$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa1681f9-73ac-39fe-bb49-898aaf704d8a.roa File: fa1681f9-73ac-39fe-bb49-898aaf704d8a.roa (raw, json) Hash identifier: x6hvBmBz3Co05xDZ5xIY+lRGSpTTCG/L9xUmvBfEOeU= Subject key identifier: 4F:1D:3D:2A:EF:34:DE:CA:BC:6F:B6:DC:B4:30:C1:00:81:C4:BB:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE60F08B2A3EB6E8368E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa1681f9-73ac-39fe-bb49-898aaf704d8a.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e6:0f:08:b2:a3:eb:6e:83:68:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a686a9f4-0b64-4d71-bc09-52f7d01e3493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ba:db:a3:55:34:48:c1:69:5d:7c:40:b9:70: a7:71:a9:b7:3a:db:1c:c5:8b:ce:11:77:18:1f:cd: 53:fd:57:3c:59:43:36:80:2e:1e:2d:7e:4d:81:a5: df:e9:09:80:78:a7:99:b9:16:31:8f:5e:57:4b:4d: cb:28:03:f0:d7:33:b8:15:2a:16:7f:09:4f:ff:d9: ab:87:ba:7b:99:5e:fb:de:50:6d:69:a1:cc:f1:db: 84:9b:e3:51:10:78:ea:27:bf:f5:7f:09:3a:7e:0a: 81:84:32:c9:4b:2b:41:a4:2d:6b:14:e2:ed:3d:89: 40:66:a3:7f:e5:fa:13:b4:1e:01:3b:06:e3:84:f4: aa:a4:7f:6a:7f:d1:aa:77:5a:d4:2b:28:ac:c2:3c: 14:ac:10:2c:7f:42:13:58:3f:de:f5:39:1a:7e:60: 57:96:49:ea:75:52:1c:44:3f:85:fd:86:e6:1d:d2: 50:60:51:1a:98:06:6b:2e:74:31:d6:8c:c3:29:09: a8:67:3a:56:92:a0:72:c9:b2:94:79:16:07:85:94: f8:ea:23:d0:fd:55:ed:5c:64:0e:bd:bb:0a:3e:79: 7e:82:7f:54:b8:ac:39:14:ab:49:10:a4:3e:70:c9: ef:48:24:67:30:e0:23:2d:d5:4c:fe:5d:0c:95:e2: b5:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1D:3D:2A:EF:34:DE:CA:BC:6F:B6:DC:B4:30:C1:00:81:C4:BB:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa1681f9-73ac-39fe-bb49-898aaf704d8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:20:2a:7d:d0:f3:6e:f2:bc:68:53:b9:c1:53:cd:0c:8d:7d: c3:d9:d3:ce:b3:da:d4:04:50:1c:2f:3d:9b:79:97:72:bd:15: e4:82:7b:aa:fd:89:ac:5a:f0:d5:49:74:7e:51:4f:13:90:71: 97:47:9c:19:a3:9a:df:44:f6:f5:3f:08:f0:6b:08:e3:ec:62: ea:25:35:77:57:9e:ba:df:c7:41:d3:3c:fc:7b:f5:70:b1:28: 69:86:52:c7:02:f6:0e:66:fd:71:95:b3:62:90:78:d6:9a:e8: 4d:83:c9:91:af:74:2d:6a:39:a7:80:37:66:95:9f:12:a7:b7: f1:94:6a:23:c3:b0:37:7f:57:d9:9b:41:ca:fc:3c:60:a4:34: 2f:79:45:33:01:9d:1a:3f:50:01:9c:b0:ec:a7:f1:bc:93:eb: 5a:98:c4:84:9c:15:c0:17:f9:1e:81:c2:5f:a9:54:1c:bc:0c: cd:70:47:0f:ca:f2:a9:99:8a:2a:40:10:f6:aa:2f:71:98:dc: 5a:e0:4b:08:22:09:ae:3a:03:d1:44:2b:3d:ee:2d:68:70:b2: 34:5b:3c:71:87:0d:6c:92:d3:91:8c:76:3e:a9:f0:f1:30:2f: 00:b4:ee:f2:bb:e7:2f:59:d9:ec:d0:05:61:3f:f1:d4:e8:d7: 2a:0e:9d:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOYPCLKj626DaOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTY4NmE5ZjQtMGI2NC00ZDcxLWJjMDktNTJmN2QwMWUzNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrrbo1U0SMFpXXxAuXCncam3OtscxYvOEXcY H81T/Vc8WUM2gC4eLX5NgaXf6QmAeKeZuRYxj15XS03LKAPw1zO4FSoWfwlP/9mr h7p7mV773lBtaaHM8duEm+NREHjqJ7/1fwk6fgqBhDLJSytBpC1rFOLtPYlAZqN/ 5foTtB4BOwbjhPSqpH9qf9Gqd1rUKyiswjwUrBAsf0ITWD/e9TkafmBXlknqdVIc RD+F/YbmHdJQYFEamAZrLnQx1ozDKQmoZzpWkqByybKUeRYHhZT46iPQ/VXtXGQO vbsKPnl+gn9UuKw5FKtJEKQ+cMnvSCRnMOAjLdVM/l0MleK1twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8dPSrvNN7KvG+23LQwwQCBxLt9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmExNjgxZjktNzNhYy0z OWZlLWJiNDktODk4YWFmNzA0ZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUgKn3Q827yvGhTucFTzQyNfcPZ086z2tQEUBwvPZt5l3K9FeSCe6r9 iaxa8NVJdH5RTxOQcZdHnBmjmt9E9vU/CPBrCOPsYuolNXdXnrrfx0HTPPx79XCx KGmGUscC9g5m/XGVs2KQeNaa6E2DyZGvdC1qOaeAN2aVnxKnt/GUaiPDsDd/V9mb Qcr8PGCkNC95RTMBnRo/UAGcsOyn8byT61qYxIScFcAX+R6Bwl+pVBy8DM1wRw/K 8qmZiipAEPaqL3GY3FrgSwgiCa46A9FEKz3uLWhwsjRbPHGHDWyS05GMdj6p8PEw LwC07vK75y9Z2ezQBWE/8dTo1yoOnX8= -----END CERTIFICATE-----Generated at Thu Sep 24 11:49:35 2026 by rpki-client