$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa File: 0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa (raw, json) Hash identifier: +RcFgoh5SK3aNttYnPGRQ/8H3fM4FMZXyt3ruX3OdU0= Subject key identifier: 46:D8:BE:D1:AD:E1:AB:40:6A:60:23:24:37:6C:D0:74:AC:CC:1F:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E8AF3E2F95EA705F3BE00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.91.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:8a:f3:e2:f9:5e:a7:05:f3:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=8542a8f2-5e5f-4fb1-a07b-662c2a603bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:57:5f:4d:31:4d:34:2c:7a:d0:ca:29:ad:2b: 95:6f:68:c2:36:6b:bb:9c:7b:4c:3f:a9:ce:56:e6: 8e:cc:f5:aa:2b:56:1a:97:bb:ba:21:7c:e5:9e:f0: b9:45:cd:d1:ec:39:2c:2f:c9:06:9b:6c:8d:ea:f4: e9:a0:e5:d9:2b:a5:73:87:3b:3e:d0:33:a3:ba:49: 1d:a9:67:6e:2f:27:5a:c8:92:3a:c8:dd:a2:73:53: 90:b8:8c:3d:02:3f:4d:9d:1f:44:27:ce:6b:7a:3a: e8:6a:4e:59:6f:b2:b5:db:55:d6:63:4a:dc:a9:1a: 3f:c7:5e:5f:f3:a1:78:2e:d5:a0:c0:c6:b5:03:c5: 93:24:f0:18:26:b0:45:3c:d5:bb:3b:ef:71:ab:8b: 2d:2d:56:55:89:c0:63:df:0f:18:79:82:2e:82:fd: 8c:db:8a:7d:c5:5b:11:f9:40:34:13:11:2e:68:ba: 7f:ea:7c:2c:37:17:6e:1f:61:0f:20:73:67:c4:17: 31:1b:45:68:6f:a0:57:bd:17:c4:ee:a8:25:31:fe: 2e:ba:1e:3a:45:39:96:d7:be:71:a7:d0:26:95:31: 76:ff:9d:d8:41:75:7e:e4:20:36:ca:1e:b3:7d:e0: 59:c1:49:ff:e8:a3:c9:09:27:90:5f:3d:12:4e:8a: 16:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:D8:BE:D1:AD:E1:AB:40:6A:60:23:24:37:6C:D0:74:AC:CC:1F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0ee9dff1-f1c9-3f67-86c1-ffb89cfb1bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:94:97:07:7b:ed:81:cf:24:72:67:e4:eb:10:fe:69:fd:78: 8d:12:92:23:a3:09:78:ae:28:66:c6:20:01:9c:9a:f8:4c:49: 08:04:13:8b:6d:4f:f9:57:d5:58:92:92:0c:15:57:1a:40:8a: 80:79:2f:d2:cd:d6:83:4a:52:24:84:32:cd:ed:73:88:9f:3d: 79:f1:9b:c5:23:cf:67:e1:36:bf:39:a4:be:92:f3:e9:ce:8f: 29:cf:55:17:ae:5c:44:d6:51:e4:da:1a:54:d2:56:bb:a6:dc: aa:cb:01:f7:4d:50:9c:2b:99:85:6d:28:74:95:8e:3f:a8:ef: 7e:d1:b6:3a:79:97:f1:b4:af:a4:8d:a8:d9:2e:61:26:a9:2b: 8c:7c:91:16:0f:a3:08:97:20:8f:35:cc:e6:a9:0c:20:b0:06: 3c:2d:87:e3:52:66:f0:81:56:bb:46:0b:ab:6e:f4:af:0b:a6: fb:3f:51:1b:59:06:36:2a:d4:35:8c:f7:8f:b7:ba:4a:47:1d: 09:d5:73:37:9d:65:35:78:c9:27:b4:94:f3:44:19:50:0d:35: 99:94:00:36:fa:66:1b:4c:ab:95:aa:2c:3a:cb:97:ff:d3:df: 60:69:fb:d8:bf:d3:ed:dc:12:6c:cd:83:d2:0a:76:a5:c6:81: d0:bf:83:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXorz4vlepwXzvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ODU0MmE4ZjItNWU1Zi00ZmIxLWEwN2ItNjYyYzJhNjAzYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVdfTTFNNCx60MoprSuVb2jCNmu7nHtMP6nO VuaOzPWqK1Yal7u6IXzlnvC5Rc3R7DksL8kGm2yN6vTpoOXZK6Vzhzs+0DOjukkd qWduLydayJI6yN2ic1OQuIw9Aj9NnR9EJ85rejroak5Zb7K121XWY0rcqRo/x15f 86F4LtWgwMa1A8WTJPAYJrBFPNW7O+9xq4stLVZVicBj3w8YeYIugv2M24p9xVsR +UA0ExEuaLp/6nwsNxduH2EPIHNnxBcxG0Vob6BXvRfE7qglMf4uuh46RTmW175x p9AmlTF2/53YQXV+5CA2yh6zfeBZwUn/6KPJCSeQXz0STooWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEbYvtGt4atAamAjJDds0HSszB/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGVlOWRmZjEtZjFjOS0z ZjY3LTg2YzEtZmZiODljZmIxYmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWUlwd77YHPJHJn5OsQ/mn9eI0SkiOjCXiuKGbGIAGcmvhMSQgEE4tt T/lX1ViSkgwVVxpAioB5L9LN1oNKUiSEMs3tc4ifPXnxm8Ujz2fhNr85pL6S8+nO jynPVReuXETWUeTaGlTSVrum3KrLAfdNUJwrmYVtKHSVjj+o737Rtjp5l/G0r6SN qNkuYSapK4x8kRYPowiXII81zOapDCCwBjwth+NSZvCBVrtGC6tu9K8Lpvs/URtZ BjYq1DWM94+3ukpHHQnVczedZTV4ySe0lPNEGVANNZmUADb6ZhtMq5WqLDrLl//T 32Bp+9i/0+3cEmzNg9IKdqXGgdC/gww= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:29 2026 by rpki-client