$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa File: 9754b91e-3caf-3d36-844f-8030bbbd445b.roa (raw, json) Hash identifier: GjS/ewPfQEb5pM1ogupCsFmZnCYBVR3xkqyZuK+y110= Subject key identifier: 1F:91:9A:CC:F6:32:CA:55:6C:0A:CE:EA:89:40:D7:BF:30:B6:E0:E9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D8FF8BD5CC2F73888849080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 140.204.54.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:f8:bd:5c:c2:f7:38:88:84:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=32e4a042-a21c-467b-bf42-0e9fc8d50ce0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:b9:ab:a6:f6:94:30:40:18:2d:ed:62:42: ab:00:a6:64:4a:26:cd:87:d1:b8:00:f6:53:1b:38: 60:9d:c4:9d:2d:62:fd:95:a8:b1:2d:14:71:d8:3b: 9d:49:8f:22:ea:20:08:c6:b1:b3:a6:b1:c0:40:56: 36:93:90:9f:73:ef:ee:81:89:e1:d2:2e:28:5e:3c: cd:b7:de:51:90:9d:33:40:21:36:91:7d:34:2c:25: e5:04:90:83:22:72:d2:22:56:ba:17:dc:68:98:b1: e9:54:48:25:6e:40:60:2a:d1:d8:7a:35:73:cb:e1: 61:fc:06:9e:66:97:9d:e7:c6:8f:ab:ff:cf:0d:5d: 40:5b:0b:5a:29:ce:08:08:ad:d6:5d:4d:be:40:97: e3:44:d8:36:b3:5b:c9:ab:56:85:42:d4:50:57:8a: ea:f4:12:2e:89:48:71:61:09:0e:57:c3:ae:b2:3b: 56:94:d8:97:0d:04:6d:3f:b6:37:89:15:ff:dd:a5: 40:c9:4d:1a:34:2e:d8:f4:f7:49:ff:a1:46:ff:6b: f8:33:82:2f:32:4d:06:df:31:72:37:b1:23:14:2a: 09:11:fe:d7:6c:92:9e:af:2a:7c:3e:2b:e4:b6:eb: 74:ff:8d:3f:6d:c9:c8:b7:ec:62:e0:5b:47:35:a6: 75:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:91:9A:CC:F6:32:CA:55:6C:0A:CE:EA:89:40:D7:BF:30:B6:E0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9754b91e-3caf-3d36-844f-8030bbbd445b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.54.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:9f:c4:e2:23:03:9b:40:6c:ca:bb:2f:fe:f9:f5:43:b4:ff: ce:d3:f3:3c:e5:92:6d:98:3e:a3:d3:d9:f9:7d:14:08:b8:ba: 4b:6b:a9:aa:28:3e:1f:1c:60:62:a7:ad:71:4d:fb:09:af:df: 0f:b8:03:fd:21:ee:8e:f9:2a:02:ab:5a:ff:c7:a4:fb:a6:77: 15:01:8c:07:c9:58:f7:86:29:14:aa:7e:48:09:a0:05:49:91: b5:e6:77:96:86:aa:19:3c:82:68:bb:48:ff:9a:45:99:17:7b: e1:bf:6a:25:20:74:9d:b8:89:48:4f:96:3e:d1:32:5e:32:cf: 02:aa:89:7b:80:d0:35:1d:b9:c5:01:a2:a7:54:14:22:13:71: a1:32:99:bb:c5:a8:af:40:be:65:9b:19:0e:70:82:4a:78:cd: b4:01:3f:26:c9:87:85:14:68:d6:27:da:e2:80:a2:d4:c6:11: 4c:34:62:ee:1e:59:0e:a2:ad:e3:05:1c:66:fd:ec:eb:39:d5: 0c:7f:74:69:2c:b2:6e:b0:9a:12:7f:f9:61:70:8c:0c:c6:58: 91:52:ef:23:f4:9f:a6:b3:5c:d8:7a:71:e1:b2:e5:37:b9:8d: 53:9f:69:30:bd:ea:0d:54:8b:06:54:69:c4:05:cc:bb:25:26: da:bb:ff:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/i9XML3OIiEkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk MzJlNGEwNDItYTIxYy00NjdiLWJmNDItMGU5ZmM4ZDUwY2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzW5q6b2lDBAGC3tYkKrAKZkSibNh9G4APZT GzhgncSdLWL9laixLRRx2DudSY8i6iAIxrGzprHAQFY2k5Cfc+/ugYnh0i4oXjzN t95RkJ0zQCE2kX00LCXlBJCDInLSIla6F9xomLHpVEglbkBgKtHYejVzy+Fh/Aae Zped58aPq//PDV1AWwtaKc4ICK3WXU2+QJfjRNg2s1vJq1aFQtRQV4rq9BIuiUhx YQkOV8OusjtWlNiXDQRtP7Y3iRX/3aVAyU0aNC7Y9PdJ/6FG/2v4M4IvMk0G3zFy N7EjFCoJEf7XbJKeryp8Pivktut0/40/bcnIt+xi4FtHNaZ1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+Rmsz2MspVbArO6olA178wtuDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTc1NGI5MWUtM2NhZi0z ZDM2LTg0NGYtODAzMGJiYmQ0NDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAufxOIjA5tAbMq7L/759UO0/87T8zzlkm2YPqPT2fl9FAi4uktrqaoo Ph8cYGKnrXFN+wmv3w+4A/0h7o75KgKrWv/HpPumdxUBjAfJWPeGKRSqfkgJoAVJ kbXmd5aGqhk8gmi7SP+aRZkXe+G/aiUgdJ24iUhPlj7RMl4yzwKqiXuA0DUducUB oqdUFCITcaEymbvFqK9AvmWbGQ5wgkp4zbQBPybJh4UUaNYn2uKAotTGEUw0Yu4e WQ6ireMFHGb97Os51Qx/dGkssm6wmhJ/+WFwjAzGWJFS7yP0n6azXNh6ceGy5Te5 jVOfaTC96g1UiwZUacQFzLslJtq7/9E= -----END CERTIFICATE-----Generated at Wed May 13 06:14:42 2026 by rpki-client