$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa File: aff52061-08df-3f5d-82f3-9bd999e3d55a.roa (raw, json) Hash identifier: WR+PBXyPwKMOk3I/7ohJno/eXJ6KysIr0KGaxthOK+k= Subject key identifier: E5:DA:47:D4:90:3E:E6:60:04:6E:AB:E8:C3:79:AC:50:3E:4E:52:C5 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584E842A335C3AF18DD410702000 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 214208 IP address blocks: 140.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:33:5c:3a:f1:8d:d4:10:70:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=74cef954-ca47-467e-bf73-a8d602a01ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:56:97:fc:d6:ce:0f:cd:10:73:21:60:a3:2a: da:d6:c2:75:d2:9d:3d:e8:e2:04:7b:33:71:2d:a0: 25:ff:e1:8a:eb:4b:0b:81:48:61:e5:0b:96:b8:a1: fd:ed:cc:9f:34:43:7b:53:99:a2:36:37:5a:46:de: 54:50:b0:f8:d2:9b:11:d8:51:d1:1a:5f:e8:44:ce: 63:a7:f2:4e:91:7e:ad:17:c5:44:0b:a8:b3:b2:52: b3:69:8b:9e:8a:ed:85:6c:30:9d:2c:e4:0c:e0:20: 58:73:0d:8c:af:12:32:0b:d3:96:d8:c4:be:2d:71: 2d:50:a8:6e:e1:7f:ab:3d:d1:b2:08:2f:5c:27:df: 52:df:ff:d8:65:a3:4a:cd:a6:d8:13:6e:12:aa:20: 14:5b:8b:9d:0e:6f:49:09:96:86:c6:80:e2:0e:a5: 29:9c:93:50:31:f8:c4:3c:c7:09:67:6f:88:68:2e: a2:6c:19:72:94:5e:e6:b9:d7:a1:58:ef:ba:1e:dc: c8:f1:c4:22:bf:fc:40:1d:1c:88:2c:26:fe:4f:18: 7e:18:f5:6f:3a:dc:0c:ec:bc:0e:df:3e:3d:35:35: 01:20:8b:1d:d6:cc:95:1a:b4:ab:02:01:e1:f0:6e: 9b:97:cb:75:30:62:df:d0:94:51:ca:44:2b:f7:9e: cb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DA:47:D4:90:3E:E6:60:04:6E:AB:E8:C3:79:AC:50:3E:4E:52:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:d9:22:f3:5c:95:42:b4:9d:06:77:85:ab:9d:10:22:df:85: 42:ab:00:a4:b3:a5:fa:b9:ad:b2:07:69:ab:e2:d0:e6:d2:2a: 7a:cd:e0:2c:78:71:db:48:e8:22:55:62:c1:b8:7c:47:19:cb: bb:20:b5:4d:17:ca:95:a3:f9:f1:eb:84:25:1a:73:83:23:d6: 82:ab:7f:e8:7c:0d:06:a0:08:10:72:af:21:5d:78:73:ec:6f: 5a:cf:4d:6f:e4:fa:a6:c0:43:a0:3b:0c:f3:fe:b0:7d:3b:d8: a0:ee:78:fc:e1:74:1f:61:93:28:d3:f5:91:e8:09:33:74:46: 9e:25:73:f7:57:3d:93:31:19:d9:11:86:5f:86:5e:87:e8:5b: 75:60:85:a8:47:fe:c4:ec:7f:88:27:43:2d:74:28:65:f8:51: 87:78:a6:32:34:e3:88:fc:84:05:30:de:83:b9:5f:43:93:de: e6:70:55:8c:d8:b9:36:5b:49:44:ff:69:1a:c0:1b:15:f1:8a: 0a:d9:c0:49:0f:d3:f8:dd:cd:78:49:84:e8:77:a5:1f:38:e3: 7b:ba:19:2a:f8:86:15:b0:93:4a:07:b8:fc:df:d1:80:b6:7a: b5:eb:24:f7:f2:a8:9d:8f:65:86:d8:40:04:06:1c:90:15:aa: ea:fc:46:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjNcOvGN1BBwIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk NzRjZWY5NTQtY2E0Ny00NjdlLWJmNzMtYThkNjAyYTAxZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVaX/NbOD80QcyFgoyra1sJ10p096OIEezNx LaAl/+GK60sLgUhh5QuWuKH97cyfNEN7U5miNjdaRt5UULD40psR2FHRGl/oRM5j p/JOkX6tF8VEC6izslKzaYueiu2FbDCdLOQM4CBYcw2MrxIyC9OW2MS+LXEtUKhu 4X+rPdGyCC9cJ99S3//YZaNKzabYE24SqiAUW4udDm9JCZaGxoDiDqUpnJNQMfjE PMcJZ2+IaC6ibBlylF7mudehWO+6HtzI8cQiv/xAHRyILCb+Txh+GPVvOtwM7LwO 3z49NTUBIIsd1syVGrSrAgHh8G6bl8t1MGLf0JRRykQr957LSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXaR9SQPuZgBG6r6MN5rFA+TlLFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvYWZmNTIwNjEtMDhkZi0z ZjVkLTgyZjMtOWJkOTk5ZTNkNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTZIvNclUK0nQZ3haudECLfhUKrAKSzpfq5rbIHaavi0ObSKnrN4Cx4 cdtI6CJVYsG4fEcZy7sgtU0XypWj+fHrhCUac4Mj1oKrf+h8DQagCBByryFdeHPs b1rPTW/k+qbAQ6A7DPP+sH072KDuePzhdB9hkyjT9ZHoCTN0Rp4lc/dXPZMxGdkR hl+GXofoW3VghahH/sTsf4gnQy10KGX4UYd4pjI044j8hAUw3oO5X0OT3uZwVYzY uTZbSUT/aRrAGxXxigrZwEkP0/jdzXhJhOh3pR8443u6GSr4hhWwk0oHuPzf0YC2 erXrJPfyqJ2PZYbYQAQGHJAVqur8Rh8= -----END CERTIFICATE-----Generated at Tue Jul 21 14:44:04 2026 by rpki-client