$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa File: 145fa784-4610-3457-b02b-979db30fed38.roa (raw, json) Hash identifier: xKVY1JVzBjs3cZAdPk1FYc0+0aRJmivGodqaVNoT6l4= Subject key identifier: 6B:72:75:8E:B4:FF:7C:A6:5D:EA:E6:F4:0C:90:A5:91:16:C8:6C:89 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E6A966A99D1B729D9DD00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.204.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:6a:96:6a:99:d1:b7:29:d9:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=facd28e8-1e7f-4c9c-a3a3-eec2056b2c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:45:a2:23:5d:bc:af:02:3e:ef:e9:6f:b5: cb:40:07:bf:03:6c:82:dd:fc:e6:da:21:cf:aa:26: 31:73:a0:77:44:bd:5f:9e:6f:2c:9f:48:1e:8f:f9: c5:40:69:7f:1b:0f:bb:06:14:4d:0d:d7:5c:c7:3b: 34:bd:d3:ae:cc:be:5f:8e:2d:3f:63:83:7f:12:b3: eb:26:1c:79:2f:1c:27:df:e6:f3:da:f9:86:a0:1f: 1c:6e:79:b8:3b:b0:60:08:9f:06:1b:92:10:0b:70: b6:2d:78:40:7e:9e:f7:30:a5:f3:20:eb:a5:1c:2d: 70:90:37:5e:63:b8:85:20:05:7f:11:02:a7:30:16: 94:d0:fd:d9:7c:05:7a:79:df:05:27:5e:c0:c9:3c: 97:6a:67:7a:a7:04:79:1e:03:03:50:b8:6f:28:97: bb:d3:65:92:aa:26:88:44:95:30:d7:fe:9f:52:d9: 2d:60:37:00:6a:77:4d:e0:2b:f5:4f:55:d9:d0:e4: bc:41:5d:52:77:42:11:31:d1:1e:45:bc:10:a1:cd: de:36:4a:18:2d:b1:80:19:70:c8:34:3e:8a:c6:78: 75:06:54:86:f5:7f:90:8c:ae:1e:1c:25:23:25:40: 42:98:aa:37:3b:b6:a4:13:19:39:c6:7b:f9:86:0d: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:72:75:8E:B4:FF:7C:A6:5D:EA:E6:F4:0C:90:A5:91:16:C8:6C:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/145fa784-4610-3457-b02b-979db30fed38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ae:58:96:a7:5c:21:03:07:72:ef:19:97:d9:80:a0:71:c8: 69:5d:81:19:44:06:63:47:a4:69:09:6a:6d:f6:10:ea:5c:ea: cc:0d:40:fd:ea:fe:bd:c6:d1:a7:22:96:94:e3:a0:b9:4a:da: 86:2e:9d:0b:af:5d:83:09:0b:17:95:0c:1f:92:ee:eb:e0:2c: c6:ed:51:29:4f:fd:90:74:85:30:f7:d2:3c:68:a8:36:bf:d0: d1:47:de:20:a8:2e:57:61:ec:29:7c:b0:f1:b1:ab:79:fd:16: 96:a3:c3:b7:dc:a4:96:6d:68:66:0f:5c:38:75:a0:c2:20:29: 6a:b1:52:3f:d6:96:c1:1e:82:3d:85:fc:89:68:af:59:42:b0: e1:41:9f:ac:8c:5e:48:22:e3:51:1d:9b:4c:c4:eb:5d:7f:17: cd:0b:ee:61:7b:15:a9:43:c9:2c:d0:6b:03:4a:b3:27:92:51: 30:92:de:e5:3b:a8:bb:8f:16:7c:b7:22:7d:21:be:bc:20:00: 65:54:fe:2a:39:36:1c:21:2c:9c:cc:35:b2:ce:a1:0d:bc:b9: 82:96:d2:8b:3c:35:e3:7a:30:07:cf:e2:e8:81:29:a9:90:5c: 4a:c1:ff:21:54:dd:9d:12:af:3b:c0:0f:cc:04:52:77:87:7f: 42:3f:1e:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXmqWapnRtynZ3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZmFjZDI4ZTgtMWU3Zi00YzljLWEzYTMtZWVjMjA1NmIyYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhFoiNdvK8CPu/pb7XLQAe/A2yC3fzm2iHP qiYxc6B3RL1fnm8sn0gej/nFQGl/Gw+7BhRNDddcxzs0vdOuzL5fji0/Y4N/ErPr Jhx5Lxwn3+bz2vmGoB8cbnm4O7BgCJ8GG5IQC3C2LXhAfp73MKXzIOulHC1wkDde Y7iFIAV/EQKnMBaU0P3ZfAV6ed8FJ17AyTyXamd6pwR5HgMDULhvKJe702WSqiaI RJUw1/6fUtktYDcAandN4Cv1T1XZ0OS8QV1Sd0IRMdEeRbwQoc3eNkoYLbGAGXDI ND6Kxnh1BlSG9X+QjK4eHCUjJUBCmKo3O7akExk5xnv5hg0axwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtydY60/3ymXerm9AyQpZEWyGyJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTQ1ZmE3ODQtNDYxMC0z NDU3LWIwMmItOTc5ZGIzMGZlZDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSuWJanXCEDB3LvGZfZgKBxyGldgRlEBmNHpGkJam32EOpc6swNQP3q /r3G0acilpTjoLlK2oYunQuvXYMJCxeVDB+S7uvgLMbtUSlP/ZB0hTD30jxoqDa/ 0NFH3iCoLldh7Cl8sPGxq3n9Fpajw7fcpJZtaGYPXDh1oMIgKWqxUj/WlsEegj2F /Ilor1lCsOFBn6yMXkgi41Edm0zE611/F80L7mF7FalDySzQawNKsyeSUTCS3uU7 qLuPFny3In0hvrwgAGVU/io5NhwhLJzMNbLOoQ28uYKW0os8NeN6MAfP4uiBKamQ XErB/yFU3Z0SrzvAD8wEUneHf0I/HnY= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:31 2026 by rpki-client