$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa File: 8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa (raw, json) Hash identifier: Wk8xK6g7hcHV3lABoUzOEUvtqI4Cf2wDEq8w4HATBm8= Subject key identifier: 51:EC:CF:42:5D:F3:5D:5C:49:99:7D:94:49:CF:B4:64:E3:3E:0C:D6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC533BC520C5BD0E0ED58C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:33:bc:52:0c:5b:d0:e0:ed:58:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=74722fd2-4aef-40bf-9817-b6df2b1b4086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:30:b2:26:89:11:8e:33:53:c1:84:43:e3:bc: 66:94:74:8e:e4:f8:9c:b2:5b:74:d0:4b:16:b2:47: ec:09:75:e1:d7:4b:9d:ce:30:86:40:24:46:53:ce: be:2c:d4:65:0c:c9:43:b0:d5:05:56:6c:24:72:2e: 32:2f:8c:69:ab:8a:0e:aa:e9:94:e8:12:e6:77:9c: 2d:97:36:ca:5e:9c:13:4f:a6:90:48:fd:08:10:7e: e2:62:9c:a3:61:36:95:68:ae:63:8d:e1:8c:1e:14: 27:90:f8:91:f4:e9:e7:ad:23:96:90:a1:e2:42:85: 76:79:b0:d5:a4:95:c1:84:51:86:fa:49:34:48:2a: 38:90:d6:ba:94:bc:14:86:c9:8d:c5:5b:df:4c:6c: e3:1b:53:3e:2f:4a:25:2a:b4:79:42:51:f8:b5:bb: fc:4e:07:42:a6:b1:19:c1:2b:1f:c3:41:71:dc:d7: 11:9f:11:2a:1a:ff:8d:66:c6:5e:29:f7:e8:b3:02: 79:2d:9c:2f:02:4c:89:2f:b6:60:fd:35:93:aa:6b: bc:a0:0e:b3:15:bb:9e:44:db:3c:fb:5f:2e:97:81: c3:7d:9f:a4:3a:bf:d2:1d:9b:bb:ac:eb:75:df:21: 6e:d1:bb:32:80:1b:d8:61:13:a3:99:f5:80:7e:25: a1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:EC:CF:42:5D:F3:5D:5C:49:99:7D:94:49:CF:B4:64:E3:3E:0C:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:23:b1:51:d3:d4:df:b6:b7:3a:77:dd:cb:e2:31:37:34:d6: 21:27:12:d3:a1:ba:2f:56:17:d3:6b:2f:5b:aa:19:1b:86:b0: bc:3b:11:f0:73:8a:76:e5:28:da:95:8f:9c:e0:89:bb:c1:2c: c1:cb:09:21:e7:ea:8a:97:bb:9c:01:fc:fb:fe:db:48:57:39: 61:68:e7:be:16:0c:a9:02:6c:fa:44:49:e6:11:50:93:6e:a6: 2d:f9:ca:57:94:70:fa:d7:4a:74:94:4c:16:44:50:23:ab:89: e7:c9:ad:bf:c5:ac:9f:bb:06:45:c3:59:10:52:ec:90:b6:c0: f5:53:32:8f:f5:09:37:ff:a7:bc:03:f4:97:c4:c5:f9:df:aa: fb:51:f8:d2:9f:ad:f7:96:42:fd:84:d0:4c:70:a6:55:f0:a6: c6:48:f1:93:e8:9b:aa:c6:d6:de:f5:95:c8:0a:c5:9c:a8:47: ae:33:cb:97:ad:a9:f7:fa:21:fd:fd:72:dc:48:57:42:31:ac: fd:f2:eb:0f:c1:ac:2b:8b:90:d9:8c:ec:60:3c:e0:2f:4d:d7: ba:17:23:3e:72:57:d5:21:58:ff:cd:f5:2a:4a:22:22:e4:49: d3:c9:c2:92:29:87:43:cc:3b:30:a6:8c:fa:97:4d:40:55:73: 16:02:7f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTO8Ugxb0ODtWMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk NzQ3MjJmZDItNGFlZi00MGJmLTk4MTctYjZkZjJiMWI0MDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDCyJokRjjNTwYRD47xmlHSO5Picslt00EsW skfsCXXh10udzjCGQCRGU86+LNRlDMlDsNUFVmwkci4yL4xpq4oOqumU6BLmd5wt lzbKXpwTT6aQSP0IEH7iYpyjYTaVaK5jjeGMHhQnkPiR9OnnrSOWkKHiQoV2ebDV pJXBhFGG+kk0SCo4kNa6lLwUhsmNxVvfTGzjG1M+L0olKrR5QlH4tbv8TgdCprEZ wSsfw0Fx3NcRnxEqGv+NZsZeKffoswJ5LZwvAkyJL7Zg/TWTqmu8oA6zFbueRNs8 +18ul4HDfZ+kOr/SHZu7rOt13yFu0bsygBvYYROjmfWAfiWhqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHsz0Jd811cSZl9lEnPtGTjPgzWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODA1N2FlYzUtMWEyYS0z ZWU0LTlkZjEtM2ZmMjgyNmViOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcjsVHT1N+2tzp33cviMTc01iEnEtOhui9WF9NrL1uqGRuGsLw7EfBz inblKNqVj5zgibvBLMHLCSHn6oqXu5wB/Pv+20hXOWFo574WDKkCbPpESeYRUJNu pi35yleUcPrXSnSUTBZEUCOriefJrb/FrJ+7BkXDWRBS7JC2wPVTMo/1CTf/p7wD 9JfExfnfqvtR+NKfrfeWQv2E0ExwplXwpsZI8ZPom6rG1t71lcgKxZyoR64zy5et qff6If39ctxIV0IxrP3y6w/BrCuLkNmM7GA84C9N17oXIz5yV9UhWP/N9SpKIiLk SdPJwpIph0PMOzCmjPqXTUBVcxYCf/E= -----END CERTIFICATE-----Generated at Wed May 13 05:01:10 2026 by rpki-client