$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa File: f794eda1-98e0-3ea3-b805-5f854043bd39.roa (raw, json) Hash identifier: lIBWt8O9p2MLNuK/tAyKxnL4ScpnMnXhtkCvZ3o+9Gc= Subject key identifier: 7B:30:E2:47:73:29:C5:D6:7D:19:FD:66:F8:1C:A4:01:21:44:9F:B8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A200450B1E36128AABFCA40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.91.60.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:04:50:b1:e3:61:28:aa:bf:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=12b6e260-1ff7-427c-b8d6-acaba7e7ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c8:b0:1e:cf:af:8e:4e:14:ad:5f:5f:10:df: b6:62:1b:d2:66:25:09:28:f8:79:9f:af:5f:28:d8: a9:6c:0e:3c:e0:55:13:3d:e5:8d:44:d6:03:3f:06: 2b:ec:06:c1:31:96:4f:cb:ce:54:35:8a:09:3e:20: b1:43:b3:ef:ac:5f:1c:21:81:55:85:57:f1:71:e0: 5b:d1:4d:8c:3a:bc:83:19:10:c6:f0:84:e6:18:d2: a6:43:97:9f:64:b0:8d:ec:56:51:e6:39:1a:79:7f: 58:e5:cc:0b:62:f9:1c:9a:7c:05:40:fc:f6:01:32: 43:b9:d3:52:ff:50:92:d2:a9:34:3c:b5:5d:73:25: 44:a7:57:5e:74:42:ee:4d:46:81:22:ea:47:ae:2a: ac:09:58:5d:0b:36:93:dd:cc:49:28:50:bc:08:5e: 78:2f:71:33:22:bb:cd:d2:e3:f9:69:1a:b1:ed:27: 79:ec:89:83:55:80:61:5e:1f:f6:2d:2b:d0:05:ac: f7:8a:cb:f0:d7:ac:8f:de:89:f1:5e:60:e5:37:dc: 19:fb:75:fa:29:93:98:60:7f:3c:89:6c:3d:d7:a9: eb:cb:e7:34:c4:7c:07:e8:ed:cf:83:5c:3c:f8:82: b8:9f:42:f3:c5:ff:e9:1a:62:0d:88:bd:13:ce:ea: a7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:30:E2:47:73:29:C5:D6:7D:19:FD:66:F8:1C:A4:01:21:44:9F:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f794eda1-98e0-3ea3-b805-5f854043bd39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fb:9f:5a:db:06:1a:00:d1:2d:fb:0c:41:7d:f5:d7:fb:d8: 94:66:8c:88:0e:02:9e:c5:15:92:0c:35:b1:62:3d:05:54:14: 76:e9:5a:ef:96:70:27:fd:38:78:df:5d:89:97:f2:e2:24:0c: fa:b8:97:99:eb:94:07:4b:d3:5d:9c:03:6a:2c:cf:24:3a:4b: ae:70:c9:2f:f3:71:70:43:db:c3:e5:65:de:f4:6a:20:60:83: cb:fa:4b:d6:23:c5:e8:5b:97:91:f5:8c:21:bf:31:fd:4d:0c: 35:8f:9e:3a:ee:08:b3:b3:3e:6e:dc:46:fc:d2:4e:45:5b:f4: bc:66:9f:b0:cd:eb:65:fc:0c:25:15:2c:15:a9:a6:1d:70:92: 94:8c:9b:c7:ca:2a:78:0b:91:c2:88:1f:96:bf:4d:5c:0f:2e: 19:31:b1:0a:23:2e:e4:16:31:f0:64:b9:c0:39:cc:16:1e:9b: 7c:67:51:f6:71:ac:23:49:a4:a6:fd:66:61:a0:97:70:b9:d0: 24:2e:85:c8:00:00:c1:f1:10:b0:a9:82:64:bc:54:bd:6c:67: 03:5b:1e:48:d8:28:54:1c:9f:4b:7a:da:58:b4:dd:1d:d9:44: b6:c3:e2:9a:c5:3f:f0:37:d3:8c:83:e5:f7:f9:c4:20:1c:a7: c9:13:17:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIARQseNhKKq/ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk MTJiNmUyNjAtMWZmNy00MjdjLWI4ZDYtYWNhYmE3ZTdjYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18iwHs+vjk4UrV9fEN+2YhvSZiUJKPh5n69f KNipbA484FUTPeWNRNYDPwYr7AbBMZZPy85UNYoJPiCxQ7PvrF8cIYFVhVfxceBb 0U2MOryDGRDG8ITmGNKmQ5efZLCN7FZR5jkaeX9Y5cwLYvkcmnwFQPz2ATJDudNS /1CS0qk0PLVdcyVEp1dedELuTUaBIupHriqsCVhdCzaT3cxJKFC8CF54L3EzIrvN 0uP5aRqx7Sd57ImDVYBhXh/2LSvQBaz3isvw16yP3onxXmDlN9wZ+3X6KZOYYH88 iWw916nry+c0xHwH6O3Pg1w8+IK4n0Lzxf/pGmINiL0Tzuqn0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsw4kdzKcXWfRn9ZvgcpAEhRJ+4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjc5NGVkYTEtOThlMC0z ZWEzLWI4MDUtNWY4NTQwNDNiZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFs8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr7n1rbBhoA0S37DEF99df72JRmjIgOAp7FFZIMNbFiPQVUFHbpWu+W cCf9OHjfXYmX8uIkDPq4l5nrlAdL012cA2oszyQ6S65wyS/zcXBD28PlZd70aiBg g8v6S9Yjxehbl5H1jCG/Mf1NDDWPnjruCLOzPm7cRvzSTkVb9Lxmn7DN62X8DCUV LBWpph1wkpSMm8fKKngLkcKIH5a/TVwPLhkxsQojLuQWMfBkucA5zBYem3xnUfZx rCNJpKb9ZmGgl3C50CQuhcgAAMHxELCpgmS8VL1sZwNbHkjYKFQcn0t62li03R3Z RLbD4prFP/A304yD5ff5xCAcp8kTF4c= -----END CERTIFICATE-----Generated at Wed May 13 08:33:30 2026 by rpki-client