$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa File: 3bbc33c2-e895-32ec-b620-bb7a98103477.roa (raw, json) Hash identifier: lTOyDGn/ZkyznuQ6NpnLims4MOAfI4HfI7UStOHYHV0= Subject key identifier: 17:72:CD:26:C0:34:94:86:30:E9:AD:2D:A6:88:43:27:1A:43:E8:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAB8C48546340FC1A35D86B80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa Signing time: Wed 28 Jan 2026 02:00:29 +0000 ROA not before: Wed 28 Jan 2026 02:00:29 +0000 ROA not after: Tue 28 Apr 2026 01:00:29 +0000 asID: 31898 IP address blocks: 140.204.140.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:8c:48:54:63:40:fc:1a:35:d8:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 02:00:29 2026 GMT Not After : Apr 28 01:00:29 2026 GMT Subject: CN=870deadf-a0ad-48db-88a3-0d6504dce3d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:11:ce:18:84:24:31:99:ca:94:08:14:b4:13: b8:b5:f5:7b:a8:89:ad:b6:94:d4:be:43:d6:7f:48: d2:fe:92:ce:cf:e8:0f:82:a1:80:e7:1e:10:62:30: 07:59:5f:fd:e2:22:3c:dd:f0:8d:91:02:8f:aa:cd: 45:40:12:f7:9e:a9:dc:7c:3a:7c:eb:b3:6f:41:7f: 96:3f:0e:0b:f1:6b:93:07:cc:4c:de:5b:08:c1:a5: 0b:70:e7:a6:2e:d9:be:88:90:5d:44:0d:78:fb:a5: b5:f2:9c:4f:11:5a:bf:16:69:ae:78:83:f4:90:d7: db:03:83:a6:1b:d9:01:30:26:98:1e:4a:ea:68:32: 49:f3:17:d8:35:2b:37:57:63:36:c4:36:10:ce:ef: 15:93:f7:ae:e8:dc:3d:73:83:f1:84:49:6e:7e:a3: e0:08:37:23:bf:a8:75:aa:7b:96:f7:4a:3c:c7:c8: 85:30:63:52:a6:13:b8:77:68:8b:d0:8e:29:90:4f: ba:2a:f6:01:44:6c:24:a9:0e:bd:b4:49:19:eb:4b: 1c:38:a9:5c:8c:13:6a:4b:37:ea:de:0c:d2:cd:40: b0:59:19:42:70:07:2c:6e:24:91:7c:44:47:e0:f8: 60:dc:65:82:f1:aa:87:c1:6f:51:fc:21:cb:22:ee: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:72:CD:26:C0:34:94:86:30:E9:AD:2D:A6:88:43:27:1A:43:E8:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3bbc33c2-e895-32ec-b620-bb7a98103477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:66:46:e4:fa:b1:ac:bf:6b:73:52:d6:7b:fa:01:19:dc:22: 2a:bd:1a:92:e2:ef:12:f4:1b:a3:32:59:b8:af:11:3b:ab:88: 49:dd:75:55:16:9d:7d:a6:45:25:c1:26:b0:5b:be:b3:84:65: d4:b8:9d:c4:8b:99:75:36:d8:36:18:e7:aa:44:76:16:08:c6: 7b:54:0c:34:9c:f4:28:dc:95:aa:79:4a:8b:4b:2a:46:06:0a: 73:b8:3a:01:8c:23:20:19:ee:9b:2f:2d:ab:84:3b:5c:a2:59: ae:16:bd:58:f6:50:a6:71:7f:6f:1e:38:f8:67:24:29:f8:49: 39:63:22:03:de:2b:ba:3a:55:ab:61:1c:f3:07:ac:27:2e:05: fd:79:91:6b:8c:fe:1b:bc:71:a2:d1:55:c2:35:21:d4:79:c2: cb:87:c8:32:22:dd:cb:c5:de:0d:28:31:cd:bb:cf:4e:ae:b9: ab:bd:b7:cd:4e:45:f8:39:12:56:e1:af:6e:f7:61:4b:21:5c: 6d:76:eb:01:ae:e2:2b:3e:d7:64:c8:4f:80:77:31:f7:06:9a: 14:21:73:14:70:31:27:39:99:29:9e:2c:34:56:16:be:d6:81: e7:c5:31:80:bd:8a:3b:50:eb:08:94:f5:c9:d7:5d:67:de:a8: c4:5d:63:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrjEhUY0D8GjXYa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk ODcwZGVhZGYtYTBhZC00OGRiLTg4YTMtMGQ2NTA0ZGNlM2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBHOGIQkMZnKlAgUtBO4tfV7qImttpTUvkPW f0jS/pLOz+gPgqGA5x4QYjAHWV/94iI83fCNkQKPqs1FQBL3nqncfDp867NvQX+W Pw4L8WuTB8xM3lsIwaULcOemLtm+iJBdRA14+6W18pxPEVq/FmmueIP0kNfbA4Om G9kBMCaYHkrqaDJJ8xfYNSs3V2M2xDYQzu8Vk/eu6Nw9c4PxhElufqPgCDcjv6h1 qnuW90o8x8iFMGNSphO4d2iL0I4pkE+6KvYBRGwkqQ69tEkZ60scOKlcjBNqSzfq 3gzSzUCwWRlCcAcsbiSRfERH4Phg3GWC8aqHwW9R/CHLIu5QmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdyzSbANJSGMOmtLaaIQycaQ+jYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2JiYzMzYzItZTg5NS0z MmVjLWI2MjAtYmI3YTk4MTAzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChmRuT6say/a3NS1nv6ARncIiq9GpLi7xL0G6MyWbivETuriEnddVUW nX2mRSXBJrBbvrOEZdS4ncSLmXU22DYY56pEdhYIxntUDDSc9Cjclap5SotLKkYG CnO4OgGMIyAZ7psvLauEO1yiWa4WvVj2UKZxf28eOPhnJCn4STljIgPeK7o6Vath HPMHrCcuBf15kWuM/hu8caLRVcI1IdR5wsuHyDIi3cvF3g0oMc27z06uuau9t81O Rfg5Elbhr273YUshXG126wGu4is+12TIT4B3MfcGmhQhcxRwMSc5mSmeLDRWFr7W gefFMYC9ijtQ6wiU9cnXXWfeqMRdY0U= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:02 2026 by rpki-client