$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa File: 21cf8a76-4555-3d30-876a-9f938d02a731.roa (raw, json) Hash identifier: NnzwCkZkfljKCihluSNUtFqjMdWv7dsiAaZ2nj0ooCI= Subject key identifier: 71:1F:9B:3C:C9:43:0C:28:8A:3E:86:94:24:D3:84:C3:BB:DD:E7:EC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA0360C18585974ABECAC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 140.204.116.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:03:60:c1:85:85:97:4a:be:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=39e6d3db-ab11-4974-985c-c480d00eb6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:50:88:25:46:fc:cf:28:6d:d8:cd:cf:d8:01: 8a:60:96:53:a5:1d:5d:f7:c9:d5:a2:72:c2:f2:f8: 9f:66:45:dd:e1:b9:26:3f:d8:5e:39:78:a2:5d:10: 28:fd:11:0f:c1:d7:86:64:0d:66:5b:30:00:2e:26: 5f:92:cd:0f:04:5c:98:cf:b5:ee:6a:15:67:57:c2: c3:dd:1c:17:e3:9f:d8:3f:52:64:39:2a:e9:34:f3: bc:5d:12:7d:18:a2:25:42:c2:aa:3e:b8:70:a5:bf: 71:1d:4e:40:9d:5f:22:07:64:0d:4e:cd:ab:3a:95: 5d:64:83:36:6a:80:6b:da:66:e2:49:51:f4:60:62: 15:87:c0:c6:00:19:27:55:5b:b5:d9:4a:c6:75:dc: b3:a6:6b:48:0d:66:67:41:d8:3a:95:d9:ed:7c:29: 58:05:aa:8e:4f:be:64:08:53:85:78:b6:5a:ad:95: 73:ca:ad:30:23:1d:78:5b:17:ea:9f:91:71:aa:15: f9:9b:fc:c8:82:34:3d:32:c3:49:ce:ec:02:40:ba: fd:02:57:27:96:4e:5f:e1:14:77:1e:53:0b:90:1f: 1b:01:1b:43:7a:1a:60:7f:71:fd:5f:d5:21:31:7e: 76:bf:99:bd:40:70:67:9f:89:14:98:2e:da:c5:a0: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1F:9B:3C:C9:43:0C:28:8A:3E:86:94:24:D3:84:C3:BB:DD:E7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21cf8a76-4555-3d30-876a-9f938d02a731.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.116.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:a8:b8:b8:80:67:1b:10:01:4f:e1:c7:16:9e:88:33:0f:0d: 40:c3:ea:3e:4a:ff:14:88:06:9c:1c:27:f6:f9:0d:52:fe:d8: 01:90:40:dc:df:22:6c:13:05:2f:40:18:f5:03:e2:1e:74:db: f3:aa:cd:0f:d0:ae:ad:10:57:ca:9a:2d:fc:7a:e1:dd:4b:4b: fe:49:d1:d1:1c:56:10:9e:ab:c3:79:d2:0b:3f:a6:13:ca:30: 60:7e:2c:cc:28:86:f3:9f:34:02:f8:56:f3:24:c8:ed:d3:41: 3c:6a:5f:2b:cf:97:fc:ad:06:17:2a:f5:8c:cb:24:d2:77:7e: a7:13:2a:a4:c4:23:bb:a4:ca:2e:79:cc:9c:c5:30:c1:eb:19: 19:d6:94:93:e7:b2:d4:bc:29:8b:82:eb:22:0b:68:84:ba:42: 74:9a:67:56:80:e9:36:2e:9f:b8:57:d2:8f:4a:96:7a:62:d4: 28:6f:3f:af:f2:e6:2a:3e:26:1d:26:6d:d9:da:26:5d:6c:37: 6e:7c:5e:70:6c:8a:7a:9a:09:a0:ce:de:01:e2:86:3b:9a:95: f8:3b:56:49:43:f8:95:07:d3:f0:58:44:9f:2c:df:d6:11:c6: 8b:ad:d0:6d:f4:a3:cc:84:8a:0b:1f:3e:d6:a8:30:d7:da:b2: c9:e4:c0:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2gNgwYWFl0q+ysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk MzllNmQzZGItYWIxMS00OTc0LTk4NWMtYzQ4MGQwMGViNmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFCIJUb8zyht2M3P2AGKYJZTpR1d98nVonLC 8vifZkXd4bkmP9heOXiiXRAo/REPwdeGZA1mWzAALiZfks0PBFyYz7XuahVnV8LD 3RwX45/YP1JkOSrpNPO8XRJ9GKIlQsKqPrhwpb9xHU5AnV8iB2QNTs2rOpVdZIM2 aoBr2mbiSVH0YGIVh8DGABknVVu12UrGddyzpmtIDWZnQdg6ldntfClYBaqOT75k CFOFeLZarZVzyq0wIx14Wxfqn5FxqhX5m/zIgjQ9MsNJzuwCQLr9Alcnlk5f4RR3 HlMLkB8bARtDehpgf3H9X9UhMX52v5m9QHBnn4kUmC7axaBWKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEfmzzJQwwoij6GlCTThMO73efsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjFjZjhhNzYtNDU1NS0z ZDMwLTg3NmEtOWY5MzhkMDJhNzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuouLiAZxsQAU/hxxaeiDMPDUDD6j5K/xSIBpwcJ/b5DVL+2AGQQNzf ImwTBS9AGPUD4h502/OqzQ/Qrq0QV8qaLfx64d1LS/5J0dEcVhCeq8N50gs/phPK MGB+LMwohvOfNAL4VvMkyO3TQTxqXyvPl/ytBhcq9YzLJNJ3fqcTKqTEI7ukyi55 zJzFMMHrGRnWlJPnstS8KYuC6yILaIS6QnSaZ1aA6TYun7hX0o9Klnpi1ChvP6/y 5io+Jh0mbdnaJl1sN258XnBsinqaCaDO3gHihjualfg7VklD+JUH0/BYRJ8s39YR xout0G30o8yEigsfPtaoMNfassnkwLo= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:35 2026 by rpki-client