$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa File: b153b99a-878c-3725-84b3-ef7b5da07271.roa (raw, json) Hash identifier: 1y8o3bkzJz4rykmvJF4LR7d+xW+snhnzh9b6xPMkwcY= Subject key identifier: 1B:1A:F0:3B:7B:0B:50:CD:F2:05:9A:98:51:CA:3D:AA:DB:74:B1:6A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94DFDBDDAA2A9750A9C940 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.91.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:df:db:dd:aa:2a:97:50:a9:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=330e5791-63e2-4582-92e1-978a44e8df45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:bc:da:0c:2d:e1:ab:13:4d:e5:41:99:d4:6e: 52:22:f0:3a:13:12:ca:d8:68:e5:6b:15:f2:5a:a5: 84:b4:4e:0e:09:1b:a3:8c:be:60:b9:fd:86:e0:9a: 13:92:e3:2f:47:ee:1b:c4:80:45:b3:32:ad:5b:a6: 0f:c1:c0:63:5a:65:ad:07:b5:80:87:0f:dc:82:24: c9:27:4d:85:74:50:28:29:97:f0:3e:34:54:42:94: 4a:41:a9:70:ca:df:de:23:e5:43:25:8e:9a:20:cc: ae:cd:bf:a0:a7:12:61:72:cb:a9:22:ed:57:40:02: a7:30:1b:2f:1a:3d:01:b5:5e:f4:47:b1:3d:d7:8d: 7c:f9:d7:5c:76:88:b6:48:70:1c:92:d2:81:e2:9b: dc:a9:a8:ee:77:db:5d:a3:6d:d9:c8:2c:3d:28:f2: a0:ec:76:43:a4:bd:13:24:bf:21:f0:29:72:9a:99: c7:90:de:89:9a:87:24:90:98:96:cd:26:f2:21:01: ea:13:4c:1b:a5:ae:5c:9c:d9:f3:9d:fb:fe:87:72: 1a:89:c8:57:31:02:64:66:db:1e:05:4d:e7:93:b3: 86:64:9a:8e:bc:56:43:81:37:26:63:2a:d2:3d:6d: 5d:80:bf:7f:b5:9c:20:ff:68:c6:35:fd:a5:24:e5: 72:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:1A:F0:3B:7B:0B:50:CD:F2:05:9A:98:51:CA:3D:AA:DB:74:B1:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:79:d5:15:42:37:5d:17:94:56:76:48:e3:0d:69:37:f4:5b: fc:11:b8:98:34:fd:96:31:20:10:01:70:68:db:1b:fe:26:6f: 05:f2:f8:5d:d5:e3:14:d6:5e:e4:36:6b:28:e4:ec:8c:4a:ec: 52:6d:c5:e2:de:bd:eb:f7:4a:7c:62:5e:48:ad:07:20:ac:b4: 32:a6:8e:92:45:6d:a6:38:9b:d6:11:0a:8e:32:3a:a1:8e:f6: 3c:e1:28:8a:9e:22:b1:72:9f:b9:9b:3f:51:b3:e0:ae:31:48: 9f:ef:18:32:41:90:a8:f7:35:cf:a9:c9:b8:11:1a:22:99:2e: ae:e3:b2:df:38:cd:45:79:a7:9c:d7:7e:74:75:af:f6:b7:e7: 53:ff:ce:07:f7:06:0c:ec:79:e2:bd:07:ad:d3:3d:b6:b0:44: c5:bd:70:bd:ef:ca:64:99:da:07:50:f5:8a:2a:97:79:8e:62: 3e:15:93:07:4a:ac:55:65:5c:e1:f9:2b:64:fd:e6:a8:32:56: 60:05:b6:30:4c:0f:24:a1:ea:e0:da:8d:e6:25:16:db:a3:6a: 91:cd:e6:f5:a6:ea:0b:52:ca:95:15:57:32:f0:e5:ac:a8:f2: 54:6a:72:f8:a8:c2:af:e2:cf:ec:aa:90:7f:df:9d:f7:ae:71: 9c:93:19:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lN/b3aoql1CpyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk MzMwZTU3OTEtNjNlMi00NTgyLTkyZTEtOTc4YTQ0ZThkZjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLzaDC3hqxNN5UGZ1G5SIvA6ExLK2GjlaxXy WqWEtE4OCRujjL5guf2G4JoTkuMvR+4bxIBFszKtW6YPwcBjWmWtB7WAhw/cgiTJ J02FdFAoKZfwPjRUQpRKQalwyt/eI+VDJY6aIMyuzb+gpxJhcsupIu1XQAKnMBsv Gj0BtV70R7E91418+ddcdoi2SHAcktKB4pvcqajud9tdo23ZyCw9KPKg7HZDpL0T JL8h8ClympnHkN6JmockkJiWzSbyIQHqE0wbpa5cnNnznfv+h3IaichXMQJkZtse BU3nk7OGZJqOvFZDgTcmYyrSPW1dgL9/tZwg/2jGNf2lJOVy3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsa8Dt7C1DN8gWamFHKParbdLFqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjE1M2I5OWEtODc4Yy0z NzI1LTg0YjMtZWY3YjVkYTA3MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI951RVCN10XlFZ2SOMNaTf0W/wRuJg0/ZYxIBABcGjbG/4mbwXy+F3V 4xTWXuQ2ayjk7IxK7FJtxeLevev3SnxiXkitByCstDKmjpJFbaY4m9YRCo4yOqGO 9jzhKIqeIrFyn7mbP1Gz4K4xSJ/vGDJBkKj3Nc+pybgRGiKZLq7jst84zUV5p5zX fnR1r/a351P/zgf3BgzseeK9B63TPbawRMW9cL3vymSZ2gdQ9Yoql3mOYj4VkwdK rFVlXOH5K2T95qgyVmAFtjBMDySh6uDajeYlFtujapHN5vWm6gtSypUVVzLw5ayo 8lRqcviowq/iz+yqkH/fnfeucZyTGfA= -----END CERTIFICATE-----Generated at Fri Jul 24 18:04:23 2026 by rpki-client