$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa File: b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa (raw, json) Hash identifier: S+Mz7xi6I9eT9JSX0B/LZh4hhsjH7ZK1mY7QgJ27e4k= Subject key identifier: DF:68:50:9B:77:43:76:90:E4:B0:F1:E7:BB:DD:D3:8B:6D:3F:49:2B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A203075E64229DF22744F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.204.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:30:75:e6:42:29:df:22:74:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=be408447-03db-4e13-8c14-289422a80d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e7:ab:80:e8:c7:56:8b:84:2a:53:09:5d:92: 70:99:64:23:f4:a2:55:ad:4d:d7:58:b9:f0:80:0b: 29:84:8e:0f:d5:f3:04:d2:c5:29:84:07:2d:38:b3: 1b:cc:01:cb:4a:a9:26:86:39:06:06:96:4c:05:fe: 4b:e4:34:6c:82:0a:0d:22:f7:c9:14:1b:71:0d:3a: 23:ac:b1:72:61:b9:5c:cc:5b:c5:67:ac:be:42:97: cf:d9:10:7b:a9:d9:88:ea:2f:cb:a3:2c:bc:90:23: ff:68:a2:92:0e:4a:17:bc:c1:d4:ed:df:d2:28:2f: 60:df:bb:e1:bf:c9:59:e2:c9:90:a5:b5:ab:7e:90: 17:59:29:bc:c7:9c:f4:11:67:01:cf:48:2f:06:c6: f1:69:87:44:c8:2b:70:f1:83:a5:b8:94:a9:17:bb: cd:41:fa:c1:a8:2b:bf:21:8f:5f:71:31:cb:92:cf: 8d:bd:d3:32:1e:99:7d:1e:36:76:e0:d3:a9:c4:5f: fc:86:2f:cc:96:4c:af:c8:64:ac:79:83:20:c5:eb: 33:3f:4f:cc:83:3c:cf:70:17:06:bf:e4:56:dc:e0: 10:03:34:b1:06:38:7a:a4:c3:05:89:cf:f7:04:63: 10:12:14:42:dd:2d:ee:8a:b3:fe:34:61:77:08:a5: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:68:50:9B:77:43:76:90:E4:B0:F1:E7:BB:DD:D3:8B:6D:3F:49:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:d7:cd:25:74:40:18:05:da:13:88:3f:f1:09:83:1c:2c:96: 41:04:e3:a2:e8:4e:48:5f:b8:fd:dc:28:c2:b8:6b:28:07:24: 65:e2:35:6c:8a:1a:e6:1a:56:cd:fb:46:c4:33:8d:a1:21:19: 08:b9:9e:76:b3:87:ea:04:1c:7c:d1:9d:a1:67:42:64:68:b9: a7:47:29:1f:07:26:a0:2b:6d:0d:b6:93:bd:3f:f9:5d:9a:7b: c5:a2:85:c4:ca:f0:70:21:b7:d4:fe:27:47:10:cb:b7:e7:1f: c2:05:e2:25:a9:ab:f9:79:b6:05:7e:d7:d3:ae:ec:ce:90:b6: b6:0c:2c:92:51:62:b7:d3:a1:e9:5c:ab:c3:82:62:4d:54:8e: a3:a9:de:13:4e:3a:b4:5b:a9:6d:a7:21:1d:98:60:9f:d7:8a: 3e:34:c8:74:36:ef:8b:23:ca:ed:d2:17:41:e5:12:63:ae:9a: 53:4b:57:6b:51:68:8a:db:5f:bf:84:e7:77:f5:35:d7:99:5e: 51:27:17:30:ce:ae:38:53:f8:c8:a7:38:c4:0b:a6:00:40:2e: 44:f3:c7:bf:df:9c:9d:c1:2c:8c:39:8a:d7:68:23:70:ac:ce: cd:ac:57:71:67:8a:1c:78:fd:ee:8c:ab:8b:b8:51:2a:61:65: 07:33:b9:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDB15kIp3yJ0TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk YmU0MDg0NDctMDNkYi00ZTEzLThjMTQtMjg5NDIyYTgwZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+ergOjHVouEKlMJXZJwmWQj9KJVrU3XWLnw gAsphI4P1fME0sUphActOLMbzAHLSqkmhjkGBpZMBf5L5DRsggoNIvfJFBtxDToj rLFyYblczFvFZ6y+QpfP2RB7qdmI6i/Loyy8kCP/aKKSDkoXvMHU7d/SKC9g37vh v8lZ4smQpbWrfpAXWSm8x5z0EWcBz0gvBsbxaYdEyCtw8YOluJSpF7vNQfrBqCu/ IY9fcTHLks+NvdMyHpl9HjZ24NOpxF/8hi/MlkyvyGSseYMgxeszP0/MgzzPcBcG v+RW3OAQAzSxBjh6pMMFic/3BGMQEhRC3S3uirP+NGF3CKWMkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9oUJt3Q3aQ5LDx57vd04ttP0krMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmMzVmNDktM2JmZS0z ODhiLWE5NGYtNmY5ZjNkZDFmMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFDXzSV0QBgF2hOIP/EJgxwslkEE46LoTkhfuP3cKMK4aygHJGXiNWyK GuYaVs37RsQzjaEhGQi5nnazh+oEHHzRnaFnQmRouadHKR8HJqArbQ22k70/+V2a e8WihcTK8HAht9T+J0cQy7fnH8IF4iWpq/l5tgV+19Ou7M6QtrYMLJJRYrfToelc q8OCYk1UjqOp3hNOOrRbqW2nIR2YYJ/Xij40yHQ274sjyu3SF0HlEmOumlNLV2tR aIrbX7+E53f1NdeZXlEnFzDOrjhT+MinOMQLpgBALkTzx7/fnJ3BLIw5itdoI3Cs zs2sV3Fnihx4/e6Mq4u4USphZQczuQo= -----END CERTIFICATE-----Generated at Wed May 13 06:13:16 2026 by rpki-client