$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa File: 803797d3-4169-3147-bacc-6a400b59eb13.roa (raw, json) Hash identifier: QLHtvYUOWVo8SXNlo1dw+jWcgdxKnmVQsuUy2t11BT0= Subject key identifier: 34:57:95:0E:B2:95:ED:23:CC:77:5E:A2:67:61:30:60:DE:FE:CC:CA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BA990A487A66391C538B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:99:0a:48:7a:66:39:1c:53:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=05bff79e-e3a8-48f1-a806-d05df34d1f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d0:95:ca:d9:74:89:a8:64:70:99:4a:e5:bc: f4:01:aa:07:40:11:fc:8d:b4:0e:87:5f:b7:f3:79: 80:b4:3b:d4:b6:af:79:d8:f6:84:ae:f1:c0:d5:6e: bc:88:5b:7a:ac:de:73:e8:74:a8:f8:65:d9:c3:42: db:6d:e8:9b:ed:72:70:82:69:5c:cc:d2:28:57:25: f0:7f:3c:0f:15:04:42:81:52:23:b2:f2:55:ce:df: 38:81:51:7f:17:a5:4b:3c:59:e4:93:c4:8b:b3:a0: e6:a5:28:bc:07:78:1a:9b:14:b5:c8:85:0b:0d:54: 30:6a:6e:3a:d8:0b:3c:9d:d6:f1:3c:3f:44:8c:27: c8:dc:14:bd:f5:e0:a8:8c:6b:9f:78:2e:ac:db:1d: aa:2d:18:dd:61:0c:af:8d:2d:fc:2c:00:a2:30:31: a2:e5:93:02:62:bb:19:b5:28:3b:26:0d:ea:96:b8: 68:24:94:52:d8:df:ed:5d:3c:18:7a:81:a3:bd:65: e9:11:ef:89:e9:ed:cd:d6:87:b2:6b:fa:be:ff:27: 79:c0:34:17:c9:9a:e8:1e:6f:10:11:f9:79:26:85: 34:07:1e:81:83:80:11:a3:39:96:c6:5e:92:e0:34: 11:dc:50:d1:83:bf:27:af:ff:ce:54:dd:6c:d8:64: ea:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:57:95:0E:B2:95:ED:23:CC:77:5E:A2:67:61:30:60:DE:FE:CC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/803797d3-4169-3147-bacc-6a400b59eb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:f4:a2:da:37:5f:e7:79:e3:14:fd:1b:2d:a5:63:7e:34:16: ab:dc:64:72:2b:8e:bc:86:c8:1b:02:50:95:97:63:ed:89:88: f8:3d:94:64:bb:15:9d:19:0f:89:9b:b0:2b:39:d1:78:ed:33: 15:56:7d:4c:ba:a6:95:00:27:c4:79:3a:f9:84:33:07:b3:16: f6:7d:ad:92:16:02:d8:6d:bd:26:00:4e:d9:eb:c4:65:82:35: d8:1c:b3:be:a5:ad:f0:93:9b:86:4a:3f:27:1a:42:9a:f1:4e: c5:c2:51:11:5d:cf:97:92:71:46:4d:03:d5:9f:b7:17:f0:72: 44:30:d4:d6:5e:5c:ab:60:65:64:52:a9:0b:cd:54:e8:3b:49: 7a:2a:ce:48:58:d9:00:76:10:79:5c:33:d8:cd:4e:9f:44:17: 02:33:c2:cb:b5:c6:a4:ed:6c:5e:82:dc:78:48:dd:a3:1f:6c: a8:92:f4:38:0b:9f:26:07:f1:c5:3d:b8:8e:0f:09:26:6a:b9: f5:df:4d:fc:88:cf:bf:63:49:e9:fc:e4:ef:e2:b7:a4:f8:76: 85:24:af:b3:5c:19:4e:56:d7:e5:e9:c7:d3:7c:49:b1:ba:b0: 5f:45:fd:9f:6f:07:bb:61:9c:f2:7d:25:c9:86:ce:09:4c:e8: 7d:af:3a:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YupkKSHpmORxTiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MDViZmY3OWUtZTNhOC00OGYxLWE4MDYtZDA1ZGYzNGQxZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9CVytl0iahkcJlK5bz0AaoHQBH8jbQOh1+3 83mAtDvUtq952PaErvHA1W68iFt6rN5z6HSo+GXZw0Lbbeib7XJwgmlczNIoVyXw fzwPFQRCgVIjsvJVzt84gVF/F6VLPFnkk8SLs6DmpSi8B3gamxS1yIULDVQwam46 2As8ndbxPD9EjCfI3BS99eCojGufeC6s2x2qLRjdYQyvjS38LACiMDGi5ZMCYrsZ tSg7Jg3qlrhoJJRS2N/tXTwYeoGjvWXpEe+J6e3N1oeya/q+/yd5wDQXyZroHm8Q Efl5JoU0Bx6Bg4ARozmWxl6S4DQR3FDRg78nr//OVN1s2GTqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRXlQ6yle0jzHdeomdhMGDe/szKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODAzNzk3ZDMtNDE2OS0z MTQ3LWJhY2MtNmE0MDBiNTllYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGP0oto3X+d54xT9Gy2lY340FqvcZHIrjryGyBsCUJWXY+2JiPg9lGS7 FZ0ZD4mbsCs50XjtMxVWfUy6ppUAJ8R5OvmEMwezFvZ9rZIWAthtvSYATtnrxGWC Ndgcs76lrfCTm4ZKPycaQprxTsXCURFdz5eScUZNA9WftxfwckQw1NZeXKtgZWRS qQvNVOg7SXoqzkhY2QB2EHlcM9jNTp9EFwIzwsu1xqTtbF6C3HhI3aMfbKiS9DgL nyYH8cU9uI4PCSZqufXfTfyIz79jSen85O/it6T4doUkr7NcGU5W1+Xpx9N8SbG6 sF9F/Z9vB7thnPJ9JcmGzglM6H2vOkA= -----END CERTIFICATE-----Generated at Wed May 13 10:52:37 2026 by rpki-client