$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa File: 1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa (raw, json) Hash identifier: 9BUweEXdYrcGWZXDXMr4C2Eyv4HIXbhxle02AktrUf4= Subject key identifier: 36:DB:BF:80:40:46:77:61:19:86:BC:02:A8:98:A5:22:3E:74:D5:05 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB1EF71D1A78BD3F918ED80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 140.204.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b1:ef:71:d1:a7:8b:d3:f9:18:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=057b3460-1735-4851-87c0-f530faf3aebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:76:d4:7b:ee:92:d5:af:27:ca:a2:11:48:d9: 49:91:00:a0:2b:89:c4:c2:ba:3a:35:22:e2:70:16: be:72:4b:91:1d:df:3d:3c:99:e2:08:03:f0:8a:f3: 1d:4a:20:f1:94:f2:ea:fc:b5:26:34:db:29:f9:b8: 22:44:fa:59:7f:9c:c6:81:c1:7f:77:1b:66:06:ad: 56:10:ed:9e:da:8b:8d:e2:57:bb:87:88:0f:10:39: 1a:9f:db:75:9e:03:3e:7f:22:74:51:b8:3b:04:80: f6:a7:9f:ab:8c:ba:0f:36:4f:f8:ad:dd:48:74:46: 8d:e0:12:40:7b:ae:6d:2c:cc:87:f3:ec:4e:99:4c: 26:ba:3b:19:18:4f:fd:e6:b4:c5:48:20:d0:b9:22: 4b:19:32:15:4f:66:86:2a:24:17:c3:17:01:85:23: d0:a7:51:f6:68:42:c1:1e:1f:d7:de:2d:63:08:2b: 9f:db:15:55:22:32:4e:d3:92:13:60:fb:65:34:89: 0b:99:6d:7c:db:8c:35:d3:55:11:98:55:53:81:ef: 7c:ba:24:19:e4:2b:db:47:26:16:e0:9f:3c:4f:1e: b3:43:83:95:10:22:3d:2e:bf:c7:f6:3f:70:e5:47: 8a:c3:8d:8f:0a:46:73:d0:cd:63:dd:fa:16:74:59: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DB:BF:80:40:46:77:61:19:86:BC:02:A8:98:A5:22:3E:74:D5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a3b8b47-b9b4-3f15-88bc-4a5aaf5e25ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:c9:47:e7:e5:86:c2:79:60:bd:5f:28:80:b5:cd:45:99:c5: cb:b6:ef:77:af:e3:64:30:20:a6:2e:d0:9d:75:e5:74:2a:b6: b3:95:51:fc:8d:6c:54:e0:5c:fe:e4:63:24:ef:7e:d1:26:c6: 76:4b:5b:16:c0:db:7d:36:db:27:3e:bb:f3:b3:0b:70:ed:46: 16:bf:fa:15:22:71:66:ca:54:27:ce:fa:64:d6:c3:c6:67:13: 0d:30:c9:97:49:85:9e:7f:48:d8:95:0b:74:d5:57:9a:cf:2a: 1b:2e:50:33:ad:c5:55:3d:9f:5c:8a:b8:57:b0:b5:41:28:c5: 08:72:8f:f9:6d:a0:25:11:c2:ad:11:0e:73:7c:b7:54:3a:ee: 44:3e:5c:74:fc:a8:4d:fa:bb:ae:dc:8a:8f:6e:53:60:a4:4c: 71:5f:6a:a3:d1:41:21:a0:92:22:e7:11:7f:58:32:4d:27:80: d5:ed:39:54:95:02:a4:82:03:01:7f:f2:6a:3c:82:0b:ff:d3: 9f:0e:05:25:db:9b:31:50:8e:8b:72:18:0c:3b:ee:74:c9:1e: 5a:b8:11:d7:9b:bb:74:e1:61:47:98:a5:57:55:59:9f:3a:9c: 84:02:0d:4a:fa:e1:e9:39:02:5c:b9:ce:c3:59:30:d3:d1:5d: 36:c7:a1:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9se9x0aeL0/kY7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk MDU3YjM0NjAtMTczNS00ODUxLTg3YzAtZjUzMGZhZjNhZWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnbUe+6S1a8nyqIRSNlJkQCgK4nEwro6NSLi cBa+ckuRHd89PJniCAPwivMdSiDxlPLq/LUmNNsp+bgiRPpZf5zGgcF/dxtmBq1W EO2e2ouN4le7h4gPEDkan9t1ngM+fyJ0Ubg7BID2p5+rjLoPNk/4rd1IdEaN4BJA e65tLMyH8+xOmUwmujsZGE/95rTFSCDQuSJLGTIVT2aGKiQXwxcBhSPQp1H2aELB Hh/X3i1jCCuf2xVVIjJO05ITYPtlNIkLmW1824w101URmFVTge98uiQZ5CvbRyYW 4J88Tx6zQ4OVECI9Lr/H9j9w5UeKw42PCkZz0M1j3foWdFkhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbbv4BARndhGYa8AqiYpSI+dNUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWEzYjhiNDctYjliNC0z ZjE1LTg4YmMtNGE1YWFmNWUyNWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvJR+flhsJ5YL1fKIC1zUWZxcu273ev42QwIKYu0J115XQqtrOVUfyN bFTgXP7kYyTvftEmxnZLWxbA23022yc+u/OzC3DtRha/+hUicWbKVCfO+mTWw8Zn Ew0wyZdJhZ5/SNiVC3TVV5rPKhsuUDOtxVU9n1yKuFewtUEoxQhyj/ltoCURwq0R DnN8t1Q67kQ+XHT8qE36u67cio9uU2CkTHFfaqPRQSGgkiLnEX9YMk0ngNXtOVSV AqSCAwF/8mo8ggv/058OBSXbmzFQjotyGAw77nTJHlq4Edebu3ThYUeYpVdVWZ86 nIQCDUr64ek5Aly5zsNZMNPRXTbHoSs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:19 2026 by rpki-client