$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa File: 1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa (raw, json) Hash identifier: DkzgwZkEtyx67LvNFjTNRCdmCfcCnMfdYogqnAhd3c0= Subject key identifier: 1A:DF:92:BB:83:3C:EB:FD:24:A4:0C:D7:B5:88:9D:0C:FD:A9:A2:9A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5EB883B2B955D426ED4BE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.204.58.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:b8:83:b2:b9:55:d4:26:ed:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=53864f25-114e-4003-b700-465a12e270f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:2f:fc:eb:a3:2b:73:6f:c1:00:f1:8f:62: aa:03:f2:98:99:80:fe:3c:ca:51:51:10:c4:92:d6: 51:5a:08:b2:a1:3b:cd:ae:fd:e9:3a:1c:35:19:fb: bc:4f:fc:f2:fb:6f:59:4c:06:eb:b2:d8:fa:38:d4: 34:14:45:f9:42:6f:98:f5:b1:a9:9a:3a:83:e7:04: b2:44:7a:2d:ad:7a:e8:d5:87:96:48:07:e7:25:15: 0f:04:3f:18:e7:6f:af:20:6c:7f:45:74:e2:4f:88: f3:3b:23:a8:a6:51:40:6a:35:bd:d9:c0:2d:42:65: ba:62:48:e9:fb:46:d5:92:60:7d:70:b3:4b:e6:84: 84:a5:c0:67:08:d5:b2:a8:9c:47:7a:f1:bb:76:d2: 83:85:dc:33:a4:2f:de:fd:ab:a8:44:ed:f1:6e:1a: 25:36:0e:c2:29:ef:4c:15:67:1e:4b:e7:ef:7f:38: bb:15:0a:ee:b1:ec:3f:3e:03:cb:52:8d:54:02:3f: 90:46:5c:63:f5:ae:ce:58:d5:26:4f:4a:fa:c1:97: 6f:91:9a:b5:6f:1d:19:2c:36:24:b0:04:e8:02:85: e8:ae:e0:27:2f:37:17:a6:45:2b:e2:92:ab:67:d3: d8:63:f7:1a:ae:5e:c4:73:23:dc:02:b9:8a:21:58: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:DF:92:BB:83:3C:EB:FD:24:A4:0C:D7:B5:88:9D:0C:FD:A9:A2:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1252d86e-cc72-34eb-898e-f0ca2a457f5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.58.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a3:17:04:6c:ee:ed:70:d1:15:26:e4:8a:66:0e:49:8c:b3: 12:09:8c:81:f6:f9:28:c4:bb:af:77:6c:93:15:84:1f:2f:4f: c3:34:10:e5:e1:96:18:fc:d0:c5:09:fe:d9:51:6f:3e:c8:c5: b2:91:b6:00:42:ce:d6:55:ad:46:fb:6c:a7:b8:22:ac:88:71: c8:f0:19:0f:df:a4:a1:c1:7a:21:c0:d9:ba:cf:85:3f:12:d6: 3a:3a:05:88:ee:f2:b1:4f:a5:78:2a:c6:30:e4:b9:51:b0:26: b6:97:90:7c:cd:a0:69:a8:fd:05:e5:17:98:6c:2b:ab:e7:2e: c8:03:a7:47:c0:9c:dc:67:0f:56:aa:04:f9:e5:62:36:6e:dd: dc:de:ce:d4:2e:28:32:50:cb:91:7d:f0:f0:33:8a:b0:e6:72: c7:c1:fe:96:1c:2b:e1:2a:3d:ca:8c:84:ff:81:aa:72:9b:f2: cb:51:b4:bc:4a:f4:c9:0a:33:02:a8:78:d0:00:e8:99:8c:5d: 5c:e6:a8:76:50:ee:6e:cd:2d:43:62:6a:60:b5:3e:49:b1:dc: 03:15:06:59:ff:70:6e:5c:04:d7:df:82:88:fc:f3:28:e3:93: 89:a2:57:30:9c:1f:c2:c6:46:8c:b5:64:67:0f:c5:10:02:82: d3:f8:15:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXriDsrlV1CbtS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk NTM4NjRmMjUtMTE0ZS00MDAzLWI3MDAtNDY1YTEyZTI3MGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjsv/OujK3NvwQDxj2KqA/KYmYD+PMpRURDE ktZRWgiyoTvNrv3pOhw1Gfu8T/zy+29ZTAbrstj6ONQ0FEX5Qm+Y9bGpmjqD5wSy RHotrXro1YeWSAfnJRUPBD8Y52+vIGx/RXTiT4jzOyOoplFAajW92cAtQmW6Ykjp +0bVkmB9cLNL5oSEpcBnCNWyqJxHevG7dtKDhdwzpC/e/auoRO3xbholNg7CKe9M FWceS+fvfzi7FQrusew/PgPLUo1UAj+QRlxj9a7OWNUmT0r6wZdvkZq1bx0ZLDYk sAToAoXoruAnLzcXpkUr4pKrZ9PYY/carl7EcyPcArmKIVg0KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrfkruDPOv9JKQM17WInQz9qaKaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTI1MmQ4NmUtY2M3Mi0z NGViLTg5OGUtZjBjYTJhNDU3ZjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqjFwRs7u1w0RUm5IpmDkmMsxIJjIH2+SjEu693bJMVhB8vT8M0EOXh lhj80MUJ/tlRbz7IxbKRtgBCztZVrUb7bKe4IqyIccjwGQ/fpKHBeiHA2brPhT8S 1jo6BYju8rFPpXgqxjDkuVGwJraXkHzNoGmo/QXlF5hsK6vnLsgDp0fAnNxnD1aq BPnlYjZu3dzeztQuKDJQy5F98PAzirDmcsfB/pYcK+EqPcqMhP+BqnKb8stRtLxK 9MkKMwKoeNAA6JmMXVzmqHZQ7m7NLUNiamC1Pkmx3AMVBln/cG5cBNffgoj88yjj k4miVzCcH8LGRoy1ZGcPxRACgtP4FRc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:26 2026 by rpki-client