$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa File: 25fbf774-9154-37cb-822a-4b1468f102d0.roa (raw, json) Hash identifier: xSioPSYn3BNFbD5PcJkeCjqDUCD3AI6iPsEzVpXHIeA= Subject key identifier: 43:33:E5:C6:54:4C:31:16:C1:26:12:56:EF:93:75:7D:8A:DD:13:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC77BB632E15A13901D700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.91.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:77:bb:63:2e:15:a1:39:01:d7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=46eb7818-a493-4094-97aa-7c645d38119c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:de:95:f4:71:a4:09:95:a5:7d:a3:3b:ba:39: fe:c2:1c:68:f1:c8:b7:eb:5b:1b:e9:0f:dd:c2:0b: 15:89:10:5a:11:92:52:5f:b6:66:b7:a9:f2:41:59: ec:a8:62:f7:72:3f:d7:c1:22:07:3b:fb:8c:d0:99: 6e:3d:7b:f0:7f:df:39:36:52:5c:63:66:2f:03:65: 8e:9a:f2:f1:7e:7d:a8:fc:b8:2c:64:b9:17:d5:49: 23:39:d8:56:e9:f2:7a:e5:c2:de:db:f0:4e:18:45: b2:d6:08:db:95:f7:b4:6a:2f:80:e1:2a:2d:39:2d: 11:1c:11:40:e0:6a:d0:b3:51:48:42:53:ea:c2:89: 74:ad:f3:d3:7d:c8:cd:c2:86:61:2f:99:52:ff:2a: 7e:45:7c:25:1a:7b:f0:f6:ee:bb:80:96:a0:6e:5f: 9e:eb:30:3b:09:b8:87:d6:ba:74:db:86:4b:c2:fa: cb:5a:4e:16:02:a2:7b:f4:00:44:f8:dc:94:6f:37: 56:b5:d9:3f:c3:95:94:46:78:56:1d:b1:53:46:6e: 9f:31:c8:c8:b9:d3:5d:0b:c0:7c:e8:5a:b6:0c:d3: c7:ce:b8:99:1e:42:f3:aa:5a:10:a8:bf:68:bd:c9: 45:ca:dc:2f:b5:50:16:dd:eb:59:ab:2d:cf:69:2c: 02:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:33:E5:C6:54:4C:31:16:C1:26:12:56:EF:93:75:7D:8A:DD:13:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25fbf774-9154-37cb-822a-4b1468f102d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e5:0f:7b:01:dd:ce:93:9a:c3:ef:23:ca:5f:91:e2:3c:3b: 1a:7e:22:73:1b:6c:88:80:01:44:50:06:ea:e7:b0:26:27:08: 7f:f4:6b:8b:cc:0e:9e:df:6c:87:53:ea:61:7c:5a:dc:d0:5e: d0:5e:45:84:58:4a:a5:b7:75:97:7c:61:35:25:c3:87:62:6e: fc:fe:43:cd:34:5c:29:39:42:b8:57:f4:43:3c:2d:1a:b7:69: d6:7e:ab:8e:c3:ba:47:40:fe:00:18:79:9e:52:64:d7:b9:23: 9e:c8:21:cf:ad:72:d3:68:a0:7b:52:3e:63:15:10:0f:e2:a3: 58:e0:f4:9f:7d:5b:77:7c:65:d8:cc:de:f6:7c:ce:09:aa:da: a5:a9:13:19:17:e6:b1:c2:d0:57:88:8e:ce:62:77:a2:19:65: 70:52:bf:ec:6c:12:27:85:b4:80:74:78:bb:6f:50:20:c3:72: a2:64:fc:4b:a0:f5:9f:c6:9a:16:a2:94:0f:45:06:a2:ba:12: 96:95:36:31:12:ac:73:cd:f3:51:81:9a:2c:39:d5:e4:3d:3d: b1:bb:5e:ca:82:b9:e0:e6:9c:c8:1b:88:1c:28:fb:54:5a:18: 6e:0d:cc:1c:21:fe:99:cd:c4:a7:cd:ce:cd:4a:ba:96:f2:88: cc:52:5c:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHe7Yy4VoTkB1wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk NDZlYjc4MTgtYTQ5My00MDk0LTk3YWEtN2M2NDVkMzgxMTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d6V9HGkCZWlfaM7ujn+whxo8ci361sb6Q/d wgsViRBaEZJSX7Zmt6nyQVnsqGL3cj/XwSIHO/uM0JluPXvwf985NlJcY2YvA2WO mvLxfn2o/LgsZLkX1UkjOdhW6fJ65cLe2/BOGEWy1gjblfe0ai+A4SotOS0RHBFA 4GrQs1FIQlPqwol0rfPTfcjNwoZhL5lS/yp+RXwlGnvw9u67gJagbl+e6zA7CbiH 1rp024ZLwvrLWk4WAqJ79ABE+NyUbzdWtdk/w5WURnhWHbFTRm6fMcjIudNdC8B8 6Fq2DNPHzriZHkLzqloQqL9ovclFytwvtVAW3etZqy3PaSwCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMz5cZUTDEWwSYSVu+TdX2K3RM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjVmYmY3NzQtOTE1NC0z N2NiLTgyMmEtNGIxNDY4ZjEwMmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3lD3sB3c6TmsPvI8pfkeI8Oxp+InMbbIiAAURQBurnsCYnCH/0a4vM Dp7fbIdT6mF8WtzQXtBeRYRYSqW3dZd8YTUlw4dibvz+Q800XCk5QrhX9EM8LRq3 adZ+q47DukdA/gAYeZ5SZNe5I57IIc+tctNooHtSPmMVEA/io1jg9J99W3d8ZdjM 3vZ8zgmq2qWpExkX5rHC0FeIjs5id6IZZXBSv+xsEieFtIB0eLtvUCDDcqJk/Eug 9Z/GmhailA9FBqK6EpaVNjESrHPN81GBmiw51eQ9PbG7XsqCueDmnMgbiBwo+1Ra GG4NzBwh/pnNxKfNzs1KupbyiMxSXPk= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:33 2026 by rpki-client