$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa File: 4b862b71-d3d0-36db-b16c-8690ee9df696.roa (raw, json) Hash identifier: qj+LjNj8uraFXLGGjNMfBHUB8ng8ohTqbeKc8a8KHII= Subject key identifier: 4E:F1:4F:2E:30:A6:9E:E0:A0:2D:1A:C1:DB:02:96:F1:92:75:6D:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FFD3F7CD66FBAC89A9C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 140.91.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fd:3f:7c:d6:6f:ba:c8:9a:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=82952fd8-4c6d-464d-90bd-0e3cddbb3168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3b:78:84:da:c6:38:0c:ca:91:2d:ef:02:18: 15:f5:5c:0f:bc:4f:5b:a6:34:ad:29:6d:08:51:08: 7b:7b:0a:e8:e7:14:8d:c1:3d:8f:b4:7c:74:91:37: 73:6d:db:c3:b2:97:d1:b3:7e:2f:02:ce:31:e0:56: 56:fb:67:2f:cf:70:df:17:39:8c:0b:c8:8a:b3:54: 5d:33:e3:db:ca:9e:6f:bb:98:40:25:4b:01:35:f1: 2e:53:c1:69:18:6a:53:ab:ba:68:16:72:1c:18:dc: 45:99:e5:e0:f4:9e:ee:98:66:94:52:f4:88:c2:55: 0d:34:aa:b5:57:67:c6:fa:c1:15:d0:12:28:c4:e7: 84:67:c4:f1:b6:46:78:ca:f2:42:17:9e:d1:52:0a: 7b:73:76:37:19:49:ce:b7:89:78:02:75:68:2a:14: e0:ac:ee:bc:c0:c9:36:43:73:43:e2:4d:11:27:06: 41:fe:e0:f7:c1:95:35:7c:60:32:82:5e:08:49:f9: ce:33:a6:97:aa:80:14:af:f1:26:f5:75:7d:e5:62: 3f:17:c6:63:d0:1b:49:cd:06:11:7b:b3:5a:29:40: 77:d0:1c:ca:1f:fd:ec:90:b2:c2:3e:72:d6:fa:8c: ed:26:5c:56:d1:95:d5:99:aa:e9:fd:a4:1e:b2:21: 20:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F1:4F:2E:30:A6:9E:E0:A0:2D:1A:C1:DB:02:96:F1:92:75:6D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b862b71-d3d0-36db-b16c-8690ee9df696.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:27:91:8d:2c:ab:0c:5c:20:b2:37:ee:78:96:fa:3d:46:4a: 08:46:47:cf:88:bf:40:28:55:81:45:45:08:f8:e0:1c:41:e6: 0c:22:01:59:d1:3e:a2:d2:b9:ff:38:88:e3:76:4a:af:e2:72: c4:24:fb:56:d7:d4:cd:8e:8e:26:f4:9f:ba:a4:5d:3d:5b:3a: e7:3d:e1:5c:8f:7c:2d:29:35:bf:8d:0f:78:88:50:2d:8a:ec: 15:04:df:34:16:ab:24:a3:70:ea:7f:cb:10:71:95:f1:0f:c7: 06:9c:27:6f:62:89:23:4f:a8:38:37:65:1e:a5:16:83:3e:26: 0f:1a:9e:54:f8:2a:4d:24:75:0c:72:c5:98:9c:54:04:95:95: 6b:73:08:30:69:c5:76:bf:dd:08:c2:e0:bc:ff:5a:97:31:23: 45:bd:47:ad:9a:bf:92:1b:97:03:67:97:7e:a5:e9:04:e3:be: 4f:0f:df:0f:4d:b7:4f:77:a9:0b:42:82:94:73:33:0d:78:66: c8:7a:f1:0e:2a:e0:fe:b5:46:c3:72:96:fc:49:45:a6:de:61: 30:76:8f:5a:b9:ef:46:fb:67:bb:d3:9f:06:e7:13:26:b5:45: e4:12:70:27:bf:59:be:ab:51:fb:f8:0d:43:9a:e2:dd:5e:e6: 6d:e9:d3:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/0/fNZvusianAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk ODI5NTJmZDgtNGM2ZC00NjRkLTkwYmQtMGUzY2RkYmIzMTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjt4hNrGOAzKkS3vAhgV9VwPvE9bpjStKW0I UQh7ewro5xSNwT2PtHx0kTdzbdvDspfRs34vAs4x4FZW+2cvz3DfFzmMC8iKs1Rd M+Pbyp5vu5hAJUsBNfEuU8FpGGpTq7poFnIcGNxFmeXg9J7umGaUUvSIwlUNNKq1 V2fG+sEV0BIoxOeEZ8TxtkZ4yvJCF57RUgp7c3Y3GUnOt4l4AnVoKhTgrO68wMk2 Q3ND4k0RJwZB/uD3wZU1fGAygl4ISfnOM6aXqoAUr/Em9XV95WI/F8Zj0BtJzQYR e7NaKUB30BzKH/3skLLCPnLW+oztJlxW0ZXVmarp/aQesiEgxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7xTy4wpp7goC0awdsClvGSdW14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGI4NjJiNzEtZDNkMC0z NmRiLWIxNmMtODY5MGVlOWRmNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgnkY0sqwxcILI37niW+j1GSghGR8+Iv0AoVYFFRQj44BxB5gwiAVnR PqLSuf84iON2Sq/icsQk+1bX1M2Ojib0n7qkXT1bOuc94VyPfC0pNb+ND3iIUC2K 7BUE3zQWqySjcOp/yxBxlfEPxwacJ29iiSNPqDg3ZR6lFoM+Jg8anlT4Kk0kdQxy xZicVASVlWtzCDBpxXa/3QjC4Lz/WpcxI0W9R62av5IblwNnl36l6QTjvk8P3w9N t093qQtCgpRzMw14Zsh68Q4q4P61RsNylvxJRabeYTB2j1q570b7Z7vTnwbnEya1 ReQScCe/Wb6rUfv4DUOa4t1e5m3p028= -----END CERTIFICATE-----Generated at Wed May 13 05:20:57 2026 by rpki-client