$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa File: 437b6827-f6c6-36e7-9996-79edb25578c9.roa (raw, json) Hash identifier: pv3X/Fvk1AZdWEvBM6T0/AdFlbVujywbNxa6z83fhLE= Subject key identifier: FF:61:CC:35:A9:24:89:71:81:B6:F7:AA:50:D9:7D:B6:F6:F9:2A:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A20318E282378BE9F8BD600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.204.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:31:8e:28:23:78:be:9f:8b:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=07293a4c-9113-4a8d-85e7-67b9547154b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:e4:b8:55:27:a8:aa:fd:46:a7:2f:0c:50: 9c:fd:02:64:88:7e:0d:ec:97:38:96:3e:ab:32:6d: e4:91:bc:4a:47:82:fe:d6:3f:a6:43:93:e5:a1:e0: da:2c:98:23:5c:70:3c:bd:74:93:3f:08:b2:00:9d: 98:52:49:77:ac:d1:5e:78:7d:fd:f6:c2:32:4a:62: 23:a9:b4:85:22:74:5b:2d:43:1e:48:7b:24:f9:04: 56:70:ec:ed:11:c3:bb:43:04:bf:df:33:4e:8c:84: 73:bf:0d:73:e2:03:4d:b0:ff:b4:e4:c8:ab:3c:1b: 3f:36:55:3d:3f:a6:74:f5:b4:0e:58:73:4a:65:f4: dc:2e:21:60:da:93:35:b1:5d:a1:bd:b7:55:7f:b5: d0:ef:8b:e8:86:49:e1:76:1b:11:da:c5:b9:92:f6: 4d:b9:cc:3e:e9:f7:1b:bc:02:74:f4:ba:74:e9:3e: c9:1a:8b:0a:58:3a:34:03:87:62:57:72:13:c0:24: 94:df:3c:7c:8a:f6:a0:7a:07:ae:60:0c:4d:df:fd: 0a:81:01:f7:5b:ac:0c:30:01:a9:87:68:87:82:74: c3:f5:96:07:d4:d6:a6:fd:fb:2d:09:9d:09:de:9b: 02:ac:58:36:28:8a:5f:68:04:5f:c7:2e:56:a1:37: 28:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:61:CC:35:A9:24:89:71:81:B6:F7:AA:50:D9:7D:B6:F6:F9:2A:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/437b6827-f6c6-36e7-9996-79edb25578c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.202.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ca:b2:23:36:7b:22:d8:b8:e6:bd:17:30:0a:5c:7a:86:b2: f2:8b:12:76:2b:72:51:23:09:90:8d:87:7d:9b:36:d9:20:63: ac:d7:e8:c0:68:9a:1d:82:fb:e0:b5:1f:9c:a7:b0:78:a7:02: 84:c6:5d:fd:a5:ef:52:95:7b:47:d8:93:9c:57:b3:c5:a5:9a: f4:62:a0:64:00:b2:bf:ea:7a:de:87:20:b9:df:69:7c:a5:65: 0d:ab:83:26:c8:92:7a:87:4a:87:30:72:5f:5c:f0:00:4f:19: 1d:0c:26:47:17:d4:a2:28:21:75:d5:bd:9f:b2:9f:c6:8f:24: c7:e4:ac:22:fe:41:43:4c:90:c9:5d:7a:bb:fe:ad:32:a1:4e: f6:66:36:5c:61:3a:b2:5d:b4:7e:fe:73:33:74:56:21:91:90: 19:f7:d7:8c:ea:c4:96:0c:5d:cc:60:bd:e1:9a:22:97:8d:ca: 3e:c7:b6:86:78:3e:9e:7f:a0:3d:19:0c:9e:8a:98:4a:cd:fe: 12:86:b6:4d:e4:01:1d:34:d8:79:b0:b5:c0:b9:7f:af:c2:69: 28:88:27:f5:62:f8:07:7d:70:70:8f:77:7e:04:a0:fc:97:c8: c2:92:9a:cf:68:43:a2:c4:cd:89:76:7b:13:ab:60:4c:79:01: a6:54:1c:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDGOKCN4vp+L1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MDcyOTNhNGMtOTExMy00YThkLTg1ZTctNjdiOTU0NzE1NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSrkuFUnqKr9RqcvDFCc/QJkiH4N7Jc4lj6r Mm3kkbxKR4L+1j+mQ5PloeDaLJgjXHA8vXSTPwiyAJ2YUkl3rNFeeH399sIySmIj qbSFInRbLUMeSHsk+QRWcOztEcO7QwS/3zNOjIRzvw1z4gNNsP+05MirPBs/NlU9 P6Z09bQOWHNKZfTcLiFg2pM1sV2hvbdVf7XQ74vohknhdhsR2sW5kvZNucw+6fcb vAJ09Lp06T7JGosKWDo0A4diV3ITwCSU3zx8ivagegeuYAxN3/0KgQH3W6wMMAGp h2iHgnTD9ZYH1Nam/fstCZ0J3psCrFg2KIpfaARfxy5WoTcomQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9hzDWpJIlxgbb3qlDZfbb2+SrBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDM3YjY4MjctZjZjNi0z NmU3LTk5OTYtNzllZGIyNTU3OGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbKsiM2eyLYuOa9FzAKXHqGsvKLEnYrclEjCZCNh32bNtkgY6zX6MBo mh2C++C1H5ynsHinAoTGXf2l71KVe0fYk5xXs8WlmvRioGQAsr/qet6HILnfaXyl ZQ2rgybIknqHSocwcl9c8ABPGR0MJkcX1KIoIXXVvZ+yn8aPJMfkrCL+QUNMkMld erv+rTKhTvZmNlxhOrJdtH7+czN0ViGRkBn314zqxJYMXcxgveGaIpeNyj7HtoZ4 Pp5/oD0ZDJ6KmErN/hKGtk3kAR002HmwtcC5f6/CaSiIJ/Vi+Ad9cHCPd34EoPyX yMKSms9oQ6LEzYl2exOrYEx5AaZUHE4= -----END CERTIFICATE-----Generated at Wed May 13 14:56:21 2026 by rpki-client