$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa File: 875e3249-ea3a-314c-828a-d5a876662717.roa (raw, json) Hash identifier: xR0b7ACYKvE2PMdZg0QNQBNDA4uWhXf2NfcHeUW7pMA= Subject key identifier: 8F:66:87:72:6D:9A:64:CF:2D:A2:8F:68:5D:96:11:A2:6B:60:D9:EA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF9993868C15BD7E4F5AE70 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.91.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:99:38:68:c1:5b:d7:e4:f5:ae:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=d1d131cd-94aa-40c8-b704-707a73d2aa1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ae:8b:08:29:18:d5:70:f6:bf:99:ce:61:a0: 00:be:e8:3e:02:d4:60:f2:88:1a:4f:fd:b4:17:ba: c3:b9:fd:11:25:c6:b4:e3:25:24:9a:ed:4c:96:f0: 6e:7d:12:44:7d:8f:ad:e3:2d:54:db:6c:4c:c7:6a: 11:c4:bb:32:1a:85:4f:c2:2d:0e:4d:aa:4a:08:f5: 2e:77:39:97:05:f6:ab:18:82:35:04:e1:8a:4a:ee: 8e:44:ea:82:a0:05:96:be:88:c1:26:fa:63:2f:36: fb:bc:bb:d5:5c:f6:df:a9:b6:28:86:c3:88:22:13: 93:bc:a7:07:78:c0:35:fe:86:85:a6:e7:59:d3:3b: 29:fe:ad:43:de:09:86:5e:98:a7:97:13:11:b4:91: e0:68:d4:e4:54:63:33:fa:c0:c4:33:de:a0:f5:c1: 0e:3a:a0:f6:c0:44:27:af:4e:59:ae:b0:7e:11:0b: 7b:d8:07:ef:22:88:e9:30:35:ea:06:e6:14:c0:5b: 6d:c4:0b:fa:8a:c2:f5:71:81:77:cb:b2:3a:39:13: 3b:af:0c:d0:2b:c6:c7:e5:ec:3a:5c:c9:5d:4a:67: bd:43:4c:14:a1:3e:87:e8:9c:f1:bb:01:93:59:13: a2:9a:23:ea:cb:98:51:8c:79:26:83:b1:50:7d:f9: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:66:87:72:6D:9A:64:CF:2D:A2:8F:68:5D:96:11:A2:6B:60:D9:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:db:54:80:2d:82:5d:93:b3:19:2d:e0:58:d4:18:a8:a4:16: 96:5e:da:83:f8:12:24:44:d4:66:83:b2:08:1b:2a:e0:5f:fc: 04:4f:6b:8d:3e:99:3f:a8:a3:90:d3:0d:e1:d5:ce:ff:5f:42: aa:cb:90:cf:1e:e7:f3:3e:c2:b6:cc:0e:d4:52:42:35:83:c5: 42:c6:35:6c:17:06:da:ed:80:1f:17:c7:15:5f:f9:80:d4:2e: 20:95:75:3c:6c:13:b5:84:1b:c7:62:8b:f5:06:ac:23:37:b7: ef:2e:e7:a6:9e:7c:19:ee:aa:90:18:69:ca:13:7f:a0:df:4a: 35:f2:0c:fa:d6:59:2f:fb:b7:10:20:c1:5b:1f:b7:ac:ff:ba: eb:4d:aa:71:63:d0:a4:97:6b:dc:43:e1:fc:69:ca:0e:d7:36: 42:04:9a:5d:52:a3:85:81:f2:22:f7:41:0f:b0:81:5a:2a:9c: 8f:33:0c:4d:f5:47:b6:7d:cc:50:23:bf:35:2e:29:04:d2:a1: 1f:56:ce:33:d3:ff:c7:b5:70:19:04:57:7c:fd:0e:e6:a8:88: 97:bc:3f:4a:4a:e0:50:27:9f:f7:ac:d2:30:f8:db:3e:0c:fa: 80:af:49:6b:d3:2d:48:68:5d:7a:26:4f:83:1e:f5:9d:09:34: 32:7c:7a:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+Zk4aMFb1+T1rnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZDFkMTMxY2QtOTRhYS00MGM4LWI3MDQtNzA3YTczZDJhYTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa6LCCkY1XD2v5nOYaAAvug+AtRg8ogaT/20 F7rDuf0RJca04yUkmu1MlvBufRJEfY+t4y1U22xMx2oRxLsyGoVPwi0OTapKCPUu dzmXBfarGII1BOGKSu6OROqCoAWWvojBJvpjLzb7vLvVXPbfqbYohsOIIhOTvKcH eMA1/oaFpudZ0zsp/q1D3gmGXpinlxMRtJHgaNTkVGMz+sDEM96g9cEOOqD2wEQn r05ZrrB+EQt72AfvIojpMDXqBuYUwFttxAv6isL1cYF3y7I6ORM7rwzQK8bH5ew6 XMldSme9Q0wUoT6H6JzxuwGTWROimiPqy5hRjHkmg7FQffldTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9mh3JtmmTPLaKPaF2WEaJrYNnqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODc1ZTMyNDktZWEzYS0z MTRjLTgyOGEtZDVhODc2NjYyNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfbVIAtgl2Tsxkt4FjUGKikFpZe2oP4EiRE1GaDsggbKuBf/ARPa40+ mT+oo5DTDeHVzv9fQqrLkM8e5/M+wrbMDtRSQjWDxULGNWwXBtrtgB8XxxVf+YDU LiCVdTxsE7WEG8dii/UGrCM3t+8u56aefBnuqpAYacoTf6DfSjXyDPrWWS/7txAg wVsft6z/uutNqnFj0KSXa9xD4fxpyg7XNkIEml1So4WB8iL3QQ+wgVoqnI8zDE31 R7Z9zFAjvzUuKQTSoR9WzjPT/8e1cBkEV3z9DuaoiJe8P0pK4FAnn/es0jD42z4M +oCvSWvTLUhoXXomT4Me9Z0JNDJ8elo= -----END CERTIFICATE-----Generated at Wed May 13 08:21:20 2026 by rpki-client