$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12a8be62-2112-3f25-b2b8-5cf73c814902.roa File: 12a8be62-2112-3f25-b2b8-5cf73c814902.roa (raw, json) Hash identifier: p4LiRQ0wx/5wFP2mEtpLr5hnAjih4dFfLdDZvegKKng= Subject key identifier: 6F:A3:31:66:F2:EB:7C:67:4C:61:EA:39:96:29:46:20:BE:61:AD:A8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6F3A1887646BF1AFCF8BD9B0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12a8be62-2112-3f25-b2b8-5cf73c814902.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 31898 IP address blocks: 140.204.86.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:18:87:64:6b:f1:af:cf:8b:d9:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=578f9797-97ae-4ff0-9904-54121bf9c3ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:78:a9:06:53:bd:fe:6a:56:06:ad:19:0f: 6b:35:7f:23:d1:ba:ce:a3:f3:d2:b1:67:b8:92:b3: eb:13:1d:10:ba:40:e5:a5:d2:33:73:30:90:b1:e6: 07:8f:1e:a8:ac:01:58:2e:2b:38:c1:7b:1e:00:8f: cc:3e:b9:e8:bc:69:49:cc:38:c5:f7:74:9e:14:fe: 20:73:6c:4e:80:d1:f1:7c:34:6f:65:76:d1:63:4b: 04:23:7d:62:c8:76:57:02:81:ad:26:39:ef:c3:73: ec:ee:db:8a:31:39:06:4d:c4:4f:18:97:d6:80:1d: d3:41:21:9d:61:cf:78:93:05:87:43:a1:56:38:e1: fd:88:73:17:d7:b4:4a:64:af:97:81:bc:40:8f:3c: 48:a2:f2:2f:2e:e0:50:06:d4:f1:28:75:fb:68:19: 69:58:ae:6e:13:94:06:f6:ba:9c:37:03:60:6f:02: af:9b:88:e7:43:e5:bb:df:56:34:7a:fc:ce:05:6b: a8:8d:20:f2:5f:d0:65:88:1c:4a:19:30:44:6f:4e: aa:a6:3f:fb:e8:ac:62:77:1c:12:1e:7d:1c:5f:dc: e8:a9:4a:bb:8a:14:01:7f:2d:fb:c4:45:9b:52:96: df:45:83:14:11:76:bb:c4:60:37:05:bc:5d:ee:bf: cb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A3:31:66:F2:EB:7C:67:4C:61:EA:39:96:29:46:20:BE:61:AD:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12a8be62-2112-3f25-b2b8-5cf73c814902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:61:4b:c0:d1:be:0a:2f:f4:13:8b:fc:f8:4f:8f:e0:5a:70: c6:8f:05:8e:35:07:35:0f:80:8d:43:9f:6a:85:db:eb:00:0a: 25:2b:3b:2b:17:a2:b9:81:ba:94:1d:c7:90:68:24:bc:1f:73: 36:06:64:a4:81:d3:eb:1a:7a:90:9e:f2:19:67:2b:8c:6b:75: 8d:81:54:0f:65:43:c4:98:21:06:3b:a7:7f:33:e0:3d:47:d1: 49:d8:f2:6f:48:25:2e:a8:8b:cf:da:ed:05:ca:8b:75:2e:f6: 6a:fd:ad:41:ae:c3:dc:0f:56:91:2a:c1:71:93:0f:d2:62:c4: bf:b0:21:02:c6:8e:4c:1a:fb:c6:87:40:14:96:85:83:79:19: 78:13:b1:6a:5d:ea:f8:a3:dd:79:16:9f:4b:c0:a6:d6:e5:5f: be:6f:89:78:c1:aa:0d:b6:9b:d0:3f:6d:ef:bd:44:db:e4:ef: 23:f3:b6:21:b8:5f:aa:18:80:b3:8c:32:61:3f:7f:e0:d3:2b: 53:37:2e:af:15:2b:43:fa:a6:05:8e:fe:9c:63:24:8e:b5:41: 64:ff:66:04:8a:9b:bc:04:ea:dc:15:4c:29:35:78:b6:98:78: 7b:35:9c:d4:fa:ed:a7:8b:19:60:90:fb:43:95:24:8e:22:7c: 2f:1e:f9:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vOhiHZGvxr8+L2bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk NTc4Zjk3OTctOTdhZS00ZmYwLTk5MDQtNTQxMjFiZjljM2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1d4qQZTvf5qVgatGQ9rNX8j0brOo/PSsWe4 krPrEx0QukDlpdIzczCQseYHjx6orAFYLis4wXseAI/MPrnovGlJzDjF93SeFP4g c2xOgNHxfDRvZXbRY0sEI31iyHZXAoGtJjnvw3Ps7tuKMTkGTcRPGJfWgB3TQSGd Yc94kwWHQ6FWOOH9iHMX17RKZK+XgbxAjzxIovIvLuBQBtTxKHX7aBlpWK5uE5QG 9rqcNwNgbwKvm4jnQ+W731Y0evzOBWuojSDyX9BliBxKGTBEb06qpj/76KxidxwS Hn0cX9zoqUq7ihQBfy37xEWbUpbfRYMUEXa7xGA3Bbxd7r/LswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG+jMWby63xnTGHqOZYpRiC+Ya2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTJhOGJlNjItMjExMi0z ZjI1LWIyYjgtNWNmNzNjODE0OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKhhS8DRvgov9BOL/PhPj+BacMaPBY41BzUPgI1Dn2qF2+sACiUrOysX ormBupQdx5BoJLwfczYGZKSB0+saepCe8hlnK4xrdY2BVA9lQ8SYIQY7p38z4D1H 0UnY8m9IJS6oi8/a7QXKi3Uu9mr9rUGuw9wPVpEqwXGTD9JixL+wIQLGjkwa+8aH QBSWhYN5GXgTsWpd6vij3XkWn0vAptblX75viXjBqg22m9A/be+9RNvk7yPztiG4 X6oYgLOMMmE/f+DTK1M3Lq8VK0P6pgWO/pxjJI61QWT/ZgSKm7wE6twVTCk1eLaY eHs1nNT67aeLGWCQ+0OVJI4ifC8e+SY= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:34 2026 by rpki-client