$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa File: 2e456295-34ec-3199-a545-40ae7c08e19e.roa (raw, json) Hash identifier: fwqZhOK4X/U0iIFB1SJtgwFzJFyR/LmF8HvZ91lk2so= Subject key identifier: 8B:C1:FD:38:B6:07:8C:08:98:DF:73:D9:44:4F:78:27:3F:11:84:51 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7CCFD157CAA3793EA33D33C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:d1:57:ca:a3:79:3e:a3:3d:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=cb24080d-b8fc-4352-b26e-f4544c9a24e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:74:4e:7c:f7:bc:14:41:0d:50:e2:51:e1: 7d:3b:7b:a7:fa:02:5f:79:f7:04:1f:a5:00:f4:25: 32:40:aa:23:b0:ee:62:9c:c9:62:e2:72:73:ef:ab: ae:73:4a:4a:40:f1:26:69:14:d9:a8:10:ab:ea:0f: 16:1c:69:a9:70:c1:1a:7f:0a:96:65:ff:a9:06:6b: 81:39:d7:d5:71:da:0c:be:12:8d:d9:c8:14:84:fe: 2c:59:32:be:81:bc:1c:f0:c8:32:ff:d7:20:5d:e5: 4b:b1:0f:5d:a8:d2:04:40:1a:0b:05:88:16:d0:dc: 47:5d:4c:df:9d:30:96:8a:87:50:01:b9:0b:9d:85: f7:30:30:ea:1f:a8:3a:22:41:7f:ee:14:e3:83:62: 35:ef:1f:ed:85:81:e1:6f:6f:2a:de:a8:ae:99:e8: 53:e2:c9:83:9f:f4:95:2f:0b:33:df:b8:dd:0b:1f: 8e:78:8c:b0:b7:88:01:d5:95:f6:4c:82:36:bb:a9: 35:f2:cb:a8:9e:94:07:ab:03:4c:35:8b:58:9a:c2: f2:31:d2:8c:53:c2:4a:16:25:21:61:32:dd:b0:de: 04:0f:5b:58:e9:d4:81:5f:64:c8:31:e0:ac:6c:28: 95:d8:14:10:6a:2e:b3:d2:a8:a2:c1:29:a1:f1:8b: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C1:FD:38:B6:07:8C:08:98:DF:73:D9:44:4F:78:27:3F:11:84:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2e456295-34ec-3199-a545-40ae7c08e19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d7:f5:d3:0f:f3:c4:73:59:9b:69:a5:41:c4:ad:10:63:37: 23:20:5a:87:20:ba:0d:00:9f:5d:da:2e:c2:a6:20:f0:80:b6: be:7e:ed:6c:fb:94:ed:6e:aa:09:69:4b:98:ff:e4:9b:86:c5: 83:74:21:b0:16:6e:26:95:3f:e9:2e:9b:50:96:dd:3b:27:b3: 0a:27:c9:2c:ab:14:c3:0b:72:78:f5:94:77:ae:ad:e3:47:f2: 4b:93:9b:4a:87:48:dc:8b:0e:4b:6c:69:3d:36:34:1b:9b:0f: f0:cc:99:06:2f:1d:90:e3:2f:fc:45:64:07:c5:c6:5b:fe:89: 8e:d0:50:c2:d0:02:49:c8:cc:02:a8:49:ee:be:1f:dd:2c:8c: 75:0d:f1:c4:36:09:b8:4e:e8:e4:44:f7:28:c8:53:88:5b:92: e1:40:ec:59:b4:59:c1:8c:60:eb:50:16:d3:6f:97:71:f0:aa: 95:11:1e:bb:53:2a:ab:40:39:48:92:39:85:d9:88:5b:ec:0e: 1b:4e:fc:95:1c:37:ed:62:3e:94:5b:de:94:09:44:c5:c8:94: c8:bb:93:c0:d5:81:41:34:e0:26:83:b3:63:b4:3e:b2:42:c2: 82:82:72:50:46:72:49:42:b0:d9:f9:a6:78:77:86:19:84:98: 48:00:40:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z9FXyqN5PqM9M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk Y2IyNDA4MGQtYjhmYy00MzUyLWIyNmUtZjQ1NDRjOWEyNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmad0Tnz3vBRBDVDiUeF9O3un+gJfefcEH6UA 9CUyQKojsO5inMli4nJz76uuc0pKQPEmaRTZqBCr6g8WHGmpcMEafwqWZf+pBmuB OdfVcdoMvhKN2cgUhP4sWTK+gbwc8Mgy/9cgXeVLsQ9dqNIEQBoLBYgW0NxHXUzf nTCWiodQAbkLnYX3MDDqH6g6IkF/7hTjg2I17x/thYHhb28q3qiumehT4smDn/SV Lwsz37jdCx+OeIywt4gB1ZX2TII2u6k18suonpQHqwNMNYtYmsLyMdKMU8JKFiUh YTLdsN4ED1tY6dSBX2TIMeCsbCiV2BQQai6z0qiiwSmh8YuRlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIvB/Ti2B4wImN9z2URPeCc/EYRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMmU0NTYyOTUtMzRlYy0z MTk5LWE1NDUtNDBhZTdjMDhlMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMySMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfX9dMP88RzWZtppUHErRBjNyMgWocgug0An13aLsKmIPCAtr5+7Wz7 lO1uqglpS5j/5JuGxYN0IbAWbiaVP+kum1CW3TsnswonySyrFMMLcnj1lHeureNH 8kuTm0qHSNyLDktsaT02NBubD/DMmQYvHZDjL/xFZAfFxlv+iY7QUMLQAknIzAKo Se6+H90sjHUN8cQ2CbhO6ORE9yjIU4hbkuFA7Fm0WcGMYOtQFtNvl3HwqpURHrtT KqtAOUiSOYXZiFvsDhtO/JUcN+1iPpRb3pQJRMXIlMi7k8DVgUE04CaDs2O0PrJC woKCclBGcklCsNn5pnh3hhmEmEgAQGU= -----END CERTIFICATE-----Generated at Mon Apr 13 14:36:33 2026 by rpki-client