$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa File: e201970a-0989-35aa-9842-a37c35183086.roa (raw, json) Hash identifier: HYEwrpt5UHTtTxm24QUKsxgmjNgjqpNdJYk6QqRy+dU= Subject key identifier: FA:BC:2F:8C:F3:74:C5:F0:51:99:1A:84:A6:78:99:D7:CA:E1:06:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF54A68201007452A8C7E20 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.91.198.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:4a:68:20:10:07:45:2a:8c:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=a3a2db5b-eef1-43c7-af53-d0b8fdeae776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b0:8a:90:de:a7:6f:ce:f0:3b:54:d6:a9:6e: 2a:64:cd:c8:38:e1:75:67:d7:9d:2c:9b:bb:72:5d: 4d:a1:4f:62:e3:e6:16:d0:97:28:44:87:7a:b7:0f: 8d:14:5c:8b:e5:48:37:81:e4:5f:8f:d2:fe:13:dd: f6:e1:65:1c:dc:a4:dc:14:c4:9e:de:67:fa:fb:84: 48:28:74:83:ee:5b:d4:bf:8c:08:c2:1f:5c:2d:b2: 26:d9:d1:00:4f:f2:01:96:be:67:42:d8:3c:8b:eb: 84:c1:dd:bb:28:f3:7f:98:91:1f:60:2e:fd:1a:9d: 18:ed:b4:76:1a:e5:46:ce:48:b6:e5:0a:a0:44:c0: ab:31:d3:34:5f:65:83:d3:df:5e:03:73:38:c0:6c: 9f:90:8c:2b:ff:41:2a:dd:f8:5e:95:35:c0:40:f5: dc:8a:d8:93:33:e4:1f:ef:e2:3a:ca:5a:2f:2c:01: b1:b6:dd:15:a8:10:18:29:4b:9a:96:29:e8:c1:0e: 46:fd:63:36:2c:1c:58:bf:ef:f7:9e:9c:f0:7b:10: c2:37:60:ef:de:b3:a1:62:a5:24:d9:48:40:b2:61: 41:f1:ca:27:76:8f:69:81:28:93:75:25:f2:09:72: 6d:01:a0:bc:72:4b:96:e8:5a:3c:17:bb:cb:24:0f: e9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BC:2F:8C:F3:74:C5:F0:51:99:1A:84:A6:78:99:D7:CA:E1:06:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e201970a-0989-35aa-9842-a37c35183086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:cd:2f:9b:1c:83:09:27:98:f8:bb:a9:c7:73:9d:2f:c3:df: 2b:e8:00:64:a5:13:cd:81:36:18:51:5a:7b:8b:8f:07:21:d3: 02:77:26:b2:12:e0:97:c8:79:70:67:d9:e1:83:88:8e:66:bc: ac:5c:6a:81:e4:5a:4e:fa:cd:67:1b:8f:df:d4:65:75:27:58: 3e:dd:5f:89:f6:a0:26:66:da:3b:e9:fe:04:bd:e5:e9:81:18: 40:69:25:f7:09:83:4d:7a:3d:2d:25:1f:79:d8:8c:01:d1:4a: b9:8d:fb:47:cd:38:ef:e0:0c:62:87:2a:7b:41:8c:b9:98:03: 92:46:6d:55:e4:68:ff:ad:91:86:14:b0:f1:7b:37:10:c8:b2: 56:27:68:8d:4f:96:d7:f2:1b:49:da:9c:da:9d:a5:a4:d0:31: 03:27:be:2a:e5:96:1d:c8:06:fc:b0:19:2f:7a:0b:a7:6b:43: 5d:2c:03:f3:f2:84:82:2f:4d:a7:34:f9:aa:d3:1b:aa:3e:23: 59:7f:3f:35:22:f4:bc:f1:2c:a9:cb:54:33:76:72:03:cf:1b: 80:ad:5f:02:fb:fa:65:47:97:5e:a9:bb:88:41:9c:1d:21:5b: ba:01:90:aa:a9:59:24:09:52:3c:1c:75:1d:73:48:11:43:cb: 26:91:c3:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9UpoIBAHRSqMfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YTNhMmRiNWItZWVmMS00M2M3LWFmNTMtZDBiOGZkZWFlNzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLCKkN6nb87wO1TWqW4qZM3IOOF1Z9edLJu7 cl1NoU9i4+YW0JcoRId6tw+NFFyL5Ug3geRfj9L+E9324WUc3KTcFMSe3mf6+4RI KHSD7lvUv4wIwh9cLbIm2dEAT/IBlr5nQtg8i+uEwd27KPN/mJEfYC79Gp0Y7bR2 GuVGzki25QqgRMCrMdM0X2WD099eA3M4wGyfkIwr/0Eq3fhelTXAQPXcitiTM+Qf 7+I6ylovLAGxtt0VqBAYKUualinowQ5G/WM2LBxYv+/3npzwexDCN2Dv3rOhYqUk 2UhAsmFB8condo9pgSiTdSXyCXJtAaC8ckuW6Fo8F7vLJA/pFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPq8L4zzdMXwUZkahKZ4mdfK4QbBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTIwMTk3MGEtMDk4OS0z NWFhLTk4NDItYTM3YzM1MTgzMDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrNL5scgwknmPi7qcdznS/D3yvoAGSlE82BNhhRWnuLjwch0wJ3JrIS 4JfIeXBn2eGDiI5mvKxcaoHkWk76zWcbj9/UZXUnWD7dX4n2oCZm2jvp/gS95emB GEBpJfcJg016PS0lH3nYjAHRSrmN+0fNOO/gDGKHKntBjLmYA5JGbVXkaP+tkYYU sPF7NxDIslYnaI1PltfyG0nanNqdpaTQMQMnvirllh3IBvywGS96C6drQ10sA/Py hIIvTac0+arTG6o+I1l/PzUi9LzxLKnLVDN2cgPPG4CtXwL7+mVHl16pu4hBnB0h W7oBkKqpWSQJUjwcdR1zSBFDyyaRwxQ= -----END CERTIFICATE-----Generated at Wed May 13 11:43:15 2026 by rpki-client