$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa File: 9a104f27-22d6-361b-bd0e-37ea580f7227.roa (raw, json) Hash identifier: k1M3UTUnMoC81SJDTcQ5oW7WGpK7n2CSHnkD0PBn24M= Subject key identifier: DE:AD:60:5D:14:86:AB:99:41:84:5B:3E:0C:39:72:C6:20:F9:DE:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584DC6CAF8B0B0C7AF8D7D3FAA80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa Signing time: Sat 09 May 2026 13:00:31 +0000 ROA not before: Sat 09 May 2026 13:00:31 +0000 ROA not after: Fri 07 Aug 2026 13:00:31 +0000 asID: 54253 IP address blocks: 140.245.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c6:ca:f8:b0:b0:c7:af:8d:7d:3f:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: May 9 13:00:31 2026 GMT Not After : Aug 7 13:00:31 2026 GMT Subject: CN=f8e8d411-b87c-4943-9592-e5ae2a5d61bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:2a:f3:07:8a:c5:cf:21:20:11:81:79:aa: 7a:88:90:af:bc:b9:f0:ba:32:99:61:b0:d1:19:d1: 62:92:ff:dd:ad:89:32:a9:40:ee:d0:46:74:ed:4d: b6:b9:77:79:a3:4a:ea:64:34:85:f9:0e:04:b1:82: 63:68:61:69:10:63:43:c6:be:8a:99:0b:78:dc:f4: 7e:a4:7c:c4:29:0b:48:f7:e2:31:63:36:01:56:ea: 5c:63:a1:66:1c:dc:f7:04:8d:5f:71:7a:34:16:ed: 06:de:bc:c9:56:34:8b:bb:8b:d5:32:e5:56:75:6a: fa:3b:fa:45:2f:f9:34:6c:3e:c5:0d:cf:1b:f6:ba: 4c:05:65:cb:a2:56:a1:fd:7f:dc:8a:3e:bf:97:f4: b7:e6:f7:77:e6:32:aa:71:fb:52:0e:19:b7:af:18: ec:91:e4:5b:05:1f:3d:f4:24:74:45:f2:78:14:31: e7:05:6f:6e:2a:db:45:06:b8:77:98:fd:8f:66:a5: 0e:ab:46:77:a6:28:32:9e:4d:61:48:e0:50:47:98: 3b:1c:c5:00:8c:0e:f5:fd:10:d7:38:1f:2a:11:f2: 81:f2:5a:16:72:23:49:64:c8:41:33:72:4c:4a:9e: 4b:2f:38:86:cb:22:78:f4:0d:8f:bf:c5:93:74:c3: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AD:60:5D:14:86:AB:99:41:84:5B:3E:0C:39:72:C6:20:F9:DE:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a104f27-22d6-361b-bd0e-37ea580f7227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:76:22:13:95:98:b9:3f:4c:c0:c3:26:1b:03:31:25:8f:94: 0b:38:e5:89:ee:92:32:88:14:2d:8a:e8:f7:a7:f9:4b:cb:b0: 20:a9:be:5b:b7:5a:11:24:a1:97:77:7e:e0:22:49:1f:3e:52: 41:db:c6:1b:73:07:49:98:f6:6c:29:cc:52:38:c8:98:7d:ce: 5f:1b:8f:87:78:d3:73:55:6c:92:07:86:69:0b:25:35:0e:24: b8:f5:30:31:30:8e:61:8d:43:cf:71:84:e5:1e:10:2a:f1:26: 17:cc:62:db:4c:e2:89:11:e9:99:eb:5f:ab:a9:f9:c8:e8:bd: 12:dc:d9:aa:00:a8:ab:c2:b9:e8:8f:1e:35:c1:08:e3:35:26: 85:89:ed:44:b1:ac:60:74:b9:65:04:32:49:08:ac:1c:3f:21: c1:cc:d8:88:f3:c7:e3:37:0c:d8:d5:cf:eb:7b:aa:48:7d:a0: 51:c6:73:67:2e:9b:fe:3a:bc:c4:99:e6:6a:1b:b4:81:12:e9: 7d:e4:c7:88:e4:20:8e:77:9c:0d:86:36:67:de:58:bf:23:83: 6d:b4:2e:35:e4:fa:dc:78:b6:b3:77:3c:75:9d:3b:91:50:fb: 0e:db:d5:1a:96:75:66:91:f4:3e:44:a5:90:88:a6:aa:0c:e7: e2:53:39:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3GyviwsMevjX0/qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDUwOTEzMDAzMVoXDTI2MDgwNzEzMDAzMVowLzEtMCsGA1UEAxMk ZjhlOGQ0MTEtYjg3Yy00OTQzLTk1OTItZTVhZTJhNWQ2MWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8gq8weKxc8hIBGBeap6iJCvvLnwujKZYbDR GdFikv/drYkyqUDu0EZ07U22uXd5o0rqZDSF+Q4EsYJjaGFpEGNDxr6KmQt43PR+ pHzEKQtI9+IxYzYBVupcY6FmHNz3BI1fcXo0Fu0G3rzJVjSLu4vVMuVWdWr6O/pF L/k0bD7FDc8b9rpMBWXLolah/X/cij6/l/S35vd35jKqcftSDhm3rxjskeRbBR89 9CR0RfJ4FDHnBW9uKttFBrh3mP2PZqUOq0Z3pigynk1hSOBQR5g7HMUAjA71/RDX OB8qEfKB8loWciNJZMhBM3JMSp5LLziGyyJ49A2Pv8WTdMOf+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6tYF0UhquZQYRbPgw5csYg+d6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWExMDRmMjctMjJkNi0z NjFiLWJkMGUtMzdlYTU4MGY3MjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjPWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH92IhOVmLk/TMDDJhsDMSWPlAs45YnukjKIFC2K6Pen+UvLsCCpvlu3 WhEkoZd3fuAiSR8+UkHbxhtzB0mY9mwpzFI4yJh9zl8bj4d403NVbJIHhmkLJTUO JLj1MDEwjmGNQ89xhOUeECrxJhfMYttM4okR6ZnrX6up+cjovRLc2aoAqKvCueiP HjXBCOM1JoWJ7USxrGB0uWUEMkkIrBw/IcHM2Ijzx+M3DNjVz+t7qkh9oFHGc2cu m/46vMSZ5mobtIES6X3kx4jkII53nA2GNmfeWL8jg220LjXk+tx4trN3PHWdO5FQ +w7b1RqWdWaR9D5EpZCIpqoM5+JTOVw= -----END CERTIFICATE-----Generated at Wed May 13 07:47:39 2026 by rpki-client