$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa File: 484989d2-183b-3b0e-9d7d-b3a50f030c09.roa (raw, json) Hash identifier: bTjqXTvphVIpbafa2LMaybTIUh1a/aIH9hZvJQ5xw8E= Subject key identifier: 53:03:6C:9A:9D:C6:31:53:C0:B8:04:0D:B9:98:CE:9A:12:01:B9:BE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF548D19067EEBDD5EF0D40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.91.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:48:d1:90:67:ee:bd:d5:ef:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b92a3b08-532f-47b4-a9bd-95f2ed27b823 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:38:d2:bf:e8:b4:00:c1:d0:ee:d4:cf:26:f5: fe:1e:84:1e:09:63:6b:5a:db:a9:f2:e5:4f:dc:4c: 33:00:79:bd:96:b3:0e:94:0d:7e:ec:2f:c1:a2:26: da:a5:ee:27:51:b3:a5:6a:aa:25:83:d3:aa:59:27: ae:9c:c7:bb:e5:17:1e:19:1b:96:08:a3:24:7e:4a: ee:b3:8b:b3:41:07:62:fe:06:01:af:4d:d1:48:5c: ff:a6:fe:a6:14:e2:b2:92:ce:72:29:f7:cd:ef:41: df:fc:ba:6b:3f:c1:da:db:d6:ba:b8:fe:de:39:49: 05:c1:41:ef:27:56:0a:01:4b:6b:53:3f:c4:1a:7c: bd:f1:6a:29:b7:1c:d2:08:fd:58:a0:bd:3d:be:fd: cb:59:7d:84:08:3c:22:f3:52:52:15:d2:82:ae:75: d2:2d:92:cd:6c:a5:9a:03:e5:73:b1:dd:78:16:f6: 82:01:e7:f4:2a:fb:17:75:fd:05:5c:ca:3f:b3:b5: bc:5e:cd:bc:81:77:ad:37:76:c0:8f:99:5c:dd:f1: 8f:56:2a:7b:f5:fe:d9:86:a3:31:fd:1d:4a:c5:13: 98:05:c1:ae:e9:80:7d:e1:92:be:e3:50:32:ff:ce: b3:4d:e4:45:e9:12:8b:5a:79:e2:5e:9c:9c:99:fe: 9b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:03:6C:9A:9D:C6:31:53:C0:B8:04:0D:B9:98:CE:9A:12:01:B9:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/484989d2-183b-3b0e-9d7d-b3a50f030c09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:05:54:31:d2:a0:e6:f2:7d:df:f6:e5:1a:64:8a:56:c6:4f: 75:1f:a4:8a:c1:5e:75:1e:4c:d0:bd:a2:28:23:17:1f:1d:c8: 9f:74:6c:13:32:45:40:6d:b6:df:f8:4b:ce:ff:a9:d3:8d:e0: d9:dd:dc:71:f4:b9:0a:50:50:f4:22:e4:26:5a:26:73:92:fa: 0f:0a:19:6c:51:dc:2e:b6:06:e8:98:f0:31:1d:9e:22:1c:11: 22:45:ab:a8:51:8b:a7:90:bd:8f:f4:ef:dc:f6:f2:2c:1c:88: 11:b9:4e:07:a1:e2:65:48:dc:fa:1d:f5:8e:cd:d2:a7:34:e1: 3c:c1:05:62:6f:1b:0c:c6:93:b8:a6:63:91:a7:90:fc:31:99: ed:ab:a1:36:0e:c1:dc:66:b4:c2:e0:f3:d8:31:b3:7b:44:49: e7:18:0f:85:12:05:39:82:f6:e2:a5:26:94:47:82:3a:fb:cd: 53:8f:fe:98:7f:a7:37:6c:5e:12:41:c0:8b:cf:2d:16:dc:7d: 29:7e:b1:15:f5:c4:b9:66:25:63:3d:67:52:6c:5a:4a:01:c9: 1f:ff:d9:38:f5:53:de:d0:3a:6f:99:36:97:5f:1b:e1:87:7a: 12:da:b6:6b:e1:f3:65:02:ef:99:ab:d5:51:1d:15:04:9b:c9: 36:79:23:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UjRkGfuvdXvDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjkyYTNiMDgtNTMyZi00N2I0LWE5YmQtOTVmMmVkMjdiODIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzjSv+i0AMHQ7tTPJvX+HoQeCWNrWtup8uVP 3EwzAHm9lrMOlA1+7C/Boibape4nUbOlaqolg9OqWSeunMe75RceGRuWCKMkfkru s4uzQQdi/gYBr03RSFz/pv6mFOKyks5yKffN70Hf/LprP8Ha29a6uP7eOUkFwUHv J1YKAUtrUz/EGny98WoptxzSCP1YoL09vv3LWX2ECDwi81JSFdKCrnXSLZLNbKWa A+Vzsd14FvaCAef0KvsXdf0FXMo/s7W8Xs28gXetN3bAj5lc3fGPVip79f7ZhqMx /R1KxROYBcGu6YB94ZK+41Ay/86zTeRF6RKLWnniXpycmf6bnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMDbJqdxjFTwLgEDbmYzpoSAbm+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDg0OTg5ZDItMTgzYi0z YjBlLTlkN2QtYjNhNTBmMDMwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFEFVDHSoObyfd/25RpkilbGT3UfpIrBXnUeTNC9oigjFx8dyJ90bBMy RUBttt/4S87/qdON4Nnd3HH0uQpQUPQi5CZaJnOS+g8KGWxR3C62BuiY8DEdniIc ESJFq6hRi6eQvY/079z28iwciBG5Tgeh4mVI3Pod9Y7N0qc04TzBBWJvGwzGk7im Y5GnkPwxme2roTYOwdxmtMLg89gxs3tESecYD4USBTmC9uKlJpRHgjr7zVOP/ph/ pzdsXhJBwIvPLRbcfSl+sRX1xLlmJWM9Z1JsWkoByR//2Tj1U97QOm+ZNpdfG+GH ehLatmvh82UC75mr1VEdFQSbyTZ5I1A= -----END CERTIFICATE-----Generated at Wed May 13 05:08:50 2026 by rpki-client