$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa File: 2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa (raw, json) Hash identifier: C2HUyV1CvNex1OOVqgkZ/00kCiYZmVP+FBsNY27kZHU= Subject key identifier: 4E:E8:9E:5A:88:24:6F:56:11:E4:95:4F:43:75:CF:FE:65:06:44:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF99F68FA52699B48D632E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:9f:68:fa:52:69:9b:48:d6:32:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9b478176-1a2b-446f-892a-6f373d19d521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9e:a8:c9:d3:b4:ae:a9:a4:00:fe:e3:2a:6e: 69:a7:ab:3b:b2:c4:ea:df:7b:77:c6:a6:e0:f1:26: 18:c2:bb:5e:31:71:27:40:b9:96:7f:7c:80:4a:12: 5e:e9:81:c1:38:8c:b4:bb:d8:36:23:31:a3:e3:ec: 44:43:13:0b:78:15:c6:24:01:e0:d9:a1:92:b4:8e: af:ab:45:af:88:d7:be:e3:0f:6c:e1:1a:00:b0:da: 4f:de:98:13:b3:b5:21:49:2c:d3:13:92:8b:63:e4: b8:75:48:b6:3e:dd:62:08:fb:0d:b6:18:ec:0f:43: 38:94:37:bc:8a:4f:6a:dc:e7:e5:56:49:7a:e1:fe: dc:10:9a:fd:aa:cf:1f:2a:a6:29:46:35:dc:17:88: 31:18:47:b3:e8:f3:15:83:eb:9e:cc:00:68:c7:55: 45:f9:5b:d5:2a:a2:69:a3:a1:bf:6a:74:33:f5:02: c7:7d:f0:04:66:de:ed:61:63:08:65:13:8e:38:10: 20:20:66:d3:0e:8d:07:ea:b8:87:84:26:9e:64:1d: 02:55:ca:77:4d:f9:5c:9d:17:cf:6f:ff:2e:4c:4f: f3:fb:1a:b4:e5:71:39:69:39:fd:5f:02:dd:28:2b: 09:43:5e:51:58:78:d0:fe:44:3d:16:1e:23:fc:c5: 1b:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E8:9E:5A:88:24:6F:56:11:E4:95:4F:43:75:CF:FE:65:06:44:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2c94f962-7a7b-3ada-a8f5-82b4f890ba06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:b3:32:fe:ec:f1:f5:d8:a8:6a:fd:c6:97:11:60:67:a6:c0: 19:a2:44:ee:7d:29:e9:ac:fb:a0:67:e3:a5:ef:68:7f:e8:42: 49:8a:69:d3:ad:d4:40:f4:6f:e8:eb:d0:98:cb:a6:b4:88:36: 06:f2:9d:15:13:7e:97:bd:2d:8f:c9:e6:34:50:45:90:df:98: 07:c7:ca:ef:c1:0c:ca:12:d2:57:2b:ef:a6:23:60:cb:4b:83: fc:03:6f:48:b3:8d:dc:8b:c4:bd:d4:d5:03:88:7c:38:f9:f9: 1e:85:0b:8d:d8:e6:4e:f3:76:a2:2c:fe:14:f0:39:0b:8a:0c: 5e:a2:43:1d:45:4b:fa:b0:10:66:79:e5:ad:76:75:5f:da:64: 00:2f:4b:7d:35:2f:69:0f:1c:25:3d:33:5a:46:10:f0:2d:9c: cf:57:9b:c8:58:20:52:ec:74:38:17:15:a4:8d:27:76:6d:c7: 63:89:e6:09:79:88:e6:62:a6:d4:53:7b:c6:52:25:a4:62:44: 5a:61:5c:05:d7:c5:8e:89:5d:52:c1:68:10:cc:8d:56:1f:77: 71:cf:22:17:25:22:ce:d7:a2:5d:c5:51:5f:8b:87:90:a1:64: b9:12:67:4f:5d:75:c8:84:0a:15:a7:78:f5:43:b4:88:f9:70: 70:09:86:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Z9o+lJpm0jWMuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWI0NzgxNzYtMWEyYi00NDZmLTg5MmEtNmYzNzNkMTlkNTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA056oydO0rqmkAP7jKm5pp6s7ssTq33t3xqbg 8SYYwrteMXEnQLmWf3yAShJe6YHBOIy0u9g2IzGj4+xEQxMLeBXGJAHg2aGStI6v q0WviNe+4w9s4RoAsNpP3pgTs7UhSSzTE5KLY+S4dUi2Pt1iCPsNthjsD0M4lDe8 ik9q3OflVkl64f7cEJr9qs8fKqYpRjXcF4gxGEez6PMVg+uezABox1VF+VvVKqJp o6G/anQz9QLHffAEZt7tYWMIZROOOBAgIGbTDo0H6riHhCaeZB0CVcp3TflcnRfP b/8uTE/z+xq05XE5aTn9XwLdKCsJQ15RWHjQ/kQ9Fh4j/MUblwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7onlqIJG9WEeSVT0N1z/5lBkQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmM5NGY5NjItN2E3Yi0z YWRhLWE4ZjUtODJiNGY4OTBiYTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAWzMv7s8fXYqGr9xpcRYGemwBmiRO59Kems+6Bn46XvaH/oQkmKadOt 1ED0b+jr0JjLprSINgbynRUTfpe9LY/J5jRQRZDfmAfHyu/BDMoS0lcr76YjYMtL g/wDb0izjdyLxL3U1QOIfDj5+R6FC43Y5k7zdqIs/hTwOQuKDF6iQx1FS/qwEGZ5 5a12dV/aZAAvS301L2kPHCU9M1pGEPAtnM9Xm8hYIFLsdDgXFaSNJ3Ztx2OJ5gl5 iOZiptRTe8ZSJaRiRFphXAXXxY6JXVLBaBDMjVYfd3HPIhclIs7Xol3FUV+Lh5Ch ZLkSZ09ddciEChWnePVDtIj5cHAJhro= -----END CERTIFICATE-----Generated at Wed May 13 06:50:40 2026 by rpki-client