$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa File: 8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa (raw, json) Hash identifier: Mmoyb75XdNt+ITnY7qFBPRUfMJkaGH0aVLnsetqGYdk= Subject key identifier: A1:36:D6:34:C1:AB:99:01:1D:AC:24:77:80:53:31:87:3B:F1:A7:DF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5028DCE65647EB1062CF00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:28:dc:e6:56:47:eb:10:62:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=148b8f61-b465-4a89-90f5-39a516c788a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2a:64:81:fa:6c:25:1b:ae:fd:7c:a7:91:51: 4a:a8:dc:4a:06:87:af:32:ba:1c:d6:96:51:23:28: 19:69:8c:21:47:91:70:9c:a2:bd:c7:60:1f:81:1d: 14:9d:2a:84:12:03:1a:a8:46:ff:3a:26:ea:58:af: 5d:dd:6f:36:aa:fa:a1:37:6c:64:c4:ee:53:fa:71: 12:08:94:a0:f1:c1:3e:5e:06:3f:2c:21:d2:3e:be: 4c:6c:a2:73:9b:6c:2a:77:71:29:a5:24:3b:84:4f: 4e:0c:5b:7a:67:18:99:7c:c6:51:96:67:6f:7a:37: ff:43:38:93:57:67:6a:bb:51:97:0a:7c:c7:cb:6a: 41:f6:04:28:33:f5:2c:d8:8f:8e:95:8e:9a:54:a1: 31:d7:f9:95:6f:17:09:5d:34:84:1e:19:34:1d:10: fd:f3:6f:6a:2f:a8:98:d9:ff:33:7d:16:43:bd:e1: 48:76:b5:c7:16:a2:90:ee:dc:23:b5:a9:ac:54:e1: 17:62:d9:f2:55:04:6f:48:03:6b:9c:d1:75:d4:57: e7:a7:65:e0:a4:1e:3d:2c:85:fc:27:fd:18:c1:e9: f7:d4:8c:c5:f8:90:a5:92:b0:9e:91:42:75:a3:fe: 03:bb:76:09:74:ba:77:49:9f:36:5d:95:15:0b:4d: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:36:D6:34:C1:AB:99:01:1D:AC:24:77:80:53:31:87:3B:F1:A7:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:0f:75:b2:66:7f:fe:fb:98:76:56:b5:5e:fb:0f:3c:77:6c: 9f:72:a0:20:c0:70:3c:81:b7:d2:4c:5c:dc:7a:d4:aa:13:15: 60:89:d8:2b:df:cc:93:fb:f8:2d:84:be:4b:63:97:23:98:96: 0a:73:a7:60:c1:90:f5:e8:1a:29:9b:e0:a8:cc:74:b8:4b:e2: 09:26:07:02:37:3a:c1:2e:26:85:a3:1b:93:ab:64:c2:47:83: d3:5d:d6:39:ec:d7:89:95:0f:a2:8f:97:38:9e:c4:d1:aa:44: eb:41:4e:d3:7d:83:40:b7:6c:b6:4c:c1:6c:c5:3e:c6:55:66: 92:98:98:8e:c1:50:87:a2:59:4e:44:d6:2c:69:fe:74:7b:ca: 2d:39:b0:93:fa:d9:b9:34:11:6a:70:53:04:b1:bd:89:cb:d5: 7b:8f:b5:a6:eb:ba:70:27:36:c7:03:85:16:00:20:a3:5e:d1: 2f:00:89:c4:1d:65:70:51:62:14:9a:0d:33:8f:2f:ba:80:67: 2a:d9:17:c9:4f:32:6c:d9:0d:e1:3f:3d:82:11:a0:2f:1f:9b: cf:6e:7b:4c:d2:8d:1a:2f:7f:cd:39:b2:e5:08:e6:4a:bf:e2: 56:44:ff:96:0d:a8:6e:68:88:de:1a:eb:ec:18:0e:06:8d:7d: 6a:e3:15:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCjc5lZH6xBizwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MTQ4YjhmNjEtYjQ2NS00YTg5LTkwZjUtMzlhNTE2Yzc4OGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwipkgfpsJRuu/XynkVFKqNxKBoevMroc1pZR IygZaYwhR5FwnKK9x2AfgR0UnSqEEgMaqEb/OibqWK9d3W82qvqhN2xkxO5T+nES CJSg8cE+XgY/LCHSPr5MbKJzm2wqd3EppSQ7hE9ODFt6ZxiZfMZRlmdvejf/QziT V2dqu1GXCnzHy2pB9gQoM/Us2I+OlY6aVKEx1/mVbxcJXTSEHhk0HRD9829qL6iY 2f8zfRZDveFIdrXHFqKQ7twjtamsVOEXYtnyVQRvSANrnNF11Ffnp2XgpB49LIX8 J/0Ywen31IzF+JClkrCekUJ1o/4Du3YJdLp3SZ82XZUVC02KEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE21jTBq5kBHawkd4BTMYc78affMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY2N2U0YmMtODk1Mi0z NDFlLWI0YTUtNGVjOGI5ODM1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAPdbJmf/77mHZWtV77Dzx3bJ9yoCDAcDyBt9JMXNx61KoTFWCJ2Cvf zJP7+C2EvktjlyOYlgpzp2DBkPXoGimb4KjMdLhL4gkmBwI3OsEuJoWjG5OrZMJH g9Nd1jns14mVD6KPlziexNGqROtBTtN9g0C3bLZMwWzFPsZVZpKYmI7BUIeiWU5E 1ixp/nR7yi05sJP62bk0EWpwUwSxvYnL1XuPtabrunAnNscDhRYAIKNe0S8AicQd ZXBRYhSaDTOPL7qAZyrZF8lPMmzZDeE/PYIRoC8fm89ue0zSjRovf805suUI5kq/ 4lZE/5YNqG5oiN4a6+wYDgaNfWrjFbk= -----END CERTIFICATE-----Generated at Wed May 13 09:33:19 2026 by rpki-client