$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa File: b153b99a-878c-3725-84b3-ef7b5da07271.roa (raw, json) Hash identifier: g80NswvERW2y4CD76uXVu7lyT5hOrjDPp0Uw6zD6Y+I= Subject key identifier: C8:B5:01:C5:3E:BB:58:02:DA:3F:6E:79:79:5B:0A:7D:5A:89:2D:42 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E4FFF57EC94B5B6AE95F600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:4f:ff:57:ec:94:b5:b6:ae:95:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=86dbca2b-9152-4df8-b341-5e7536dcf43b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:91:37:f3:35:57:08:6c:20:b4:7f:a0:ce:94: bf:7c:2f:f0:25:b7:2a:8d:7b:f0:cf:57:e4:25:ec: c3:81:87:53:90:39:fe:53:42:92:3d:f8:78:29:60: 2d:e3:30:93:ee:3f:ce:71:77:3d:03:23:05:64:eb: 75:fb:55:22:9d:e0:71:f5:07:7a:a8:55:cf:84:d4: b6:6c:df:50:41:36:4a:14:bc:3f:8e:4a:d5:cf:f4: d1:e8:6d:b0:b7:98:09:eb:d5:ec:83:37:06:a6:49: 78:c1:11:d8:a8:51:ca:f3:db:3d:fc:23:6d:65:42: 9b:55:4d:73:42:57:34:73:7b:b8:56:b2:4c:00:15: 10:99:13:bf:ac:1b:a8:b8:6a:c5:8b:d0:0d:d0:59: 08:8d:38:8e:29:35:0d:83:35:bd:93:a6:e9:9f:27: e4:9e:d2:36:ab:cf:7f:b8:75:c5:0a:29:76:11:f4: b6:d3:d1:c7:6f:ca:d0:21:85:fe:29:12:f6:fe:8d: db:5f:f1:8f:32:81:2b:c4:6c:33:a3:d0:d8:b9:3c: bd:18:0d:c4:a0:f7:d1:64:87:03:79:fc:59:98:7b: 34:24:49:68:76:9a:be:fe:ad:18:d3:44:cb:c8:b2: 08:9c:41:d8:86:7d:9d:ce:1f:95:99:30:12:83:28: 99:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B5:01:C5:3E:BB:58:02:DA:3F:6E:79:79:5B:0A:7D:5A:89:2D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a7:1d:be:dd:79:d8:c3:d7:c3:88:63:15:f9:16:80:96:6c: 47:10:f1:25:04:36:74:44:30:92:fd:60:30:95:44:7e:b5:cf: ac:e4:1d:0b:b8:31:bb:2b:56:e1:dd:24:72:d5:6c:d8:01:25: f9:26:82:f0:5a:74:81:24:d4:e4:6f:b4:98:21:2a:42:f7:94: 73:e7:04:9e:44:a0:97:a8:1c:2c:f9:59:b4:1c:a7:65:c5:b9: 1d:57:cb:d1:f1:d7:29:18:33:3d:9c:e7:d2:e7:c4:76:6b:ae: e4:6b:f9:6b:f7:54:f1:13:f5:5f:d4:1e:d2:4a:fe:4a:ce:30: ff:d7:b1:c5:b2:a6:b8:31:99:0c:ff:dc:79:17:62:de:aa:c6: 74:6f:31:bd:57:57:ba:28:48:e9:c4:de:9f:d3:6e:f5:99:bd: 16:09:80:61:eb:8f:98:12:d0:ae:12:f6:6a:bf:54:a6:c4:6b: b5:ea:30:93:17:92:48:b4:6d:60:b4:8b:d4:80:ed:56:52:c6: 4c:f1:6c:b0:bb:7a:09:17:ea:42:a2:61:1b:c8:95:15:fa:b0: 62:e2:f5:a8:f2:1a:fa:66:02:9b:d1:0a:76:91:69:00:8e:c8: 94:85:01:fd:75:42:b5:a3:a2:da:64:84:f3:fc:ac:d8:51:9e: e1:ff:a3:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eT/9X7JS1tq6V9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk ODZkYmNhMmItOTE1Mi00ZGY4LWIzNDEtNWU3NTM2ZGNmNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipE38zVXCGwgtH+gzpS/fC/wJbcqjXvwz1fk JezDgYdTkDn+U0KSPfh4KWAt4zCT7j/OcXc9AyMFZOt1+1UineBx9Qd6qFXPhNS2 bN9QQTZKFLw/jkrVz/TR6G2wt5gJ69XsgzcGpkl4wRHYqFHK89s9/CNtZUKbVU1z Qlc0c3u4VrJMABUQmRO/rBuouGrFi9AN0FkIjTiOKTUNgzW9k6bpnyfkntI2q89/ uHXFCil2EfS209HHb8rQIYX+KRL2/o3bX/GPMoErxGwzo9DYuTy9GA3EoPfRZIcD efxZmHs0JElodpq+/q0Y00TLyLIInEHYhn2dzh+VmTASgyiZpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMi1AcU+u1gC2j9ueXlbCn1aiS1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjE1M2I5OWEtODc4Yy0z NzI1LTg0YjMtZWY3YjVkYTA3MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOnHb7dedjD18OIYxX5FoCWbEcQ8SUENnREMJL9YDCVRH61z6zkHQu4 MbsrVuHdJHLVbNgBJfkmgvBadIEk1ORvtJghKkL3lHPnBJ5EoJeoHCz5WbQcp2XF uR1Xy9Hx1ykYMz2c59LnxHZrruRr+Wv3VPET9V/UHtJK/krOMP/XscWyprgxmQz/ 3HkXYt6qxnRvMb1XV7ooSOnE3p/TbvWZvRYJgGHrj5gS0K4S9mq/VKbEa7XqMJMX kki0bWC0i9SA7VZSxkzxbLC7egkX6kKiYRvIlRX6sGLi9ajyGvpmApvRCnaRaQCO yJSFAf11QrWjotpkhPP8rNhRnuH/o3w= -----END CERTIFICATE-----Generated at Wed May 13 10:52:28 2026 by rpki-client