$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa File: bfac7b22-b2ac-302d-aec1-af28620955f3.roa (raw, json) Hash identifier: xPI1IBUtIizQvAvpRDzD1U1Xj99HRN2leX46tNzxaSc= Subject key identifier: CE:B8:EA:C3:C8:3C:03:B0:E7:70:8B:EC:79:C4:76:3A:46:FA:18:B0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5579C9FC9C3A81B9E4880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:57:9c:9f:c9:c3:a8:1b:9e:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=89af69b9-f9ec-4bc3-863e-6b5d20cf4ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b9:a9:6b:35:10:4e:21:97:ae:d3:bf:ec:50: 68:2b:52:3d:4f:be:74:e2:21:b6:6f:77:c8:a4:e9: 52:95:bc:9f:7a:86:bb:73:7f:28:f5:96:4f:59:ef: 55:cc:a1:1f:d3:0b:ac:b2:c7:28:1f:32:5c:cd:48: 25:fd:b3:43:70:97:0f:2c:fe:08:c1:6a:44:d9:ef: 9a:fd:b4:68:77:0c:b8:91:06:ae:28:f8:3e:7e:0c: 8e:cc:01:56:f8:23:4b:b6:f3:ee:2f:e4:b6:e6:77: 69:c3:91:34:ac:d3:20:14:bf:c7:cd:04:10:e1:d4: 7a:47:72:82:0b:bb:ee:3a:57:c8:4f:0d:d8:54:b6: d1:36:4a:f4:a3:d6:a5:a1:91:03:41:b5:1f:a7:50: 3b:28:c9:46:e9:a3:d3:65:a8:bd:85:0c:28:94:5d: cd:86:75:ce:2e:c9:02:19:4b:7e:2e:ec:c8:28:a8: 6d:d5:ba:c5:f3:48:26:6d:09:d7:dc:c6:c1:e5:99: ee:69:50:c6:a4:50:d1:f7:96:67:cd:81:a5:9f:46: b4:9e:7e:b0:45:62:39:37:16:2a:5b:90:3c:f1:43: c7:37:2f:bf:09:28:2a:1b:ae:5e:84:b4:8c:ec:17: 71:ef:ad:02:d7:9d:7b:42:47:dc:53:2a:07:f5:dc: e8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B8:EA:C3:C8:3C:03:B0:E7:70:8B:EC:79:C4:76:3A:46:FA:18:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:f5:db:47:83:f0:3b:33:90:5f:5e:09:26:ed:88:a7:67:a6: 24:2c:77:7d:31:bd:c6:6f:01:02:ca:55:69:0d:ad:6c:bd:28: 79:c1:c9:fc:bf:08:c0:f3:5f:7e:34:cc:54:69:45:9a:8c:95: d1:25:18:49:2b:43:39:6b:6f:3b:a8:5a:08:f0:79:22:32:ca: 48:0c:3d:85:d7:a2:2c:7c:cf:b7:55:09:5a:8a:8b:8a:c7:4d: 93:56:70:cd:3f:14:16:57:15:f4:3e:9a:4f:5e:9d:ce:a0:47: 67:50:39:a5:4f:ed:6e:0f:6e:8b:b4:5c:b9:89:27:75:09:ea: 1d:d1:e2:99:be:38:cb:8e:c6:fe:9c:87:b7:96:ad:4e:34:df: 7b:1a:74:8f:6e:ba:48:28:e7:6a:cd:9a:3a:54:08:31:f8:96: 7f:5c:43:2f:8d:23:55:5f:93:7a:16:76:28:90:e8:5e:ef:54: 24:22:d3:05:03:d7:70:1a:cf:7c:01:79:8a:69:b8:26:dc:86: aa:8a:dd:99:aa:c5:7a:0b:60:3d:cc:98:0e:4a:fd:cc:ac:b2: 3b:c8:a8:81:44:a5:a1:60:57:b3:81:68:f1:02:72:90:ff:42: af:3d:cd:fd:55:3a:fe:e9:00:3b:f9:8a:a9:d2:f8:ba:4f:f6: 82:2a:33:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVecn8nDqBueSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ODlhZjY5YjktZjllYy00YmMzLTg2M2UtNmI1ZDIwY2Y0ZWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLmpazUQTiGXrtO/7FBoK1I9T7504iG2b3fI pOlSlbyfeoa7c38o9ZZPWe9VzKEf0wussscoHzJczUgl/bNDcJcPLP4IwWpE2e+a /bRodwy4kQauKPg+fgyOzAFW+CNLtvPuL+S25ndpw5E0rNMgFL/HzQQQ4dR6R3KC C7vuOlfITw3YVLbRNkr0o9aloZEDQbUfp1A7KMlG6aPTZai9hQwolF3NhnXOLskC GUt+LuzIKKht1brF80gmbQnX3MbB5ZnuaVDGpFDR95ZnzYGln0a0nn6wRWI5NxYq W5A88UPHNy+/CSgqG65ehLSM7Bdx760C1517QkfcUyoH9dzo1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM646sPIPAOw53CL7HnEdjpG+hiwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhYzdiMjItYjJhYy0z MDJkLWFlYzEtYWYyODYyMDk1NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHH120eD8DszkF9eCSbtiKdnpiQsd30xvcZvAQLKVWkNrWy9KHnByfy/ CMDzX340zFRpRZqMldElGEkrQzlrbzuoWgjweSIyykgMPYXXoix8z7dVCVqKi4rH TZNWcM0/FBZXFfQ+mk9enc6gR2dQOaVP7W4Pbou0XLmJJ3UJ6h3R4pm+OMuOxv6c h7eWrU4033sadI9uukgo52rNmjpUCDH4ln9cQy+NI1Vfk3oWdiiQ6F7vVCQi0wUD 13Aaz3wBeYppuCbchqqK3ZmqxXoLYD3MmA5K/cyssjvIqIFEpaFgV7OBaPECcpD/ Qq89zf1VOv7pADv5iqnS+LpP9oIqM7o= -----END CERTIFICATE-----Generated at Wed May 13 07:31:18 2026 by rpki-client