$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa File: bb5c8181-de03-3082-935b-bbbeac181c59.roa (raw, json) Hash identifier: B+ZbO7vNhxFE59uwJ7ug+4ad6Fy1GpO2pYuHGT0ZtZ4= Subject key identifier: 43:46:C7:E7:32:51:22:2C:64:74:EE:86:35:E2:B0:CF:A0:2E:B5:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A2030EEC271F81792128780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.91.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:30:ee:c2:71:f8:17:92:12:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=0d095c98-d950-4e85-b829-71ef443c4bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:d0:a2:6d:0b:f4:a1:e1:b4:f9:04:a0:af: 8f:73:cc:80:d7:cd:da:7e:bc:52:77:04:7a:94:aa: 02:01:27:f6:38:9b:5e:32:8c:c0:13:b6:03:74:7f: 32:bf:9d:60:19:e7:fd:ba:32:3d:7f:83:97:cd:c2: 83:01:91:2e:74:f5:9f:3e:36:17:94:bc:89:92:46: 9f:6a:00:a2:2a:e4:e0:7e:ec:cd:d0:cc:2a:c1:ba: 02:4a:a6:f1:8b:40:ff:a3:dd:2a:6d:de:37:86:74: 9c:15:10:71:33:2f:4b:88:81:11:71:5a:69:99:d9: d1:7d:3e:7f:42:3a:2a:76:dd:1b:94:a2:4d:a1:02: 51:e9:57:6e:5a:41:cf:92:b5:1d:9d:ab:b1:7a:fc: 14:70:00:a5:18:98:86:0b:42:ad:1d:73:cb:74:74: 1f:07:f4:0c:04:ef:c1:b3:a3:17:fd:64:2f:fc:ae: 2a:81:dd:8e:a2:88:79:bf:98:1d:cf:2b:3f:3d:c3: 8c:13:ce:b3:97:48:1b:ca:3d:2b:e9:f7:45:a4:b3: f7:64:cb:63:9a:95:f7:fc:24:e1:a6:33:e5:c9:0b: f7:07:4c:a5:50:12:7b:2a:8b:87:2a:7a:2f:22:8f: fc:c5:ab:7b:22:b7:9d:42:ad:f5:34:34:ae:41:0c: 05:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:46:C7:E7:32:51:22:2C:64:74:EE:86:35:E2:B0:CF:A0:2E:B5:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb5c8181-de03-3082-935b-bbbeac181c59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:2e:e6:78:73:8e:bb:8f:af:c9:72:30:e9:bd:77:94:65:eb: 77:1e:3d:76:bd:9c:00:0b:cf:e8:26:7e:94:64:db:4c:38:bf: 24:22:a1:a3:62:a0:a2:50:51:31:d0:c4:e3:1d:17:c4:f5:85: b9:f3:25:40:5e:ca:e9:78:0e:62:c4:d6:2d:a5:4c:97:b4:22: 45:72:e2:ef:fb:8e:e4:b7:c1:8c:d8:a7:a6:f6:1f:aa:f2:db: 24:d1:09:d8:3c:bb:fd:9c:b5:85:48:89:92:37:ab:87:3d:0d: 58:26:c4:b4:5b:6e:e9:48:a2:97:0f:54:7e:d3:0f:1d:68:72: 75:64:9a:e4:57:51:59:f4:77:7d:05:55:61:15:08:d4:e4:1b: 24:42:54:2c:13:fe:26:67:85:f3:d9:47:32:77:a4:d0:34:3f: 36:06:28:eb:6e:b0:22:a4:c7:c9:72:d1:00:d1:4b:f2:3c:51: 6c:29:35:70:d2:62:8a:1b:d3:cd:69:af:8f:92:09:38:db:92: 3f:eb:00:0d:9a:6d:9b:0a:86:96:cd:42:5f:e8:1e:72:02:8d: 79:ab:b8:ba:fa:65:f2:5d:a0:03:30:53:fd:e1:18:66:84:4a: 98:b0:cd:56:45:ab:b3:f7:39:f3:f2:c3:bc:7e:11:a0:00:f6: 74:b9:d1:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIDDuwnH4F5ISh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MGQwOTVjOTgtZDk1MC00ZTg1LWI4MjktNzFlZjQ0M2M0YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHfQom0L9KHhtPkEoK+Pc8yA183afrxSdwR6 lKoCASf2OJteMozAE7YDdH8yv51gGef9ujI9f4OXzcKDAZEudPWfPjYXlLyJkkaf agCiKuTgfuzN0MwqwboCSqbxi0D/o90qbd43hnScFRBxMy9LiIERcVppmdnRfT5/ Qjoqdt0blKJNoQJR6VduWkHPkrUdnauxevwUcAClGJiGC0KtHXPLdHQfB/QMBO/B s6MX/WQv/K4qgd2Oooh5v5gdzys/PcOME86zl0gbyj0r6fdFpLP3ZMtjmpX3/CTh pjPlyQv3B0ylUBJ7KouHKnovIo/8xat7IredQq31NDSuQQwFhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENGx+cyUSIsZHTuhjXisM+gLrV0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmI1YzgxODEtZGUwMy0z MDgyLTkzNWItYmJiZWFjMTgxYzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcu5nhzjruPr8lyMOm9d5Rl63cePXa9nAALz+gmfpRk20w4vyQioaNi oKJQUTHQxOMdF8T1hbnzJUBeyul4DmLE1i2lTJe0IkVy4u/7juS3wYzYp6b2H6ry 2yTRCdg8u/2ctYVIiZI3q4c9DVgmxLRbbulIopcPVH7TDx1ocnVkmuRXUVn0d30F VWEVCNTkGyRCVCwT/iZnhfPZRzJ3pNA0PzYGKOtusCKkx8ly0QDRS/I8UWwpNXDS Yoob081pr4+SCTjbkj/rAA2abZsKhpbNQl/oHnICjXmruLr6ZfJdoAMwU/3hGGaE SpiwzVZFq7P3OfPyw7x+EaAA9nS50QQ= -----END CERTIFICATE-----Generated at Wed May 13 07:04:01 2026 by rpki-client