$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa File: ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa (raw, json) Hash identifier: ujtQAM632bjtSrf+oDdFOSp/GuS01zwGPuC41rtl1nw= Subject key identifier: C6:6A:0D:30:08:B2:B4:00:64:DC:7E:94:50:DE:9F:14:C0:7C:67:96 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FB3AAF38B15391956A1F89BC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 31898 IP address blocks: 140.204.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:aa:f3:8b:15:39:19:56:a1:f8:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=dd8f2622-9a87-41a1-9d17-4fe79df4988b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:ff:6a:03:15:2c:9a:42:a3:65:b6:3a:9b: 96:39:71:db:59:37:ed:94:7a:cf:29:5c:68:d4:67: 7a:5c:96:3a:17:05:b5:19:f4:ab:59:05:68:89:64: 44:1c:3e:96:44:9f:2e:25:a6:a3:0b:45:45:35:77: 6f:d5:6d:ee:94:15:b6:5b:b3:51:87:48:78:61:88: a7:bc:cf:c2:f8:dc:7a:2c:e2:49:c2:ad:89:e4:21: fe:bd:15:2e:dd:0c:15:57:33:35:53:f7:99:86:cc: bb:9b:cf:77:eb:2f:ca:17:ad:66:26:f5:10:a2:6d: 47:25:e7:1c:be:65:7d:1a:20:80:b2:ad:57:6f:63: 8a:8e:ff:2e:b0:cf:bb:fa:3f:de:0a:da:d5:9f:a4: 3c:09:aa:14:c7:aa:cb:f1:a3:66:f0:a5:fb:40:a5: b0:13:c2:ee:5b:ff:a9:08:95:ba:8a:33:00:37:8a: 8d:db:76:ab:91:5e:87:d2:e2:0d:2d:60:a0:14:b1: a7:b6:23:bc:5c:92:d6:76:cf:24:00:11:24:30:71: a3:c4:01:b2:65:58:f8:e9:f7:00:05:a6:ee:e0:f3: dc:15:18:b1:5a:d2:13:cb:a6:da:7a:f2:2b:4b:5e: d9:95:c0:10:5e:e2:e8:d2:45:84:73:04:49:8b:20: 80:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6A:0D:30:08:B2:B4:00:64:DC:7E:94:50:DE:9F:14:C0:7C:67:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8c:c6:ad:22:85:e7:0e:e4:e1:98:06:a8:9a:fe:74:df:4d: ac:5f:2f:b5:f5:91:a6:e7:2f:63:1e:02:ba:f1:c8:9d:f0:51: 54:f0:ae:4c:15:a8:07:37:67:00:31:84:79:27:28:fa:19:e2: e4:86:ba:0c:55:26:00:19:d4:af:7d:43:93:95:2d:e1:9e:05: 19:a6:4f:e5:10:11:b8:95:1c:a9:a9:09:7a:08:9e:f3:ea:2d: ae:5f:dd:72:2d:3a:b4:93:d8:fe:05:8b:19:4b:6c:3c:98:ed: f4:4d:61:36:ee:a7:3e:4f:33:e0:12:42:b9:a6:55:f3:49:5e: 71:41:c1:0c:32:fb:2c:92:8e:97:11:c6:d1:70:03:d6:32:f4: c4:09:6f:3e:a9:83:4e:33:1f:b7:02:4e:fb:55:49:d7:be:70: 88:dc:2e:a4:09:ec:28:f2:40:ad:52:6a:73:d9:7e:38:9a:3d: 19:52:48:4c:b7:4d:41:a9:ec:d5:11:22:dc:49:44:00:09:cc: 3e:30:ba:e6:2c:7e:1a:df:c4:25:07:47:f7:eb:d7:95:dd:d9: 47:d2:e1:de:b2:bc:23:64:82:31:ae:d5:d5:2b:5c:7b:1d:e8: 90:e3:7d:a9:aa:3a:59:51:f6:fa:46:a4:08:e1:9e:80:eb:60: 65:0d:4f:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zqvOLFTkZVqH4m8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZGQ4ZjI2MjItOWE4Ny00MWExLTlkMTctNGZlNzlkZjQ5ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8v/agMVLJpCo2W2OpuWOXHbWTftlHrPKVxo 1Gd6XJY6FwW1GfSrWQVoiWREHD6WRJ8uJaajC0VFNXdv1W3ulBW2W7NRh0h4YYin vM/C+Nx6LOJJwq2J5CH+vRUu3QwVVzM1U/eZhsy7m8936y/KF61mJvUQom1HJecc vmV9GiCAsq1Xb2OKjv8usM+7+j/eCtrVn6Q8CaoUx6rL8aNm8KX7QKWwE8LuW/+p CJW6ijMAN4qN23arkV6H0uINLWCgFLGntiO8XJLWds8kABEkMHGjxAGyZVj46fcA Babu4PPcFRixWtITy6baevIrS17ZlcAQXuLo0kWEcwRJiyCAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZqDTAIsrQAZNx+lFDenxTAfGeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmYzY2JhYzctZWRiZi0z M2ZjLTgyY2ItN2EwMzcyZDFmZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuMxq0ihecO5OGYBqia/nTfTaxfL7X1kabnL2MeArrxyJ3wUVTwrkwV qAc3ZwAxhHknKPoZ4uSGugxVJgAZ1K99Q5OVLeGeBRmmT+UQEbiVHKmpCXoInvPq La5f3XItOrST2P4FixlLbDyY7fRNYTbupz5PM+ASQrmmVfNJXnFBwQwy+yySjpcR xtFwA9Yy9MQJbz6pg04zH7cCTvtVSde+cIjcLqQJ7CjyQK1SanPZfjiaPRlSSEy3 TUGp7NURItxJRAAJzD4wuuYsfhrfxCUHR/fr15Xd2UfS4d6yvCNkgjGu1dUrXHsd 6JDjfamqOllR9vpGpAjhnoDrYGUNT98= -----END CERTIFICATE-----Generated at Sun Nov 15 15:22:34 2026 by rpki-client