$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa File: 8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa (raw, json) Hash identifier: BtMWQY0rJoAycavn7URJMIGDUVZbumfLqp4Y00AGFDc= Subject key identifier: 43:F2:51:E0:28:1F:8A:A0:D2:E3:EF:F8:B8:9B:A6:49:8D:D3:9E:5E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A2009BEA63EAB4A34F3E200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.204.130.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:09:be:a6:3e:ab:4a:34:f3:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=c748e394-01dd-42ee-a01f-c285bfa39016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:eb:4b:c2:e4:8e:91:58:af:31:5e:84:fc: 0a:b1:19:51:61:3c:7c:e0:fb:c5:72:a8:93:29:7c: 13:57:02:e1:69:54:80:80:30:0d:31:f5:d6:79:79: 72:57:26:a1:47:ec:ec:c5:60:f4:82:e9:b2:59:d2: a9:68:7a:35:64:55:6c:d9:fa:0e:0f:79:e0:e5:71: fb:88:12:f4:18:bd:96:ea:be:92:74:6b:ba:5b:c6: d9:fb:17:9c:3e:01:c4:15:85:7a:7d:29:32:bf:e3: 07:36:31:0f:d6:ba:15:0c:e7:8e:8a:e2:1c:a3:da: 38:af:16:09:6f:c4:1a:4e:e6:a1:6d:ac:07:24:44: e5:0e:9c:97:fb:0b:39:31:c1:d1:1b:2c:22:71:4a: 34:3f:de:5b:14:6e:76:ef:c7:c7:c2:77:22:2e:f5: a8:2c:17:b0:6d:72:56:0f:44:46:6e:6c:3a:18:be: 1b:02:aa:b6:48:d7:5b:37:c6:27:07:68:11:78:7a: ff:e4:f8:e5:1c:ce:7a:66:f5:b4:c3:3f:19:89:9b: a2:2f:c8:71:be:32:f8:3a:63:c1:b1:f9:78:30:b2: 56:75:bc:b8:9a:e2:b7:e8:c1:0a:72:0e:44:d5:a1: f6:1a:b6:63:2c:5a:10:b6:df:eb:f8:08:92:df:f4: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F2:51:E0:28:1F:8A:A0:D2:E3:EF:F8:B8:9B:A6:49:8D:D3:9E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8f0e3cfd-fede-3b78-9f79-a6b2a0daa551.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:3c:01:8f:ed:8c:0e:ec:99:f1:be:75:81:c5:68:bb:fc:af: f9:24:b5:0c:d4:df:7e:bf:bd:53:59:34:f2:df:e6:1e:90:a9: 62:a9:c3:42:fe:a2:69:fa:77:ed:a4:5c:26:cd:63:8f:bf:f2: c9:36:b5:4c:fe:00:e8:d8:81:c3:9c:f9:26:16:27:05:c5:98: 2f:db:01:b1:72:26:99:0e:ea:fa:c0:21:c5:30:2e:75:20:10: 31:5e:ef:75:f1:41:78:9e:24:4b:4c:24:7f:ec:8f:73:a9:da: c5:56:b9:10:bd:9d:49:3d:e8:41:7b:19:c3:36:2e:fa:9d:e8: 18:77:73:8e:d2:0f:a5:25:9b:65:58:14:02:b8:33:d7:b0:97: d2:d6:ad:05:4d:44:57:cf:b3:b8:46:c4:bb:0f:f8:65:b1:25: 04:36:bd:b1:52:68:92:2d:fb:71:d9:49:fd:ea:e5:5d:be:9f: 7c:3a:28:8c:12:52:1c:e8:3d:07:90:48:13:e8:80:19:bc:be: 3d:d0:0b:64:40:81:ba:d2:c4:a2:22:b5:8a:68:21:47:30:f3: b7:07:ea:d3:64:23:85:84:80:ea:bd:d5:29:2a:1f:d7:23:44: 31:ff:df:7d:7d:94:8c:eb:23:ff:8d:38:51:bc:7b:b1:64:c6: 95:b6:4a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIAm+pj6rSjTz4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Yzc0OGUzOTQtMDFkZC00MmVlLWEwMWYtYzI4NWJmYTM5MDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKfrS8LkjpFYrzFehPwKsRlRYTx84PvFcqiT KXwTVwLhaVSAgDANMfXWeXlyVyahR+zsxWD0gumyWdKpaHo1ZFVs2foOD3ng5XH7 iBL0GL2W6r6SdGu6W8bZ+xecPgHEFYV6fSkyv+MHNjEP1roVDOeOiuIco9o4rxYJ b8QaTuahbawHJETlDpyX+ws5McHRGywicUo0P95bFG5278fHwnciLvWoLBewbXJW D0RGbmw6GL4bAqq2SNdbN8YnB2gReHr/5PjlHM56ZvW0wz8ZiZuiL8hxvjL4OmPB sfl4MLJWdby4muK36MEKcg5E1aH2GrZjLFoQtt/r+AiS3/RGHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPyUeAoH4qg0uPv+LibpkmN055eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOGYwZTNjZmQtZmVkZS0z Yjc4LTlmNzktYTZiMmEwZGFhNTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJY8AY/tjA7smfG+dYHFaLv8r/kktQzU336/vVNZNPLf5h6QqWKpw0L+ omn6d+2kXCbNY4+/8sk2tUz+AOjYgcOc+SYWJwXFmC/bAbFyJpkO6vrAIcUwLnUg EDFe73XxQXieJEtMJH/sj3Op2sVWuRC9nUk96EF7GcM2Lvqd6Bh3c47SD6Ulm2VY FAK4M9ewl9LWrQVNRFfPs7hGxLsP+GWxJQQ2vbFSaJIt+3HZSf3q5V2+n3w6KIwS UhzoPQeQSBPogBm8vj3QC2RAgbrSxKIitYpoIUcw87cH6tNkI4WEgOq91SkqH9cj RDH/3319lIzrI/+NOFG8e7FkxpW2SsI= -----END CERTIFICATE-----Generated at Wed May 13 09:14:06 2026 by rpki-client