$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d467fbb-7804-3170-8495-716020c64cb9.roa File: 9d467fbb-7804-3170-8495-716020c64cb9.roa (raw, json) Hash identifier: juSjuSVJt2Ie0npcx/ftn3c9UHJ16oysj/gV26yyGLI= Subject key identifier: CB:11:5A:E2:02:B6:82:A7:29:EC:B8:22:21:E8:BF:0F:29:15:F6:DE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8D9000917A160C723844BFA0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d467fbb-7804-3170-8495-716020c64cb9.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 140.204.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:90:00:91:7a:16:0c:72:38:44:bf:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=4b3593fc-f43a-4b06-bd87-5fd67c7d18ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:55:58:a1:90:05:ce:6f:be:63:22:b2:ec:26: c3:92:b3:f9:6a:ab:a5:38:44:4a:a3:cd:85:b6:63: 35:1c:e0:d8:e6:48:b9:d1:ee:79:82:1a:27:03:e0: 46:b7:90:08:ee:a7:41:98:b2:65:f1:1f:b0:dc:77: 95:84:ba:60:95:50:98:21:8c:99:0f:5e:1b:e9:09: db:90:0c:96:df:3e:7e:62:07:88:af:4e:91:31:79: 72:ff:df:ea:a8:2b:78:2b:5c:3e:87:0f:46:73:ec: 32:ab:ab:06:a9:04:b0:ab:46:6c:89:68:a1:7c:42: 81:fd:fd:58:f0:23:fd:f5:01:ad:dd:45:6f:2f:35: cd:7a:37:dd:1b:ee:b6:4f:c3:e3:38:00:74:c8:c5: c9:0f:6b:7f:51:00:04:54:df:02:c2:d9:f0:74:99: c1:5f:8c:98:8d:62:b9:28:ce:01:af:b2:3a:cc:ce: b0:39:7b:75:37:01:0a:01:c6:21:56:79:5c:fa:70: 98:40:45:ba:03:6d:9b:f2:ca:59:75:42:f0:19:63: e2:c1:b6:98:bb:7a:a3:8c:7d:c6:23:92:3c:37:c6: 1c:d6:79:9c:e6:18:82:2b:ad:96:4d:46:1f:96:a3: 01:47:99:8b:4b:8b:9e:67:12:8f:ef:49:59:e6:60: 23:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:11:5A:E2:02:B6:82:A7:29:EC:B8:22:21:E8:BF:0F:29:15:F6:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d467fbb-7804-3170-8495-716020c64cb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:36:ad:86:d2:b7:dd:45:ba:06:52:09:46:61:2d:27:07:3c: 25:0c:4b:70:fd:b7:95:ff:35:42:07:0c:93:ad:f2:8a:b3:6a: e0:b7:83:87:5b:4a:69:71:cf:47:e9:ed:01:7d:05:cb:05:7c: fa:2c:e7:ed:18:b3:2f:3d:70:cf:b0:08:de:32:9e:ab:77:72: 4d:f4:6f:e5:00:45:e6:af:a1:1d:7b:e0:39:ac:c5:e4:d9:e4: 09:50:ee:35:bb:be:88:a8:82:53:4f:b4:6a:cf:4b:54:99:90: 23:06:9a:32:fc:90:a0:c3:5e:4b:45:3c:ca:dc:d7:90:77:5b: 01:ca:51:c0:f9:de:9f:e0:3e:ae:14:4e:1a:9e:6c:9b:80:ff: 54:c3:88:58:e6:ca:50:38:75:17:36:f0:65:b9:b1:b6:6f:e0: b2:94:e4:04:28:5c:94:a2:2b:d6:24:88:93:75:c0:35:78:29: 09:8f:17:24:ae:41:9a:af:9c:83:7d:04:b5:10:d8:29:81:57: 9f:92:fd:79:a0:df:ac:2a:5d:5f:b9:bd:8f:8c:6f:52:70:be: ac:f6:79:b0:3b:6b:93:c3:56:00:5b:e9:4c:9f:7e:0d:f0:db: 25:43:7d:11:5f:d4:7d:13:ef:c9:b0:f2:a5:6b:7b:15:1d:05: c9:90:54:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2NkACRehYMcjhEv6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk NGIzNTkzZmMtZjQzYS00YjA2LWJkODctNWZkNjdjN2QxOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFVYoZAFzm++YyKy7CbDkrP5aqulOERKo82F tmM1HODY5ki50e55ghonA+BGt5AI7qdBmLJl8R+w3HeVhLpglVCYIYyZD14b6Qnb kAyW3z5+YgeIr06RMXly/9/qqCt4K1w+hw9Gc+wyq6sGqQSwq0ZsiWihfEKB/f1Y 8CP99QGt3UVvLzXNejfdG+62T8PjOAB0yMXJD2t/UQAEVN8CwtnwdJnBX4yYjWK5 KM4Br7I6zM6wOXt1NwEKAcYhVnlc+nCYQEW6A22b8spZdULwGWPiwbaYu3qjjH3G I5I8N8Yc1nmc5hiCK62WTUYflqMBR5mLS4ueZxKP70lZ5mAjrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsRWuICtoKnKey4IiHovw8pFfbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWQ0NjdmYmItNzgwNC0z MTcwLTg0OTUtNzE2MDIwYzY0Y2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs2rYbSt91FugZSCUZhLScHPCUMS3D9t5X/NUIHDJOt8oqzauC3g4db Smlxz0fp7QF9BcsFfPos5+0Ysy89cM+wCN4ynqt3ck30b+UAReavoR174DmsxeTZ 5AlQ7jW7voioglNPtGrPS1SZkCMGmjL8kKDDXktFPMrc15B3WwHKUcD53p/gPq4U ThqebJuA/1TDiFjmylA4dRc28GW5sbZv4LKU5AQoXJSiK9YkiJN1wDV4KQmPFySu QZqvnIN9BLUQ2CmBV5+S/Xmg36wqXV+5vY+Mb1Jwvqz2ebA7a5PDVgBb6Uyffg3w 2yVDfRFf1H0T78mw8qVrexUdBcmQVN0= -----END CERTIFICATE-----Generated at Wed May 13 11:39:49 2026 by rpki-client