$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa File: f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa (raw, json) Hash identifier: B/zn1qE/E/DBgZhwyXDtCbxl4tpY3ApnxsxWHTIizEE= Subject key identifier: 51:D8:F6:65:0A:17:81:BC:FF:63:46:2F:4E:9C:B5:B8:85:14:E3:91 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FBD6BBA033AF575F4D4526000 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa Signing time: Thu 05 Nov 2026 14:00:14 +0000 ROA not before: Thu 05 Nov 2026 14:00:14 +0000 ROA not after: Wed 03 Feb 2027 14:00:14 +0000 asID: 31898 IP address blocks: 140.204.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:bd:6b:ba:03:3a:f5:75:f4:d4:52:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 5 14:00:14 2026 GMT Not After : Feb 3 14:00:14 2027 GMT Subject: CN=aeb6bd45-da6c-47f4-a969-2fbc7aad44bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:5f:ce:09:5a:05:c4:c9:1d:51:96:c5:8e: 91:99:ac:ac:b0:ea:31:d5:cb:9f:4f:15:53:58:b7: 6c:b7:b5:05:9d:92:c0:b0:95:4e:8b:c5:7d:60:8e: 46:30:c9:e9:01:3f:b7:03:3d:72:9c:2b:d8:63:39: 6a:c3:f5:d1:76:c1:9d:77:2a:44:7b:2f:94:d9:c9: fb:68:94:3a:f8:dd:ce:ce:93:30:48:5a:cb:03:0f: 31:de:44:94:e5:27:d6:b5:41:9d:d3:70:36:02:f5: 6b:1b:7d:6a:34:f5:d2:bc:5e:a9:e1:ab:f4:2c:b9: 5e:7e:cd:e1:3b:e7:10:08:9c:25:d3:20:7e:8c:7e: d1:51:77:9d:79:89:56:32:45:d5:97:ff:6b:7b:4c: 2b:8e:b7:8e:34:55:f1:94:b4:26:01:77:4a:1b:6c: 9d:81:9b:48:19:60:2b:dc:ba:17:8a:53:a3:f7:06: 3b:31:c1:74:98:4c:9a:7c:3a:a8:7b:f7:c2:a8:19: b1:42:cf:77:77:c8:d9:cd:28:fc:6a:40:e7:96:94: 4c:91:52:52:66:f2:f6:4d:ed:ae:1c:fc:e9:cf:a2: 56:88:b3:ef:fc:4f:28:e6:6b:65:31:7b:d8:9b:20: 22:6b:f0:ab:28:a9:62:d1:7b:44:a9:6d:39:64:fd: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:D8:F6:65:0A:17:81:BC:FF:63:46:2F:4E:9C:B5:B8:85:14:E3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f973e164-e8a8-3581-9d41-4b28c46c0cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f5:f9:7b:aa:79:75:8e:26:4b:7d:91:b9:12:86:60:0e:e2: 15:02:cb:c6:43:64:0a:51:e7:60:d0:41:fc:53:5c:d4:45:aa: 70:59:ae:26:47:cb:42:72:44:ca:9c:f9:93:01:9b:d4:26:75: 1b:f4:a7:69:93:4e:c1:08:6a:ca:b3:0c:ea:e1:b5:a7:4c:15: 71:57:28:df:2b:14:73:0b:fa:e8:7d:17:9d:1d:34:b6:f4:2e: df:53:f4:fc:55:6f:bd:e8:16:56:7c:3b:e5:c8:25:cf:6b:22: 57:7e:85:46:5c:55:02:7d:0a:79:d3:42:4e:8d:6d:20:fd:af: 34:0f:c8:77:4c:5f:4e:90:3d:aa:55:5b:21:3e:a3:80:63:97: 59:57:ee:99:37:76:f4:7c:f7:dc:84:e3:1c:84:9f:7f:38:c4: 0e:50:72:84:aa:8e:0e:06:99:43:66:9d:2f:e2:71:ed:b4:65: 61:05:47:1c:db:4b:94:9f:1a:4f:c3:c0:b3:bf:56:c6:dc:59: 43:2f:86:00:71:69:b0:85:d3:dd:91:cb:b3:99:43:0e:36:bf: d8:14:56:d6:91:72:4d:e2:36:2b:92:6b:26:95:95:1b:0d:6d: 45:2e:ec:1e:3e:00:2f:e3:74:14:ef:ce:3a:ca:8c:28:0a:db: 6c:9b:0d:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+9a7oDOvV19NRSYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwNTE0MDAxNFoXDTI3MDIwMzE0MDAxNFowLzEtMCsGA1UEAxMk YWViNmJkNDUtZGE2Yy00N2Y0LWE5NjktMmZiYzdhYWQ0NGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa9fzglaBcTJHVGWxY6RmayssOox1cufTxVT WLdst7UFnZLAsJVOi8V9YI5GMMnpAT+3Az1ynCvYYzlqw/XRdsGddypEey+U2cn7 aJQ6+N3OzpMwSFrLAw8x3kSU5SfWtUGd03A2AvVrG31qNPXSvF6p4av0LLlefs3h O+cQCJwl0yB+jH7RUXedeYlWMkXVl/9re0wrjreONFXxlLQmAXdKG2ydgZtIGWAr 3LoXilOj9wY7McF0mEyafDqoe/fCqBmxQs93d8jZzSj8akDnlpRMkVJSZvL2Te2u HPzpz6JWiLPv/E8o5mtlMXvYmyAia/CrKKli0XtEqW05ZP1FswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHY9mUKF4G8/2NGL06ctbiFFOORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjk3M2UxNjQtZThhOC0z NTgxLTlkNDEtNGIyOGM0NmMwY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjMzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH1+XuqeXWOJkt9kbkShmAO4hUCy8ZDZApR52DQQfxTXNRFqnBZriZH y0JyRMqc+ZMBm9QmdRv0p2mTTsEIasqzDOrhtadMFXFXKN8rFHML+uh9F50dNLb0 Lt9T9PxVb73oFlZ8O+XIJc9rIld+hUZcVQJ9CnnTQk6NbSD9rzQPyHdMX06QPapV WyE+o4Bjl1lX7pk3dvR899yE4xyEn384xA5QcoSqjg4GmUNmnS/ice20ZWEFRxzb S5SfGk/DwLO/VsbcWUMvhgBxabCF092Ry7OZQw42v9gUVtaRck3iNiuSayaVlRsN bUUu7B4+AC/jdBTvzjrKjCgK22ybDWA= -----END CERTIFICATE-----Generated at Sun Nov 15 14:03:55 2026 by rpki-client