$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa File: 871efcfb-f5a1-3eb0-adc1-701040308d89.roa (raw, json) Hash identifier: Dyax5dZ2vrN0w38k4KqWHMburLcrMIdx+EzLGW4AsOM= Subject key identifier: ED:F3:94:F4:CB:B2:F1:15:54:C7:FC:E0:7A:5C:6D:E6:A7:06:03:61 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A200907F6060F3DF9CE5700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.204.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:09:07:f6:06:0f:3d:f9:ce:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=161c112a-19e9-4611-a4a0-b5ca4e5e50fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:45:a4:67:8c:c0:0d:4e:7c:79:ea:c7:b1:c7: 73:d3:93:e8:06:8b:5a:b9:b8:a4:4e:01:a9:2e:d6: 0a:20:33:c7:af:26:39:0b:f1:e9:35:61:38:dd:95: 35:e2:76:78:34:a5:de:89:16:ce:e0:3e:50:ba:bc: 81:f5:d6:4a:8f:a4:44:cd:60:9d:28:74:ca:26:84: 5b:ca:a7:6e:ce:e2:91:4b:4a:2c:3b:a1:43:93:0c: 4f:f4:14:1a:01:a0:e8:fe:b3:56:1f:4a:ab:28:4c: 35:67:34:8c:74:93:fe:e5:13:07:ef:9b:64:9f:de: 4e:41:dd:72:1c:e0:18:9b:d9:be:c1:81:a7:b6:42: 89:db:f9:a4:ff:9e:54:6e:5e:a0:2c:c3:cb:42:78: ab:ae:55:ba:11:f5:28:e9:1d:18:5f:42:e7:6b:5e: f7:a8:a2:50:fa:53:83:44:19:5f:0c:83:ae:71:5c: 75:79:d6:d8:fb:cf:ee:ef:e0:00:9d:b8:de:1f:e3: c2:c2:d2:84:d3:8c:3e:85:fe:14:d7:e8:32:91:21: f5:67:81:2d:1d:53:7a:29:12:b8:4c:1b:8b:6a:ff: 9a:02:5a:f8:43:f2:8d:8b:9f:95:7c:d1:31:44:75: 3f:2d:ec:bd:cd:06:c5:b4:fb:c0:26:2c:1f:f6:df: 59:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:F3:94:F4:CB:B2:F1:15:54:C7:FC:E0:7A:5C:6D:E6:A7:06:03:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/871efcfb-f5a1-3eb0-adc1-701040308d89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:dc:3d:bd:c3:71:5e:02:93:2e:97:9b:4e:85:a0:ea:37:9d: dc:d6:06:de:f4:b3:3d:2d:11:30:e7:6a:4c:52:e9:3a:2d:0f: 3d:0d:f5:7b:6c:de:cd:4c:4b:6d:1e:a3:b0:90:09:09:4b:8f: 90:c4:5f:a2:fd:e9:81:04:3a:b1:df:bb:8d:03:2d:50:de:9c: ee:94:84:44:d2:e4:26:33:52:10:10:ec:ca:b6:56:9c:98:8f: dd:49:06:37:85:ff:8f:16:0a:59:2c:ac:b5:83:47:1e:c8:e3: bf:9b:f0:37:a0:5d:03:dc:d6:e1:0e:06:7e:05:e4:30:a3:37: f8:0c:55:69:63:b0:01:4a:82:11:48:b1:7a:d9:b1:89:52:cc: 4d:48:c0:27:fe:c9:d6:47:20:fc:00:f3:f9:36:8d:40:34:27: 03:09:96:92:a0:73:d7:67:eb:d8:43:1b:e5:32:48:d0:a6:b1: 21:9f:3a:1a:e6:17:cc:7b:4e:01:fd:95:03:35:03:64:c0:5f: 94:64:82:fe:32:28:b3:96:f4:f6:e5:f2:26:b3:db:0e:06:f9: bc:22:64:8e:d8:d9:eb:5c:76:5c:2a:06:3c:34:6b:51:f9:2c: 83:c9:04:25:73:27:1c:79:4a:c6:06:e7:5f:b4:81:99:d9:33: 4a:8d:d8:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAkH9gYPPfnOVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MTYxYzExMmEtMTllOS00NjExLWE0YTAtYjVjYTRlNWU1MGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0WkZ4zADU58eerHscdz05PoBotaubikTgGp LtYKIDPHryY5C/HpNWE43ZU14nZ4NKXeiRbO4D5QuryB9dZKj6REzWCdKHTKJoRb yqduzuKRS0osO6FDkwxP9BQaAaDo/rNWH0qrKEw1ZzSMdJP+5RMH75tkn95OQd1y HOAYm9m+wYGntkKJ2/mk/55Ubl6gLMPLQnirrlW6EfUo6R0YX0Lna173qKJQ+lOD RBlfDIOucVx1edbY+8/u7+AAnbjeH+PCwtKE04w+hf4U1+gykSH1Z4EtHVN6KRK4 TBuLav+aAlr4Q/KNi5+VfNExRHU/Ley9zQbFtPvAJiwf9t9ZSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3zlPTLsvEVVMf84HpcbeanBgNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODcxZWZjZmItZjVhMS0z ZWIwLWFkYzEtNzAxMDQwMzA4ZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/cPb3DcV4Cky6Xm06FoOo3ndzWBt70sz0tETDnakxS6TotDz0N9Xts 3s1MS20eo7CQCQlLj5DEX6L96YEEOrHfu40DLVDenO6UhETS5CYzUhAQ7Mq2VpyY j91JBjeF/48WClksrLWDRx7I47+b8DegXQPc1uEOBn4F5DCjN/gMVWljsAFKghFI sXrZsYlSzE1IwCf+ydZHIPwA8/k2jUA0JwMJlpKgc9dn69hDG+UySNCmsSGfOhrm F8x7TgH9lQM1A2TAX5Rkgv4yKLOW9Pbl8iaz2w4G+bwiZI7Y2etcdlwqBjw0a1H5 LIPJBCVzJxx5SsYG51+0gZnZM0qN2JI= -----END CERTIFICATE-----Generated at Wed May 13 10:58:32 2026 by rpki-client