$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df0523aa-a240-33d3-b7b3-ba1ca4865d4d.roa File: df0523aa-a240-33d3-b7b3-ba1ca4865d4d.roa (raw, json) Hash identifier: dWolxIoxtZBn+bp1UsJF27Xiz3F6tlHn37VcVrW192U= Subject key identifier: 48:79:02:3A:5C:78:68:4D:BF:97:EA:B8:97:D0:75:7D:6B:1A:4F:55 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D98BAB26D8853DDCD40902600 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df0523aa-a240-33d3-b7b3-ba1ca4865d4d.roa Signing time: Thu 23 Apr 2026 01:00:24 +0000 ROA not before: Thu 23 Apr 2026 01:00:24 +0000 ROA not after: Wed 22 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:98:ba:b2:6d:88:53:dd:cd:40:90:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 01:00:24 2026 GMT Not After : Jul 22 01:00:24 2026 GMT Subject: CN=199cad8a-8625-4bf2-b36a-8169a65856a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:28:50:0b:2f:db:2d:31:79:2f:f2:34:6e:4e: 9a:73:be:5f:c8:f0:13:4f:f5:58:20:34:82:62:3d: e9:ba:83:fb:17:ff:3b:4f:fd:d8:dc:8c:1f:5b:07: b7:2b:6c:f4:c8:f9:05:21:4d:53:c5:a6:b1:5f:c9: 1d:06:70:84:55:f8:a2:7f:e6:f0:e9:d1:8a:4e:cb: 4c:4e:fd:a8:2e:78:2e:71:03:5a:13:e1:41:e6:03: 44:fa:c8:0e:a0:96:1f:f9:8a:99:56:e7:45:cd:f6: d9:99:9f:c8:87:a4:56:a3:cf:d1:16:ef:79:c4:ae: 73:88:6b:18:9f:b9:63:25:01:31:54:cf:2a:69:f6: 49:ed:22:c3:19:f8:f2:33:15:7e:b2:e2:7d:ea:ba: 15:38:bf:01:b4:86:ff:ea:db:f8:64:8b:d2:a4:3b: 68:b6:e6:1e:58:c1:ae:dd:c0:79:9a:0a:82:dd:fb: 6e:e6:7a:1f:ec:df:8e:a2:39:66:9a:7c:ea:34:88: ab:53:2f:5f:0a:f4:04:3b:13:d7:9e:3b:da:2f:42: ed:66:bb:7a:1b:56:c5:b5:4b:00:c4:a8:2a:3e:ea: aa:de:25:da:6a:a9:e6:61:81:99:b5:3a:81:04:c6: b6:52:95:fb:36:74:c1:82:f3:c0:92:30:fa:06:af: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:79:02:3A:5C:78:68:4D:BF:97:EA:B8:97:D0:75:7D:6B:1A:4F:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df0523aa-a240-33d3-b7b3-ba1ca4865d4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:60:09:49:cb:41:02:6a:fa:c6:99:41:3c:3f:0e:7d:1b:76: eb:24:3d:5b:ee:fe:90:de:9a:d6:fd:67:52:b1:ad:07:30:01: dc:57:94:56:68:e6:45:03:9e:a7:e1:0e:93:1e:e4:5d:a0:98: 3c:fc:35:cb:f0:bc:65:9d:20:3b:35:2f:1a:dc:a7:98:57:63: dc:e2:ec:30:2c:4e:1b:86:d3:75:1a:08:d9:00:6a:fb:5f:be: 71:49:74:9d:10:32:fb:ec:b4:69:5f:d5:fb:70:9f:dc:87:d9: 96:89:c6:9e:55:0d:6a:ea:0d:47:5d:9c:89:f8:f6:23:1a:6c: eb:6f:84:d7:7b:c0:17:59:27:81:fc:93:b7:51:2d:14:c5:d9: 96:28:ec:1e:81:51:2f:3a:2a:68:7a:25:b1:78:f2:35:40:ae: 86:34:74:d4:f6:b2:5e:96:00:af:5f:64:9d:4d:a8:b7:69:57: 43:bb:eb:0e:0f:10:35:66:89:37:1f:db:8e:f7:58:85:36:01: ff:23:cf:74:c4:f4:a0:fe:7b:75:b2:a6:b0:a9:02:11:a6:fd: 03:1d:c1:bb:3f:2e:65:b2:d5:ac:2e:df:0d:6a:17:4f:39:c8: 72:f3:32:36:d7:9e:36:78:d7:2b:f2:c3:11:51:2a:08:16:bd: a9:6a:2a:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2YurJtiFPdzUCQJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzAxMDAyNFoXDTI2MDcyMjAxMDAyNFowLzEtMCsGA1UEAxMk MTk5Y2FkOGEtODYyNS00YmYyLWIzNmEtODE2OWE2NTg1NmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyhQCy/bLTF5L/I0bk6ac75fyPATT/VYIDSC Yj3puoP7F/87T/3Y3IwfWwe3K2z0yPkFIU1TxaaxX8kdBnCEVfiif+bw6dGKTstM Tv2oLngucQNaE+FB5gNE+sgOoJYf+YqZVudFzfbZmZ/Ih6RWo8/RFu95xK5ziGsY n7ljJQExVM8qafZJ7SLDGfjyMxV+suJ96roVOL8BtIb/6tv4ZIvSpDtotuYeWMGu 3cB5mgqC3ftu5nof7N+OojlmmnzqNIirUy9fCvQEOxPXnjvaL0LtZrt6G1bFtUsA xKgqPuqq3iXaaqnmYYGZtTqBBMa2UpX7NnTBgvPAkjD6Bq/VnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh5AjpceGhNv5fquJfQdX1rGk9VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGYwNTIzYWEtYTI0MC0z M2QzLWI3YjMtYmExY2E0ODY1ZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtgCUnLQQJq+saZQTw/Dn0bduskPVvu/pDemtb9Z1KxrQcwAdxXlFZo 5kUDnqfhDpMe5F2gmDz8NcvwvGWdIDs1Lxrcp5hXY9zi7DAsThuG03UaCNkAavtf vnFJdJ0QMvvstGlf1ftwn9yH2ZaJxp5VDWrqDUddnIn49iMabOtvhNd7wBdZJ4H8 k7dRLRTF2ZYo7B6BUS86Kmh6JbF48jVAroY0dNT2sl6WAK9fZJ1NqLdpV0O76w4P EDVmiTcf2473WIU2Af8jz3TE9KD+e3WyprCpAhGm/QMdwbs/LmWy1awu3w1qF085 yHLzMjbXnjZ41yvywxFRKggWvalqKo0= -----END CERTIFICATE-----Generated at Wed May 13 04:56:00 2026 by rpki-client