:d6:92:4a: a8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:56:BB:C9:81:58:FA:C7:BD:C6:A3:AC:90:35:B9:53:4C:26:89:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c9:ad:4c:e8:41:43:e8:29:41:b1:7d:59:67:a3:4c:c1:81: cb:04:85:19:af:e9:9a:97:f9:ca:df:af:c7:ed:54:aa:e4:a0: bf:41:8b:94:8a:f7:9a:75:36:46:3a:c3:7b:8e:d3:f2:11:0e: 20:10:2b:7d:06:8f:bb:48:77:1f:ed:11:73:e3:e6:3f:a8:31: f7:44:20:02:c0:f7:c5:37:80:b5:d4:4c:90:01:4d:27:cf:6e: 01:a9:8f:d1:88:39:25:c7:4c:79:23:57:50:91:8b:4c:7a:86: d6:1d:9d:c3:95:cb:c5:b6:25:ae:a3:80:28:42:e3:48:5a:b1: 61:48:4f:97:1e:a6:a7:f3:6f:26:53:08:0f:48:37:fe:18:5d: b6:05:e2:d7:5f:27:a8:76:e5:24:80:fe:56:5b:f6:a4:76:bf: a3:dd:97:a0:95:cf:ac:eb:e8:3f:ef:9c:c1:77:65:56:c2:90: ef:84:1c:35:21:3d:7a:72:61:17:a4:52:74:05:b7:55:fa:c5: 64:89:00:54:f6:48:7b:69:d5:d3:c3:c1:55:88:dc:7b:e3:2e: d3:a5:aa:75:91:c6:5b:ec:fe:1d:a7:39:80:4b:dd:f9:c5:5b: 8a:24:22:4b:54:b5:62:10:72:b7:a9:e8:93:64:0a:ec:be:dc: 6c:8f:2b:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2QWpVBXE+ysdnAy1AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMDAxMDAyNFoXDTI2MDcxOTAxMDAyNFowLzEtMCsGA1UEAxMk ZDcxNjI0ZmEtNDVmNi00OWU5LWJmZjItOTFjYTAyYjYzYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/tilX+CcA4MkYCSrT9aB5aupHAeuJQiCKfy bjsD6Z/37DytXhOObE6Z6+/1BOJ4bg2VyQ1CNdjElkDIXfpT+2omOrJLLHwddwqK D64hk+soSf9z/rXQfNqsrw13JAy/odW4l1W39SZi6P8ypNeOotPk22Dgb2CBNJiK vSDSrXwLXkzgd34SqqehIjNWbSbkbApsUKu1HzPzGA6bQszeTpk6iQN5T5A+3RCL 4cTq0Txd31lE0kZ54/JJl+hQxkTVPT6PRlzlHz87rqx2R+/UP7T4fnTxcVxHo7lw 2ilBigIZTjt/DtuDSUCVVhUzL4DLAqvm4ESJ4I2wbT/WkkqoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE5Wu8mBWPrHvcajrJA1uVNMJolzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVmYmY3NzQtOTE1NC0z N2NiLTgyMmEtNGIxNDY4ZjEwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbJrUzoQUPoKUGxfVlno0zBgcsEhRmv6ZqX+crfr8ftVKrkoL9Bi5SK 95p1NkY6w3uO0/IRDiAQK30Gj7tIdx/tEXPj5j+oMfdEIALA98U3gLXUTJABTSfP bgGpj9GIOSXHTHkjV1CRi0x6htYdncOVy8W2Ja6jgChC40hasWFIT5cepqfzbyZT CA9IN/4YXbYF4tdfJ6h25SSA/lZb9qR2v6Pdl6CVz6zr6D/vnMF3ZVbCkO+EHDUh PXpyYRekUnQFt1X6xWSJAFT2SHtp1dPDwVWI3HvjLtOlqnWRxlvs/h2nOYBL3fnF W4okIktUtWIQcrep6JNkCuy+3GyPK5c= -----END CERTIFICATE-----Generated at Wed May 13 11:40:41 2026 by rpki-client