$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71a6ab3f-d437-3a5e-bb9d-7af9429314f2.roa File: 71a6ab3f-d437-3a5e-bb9d-7af9429314f2.roa (raw, json) Hash identifier: tjvC+PqFlF3E+I1lsdNJVdwe8hfslDyD0kmp+5AyNMg= Subject key identifier: 28:DA:31:32:1B:29:68:EA:4D:CE:FB:68:9A:29:D4:E7:69:4D:25:16 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FE7D75E8B8045F1888720 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71a6ab3f-d437-3a5e-bb9d-7af9429314f2.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 140.204.84.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:e7:d7:5e:8b:80:45:f1:88:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=615bf6c6-4a96-458e-a43b-88119eb76105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:01:3c:cd:77:1d:6b:eb:b2:57:6e:c9:41:f0: a3:95:8b:93:c2:6b:9b:bf:69:d0:6f:7d:dd:0b:9e: 7a:72:05:4a:0f:71:d6:8c:43:bc:17:a0:55:9f:7d: 51:23:a4:76:51:62:54:ff:f5:53:f7:92:c6:8a:c3: 89:65:65:0b:69:04:2d:6a:da:28:f3:68:48:e3:fb: f1:b9:40:82:02:b8:67:c2:b1:db:35:af:74:e2:9e: 4c:9a:8f:4b:a5:2b:f1:37:12:8b:81:aa:c6:d7:f3: 47:79:d0:ee:a8:20:94:6f:e5:35:f9:cc:d4:b7:88: d1:67:4a:19:ae:3b:96:17:cc:54:a6:d5:89:54:67: 2d:4b:30:a1:ad:f1:e1:a4:e3:64:98:5c:79:4d:12: bc:ff:8a:90:fe:bb:66:52:ad:c0:14:76:22:c8:4e: c5:a1:96:ee:98:4d:66:f3:74:e3:83:55:30:46:03: 3b:9c:52:c6:fd:4d:6e:f2:a5:ef:02:c1:24:13:35: bf:3b:62:b1:26:f5:dc:ea:52:82:fc:74:53:2f:80: 1c:3b:d6:d3:1d:5f:83:cc:62:1e:18:61:29:c7:93: 07:2f:f1:5f:4b:4e:36:1e:bf:95:3c:08:39:b4:45: 0b:45:13:c0:6e:cb:cf:ae:37:f3:1f:7c:37:31:29: db:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DA:31:32:1B:29:68:EA:4D:CE:FB:68:9A:29:D4:E7:69:4D:25:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/71a6ab3f-d437-3a5e-bb9d-7af9429314f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.84.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7d:53:1b:d9:be:41:ce:25:07:ff:77:cf:0c:10:9e:30:74: 60:27:45:81:4c:c3:c5:6c:7e:7d:08:a2:c7:0d:ec:56:ff:b5: b9:77:6b:91:b8:cd:0f:75:a2:59:ec:80:8b:3d:46:04:dd:6d: df:04:70:43:1c:7b:9d:fa:b5:20:a9:82:1f:5b:f2:01:af:b2: 9e:0a:13:ae:cb:36:04:c5:0c:51:fb:4a:9f:df:68:4c:c6:e7: f2:d3:a6:54:a7:1c:18:aa:12:e1:51:80:58:32:c4:b3:fb:60: f9:87:04:c0:05:a1:9a:cf:2b:0e:49:11:43:57:33:d0:88:be: b9:f8:8e:7b:be:c6:2c:a5:99:6a:bc:18:05:b6:13:67:bd:c0: 90:7c:77:32:8c:51:14:18:cc:8a:94:29:c6:82:2c:de:d3:57: d3:82:4f:64:58:37:c9:d2:02:bb:65:ce:0e:90:70:0a:4c:81: 36:fa:31:9c:b3:e0:a7:41:23:d8:bd:03:08:c2:67:e5:7f:4f: 33:d4:96:1a:61:85:b3:a7:70:45:8f:b3:2d:59:4f:c6:6b:24: cf:98:45:6a:1b:25:3f:ed:31:29:25:9b:fa:56:a6:d2:fc:f9: 57:9c:ee:9a:5f:23:f6:e1:81:dc:3d:ad:03:af:90:c4:e2:9d: 69:6f:ac:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj+fXXouARfGIhyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NjE1YmY2YzYtNGE5Ni00NThlLWE0M2ItODgxMTllYjc2MTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwE8zXcda+uyV27JQfCjlYuTwmubv2nQb33d C556cgVKD3HWjEO8F6BVn31RI6R2UWJU//VT95LGisOJZWULaQQtatoo82hI4/vx uUCCArhnwrHbNa904p5Mmo9LpSvxNxKLgarG1/NHedDuqCCUb+U1+czUt4jRZ0oZ rjuWF8xUptWJVGctSzChrfHhpONkmFx5TRK8/4qQ/rtmUq3AFHYiyE7FoZbumE1m 83Tjg1UwRgM7nFLG/U1u8qXvAsEkEzW/O2KxJvXc6lKC/HRTL4AcO9bTHV+DzGIe GGEpx5MHL/FfS042Hr+VPAg5tEULRRPAbsvPrjfzH3w3MSnbiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjaMTIbKWjqTc77aJop1OdpTSUWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzFhNmFiM2YtZDQzNy0z YTVlLWJiOWQtN2FmOTQyOTMxNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC99UxvZvkHOJQf/d88MEJ4wdGAnRYFMw8Vsfn0IoscN7Fb/tbl3a5G4 zQ91olnsgIs9RgTdbd8EcEMce536tSCpgh9b8gGvsp4KE67LNgTFDFH7Sp/faEzG 5/LTplSnHBiqEuFRgFgyxLP7YPmHBMAFoZrPKw5JEUNXM9CIvrn4jnu+xiylmWq8 GAW2E2e9wJB8dzKMURQYzIqUKcaCLN7TV9OCT2RYN8nSArtlzg6QcApMgTb6MZyz 4KdBI9i9AwjCZ+V/TzPUlhphhbOncEWPsy1ZT8ZrJM+YRWobJT/tMSklm/pWptL8 +Vec7ppfI/bhgdw9rQOvkMTinWlvrCI= -----END CERTIFICATE-----Generated at Wed May 13 07:54:34 2026 by rpki-client