$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa File: fa4ead1d-eade-394d-aa3a-6009b005e52d.roa (raw, json) Hash identifier: 0Ak1yFbUetm8rPiVcvdvu0U3+jnYky82zfXJwK56134= Subject key identifier: D1:ED:A8:F6:BD:5A:8E:C0:BD:6F:05:48:D7:9C:A0:43:2D:89:52:13 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8AC5525B183EC5EA0BC4F2B1 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.238.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:52:5b:18:3e:c5:ea:0b:c4:f2:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=aa8cc61a-506f-4408-a391-41774fd57666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:6c:53:ce:dd:9a:58:f9:de:14:35:07:3f: 42:a9:69:e5:98:f8:20:0b:50:4f:3c:b5:86:ef:16: 97:7d:59:ab:77:fe:16:2f:b1:2e:3c:af:9f:3b:83: ac:47:ac:36:98:1d:25:65:04:5e:2e:0b:90:c2:19: ea:78:85:f3:75:5f:a6:0a:50:85:08:a9:4f:bd:50: 8a:1d:ac:59:d8:f3:b2:51:d1:6a:95:f5:ce:c1:d4: 98:7a:00:cc:c7:06:22:a8:5c:b4:83:0c:c3:80:18: 7b:98:7b:31:de:f8:18:68:58:21:32:53:80:a4:60: d9:23:8d:2c:b7:d5:3a:7a:d7:6f:df:22:74:9b:4c: ec:51:51:14:a8:00:2d:75:90:3d:98:b6:5f:04:67: f8:f0:b7:69:30:b8:80:cc:30:5c:84:1c:63:1f:9d: 7e:bc:c4:e4:d0:a1:74:76:a9:07:a5:a5:cf:c2:16: 55:53:1f:46:b7:0f:51:d4:02:61:c1:2f:6b:13:8d: 22:b9:d5:30:4f:a7:07:2b:c1:34:56:1c:af:f7:60: 58:54:50:95:ff:cb:7f:67:b5:d2:78:10:b7:1a:f0: 46:53:72:39:5f:d3:1f:2b:64:6e:81:b4:4e:65:60: e3:2b:2e:3f:54:70:0b:e9:88:1c:af:dc:8a:92:f0: 8d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:ED:A8:F6:BD:5A:8E:C0:BD:6F:05:48:D7:9C:A0:43:2D:89:52:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fa4ead1d-eade-394d-aa3a-6009b005e52d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c6:62:16:80:04:76:c9:de:9e:68:71:5c:60:81:68:66:db: 92:d8:bc:05:65:61:d8:7f:57:5d:91:d1:a6:80:af:a8:ee:73: fc:9a:5d:07:dc:7e:12:21:06:ad:04:19:c0:9e:6b:42:3c:b8: 19:e7:18:39:a8:83:70:ea:e6:70:ba:5a:1e:2e:1e:7a:e0:77: 9a:d1:4d:59:2c:8b:75:85:e3:98:3e:d9:ff:3b:1b:40:b8:7e: 48:5f:44:b0:7b:a4:ce:08:23:aa:5d:54:1a:7d:a9:1e:22:68: f8:2f:b0:26:f9:71:4e:22:62:c4:ac:28:db:f3:13:bd:9e:14: 8c:07:49:36:00:68:74:c5:22:a4:0e:9a:78:cb:d3:50:1f:76: 41:1f:a1:2f:04:36:1b:31:ba:12:90:0f:c4:45:0f:30:ea:e1: 59:df:c8:0e:17:19:f5:05:9f:08:5b:18:ed:96:4d:d0:c3:3d: 67:2d:18:f8:58:48:e1:3e:9f:8a:49:4e:90:3a:7e:4a:b8:64: a9:cc:b5:d0:dc:e6:56:7b:e8:c5:7c:51:8f:42:90:fc:1f:ef: 73:da:fb:d7:bc:40:b3:c6:d4:f0:66:46:da:44:71:2e:c0:92: f4:28:e9:60:46:1c:45:98:f6:c4:5f:68:42:4b:af:f0:91:15: 0b:4e:2f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxVJbGD7F6gvE8rEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YWE4Y2M2MWEtNTA2Zi00NDA4LWEzOTEtNDE3NzRmZDU3NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA421sU87dmlj53hQ1Bz9CqWnlmPggC1BPPLWG 7xaXfVmrd/4WL7EuPK+fO4OsR6w2mB0lZQReLguQwhnqeIXzdV+mClCFCKlPvVCK HaxZ2POyUdFqlfXOwdSYegDMxwYiqFy0gwzDgBh7mHsx3vgYaFghMlOApGDZI40s t9U6etdv3yJ0m0zsUVEUqAAtdZA9mLZfBGf48LdpMLiAzDBchBxjH51+vMTk0KF0 dqkHpaXPwhZVUx9Gtw9R1AJhwS9rE40iudUwT6cHK8E0Vhyv92BYVFCV/8t/Z7XS eBC3GvBGU3I5X9MfK2RugbROZWDjKy4/VHAL6Ygcr9yKkvCNEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHtqPa9Wo7AvW8FSNecoEMtiVITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmE0ZWFkMWQtZWFkZS0z OTRkLWFhM2EtNjAwOWIwMDVlNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHGYhaABHbJ3p5ocVxggWhm25LYvAVlYdh/V12R0aaAr6juc/yaXQfc fhIhBq0EGcCea0I8uBnnGDmog3Dq5nC6Wh4uHnrgd5rRTVksi3WF45g+2f87G0C4 fkhfRLB7pM4II6pdVBp9qR4iaPgvsCb5cU4iYsSsKNvzE72eFIwHSTYAaHTFIqQO mnjL01AfdkEfoS8ENhsxuhKQD8RFDzDq4VnfyA4XGfUFnwhbGO2WTdDDPWctGPhY SOE+n4pJTpA6fkq4ZKnMtdDc5lZ76MV8UY9CkPwf73Pa+9e8QLPG1PBmRtpEcS7A kvQo6WBGHEWY9sRfaEJLr/CRFQtOL6c= -----END CERTIFICATE-----Generated at Wed May 13 03:38:57 2026 by rpki-client