$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa File: 3d12fc45-534a-3178-b3f6-07feab5954d1.roa (raw, json) Hash identifier: APNKHDW7hojqUl4iC6ioLyqk9sWYntpNa+qzwwycwg8= Subject key identifier: FC:64:42:92:1D:1B:8F:F7:20:FB:1E:D0:C7:68:8A:91:D6:58:4D:F9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC53F86C31D4D3B8BAA4040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.20.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3f:86:c3:1d:4d:3b:8b:aa:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=cf010483-0e0d-4323-8ba4-8ac7393b0f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:51:9a:38:7d:9f:19:5b:2f:30:da:2e:a0:f1: 15:eb:c0:b7:f4:9c:24:99:e2:f5:2f:38:97:2a:12: da:4a:55:35:4c:9e:29:82:85:03:f3:af:61:b9:49: 27:9b:a7:ac:15:df:f4:70:c4:5b:4e:b7:5e:68:ef: 11:32:6e:de:77:d5:79:bc:e0:16:ea:0b:32:bf:7a: ad:f4:1e:93:1e:7f:d6:08:dc:ac:69:c5:5f:6c:ef: 53:8e:6e:e7:22:a8:0d:41:d4:6e:87:74:11:b1:da: b1:79:25:52:7a:4e:55:79:aa:0c:81:25:85:b0:2b: 1f:60:bf:43:a0:18:10:8f:a1:4a:bf:91:31:e7:99: e5:5f:aa:1c:b5:a4:3b:be:6b:3a:99:06:04:ec:47: 4f:1c:b9:48:6e:3a:af:4e:af:3b:27:f2:89:05:a1: a2:16:55:93:9d:69:92:21:ab:41:54:a3:85:08:bd: 58:0d:17:bb:b1:8f:b3:9a:9c:9e:49:ea:4e:ca:90: 41:53:0d:8a:f2:76:3a:49:42:82:8a:4e:d7:69:cb: c1:4b:4c:b5:11:33:5b:73:ce:bb:89:60:ee:c6:14: cf:64:a8:84:7b:a2:ea:b7:e3:58:8c:52:5c:5c:ab: 76:2c:bf:07:d1:80:92:20:34:12:ca:6f:a8:e8:76: 4e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:64:42:92:1D:1B:8F:F7:20:FB:1E:D0:C7:68:8A:91:D6:58:4D:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3d12fc45-534a-3178-b3f6-07feab5954d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.20.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:19:dd:43:a3:44:90:ad:61:74:2a:43:aa:1b:a6:dc:40:79: 58:cc:99:70:09:fc:ae:71:65:f1:cd:78:f6:b0:c0:13:bd:e2: fa:3e:f5:e6:ca:79:00:dd:ec:0a:ba:a3:bc:2b:e2:84:64:a4: ca:60:a1:be:13:2c:b0:77:a6:dc:d8:4c:7d:3b:24:7c:dc:56: 35:91:46:ad:70:f4:5b:f9:1a:cc:38:91:5a:45:26:96:ac:31: f2:9e:0e:a7:f0:5d:1b:3f:89:1e:47:2c:ad:2c:3d:19:1b:96: ae:73:49:96:98:47:60:95:3e:ec:c0:80:c8:66:de:e5:ee:be: da:9a:2e:65:4a:59:a8:ee:23:d8:20:be:09:1b:d0:3a:f8:74: 11:2a:2a:48:53:b7:d2:7e:bb:5a:09:a7:5e:11:02:59:20:e0: c0:7b:58:d4:db:13:89:d6:af:ed:e3:ad:72:df:42:7f:71:d4: 03:41:9a:ab:6c:89:18:a1:79:c7:16:88:62:55:fc:23:11:33: f6:24:da:f3:c1:4f:7c:9f:96:83:1b:92:5a:cd:f3:3f:ae:b8: fd:0e:bb:af:c9:55:13:95:a0:21:a7:2d:0e:8c:2c:d5:89:bd: 4f:a1:5f:cd:d7:32:c2:34:1f:3d:34:3a:cd:f5:f4:8c:b5:d9: e1:e4:a4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxT+Gwx1NO4uqQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk Y2YwMTA0ODMtMGUwZC00MzIzLThiYTQtOGFjNzM5M2IwZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFGaOH2fGVsvMNouoPEV68C39JwkmeL1LziX KhLaSlU1TJ4pgoUD869huUknm6esFd/0cMRbTrdeaO8RMm7ed9V5vOAW6gsyv3qt 9B6THn/WCNysacVfbO9Tjm7nIqgNQdRuh3QRsdqxeSVSek5VeaoMgSWFsCsfYL9D oBgQj6FKv5Ex55nlX6octaQ7vms6mQYE7EdPHLlIbjqvTq87J/KJBaGiFlWTnWmS IatBVKOFCL1YDRe7sY+zmpyeSepOypBBUw2K8nY6SUKCik7XacvBS0y1ETNbc867 iWDuxhTPZKiEe6Lqt+NYjFJcXKt2LL8H0YCSIDQSym+o6HZOJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPxkQpIdG4/3IPse0MdoipHWWE35MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2QxMmZjNDUtNTM0YS0z MTc4LWIzZjYtMDdmZWFiNTk1NGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACsZ3UOjRJCtYXQqQ6obptxAeVjMmXAJ/K5xZfHNePawwBO94vo+9ebK eQDd7Aq6o7wr4oRkpMpgob4TLLB3ptzYTH07JHzcVjWRRq1w9Fv5Gsw4kVpFJpas MfKeDqfwXRs/iR5HLK0sPRkblq5zSZaYR2CVPuzAgMhm3uXuvtqaLmVKWajuI9gg vgkb0Dr4dBEqKkhTt9J+u1oJp14RAlkg4MB7WNTbE4nWr+3jrXLfQn9x1ANBmqts iRiheccWiGJV/CMRM/Yk2vPBT3yfloMbklrN8z+uuP0Ou6/JVROVoCGnLQ6MLNWJ vU+hX83XMsI0Hz00Os319Iy12eHkpKs= -----END CERTIFICATE-----Generated at Wed May 13 08:00:48 2026 by rpki-client