$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26dc5d69-06b3-3bf0-9157-47571adfefeb.roa File: 26dc5d69-06b3-3bf0-9157-47571adfefeb.roa (raw, json) Hash identifier: ZTI989ggPpWKa6sjWwNUw5hkr4DlD8gd1HvQxwsf3EE= Subject key identifier: 20:C5:AF:29:C3:4E:C0:65:BE:49:F4:02:10:B6:2B:72:7D:27:A7:97 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF54BC887509AA8293FF500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26dc5d69-06b3-3bf0-9157-47571adfefeb.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.91.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4b:c8:87:50:9a:a8:29:3f:f5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=21bbc8b4-6d85-43a2-a569-8f12c3a761a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:83:71:57:43:a7:ec:d0:6e:93:1e:88:f9: 75:01:e0:69:99:17:3a:21:32:38:df:28:aa:c1:61: 0d:51:81:7e:69:90:c8:87:fb:d3:83:06:07:4d:95: 46:53:48:0f:74:82:4c:e7:65:b7:e5:5b:9f:7e:80: c4:d5:a3:54:d3:72:53:d8:94:a1:04:32:8d:b9:6d: b5:77:51:c9:b0:fc:4e:f1:57:fb:59:8b:a2:3a:84: 26:c9:79:e7:b1:54:17:d5:19:f8:cd:c9:76:a5:37: 01:ea:b8:3e:58:14:e5:45:55:a0:7a:51:7c:9d:33: ca:bf:af:87:13:09:af:b1:f9:36:1f:1f:00:f7:47: 48:68:fe:64:5f:af:fb:a1:97:c4:06:1e:be:9f:4d: 0c:78:7c:67:cd:c1:02:cf:60:38:dc:16:9a:42:50: 58:78:2f:74:2c:23:0e:0b:98:5b:96:fb:58:e9:71: 7e:ee:c7:f2:4c:66:6f:a7:40:57:16:41:29:ba:d5: 65:49:9b:1f:00:34:be:6c:d4:24:13:6f:dd:f4:95: 61:ad:9f:94:6b:23:b1:61:08:84:02:e1:f3:b8:c3: 7d:1b:cb:e0:64:96:8b:8c:d5:05:2a:b5:ae:09:f7: c4:83:a7:f6:da:a3:c2:28:29:83:54:6c:61:44:4d: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C5:AF:29:C3:4E:C0:65:BE:49:F4:02:10:B6:2B:72:7D:27:A7:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/26dc5d69-06b3-3bf0-9157-47571adfefeb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f9:46:7f:93:84:b4:7b:e3:7b:7f:9a:f3:75:4e:83:c9:9d: a0:d7:59:00:99:2a:59:41:2c:7f:48:e3:e8:6e:9c:c1:44:ed: 1a:b1:35:20:e2:74:7e:ee:74:6c:ce:f8:e1:8b:0d:12:67:98: d0:44:18:d8:87:34:1c:11:46:38:26:94:f0:55:23:21:af:a7: b0:57:cd:22:86:57:a9:e0:f5:25:af:eb:e9:37:36:bb:82:93: 44:fd:52:4d:e0:a0:77:c5:80:c2:c0:83:b5:17:5b:40:a7:ce: 8e:12:04:40:15:df:68:4b:cb:94:ae:38:3d:28:f6:34:7e:43: 33:a6:0e:95:f5:c7:a3:53:ed:92:00:04:d5:03:70:86:27:33: 0e:b2:7c:2e:ce:85:fd:48:42:fa:84:9a:99:1b:90:f8:12:37: e8:14:b0:80:4f:db:b8:fb:31:a6:5d:ce:b7:fb:bb:c8:b6:5e: 8c:90:00:d1:8c:7e:91:0e:d1:17:90:ce:49:c8:d8:a4:b2:54: 7a:6e:48:ae:0d:7b:2b:d9:75:48:01:e7:51:0a:5c:73:99:68: b2:8e:ce:50:8d:2c:da:7e:e0:f0:4f:b9:02:05:cf:4e:b1:58: 73:10:79:db:bd:12:cd:ec:41:e6:e6:cb:62:09:ac:22:08:fb: df:41:bf:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UvIh1CaqCk/9QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk MjFiYmM4YjQtNmQ4NS00M2EyLWE1NjktOGYxMmMzYTc2MWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqGDcVdDp+zQbpMeiPl1AeBpmRc6ITI43yiq wWENUYF+aZDIh/vTgwYHTZVGU0gPdIJM52W35VuffoDE1aNU03JT2JShBDKNuW21 d1HJsPxO8Vf7WYuiOoQmyXnnsVQX1Rn4zcl2pTcB6rg+WBTlRVWgelF8nTPKv6+H Ewmvsfk2Hx8A90dIaP5kX6/7oZfEBh6+n00MeHxnzcECz2A43BaaQlBYeC90LCMO C5hblvtY6XF+7sfyTGZvp0BXFkEputVlSZsfADS+bNQkE2/d9JVhrZ+UayOxYQiE AuHzuMN9G8vgZJaLjNUFKrWuCffEg6f22qPCKCmDVGxhRE2BBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDFrynDTsBlvkn0AhC2K3J9J6eXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjZkYzVkNjktMDZiMy0z YmYwLTkxNTctNDc1NzFhZGZlZmViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH5Rn+ThLR743t/mvN1ToPJnaDXWQCZKllBLH9I4+hunMFE7RqxNSDi dH7udGzO+OGLDRJnmNBEGNiHNBwRRjgmlPBVIyGvp7BXzSKGV6ng9SWv6+k3NruC k0T9Uk3goHfFgMLAg7UXW0Cnzo4SBEAV32hLy5SuOD0o9jR+QzOmDpX1x6NT7ZIA BNUDcIYnMw6yfC7Ohf1IQvqEmpkbkPgSN+gUsIBP27j7MaZdzrf7u8i2XoyQANGM fpEO0ReQzknI2KSyVHpuSK4NeyvZdUgB51EKXHOZaLKOzlCNLNp+4PBPuQIFz06x WHMQedu9Es3sQebmy2IJrCII+99Bv0A= -----END CERTIFICATE-----Generated at Wed May 13 06:45:18 2026 by rpki-client