$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa File: e7897d3e-f2ac-3530-add5-cb406b5e8685.roa (raw, json) Hash identifier: 4wqODPr8LKN/QSu7dXJpqylskPnG12VqEyyyS+dMG7c= Subject key identifier: 62:0D:90:FA:ED:39:E4:4D:12:C7:DF:60:1E:B1:EF:23:B8:B6:63:A9 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC52F4481CEF78985343D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:2f:44:81:ce:f7:89:85:34:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=c6e7d5e0-90d0-415f-b791-71c3bf2b6c7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cd:ba:80:b7:f6:37:5d:7c:03:2b:07:98:e1: ff:f2:0d:5d:31:5f:9d:0b:8e:7c:89:3c:22:ea:46: 2a:5d:f9:0d:76:18:11:19:98:27:94:85:a2:81:af: 64:d3:7b:6f:a9:60:dc:e9:87:a2:6b:05:1c:8c:b6: 0f:d3:3a:e2:75:93:7f:32:6d:13:b5:69:77:2d:39: 5f:12:9b:92:ac:af:90:d2:83:7b:dc:22:d5:a8:0f: 90:89:cf:98:5a:87:3c:72:e7:05:b1:be:09:fd:a1: 13:fa:92:b7:36:eb:b1:61:28:f3:fb:63:6b:d9:a6: 22:cd:bf:13:09:f6:1a:de:44:6f:2c:99:f3:a3:4e: 44:01:ef:0f:e4:ab:82:07:0b:eb:e9:8c:0a:d0:b2: c6:f0:6e:2b:99:a7:91:de:a4:a1:6c:7e:4e:cc:e9: 1b:2b:dc:8b:ba:64:b8:3c:bc:d1:c8:0d:9b:c4:82: 7d:01:7e:e2:41:3c:37:16:a6:fc:52:f5:0d:a7:4a: 2e:14:ec:e9:65:61:7c:01:e5:30:e8:e2:b0:62:89: df:4d:b9:1e:db:75:06:c6:a9:22:93:6d:ea:73:f1: 0b:9b:ac:ac:f5:d0:af:8e:82:3e:95:e1:96:fe:95: f6:a0:4a:8f:78:79:7e:6c:8e:44:d5:fb:45:cd:b3: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:0D:90:FA:ED:39:E4:4D:12:C7:DF:60:1E:B1:EF:23:B8:B6:63:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e7897d3e-f2ac-3530-add5-cb406b5e8685.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:0d:8f:2f:81:79:70:0d:c0:b2:5d:4a:65:a7:72:68:89:2f: de:12:08:50:23:e2:9a:3f:8d:da:ba:75:70:5e:e9:16:70:d2: 5d:4d:bb:3e:8c:a1:13:d8:df:94:de:9a:77:d1:2d:d9:58:03: c8:1b:3c:d1:18:fc:dc:6a:b6:9d:dc:1d:92:8d:31:67:f7:74: 25:6a:88:1f:45:d1:44:cc:a6:4f:4e:17:61:79:90:26:41:6e: 25:fa:90:71:09:87:8c:54:86:73:95:55:37:cb:93:f9:40:71: 23:23:76:33:df:21:07:c5:f9:35:43:6d:57:42:65:0f:32:db: 63:62:36:e9:ec:92:43:2c:12:45:c3:cc:88:99:7c:df:3d:b5: 4f:7c:4d:2f:38:68:a9:be:f6:a0:86:a6:47:2a:cb:50:5d:a5: f0:3c:9b:3f:23:43:43:22:a4:ee:8c:68:1d:db:04:5e:0a:9a: d8:6d:03:a0:5f:64:e6:32:28:98:00:88:37:9f:f3:73:28:72: 52:c8:ca:12:a3:28:99:b9:39:67:7f:60:3f:5e:22:90:64:cb: de:65:8d:9b:f7:c0:13:33:07:8f:81:da:1b:4b:82:5f:b3:8d: ce:62:33:c8:a5:a3:66:22:f9:42:ba:31:c9:0a:ee:4e:a4:7f: eb:9e:51:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxS9Egc73iYU0PYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YzZlN2Q1ZTAtOTBkMC00MTVmLWI3OTEtNzFjM2JmMmI2YzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM26gLf2N118AysHmOH/8g1dMV+dC458iTwi 6kYqXfkNdhgRGZgnlIWiga9k03tvqWDc6YeiawUcjLYP0zridZN/Mm0TtWl3LTlf EpuSrK+Q0oN73CLVqA+Qic+YWoc8cucFsb4J/aET+pK3NuuxYSjz+2Nr2aYizb8T CfYa3kRvLJnzo05EAe8P5KuCBwvr6YwK0LLG8G4rmaeR3qShbH5OzOkbK9yLumS4 PLzRyA2bxIJ9AX7iQTw3Fqb8UvUNp0ouFOzpZWF8AeUw6OKwYonfTbke23UGxqki k23qc/ELm6ys9dCvjoI+leGW/pX2oEqPeHl+bI5E1ftFzbOu0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGINkPrtOeRNEsffYB6x7yO4tmOpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTc4OTdkM2UtZjJhYy0z NTMwLWFkZDUtY2I0MDZiNWU4Njg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoNjy+BeXANwLJdSmWncmiJL94SCFAj4po/jdq6dXBe6RZw0l1Nuz6M oRPY35TemnfRLdlYA8gbPNEY/Nxqtp3cHZKNMWf3dCVqiB9F0UTMpk9OF2F5kCZB biX6kHEJh4xUhnOVVTfLk/lAcSMjdjPfIQfF+TVDbVdCZQ8y22NiNunskkMsEkXD zIiZfN89tU98TS84aKm+9qCGpkcqy1BdpfA8mz8jQ0MipO6MaB3bBF4KmthtA6Bf ZOYyKJgAiDef83MoclLIyhKjKJm5OWd/YD9eIpBky95ljZv3wBMzB4+B2htLgl+z jc5iM8ilo2Yi+UK6MckK7k6kf+ueUUQ= -----END CERTIFICATE-----Generated at Wed May 13 10:24:06 2026 by rpki-client