$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa File: ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa (raw, json) Hash identifier: o8u3UOq2ZH4GI3+eUCke8tOqLncEDXCQzZkEYY29b7I= Subject key identifier: C1:42:B6:99:CB:08:54:25:06:6D:59:99:ED:ED:04:56:EF:C2:21:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D8EF995364262E9F207864A80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:95:36:42:62:e9:f2:07:86:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=598cf43a-3ffc-4ae8-b6e8-688bf4a2167a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0e:40:c7:a0:24:d0:bb:ce:2c:0d:9b:d4:76: 42:f4:e3:d5:0c:da:31:60:30:52:95:6b:1d:c9:a4: c3:d8:38:9f:36:c7:e4:8d:62:ba:92:6a:39:5e:82: 49:17:9b:ef:7d:53:c2:af:1d:d5:36:d1:fb:a5:83: 6d:b4:e9:fe:15:9f:ec:77:c4:4b:94:47:75:3f:a5: 3d:fc:95:ae:54:2f:e6:38:58:fc:38:4d:15:82:66: da:91:bb:45:38:02:68:8e:9d:4d:2e:7b:1c:dc:8f: e1:d8:31:68:26:ed:16:7f:07:d0:4d:25:11:cc:e7: 39:8d:f6:89:30:e1:97:3f:b3:72:b2:68:ec:10:2b: 05:fc:43:14:a9:f1:20:18:4a:7b:66:f4:56:c8:8c: 22:fd:fa:87:ed:7b:3c:be:a2:06:8b:fe:04:3d:bc: 3d:99:67:37:8f:3f:8c:94:dd:21:e0:a9:eb:a4:1b: ca:61:0a:19:93:e6:54:60:a3:92:90:e5:ee:90:89: 2c:11:29:3a:5c:a9:fb:45:74:c3:9e:ba:e5:c0:e9: 56:aa:c2:b8:0c:dd:94:fd:e8:ca:88:95:6f:dd:13: 33:2b:0a:6f:14:1a:ec:96:22:52:cb:cf:e9:f5:49: dd:76:aa:f0:a5:c7:52:e4:1f:a5:98:59:7c:5d:5b: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:42:B6:99:CB:08:54:25:06:6D:59:99:ED:ED:04:56:EF:C2:21:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ff3cbac7-edbf-33fc-82cb-7a0372d1ff2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:98:a4:8d:6b:cc:92:33:0c:39:26:05:25:91:bb:4e:91:10: 93:fb:64:79:69:8b:47:53:73:30:40:ed:88:1b:bb:35:f0:d2: 2c:c9:9a:36:6f:fb:ae:96:6f:65:85:b3:1d:d5:50:7d:d8:4b: 67:94:0c:28:cc:c0:0d:5c:da:c7:57:b6:d5:76:39:83:c4:5f: ec:ba:80:ff:4f:69:fd:8f:6e:99:dd:99:0c:1c:08:62:c8:af: 3b:d2:f8:61:c6:e0:f4:e9:10:36:d8:d0:6f:83:73:f8:15:bd: ca:04:f6:73:8b:f1:3b:2a:ba:cc:f1:ca:9d:d7:73:35:65:16: be:0f:b8:6e:22:ae:f1:4e:1f:e6:4e:6a:b8:9b:59:c1:df:76: a0:70:9f:6f:39:f6:54:e5:e8:22:a6:36:fd:15:af:fb:5e:5d: c4:b7:e1:20:06:ca:ba:91:7c:89:86:57:1b:31:5d:29:11:44: b5:b8:43:f1:99:7d:21:19:57:92:bb:57:24:a9:f0:a0:fc:16: 6b:4b:52:f7:4b:dd:aa:f1:cf:d9:97:bb:71:af:60:7c:68:35: 8d:77:e5:fb:44:70:da:e5:ba:ff:92:cb:19:b0:97:c0:1b:b8: bf:5c:76:aa:ba:e4:47:20:29:0a:63:2f:36:09:bf:cf:35:0a: 07:12:6b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+ZU2QmLp8geGSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk NTk4Y2Y0M2EtM2ZmYy00YWU4LWI2ZTgtNjg4YmY0YTIxNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjg5Ax6Ak0LvOLA2b1HZC9OPVDNoxYDBSlWsd yaTD2DifNsfkjWK6kmo5XoJJF5vvfVPCrx3VNtH7pYNttOn+FZ/sd8RLlEd1P6U9 /JWuVC/mOFj8OE0VgmbakbtFOAJojp1NLnsc3I/h2DFoJu0WfwfQTSURzOc5jfaJ MOGXP7NysmjsECsF/EMUqfEgGEp7ZvRWyIwi/fqH7Xs8vqIGi/4EPbw9mWc3jz+M lN0h4KnrpBvKYQoZk+ZUYKOSkOXukIksESk6XKn7RXTDnrrlwOlWqsK4DN2U/ejK iJVv3RMzKwpvFBrsliJSy8/p9UnddqrwpcdS5B+lmFl8XVs+cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFCtpnLCFQlBm1Zme3tBFbvwiEhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZmYzY2JhYzctZWRiZi0z M2ZjLTgyY2ItN2EwMzcyZDFmZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMycMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+YpI1rzJIzDDkmBSWRu06REJP7ZHlpi0dTczBA7YgbuzXw0izJmjZv +66Wb2WFsx3VUH3YS2eUDCjMwA1c2sdXttV2OYPEX+y6gP9Paf2PbpndmQwcCGLI rzvS+GHG4PTpEDbY0G+Dc/gVvcoE9nOL8Tsquszxyp3XczVlFr4PuG4irvFOH+ZO aribWcHfdqBwn2859lTl6CKmNv0Vr/teXcS34SAGyrqRfImGVxsxXSkRRLW4Q/GZ fSEZV5K7VySp8KD8FmtLUvdL3arxz9mXu3GvYHxoNY135ftEcNrluv+Syxmwl8Ab uL9cdqq65EcgKQpjLzYJv881CgcSazQ= -----END CERTIFICATE-----Generated at Wed May 13 03:54:27 2026 by rpki-client