$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa File: fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa (raw, json) Hash identifier: 1ERR+aFscbgi03fOYZhWRo3bbZoI3d3o2UVZKuzJJ9g= Subject key identifier: 84:C7:A5:6A:1D:1F:B5:7A:77:81:90:5A:9F:79:F8:98:B8:48:3A:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9A202F53503E02665C4ED480 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa Signing time: Thu 23 Apr 2026 13:00:32 +0000 ROA not before: Thu 23 Apr 2026 13:00:32 +0000 ROA not after: Wed 22 Jul 2026 13:00:32 +0000 asID: 31898 IP address blocks: 140.204.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9a:20:2f:53:50:3e:02:66:5c:4e:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 23 13:00:32 2026 GMT Not After : Jul 22 13:00:32 2026 GMT Subject: CN=b782c53e-6428-4edd-b1c6-e0d34abc34f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:17:8b:bb:be:c1:c5:07:b8:1e:2e:19:ba:12: bd:4d:60:6c:9c:80:30:43:21:00:73:c0:6e:30:92: 38:17:9b:7b:88:38:48:b2:7c:9e:bc:45:39:7f:dc: fa:12:3c:87:b4:f8:44:2d:0f:83:f6:69:4b:52:61: dd:12:b0:57:33:d2:10:db:62:60:c4:f7:75:66:d7: bc:a0:60:7d:6a:f4:d7:80:5f:2c:84:03:13:43:4d: 9d:44:6a:68:9b:f3:b7:b5:63:0e:85:29:ce:d3:23: f4:b8:a3:cf:06:bf:5a:13:03:3b:5a:92:2d:64:4f: 66:20:1e:8c:07:55:aa:1f:de:b8:7e:cb:1b:93:72: 2e:7c:e2:d1:d1:07:8e:63:58:91:62:fa:de:70:33: bd:da:2d:5f:86:50:f7:8a:13:e2:56:76:a3:15:9b: 17:53:55:d8:63:ee:34:b5:a9:e1:73:77:83:47:c5: d8:de:8c:7f:cc:0c:e8:72:ed:d5:dc:57:7b:a8:40: ce:7b:3a:26:ab:6e:00:98:1e:c1:30:02:b2:7a:b7: 99:d0:12:13:e7:74:42:4b:17:99:47:43:e5:49:e4: 63:ff:f2:b7:23:e3:71:d3:51:d5:b0:d0:c3:8d:a1: ab:85:9c:3b:60:b1:23:ca:d9:cf:db:32:a2:e6:6b: 6d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C7:A5:6A:1D:1F:B5:7A:77:81:90:5A:9F:79:F8:98:B8:48:3A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/fdfc4085-db85-3b5e-8fa0-72e56a7847fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:33:e0:a3:54:97:4d:e5:e6:c4:00:96:5c:cf:07:81:3b:71: 01:aa:bd:e8:74:77:e1:1d:6f:66:1b:24:9b:5b:cf:3a:af:39: 96:0d:a6:49:3d:66:66:1b:7b:02:5c:7f:5e:e8:89:3f:dd:0d: a2:c8:cf:3b:ce:01:a7:3a:3c:f3:bb:ae:29:9d:66:c6:94:c9: c6:8a:11:d5:6f:33:a4:80:fb:7e:61:03:bf:d9:ac:5e:32:ce: 04:cd:e5:a0:9f:8a:87:f1:cc:db:f1:97:5a:13:c2:ca:4b:45: 23:3d:70:46:07:64:d0:52:fc:9e:32:e8:26:66:7e:1a:72:85: e3:a4:61:a7:5f:05:1e:27:fa:1e:ff:ae:13:fd:b0:89:0c:70: 2c:d2:5d:10:24:ad:02:50:7d:13:7d:c1:cd:45:89:22:59:28: 43:3d:98:c2:5a:9e:58:33:87:ae:58:6b:43:fd:b6:49:a6:fe: cf:eb:e9:1f:0a:f3:0c:20:6c:2d:51:1a:29:ed:3a:86:33:da: 4b:c3:bf:e6:1d:82:3a:be:c2:c7:10:21:b0:86:5f:05:e8:9f: b2:29:84:f5:c9:ce:de:88:02:ed:cf:cf:61:2d:91:20:24:e4: cc:c1:44:0d:b7:be:74:84:49:f7:7f:30:a5:e6:20:fe:48:15: 12:95:d3:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2aIC9TUD4CZlxO1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk Yjc4MmM1M2UtNjQyOC00ZWRkLWIxYzYtZTBkMzRhYmMzNGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BeLu77BxQe4Hi4ZuhK9TWBsnIAwQyEAc8Bu MJI4F5t7iDhIsnyevEU5f9z6EjyHtPhELQ+D9mlLUmHdErBXM9IQ22JgxPd1Zte8 oGB9avTXgF8shAMTQ02dRGpom/O3tWMOhSnO0yP0uKPPBr9aEwM7WpItZE9mIB6M B1WqH964fssbk3IufOLR0QeOY1iRYvrecDO92i1fhlD3ihPiVnajFZsXU1XYY+40 tanhc3eDR8XY3ox/zAzocu3V3Fd7qEDOezomq24AmB7BMAKyereZ0BIT53RCSxeZ R0PlSeRj//K3I+Nx01HVsNDDjaGrhZw7YLEjytnP2zKi5mttVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITHpWodH7V6d4GQWp95+Ji4SDpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmRmYzQwODUtZGI4NS0z YjVlLThmYTAtNzJlNTZhNzg0N2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcz4KNUl03l5sQAllzPB4E7cQGqveh0d+Edb2YbJJtbzzqvOZYNpkk9 ZmYbewJcf17oiT/dDaLIzzvOAac6PPO7rimdZsaUycaKEdVvM6SA+35hA7/ZrF4y zgTN5aCfiofxzNvxl1oTwspLRSM9cEYHZNBS/J4y6CZmfhpyheOkYadfBR4n+h7/ rhP9sIkMcCzSXRAkrQJQfRN9wc1FiSJZKEM9mMJanlgzh65Ya0P9tkmm/s/r6R8K 8wwgbC1RGintOoYz2kvDv+Ydgjq+wscQIbCGXwXon7IphPXJzt6IAu3Pz2EtkSAk 5MzBRA23vnSESfd/MKXmIP5IFRKV0xU= -----END CERTIFICATE-----Generated at Wed May 13 06:52:43 2026 by rpki-client