$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa File: 4b99281a-91e9-3d65-adbe-275bca80bc04.roa (raw, json) Hash identifier: wDqoBaJXANRIf2mBVnIw1ewh/kcathKGe02znw7Zf4A= Subject key identifier: 1E:F0:46:27:1A:E0:FD:D1:C0:8D:7D:B8:E2:A5:6E:B9:D2:2E:4E:04 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6C6F7416463279692ED36990 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa Signing time: Tue 07 Jul 2026 21:00:13 +0000 ROA not before: Tue 07 Jul 2026 21:00:13 +0000 ROA not after: Mon 05 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 140.204.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6c:6f:74:16:46:32:79:69:2e:d3:69:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 21:00:13 2026 GMT Not After : Oct 5 21:00:13 2026 GMT Subject: CN=aa2be728-e52f-4281-9f40-eb4fc8aa987f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:16:10:ae:5d:66:df:c1:12:1e:c8:7b:b8: 23:71:09:08:77:e3:d9:84:c0:07:6c:d5:7d:46:70: 08:3a:52:e5:4a:ad:7d:87:1f:98:9a:f2:92:80:48: d6:bc:dc:c9:92:2d:dd:f7:69:63:b8:7c:71:08:2e: ab:fe:09:35:86:28:3d:f7:03:64:6d:22:d7:60:b9: 1a:f9:61:2e:47:82:19:8c:c0:b1:87:a1:e0:e6:d6: 79:63:2e:f1:59:24:a9:7e:7e:ab:77:24:7a:13:9a: 5f:58:d3:a8:d9:ae:1d:5d:8c:11:74:63:f7:5d:b3: 6c:9f:7c:0a:76:96:08:9a:c4:0a:ab:68:02:11:b6: 0f:5c:df:5f:c1:57:42:12:18:cd:28:db:2f:9a:cf: 3e:40:cf:a3:cd:05:86:58:20:c5:04:ef:1c:bc:a5: ea:2a:46:b6:ff:96:da:ae:bb:c0:f6:51:23:4e:ed: 76:7e:cf:fb:6d:a6:e9:75:87:82:a0:24:bd:89:07: 9c:c8:9b:99:c2:36:b4:a3:e5:b6:32:74:fe:ae:a5: 92:68:33:4f:0f:b1:be:69:44:fd:b0:e0:76:8a:f3: e5:91:f2:92:dc:e1:58:d3:44:90:7f:e7:6e:02:47: 58:d5:75:42:a8:1d:dd:b1:11:85:63:c1:ea:c7:45: 57:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F0:46:27:1A:E0:FD:D1:C0:8D:7D:B8:E2:A5:6E:B9:D2:2E:4E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4b99281a-91e9-3d65-adbe-275bca80bc04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:6c:e8:7f:3c:f1:36:c2:4d:8c:e4:d9:bf:99:87:ec:f0:d9: ec:89:f4:eb:2e:f5:fe:60:a8:4d:5b:a0:82:ae:ca:00:4a:ce: 77:3b:e9:43:6e:b5:95:80:32:1e:b0:d0:0f:b2:30:49:5c:8a: a4:aa:bf:e5:18:5c:86:07:92:77:63:72:c2:be:8e:7c:9d:0c: 51:bf:43:ff:a0:f8:c1:3e:6e:dd:b2:d8:71:4b:c3:1f:59:64: 4c:a5:a1:7d:37:66:6d:eb:0d:f0:de:ec:34:66:8f:57:0a:a6: 10:54:00:e9:6e:12:7f:3d:9c:5a:a8:2c:9f:a6:6f:c7:87:86: fd:ea:2e:c9:b0:68:2b:b5:91:2a:d4:5e:40:f4:f0:28:26:4f: 0b:94:d5:2d:e3:e4:f3:05:5f:6b:3c:5b:1a:c4:1a:73:56:4a: 65:2c:ee:6a:3d:56:73:24:58:cb:8a:aa:d3:bb:da:eb:4c:a0: fd:f1:a2:f3:04:8f:f7:c6:a2:ca:75:de:1f:72:b4:3c:be:6c: 2f:45:70:e7:c2:fb:2e:5c:37:8b:d1:11:37:58:c8:f2:9e:02: 84:b9:3a:80:fc:fb:07:0d:47:4e:8c:5f:78:28:1f:a9:82:c6: 68:32:eb:aa:21:d3:54:68:dd:81:91:13:b4:bf:87:94:2d:39: 7a:49:f9:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5sb3QWRjJ5aS7TaZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzIxMDAxM1oXDTI2MTAwNTIxMDAxM1owLzEtMCsGA1UEAxMk YWEyYmU3MjgtZTUyZi00MjgxLTlmNDAtZWI0ZmM4YWE5ODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAoWEK5dZt/BEh7Ie7gjcQkId+PZhMAHbNV9 RnAIOlLlSq19hx+YmvKSgEjWvNzJki3d92ljuHxxCC6r/gk1hig99wNkbSLXYLka +WEuR4IZjMCxh6Hg5tZ5Yy7xWSSpfn6rdyR6E5pfWNOo2a4dXYwRdGP3XbNsn3wK dpYImsQKq2gCEbYPXN9fwVdCEhjNKNsvms8+QM+jzQWGWCDFBO8cvKXqKka2/5ba rrvA9lEjTu12fs/7babpdYeCoCS9iQecyJuZwja0o+W2MnT+rqWSaDNPD7G+aUT9 sOB2ivPlkfKS3OFY00SQf+duAkdY1XVCqB3dsRGFY8Hqx0VXXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB7wRica4P3RwI19uOKlbrnSLk4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGI5OTI4MWEtOTFlOS0z ZDY1LWFkYmUtMjc1YmNhODBiYzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFs6H888TbCTYzk2b+Zh+zw2eyJ9Osu9f5gqE1boIKuygBKznc76UNu tZWAMh6w0A+yMElciqSqv+UYXIYHkndjcsK+jnydDFG/Q/+g+ME+bt2y2HFLwx9Z ZEyloX03Zm3rDfDe7DRmj1cKphBUAOluEn89nFqoLJ+mb8eHhv3qLsmwaCu1kSrU XkD08CgmTwuU1S3j5PMFX2s8WxrEGnNWSmUs7mo9VnMkWMuKqtO72utMoP3xovME j/fGosp13h9ytDy+bC9FcOfC+y5cN4vRETdYyPKeAoS5OoD8+wcNR06MX3goH6mC xmgy66oh01Ro3YGRE7S/h5QtOXpJ+fA= -----END CERTIFICATE-----Generated at Mon Jul 13 02:52:07 2026 by rpki-client