$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa File: 40454913-b31e-3ac5-9bbb-95727c0511ad.roa (raw, json) Hash identifier: nhl48zYTzTwzMzdDZ7oIK53IesSZmDTQC1IFPpzOkGM= Subject key identifier: A9:4F:60:36:7E:D2:D2:65:F7:6A:87:46:37:61:25:03:6D:02:7C:78 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F75016FD8FB53D00C33380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.91.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:50:16:fd:8f:b5:3d:00:c3:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=d9e7e310-7da3-4dcd-aadc-2df833b50ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:54:4e:21:1a:c8:f6:07:70:66:d7:66:f5:82: ad:ee:36:b6:bd:da:d1:fa:87:33:be:ce:14:59:82: 69:86:d9:ce:9c:9f:ef:d4:4d:7c:93:12:8f:c9:f4: 48:97:4d:fb:bc:9b:62:8d:23:85:ab:5c:1d:0b:d9: a5:d9:ae:d1:d5:22:e4:dd:c7:d7:c3:78:3b:88:01: 2d:12:43:18:e8:95:38:03:29:9f:d4:e9:b5:c4:e2: 50:ad:14:0b:82:5b:89:0a:70:83:83:44:31:69:e2: 30:ee:28:28:51:60:36:2a:dc:84:91:d9:bd:c1:f1: 5c:e1:19:90:f0:f4:9b:12:5f:f5:80:14:17:29:13: be:32:cf:58:9d:8c:8e:19:be:2e:e3:38:a7:cc:ae: 41:53:a2:af:ad:87:37:27:fc:e4:0f:23:13:8a:f9: 84:30:0e:11:58:1b:66:e3:6d:0f:8d:d6:79:b0:4d: d1:05:41:fc:5a:09:30:50:05:4b:0b:42:dd:11:8e: b9:f1:b9:58:54:8c:df:30:1c:85:95:a2:bc:79:7d: 64:9c:6b:bf:dc:bb:01:13:eb:43:c2:42:db:ba:2a: db:d8:d2:a2:0f:8b:ea:ae:90:18:fc:f9:a1:a2:32: 63:04:55:7d:c4:d1:c3:c3:17:5a:7b:37:64:cf:e7: 32:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:4F:60:36:7E:D2:D2:65:F7:6A:87:46:37:61:25:03:6D:02:7C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:25:4a:45:7b:b0:80:2d:b0:61:93:2e:81:be:4b:50:f2:bf: 42:ab:6b:8b:0f:08:7b:21:7b:88:5c:45:4d:49:e2:d5:a4:f5: 0e:33:36:d6:0d:5b:13:be:70:20:cf:a9:f4:e5:10:39:66:2c: 17:33:c5:ac:88:21:8b:c0:84:c0:51:7d:76:be:4a:6d:17:50: a8:1e:d5:3b:c9:7f:c0:cc:73:59:74:1f:ba:42:1b:9b:e9:1a: 98:d9:55:e0:27:fa:03:4a:ca:ac:6f:c2:c4:d7:24:e6:88:2e: 32:06:c5:55:83:73:e9:e0:20:4f:82:4a:d0:0e:31:d4:20:ed: c4:c7:d7:99:93:50:09:14:8b:6c:61:70:67:dc:8a:b0:6f:2c: 0c:45:a0:b5:eb:9e:0d:ba:4d:6f:7c:bd:c7:53:f0:c6:19:e8: 9f:48:32:ac:5c:99:81:a7:d2:64:47:36:dc:7d:c3:be:9a:4c: 4e:22:b7:90:44:dc:e3:e3:c2:9f:ba:ca:c7:78:9c:43:3c:8a: ee:18:6a:98:2d:63:f4:66:77:6d:df:70:4f:46:61:61:23:88: ab:1e:c8:2a:a6:5a:17:72:cd:14:70:3a:0c:e2:23:16:64:27: 4d:6b:53:42:36:49:da:67:2b:a9:bb:eb:6f:be:1e:26:05:7c: 15:b7:81:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl91AW/Y+1PQDDM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk ZDllN2UzMTAtN2RhMy00ZGNkLWFhZGMtMmRmODMzYjUwYmE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VROIRrI9gdwZtdm9YKt7ja2vdrR+oczvs4U WYJphtnOnJ/v1E18kxKPyfRIl037vJtijSOFq1wdC9ml2a7R1SLk3cfXw3g7iAEt EkMY6JU4Aymf1Om1xOJQrRQLgluJCnCDg0QxaeIw7igoUWA2KtyEkdm9wfFc4RmQ 8PSbEl/1gBQXKRO+Ms9YnYyOGb4u4zinzK5BU6KvrYc3J/zkDyMTivmEMA4RWBtm 420PjdZ5sE3RBUH8WgkwUAVLC0LdEY658blYVIzfMByFlaK8eX1knGu/3LsBE+tD wkLbuirb2NKiD4vqrpAY/PmhojJjBFV9xNHDwxdaezdkz+cyZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKlPYDZ+0tJl92qHRjdhJQNtAnx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDA0NTQ5MTMtYjMxZS0z YWM1LTliYmItOTU3MjdjMDUxMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQlSkV7sIAtsGGTLoG+S1Dyv0Kra4sPCHshe4hcRU1J4tWk9Q4zNtYN WxO+cCDPqfTlEDlmLBczxayIIYvAhMBRfXa+Sm0XUKge1TvJf8DMc1l0H7pCG5vp GpjZVeAn+gNKyqxvwsTXJOaILjIGxVWDc+ngIE+CStAOMdQg7cTH15mTUAkUi2xh cGfcirBvLAxFoLXrng26TW98vcdT8MYZ6J9IMqxcmYGn0mRHNtx9w76aTE4it5BE 3OPjwp+6ysd4nEM8iu4YapgtY/Rmd23fcE9GYWEjiKseyCqmWhdyzRRwOgziIxZk J01rU0I2SdpnK6m762++HiYFfBW3gRs= -----END CERTIFICATE-----Generated at Thu Feb 26 05:06:30 2026 by rpki-client