$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb520cf8-879f-32d3-917d-95f3f5418095.roa File: cb520cf8-879f-32d3-917d-95f3f5418095.roa (raw, json) Hash identifier: pGCWY3tQXUnx0fUzaRbFUSP9JdaBhhHGGMHqxl64lmo= Subject key identifier: 11:68:6A:38:4C:2A:EF:94:ED:38:FC:5C:91:56:35:07:50:B3:D7:45 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF990E688C2486612B07880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb520cf8-879f-32d3-917d-95f3f5418095.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.0.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:90:e6:88:c2:48:66:12:b0:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b2b8e717-b760-40bc-9f52-af8a2216ce31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:40:3d:fb:0d:e4:a5:6d:dc:c0:40:df:82:8e: 07:9f:24:69:c7:6a:a8:09:60:98:81:b8:e8:51:ff: 65:0e:46:01:a0:cd:3f:2a:33:0a:cd:38:67:2e:21: 01:e4:be:e6:ce:47:2b:8b:24:6a:05:f3:d8:62:c8: e5:4b:a4:7a:09:1a:59:71:4c:c8:bf:d3:4b:b2:e3: 71:1a:bb:df:68:69:b4:67:ee:8e:64:d0:12:d3:dc: c3:5d:07:cb:73:3b:70:a6:0e:35:8a:4d:72:19:ce: 69:6d:43:01:fa:09:1d:e5:35:de:83:94:a3:f4:41: f0:da:ab:01:84:e3:8c:74:eb:d1:f1:cb:e9:0c:e4: 87:7e:cc:c0:4d:84:30:98:98:85:84:17:ce:7b:ba: 7f:e1:7e:90:87:a0:81:db:fe:29:99:05:cb:38:15: bb:8a:d8:20:6f:fd:18:49:0b:a3:01:30:8c:05:b5: f0:cd:7d:89:39:98:b0:d4:b3:92:df:2e:d6:60:e1: 0c:2a:5c:7c:cf:b0:fa:22:7f:c7:c9:79:b3:ab:e4: 84:d5:5b:ce:c8:8f:1c:a6:25:1d:27:4c:f0:b5:57: ac:cc:9c:57:a7:78:c3:37:17:99:32:70:98:b8:72: a1:73:63:ca:9d:9c:5e:61:84:0e:1b:ec:89:95:f8: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:68:6A:38:4C:2A:EF:94:ED:38:FC:5C:91:56:35:07:50:B3:D7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cb520cf8-879f-32d3-917d-95f3f5418095.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:98:a8:ea:e8:f9:59:d8:67:cc:ba:21:cd:a1:77:1a:95:45: 4f:7d:71:01:68:69:4b:15:5d:47:bc:d2:aa:d7:4b:50:68:bf: 2b:4c:72:88:38:e8:57:20:8f:34:12:67:36:ce:ff:9f:bc:50: 52:0c:a1:58:50:8a:cd:0d:b6:07:6c:85:ea:81:27:c9:77:15: b7:0b:df:3e:17:21:35:28:a4:7c:b2:f9:a9:f4:19:c1:74:7e: 73:3c:bc:d1:87:73:0d:43:e4:73:74:04:5e:0c:1a:c7:2d:21: 0d:50:91:a0:d3:20:e7:41:86:c1:58:f0:46:87:30:23:d2:a5: 60:af:a6:b3:da:5a:a8:28:cc:ad:e0:09:3a:0f:63:52:6e:7c: 78:f6:fa:1b:8e:a2:d0:a2:c8:a1:15:64:cb:b5:ac:db:60:4c: 37:bf:09:07:2e:5d:68:68:03:d9:9b:75:02:03:c4:44:ba:89: 42:0e:ea:a2:6e:4f:22:db:05:2e:ec:18:72:15:18:40:58:a4: eb:06:48:fa:63:a7:61:37:79:bc:6f:27:95:63:b9:41:1c:a1: 8b:b3:18:c0:7e:dd:57:66:70:8d:3c:e9:47:17:6c:2e:b8:2c: 61:23:59:42:dd:28:f7:52:e4:db:64:15:49:1e:61:a9:11:0e: cf:ca:9e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZDmiMJIZhKweIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjJiOGU3MTctYjc2MC00MGJjLTlmNTItYWY4YTIyMTZjZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEA9+w3kpW3cwEDfgo4HnyRpx2qoCWCYgbjo Uf9lDkYBoM0/KjMKzThnLiEB5L7mzkcriyRqBfPYYsjlS6R6CRpZcUzIv9NLsuNx GrvfaGm0Z+6OZNAS09zDXQfLcztwpg41ik1yGc5pbUMB+gkd5TXeg5Sj9EHw2qsB hOOMdOvR8cvpDOSHfszATYQwmJiFhBfOe7p/4X6Qh6CB2/4pmQXLOBW7itggb/0Y SQujATCMBbXwzX2JOZiw1LOS3y7WYOEMKlx8z7D6In/HyXmzq+SE1VvOyI8cpiUd J0zwtVeszJxXp3jDNxeZMnCYuHKhc2PKnZxeYYQOG+yJlfgsdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFoajhMKu+U7Tj8XJFWNQdQs9dFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2I1MjBjZjgtODc5Zi0z MmQzLTkxN2QtOTVmM2Y1NDE4MDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeYqOro+VnYZ8y6Ic2hdxqVRU99cQFoaUsVXUe80qrXS1BovytMcog4 6FcgjzQSZzbO/5+8UFIMoVhQis0NtgdsheqBJ8l3FbcL3z4XITUopHyy+an0GcF0 fnM8vNGHcw1D5HN0BF4MGsctIQ1QkaDTIOdBhsFY8EaHMCPSpWCvprPaWqgozK3g CToPY1JufHj2+huOotCiyKEVZMu1rNtgTDe/CQcuXWhoA9mbdQIDxES6iUIO6qJu TyLbBS7sGHIVGEBYpOsGSPpjp2E3ebxvJ5VjuUEcoYuzGMB+3VdmcI086UcXbC64 LGEjWULdKPdS5NtkFUkeYakRDs/KnvM= -----END CERTIFICATE-----Generated at Wed May 13 08:34:33 2026 by rpki-client