$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa File: 42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa (raw, json) Hash identifier: 2ixOkpfOOXakZW/unKmFVV/73MbFg4NZRnHhzgG+fIM= Subject key identifier: 0D:BE:E6:87:CC:7C:24:E7:D7:60:29:A9:13:90:64:60:6C:7A:BE:22 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FA1631CC6AC7811E4D8194000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 31898 IP address blocks: 140.204.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:1c:c6:ac:78:11:e4:d8:19:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=746027bd-4e77-447b-aafc-68128dacc016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:cc:c4:a9:cf:e2:d4:9d:19:cd:de:7e:09: 67:01:d6:76:71:55:48:9e:cd:ac:36:eb:b9:28:91: a1:ee:32:b9:08:99:1c:5c:72:ca:34:de:3d:fb:80: 10:9c:f7:02:8b:88:10:0b:3e:9b:27:79:ed:0f:99: 45:1a:39:6e:5a:10:77:32:b6:42:93:3b:07:59:3a: 2d:81:79:7c:da:b2:db:e3:5d:ba:42:c4:5a:10:5d: 9a:a2:3e:ee:cc:07:4c:4e:a6:db:3e:9d:e1:b8:31: f4:50:41:d1:31:c9:24:d4:1d:5b:18:3f:1a:0b:90: f7:11:32:6d:4f:b2:6b:9d:c1:cf:f5:64:00:26:a1: f2:61:0e:90:72:86:cb:1b:0a:77:0e:43:8e:f0:c4: 5d:99:2e:ed:a5:d7:60:57:a3:cf:a2:3b:d9:67:1d: fc:3a:a2:14:46:3a:30:34:db:ba:36:65:46:ce:e9: 53:a7:7c:7d:87:a3:90:3c:72:ca:b8:1e:fc:ee:cb: f4:8a:b2:fc:25:a3:ea:2e:bb:8a:21:78:b5:ed:82: e8:8c:03:6a:01:a0:b0:e2:b2:30:85:6d:40:52:ed: ea:dc:f9:17:75:71:2c:f0:c3:b3:5f:45:4a:f5:dd: 02:73:34:64:96:fa:a9:8f:05:68:b2:c7:f6:8f:4c: 82:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BE:E6:87:CC:7C:24:E7:D7:60:29:A9:13:90:64:60:6C:7A:BE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/42e3f607-12fc-3d1f-b7e3-486fdf05ed0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fc:d1:dd:11:11:a5:e1:24:53:df:f5:89:e7:6c:c7:22:6d: 03:a9:46:5f:0e:19:eb:15:69:28:03:9c:cb:f4:dd:55:f0:d2: ad:f3:a2:a7:de:3c:a7:21:81:28:78:a2:75:3d:c3:ce:07:ba: 53:85:5e:99:fb:a2:12:36:e4:24:9a:bb:1a:0d:ad:30:db:a5: cb:be:b4:2b:53:cb:79:8c:34:1e:e4:46:4e:55:88:d7:35:d9: a9:6f:1a:fb:17:c7:0c:67:e7:22:17:c1:1f:4f:7e:9b:d6:f2: c7:33:9b:ab:23:e2:1b:73:f2:01:e0:8c:9d:0c:9b:6a:1d:17: 39:90:a0:95:fd:c7:13:0f:0e:49:44:9a:11:8e:b6:d5:e8:96: 9c:0a:79:7a:d0:e1:f7:85:55:04:d4:c2:8f:96:83:85:08:22: 2c:80:f8:19:f7:85:d6:f0:19:4f:78:a4:73:1a:2f:6f:ad:03: 2d:92:26:b2:09:61:1a:a8:34:cc:db:f5:80:8f:47:b1:a8:90: 9a:91:14:1c:5c:d0:ab:a6:2e:36:2e:c5:4f:2d:b3:b9:b6:38: b6:03:09:0a:0b:bf:68:62:53:8b:ce:62:b5:92:a4:66:87:2f: 9b:5e:3f:0c:57:6b:89:a8:e1:e8:a2:d5:46:23:f3:c1:55:d0: 98:67:89:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYxzGrHgR5NgZQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk NzQ2MDI3YmQtNGU3Ny00NDdiLWFhZmMtNjgxMjhkYWNjMDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDMxKnP4tSdGc3efglnAdZ2cVVIns2sNuu5 KJGh7jK5CJkcXHLKNN49+4AQnPcCi4gQCz6bJ3ntD5lFGjluWhB3MrZCkzsHWTot gXl82rLb4126QsRaEF2aoj7uzAdMTqbbPp3huDH0UEHRMckk1B1bGD8aC5D3ETJt T7JrncHP9WQAJqHyYQ6QcobLGwp3DkOO8MRdmS7tpddgV6PPojvZZx38OqIURjow NNu6NmVGzulTp3x9h6OQPHLKuB787sv0irL8JaPqLruKIXi17YLojANqAaCw4rIw hW1AUu3q3PkXdXEs8MOzX0VK9d0CczRklvqpjwVossf2j0yCNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2+5ofMfCTn12ApqROQZGBser4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDJlM2Y2MDctMTJmYy0z ZDFmLWI3ZTMtNDg2ZmRmMDVlZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD80d0REaXhJFPf9YnnbMcibQOpRl8OGesVaSgDnMv03VXw0q3zoqfe PKchgSh4onU9w84HulOFXpn7ohI25CSauxoNrTDbpcu+tCtTy3mMNB7kRk5ViNc1 2alvGvsXxwxn5yIXwR9PfpvW8sczm6sj4htz8gHgjJ0Mm2odFzmQoJX9xxMPDklE mhGOttXolpwKeXrQ4feFVQTUwo+Wg4UIIiyA+Bn3hdbwGU94pHMaL2+tAy2SJrIJ YRqoNMzb9YCPR7GokJqRFBxc0KumLjYuxU8ts7m2OLYDCQoLv2hiU4vOYrWSpGaH L5tePwxXa4mo4eii1UYj88FV0JhniR0= -----END CERTIFICATE-----Generated at Sun Nov 15 18:23:06 2026 by rpki-client