$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa File: 8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa (raw, json) Hash identifier: +/D13CnX+YiisOoBOZEhk3j/1mPvUcvLZejiOibrPbI= Subject key identifier: 67:71:37:64:1F:7A:07:28:12:92:05:C4:26:20:B6:F6:73:D4:91:70 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E9505463B530EF6E489E199 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.204.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:05:46:3b:53:0e:f6:e4:89:e1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=28f629f9-d83a-4677-8b32-35b8ecd5b0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:70:88:8a:b2:70:ae:77:6c:a8:5b:e0:d5: 87:00:5e:33:65:57:de:56:97:20:42:ac:b9:9e:3b: b5:30:9c:e5:23:de:2f:f0:62:e8:ab:8b:62:04:8b: 10:80:7e:2f:fa:47:d1:dc:64:a5:fa:6b:46:e7:02: 4a:65:24:58:ed:65:28:ef:79:d5:32:51:93:5f:e2: 40:b4:a3:5a:f0:bc:1b:bd:06:d6:d1:a9:e0:0f:c8: 78:e5:c8:53:9d:2a:bf:58:1e:59:cf:b0:70:96:6e: 6c:cb:6c:0d:62:b2:4a:f3:76:82:2a:97:97:8e:67: 02:bb:75:2a:b5:38:21:e6:65:f3:95:88:29:49:1b: 49:cf:50:1f:ef:c1:62:ab:d5:16:55:67:e6:ec:89: 1a:5e:e5:a8:bb:5e:45:9f:aa:1c:24:01:e9:d0:82: 7d:ed:f9:82:5e:8f:ce:04:c3:57:25:4f:b0:34:fb: 91:ed:41:d5:2a:03:33:b8:80:0a:16:09:9d:26:85: f6:d1:a1:c5:c6:9e:a9:37:0a:15:73:6f:55:12:fa: e8:c3:7e:04:4d:e5:38:33:b5:d6:17:73:db:ab:d1: b0:e9:c5:9a:b7:4d:c5:50:25:62:39:a4:5d:e5:ff: 6a:e2:2c:22:65:0d:d4:df:e4:9c:46:d8:ea:e4:d6: a0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:71:37:64:1F:7A:07:28:12:92:05:C4:26:20:B6:F6:73:D4:91:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:58:0a:f4:ad:df:f3:20:f6:c5:c6:a6:26:24:ab:f6:45:06: 86:4f:b1:10:18:d3:6d:bf:f2:e9:d1:a6:c2:c8:69:05:53:64: be:42:68:6f:2a:b9:c7:7f:3e:ed:75:62:cb:3e:58:70:11:f6: 5a:dd:8b:a4:a2:20:68:7a:ae:ca:5f:e4:96:42:c1:4a:ff:4d: 8a:bc:b8:37:60:be:20:7d:00:48:f2:7c:bb:ce:3a:cc:25:70: e0:3c:ea:2e:63:51:42:56:85:c5:12:7d:d6:19:fc:bb:08:8c: 9e:2e:90:85:52:42:37:c7:b7:e0:dc:2a:94:9c:fe:3b:2c:34: e9:4a:9d:d0:fd:83:f0:3b:06:ec:46:d3:29:45:3a:f3:54:c0: 9b:62:7d:93:39:f0:55:4e:b1:2a:cf:95:63:6c:f3:93:d9:5c: c9:33:ac:a9:55:f7:21:11:dd:43:c8:63:c4:5f:58:63:46:5f: 9f:75:e0:c8:86:43:6e:6e:b0:8d:72:d4:99:c1:c5:5f:93:1b: 68:fa:a5:57:2a:91:c5:dc:41:50:fc:f2:ad:60:82:a1:39:5b: ed:d0:2a:4c:85:1c:56:48:87:c2:49:12:bb:2f:f0:de:f0:1e: d2:e2:e5:09:7b:68:a4:ad:4e:f2:77:7c:54:ba:4b:1d:ad:48: 36:e9:81:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQVGO1MO9uSJ4ZkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MjhmNjI5ZjktZDgzYS00Njc3LThiMzItMzViOGVjZDViMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZtwiIqycK53bKhb4NWHAF4zZVfeVpcgQqy5 nju1MJzlI94v8GLoq4tiBIsQgH4v+kfR3GSl+mtG5wJKZSRY7WUo73nVMlGTX+JA tKNa8LwbvQbW0angD8h45chTnSq/WB5Zz7Bwlm5sy2wNYrJK83aCKpeXjmcCu3Uq tTgh5mXzlYgpSRtJz1Af78Fiq9UWVWfm7IkaXuWou15Fn6ocJAHp0IJ97fmCXo/O BMNXJU+wNPuR7UHVKgMzuIAKFgmdJoX20aHFxp6pNwoVc29VEvrow34ETeU4M7XW F3Pbq9Gw6cWat03FUCViOaRd5f9q4iwiZQ3U3+ScRtjq5NagNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdxN2QfegcoEpIFxCYgtvZz1JFwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY2N2U0YmMtODk1Mi0z NDFlLWI0YTUtNGVjOGI5ODM1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1YCvSt3/Mg9sXGpiYkq/ZFBoZPsRAY022/8unRpsLIaQVTZL5CaG8q ucd/Pu11Yss+WHAR9lrdi6SiIGh6rspf5JZCwUr/TYq8uDdgviB9AEjyfLvOOswl cOA86i5jUUJWhcUSfdYZ/LsIjJ4ukIVSQjfHt+DcKpSc/jssNOlKndD9g/A7BuxG 0ylFOvNUwJtifZM58FVOsSrPlWNs85PZXMkzrKlV9yER3UPIY8RfWGNGX5914MiG Q25usI1y1JnBxV+TG2j6pVcqkcXcQVD88q1ggqE5W+3QKkyFHFZIh8JJErsv8N7w HtLi5Ql7aKStTvJ3fFS6Sx2tSDbpgQA= -----END CERTIFICATE-----Generated at Fri Jul 24 02:13:01 2026 by rpki-client