$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/781eae22-ad07-3316-ad3b-372538abc31b.roa File: 781eae22-ad07-3316-ad3b-372538abc31b.roa (raw, json) Hash identifier: EU4MUFogr0bn1riVMab46yHu68KzZEOxJGl0Ck8+k5w= Subject key identifier: A2:0A:63:03:D9:39:BE:BA:EB:65:3A:23:8A:D2:5C:F2:A3:74:A8:BA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BA9C7DE8FAD62F64928D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/781eae22-ad07-3316-ad3b-372538abc31b.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:9c:7d:e8:fa:d6:2f:64:92:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=b3ea5017-afaf-42a5-8857-e8447ea31a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:23:85:e8:f5:74:05:4a:b4:d5:06:e5:2a:f8: 31:81:29:5a:82:b2:9e:c3:da:ad:9c:9e:41:03:ba: 34:24:2d:68:f2:09:4e:db:bd:de:9f:db:75:6d:ad: 92:d6:8b:72:c0:bc:3d:c7:26:2f:95:e7:72:6f:0c: eb:ba:62:7f:96:a7:74:90:53:81:ad:d6:1c:44:70: 40:a0:25:00:45:ea:83:0e:c5:68:cb:d2:d6:db:87: 11:63:fa:0b:b9:e3:65:b2:56:ae:02:4c:59:f2:c6: 4a:a0:e3:93:c7:a1:f5:1f:ba:75:ad:97:86:0c:ff: 27:c1:37:82:da:e0:63:e0:04:70:ef:9d:59:3f:81: 2d:a7:c3:ef:4d:65:f4:76:49:58:79:d6:d1:50:c9: 1e:56:03:f9:7b:c6:61:46:5a:66:bb:52:29:70:2f: 27:64:14:cd:f4:66:29:e3:01:10:4a:b4:16:8d:17: 91:3d:28:e3:22:42:89:4b:ab:2f:d3:ae:b0:5c:47: 17:3e:96:d0:fc:64:07:ea:02:8f:89:91:dc:86:5f: ba:7d:c8:37:16:25:e3:73:ec:e0:b0:be:6d:15:76: 86:4f:59:d3:b2:96:22:a8:ee:bb:cd:28:48:fa:57: 30:86:b9:74:b4:ce:a7:18:df:21:00:db:08:5b:1f: 1b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:0A:63:03:D9:39:BE:BA:EB:65:3A:23:8A:D2:5C:F2:A3:74:A8:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/781eae22-ad07-3316-ad3b-372538abc31b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:5b:72:56:da:83:fe:d7:e2:c3:d8:b4:8c:ae:f4:5d:c1:42: 24:e6:db:e0:6f:e1:5c:db:e0:f7:34:98:b3:1c:9f:55:01:d6: aa:42:4a:16:1f:7e:f3:1d:5b:88:dc:25:de:ad:5d:b1:b0:d4: b5:46:f4:14:88:02:1f:58:72:ff:20:d9:25:17:b2:cb:86:28: c2:5b:69:eb:74:f8:a3:de:54:aa:db:ee:16:28:81:85:5c:c4: 1f:c4:5f:55:fd:3a:11:cb:f5:d0:a6:af:66:6a:a5:c6:79:71: 9a:58:5d:22:c3:58:38:2e:5c:c9:3a:40:a9:b3:c1:38:8f:7f: 4a:ec:d5:8e:ba:62:69:1f:51:f3:05:c7:75:41:38:1d:83:44: 5f:42:1f:ac:50:a0:5d:da:ad:c3:a7:09:99:90:6c:3d:57:c9: ba:54:7f:c5:50:d5:d5:f1:b7:24:63:f1:52:59:3a:8b:2e:a8: 8d:58:de:6b:75:4d:1e:e4:41:f9:04:76:51:e1:8c:4d:21:a7: 91:be:3e:ba:8a:8e:3f:2a:8f:15:04:ba:52:27:2d:4a:91:6f: c7:85:0a:fb:69:a7:b0:9b:f1:b9:3a:87:fc:cd:2d:d9:18:2f: db:3b:7e:6b:03:c5:a2:24:ea:66:b3:77:6b:23:a6:d3:98:f8: ba:75:f4:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Yupx96PrWL2SSjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk YjNlYTUwMTctYWZhZi00MmE1LTg4NTctZTg0NDdlYTMxYTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSOF6PV0BUq01QblKvgxgSlagrKew9qtnJ5B A7o0JC1o8glO273en9t1ba2S1otywLw9xyYvledybwzrumJ/lqd0kFOBrdYcRHBA oCUAReqDDsVoy9LW24cRY/oLueNlslauAkxZ8sZKoOOTx6H1H7p1rZeGDP8nwTeC 2uBj4ARw751ZP4Etp8PvTWX0dklYedbRUMkeVgP5e8ZhRlpmu1IpcC8nZBTN9GYp 4wEQSrQWjReRPSjjIkKJS6sv066wXEcXPpbQ/GQH6gKPiZHchl+6fcg3FiXjc+zg sL5tFXaGT1nTspYiqO67zShI+lcwhrl0tM6nGN8hANsIWx8bXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIKYwPZOb6662U6I4rSXPKjdKi6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzgxZWFlMjItYWQwNy0z MzE2LWFkM2ItMzcyNTM4YWJjMzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlbclbag/7X4sPYtIyu9F3BQiTm2+Bv4Vzb4Pc0mLMcn1UB1qpCShYf fvMdW4jcJd6tXbGw1LVG9BSIAh9Ycv8g2SUXssuGKMJbaet0+KPeVKrb7hYogYVc xB/EX1X9OhHL9dCmr2ZqpcZ5cZpYXSLDWDguXMk6QKmzwTiPf0rs1Y66YmkfUfMF x3VBOB2DRF9CH6xQoF3arcOnCZmQbD1XybpUf8VQ1dXxtyRj8VJZOosuqI1Y3mt1 TR7kQfkEdlHhjE0hp5G+PrqKjj8qjxUEulInLUqRb8eFCvtpp7Cb8bk6h/zNLdkY L9s7fmsDxaIk6mazd2sjptOY+Lp19Ps= -----END CERTIFICATE-----Generated at Wed May 13 11:30:18 2026 by rpki-client