$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa File: 4e64faac-4ed8-338b-8d6d-9245653b4469.roa (raw, json) Hash identifier: d/SmW+h5AN52V51YaBnytzEkTcaPkB1EB0Lux0n5eWI= Subject key identifier: 15:CB:B4:25:F0:DE:65:71:00:A0:81:7E:9B:88:EE:C6:D2:98:F4:21 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E5FDF5706CFFCC10B862EE680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa Signing time: Fri 03 Jul 2026 09:00:12 +0000 ROA not before: Fri 03 Jul 2026 09:00:12 +0000 ROA not after: Thu 01 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.91.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:5f:df:57:06:cf:fc:c1:0b:86:2e:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 3 09:00:12 2026 GMT Not After : Oct 1 09:00:12 2026 GMT Subject: CN=5c7b248c-4d10-4749-baa9-03cec202bf11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0c:ce:fa:05:6b:d4:13:60:3d:50:4d:f2:14: 4d:e8:a9:c6:3c:24:02:ed:2f:22:7f:a1:d5:79:54: 70:52:c7:3a:25:0c:c4:5c:48:b5:42:7a:a6:a5:5e: 31:bf:86:43:9b:0a:6f:d9:70:c0:a9:79:74:f5:b6: 44:67:2e:f2:43:c6:5b:bc:12:23:fd:0e:a3:27:0d: 93:42:17:bc:36:62:d7:e2:d3:24:dc:c4:d2:fe:16: b7:ac:dc:26:0d:b3:1f:fa:14:fb:b3:fc:0c:70:50: 6c:1e:b6:77:e1:c5:73:5f:70:71:96:47:b3:f6:2d: e7:62:89:eb:59:f9:44:4a:4f:9d:c3:43:8b:35:55: 53:29:39:c3:cd:e5:22:aa:fe:98:a7:23:5b:0b:57: 4f:6c:06:ad:0a:c4:e7:70:d1:08:71:5e:05:2a:02: 3f:3e:39:ea:24:3f:92:ec:1b:e2:f4:48:5d:53:28: b0:dd:c4:d9:23:ab:02:f8:89:a4:08:f5:68:64:9c: 95:3b:79:bb:ad:da:df:a8:e6:4d:93:dd:f0:ff:82: 2c:a1:d8:85:1f:b4:51:7a:96:90:6b:92:7b:e3:3b: 82:36:6f:c9:de:34:54:f6:35:6f:26:fe:23:bb:f1: 04:ec:d4:7e:12:ad:c5:99:e3:4c:d0:23:32:7b:5e: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:CB:B4:25:F0:DE:65:71:00:A0:81:7E:9B:88:EE:C6:D2:98:F4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4e64faac-4ed8-338b-8d6d-9245653b4469.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.74.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:08:2c:66:fd:3f:55:22:01:e7:db:e5:93:8c:1a:56:f4:6a: d0:ff:ca:b7:26:2d:3f:95:63:b2:36:54:e0:94:dd:43:78:91: b5:ba:52:db:14:c3:c0:da:b4:74:73:5d:28:2d:51:65:6a:24: 4c:79:fb:19:ae:c0:3b:42:44:d7:9a:7f:3a:ad:9f:4d:07:d1: 61:b4:35:1a:94:06:d4:60:48:28:40:51:96:bd:75:8d:16:b6: 34:c7:49:aa:9f:76:52:54:bb:a0:90:eb:b8:b0:d3:cd:ac:0f: 90:c1:4e:3d:03:dc:75:d7:8a:f6:0d:63:9b:6f:d9:45:e9:15: db:ce:48:d7:56:96:9a:df:c5:e2:b3:8f:dc:f6:f9:6f:e7:fa: 97:db:ca:1f:eb:9a:db:f2:41:01:db:83:3e:13:c7:44:cf:9d: 5c:e1:6d:c2:05:a2:ee:88:f4:a9:72:00:05:6d:3f:0d:a6:e6: 4b:e1:22:3f:ab:7d:85:b8:9c:90:86:65:bc:fd:dc:e3:97:09: 4e:8d:13:63:e6:60:21:f2:af:ce:9a:8b:cf:b4:89:b9:8f:67: 0c:9b:4a:f1:2b:8c:e6:8c:37:63:d6:fc:82:ed:35:fe:b1:eb: 71:01:3a:1d:63:5b:64:ba:22:a9:aa:a9:b5:fe:2f:01:4c:7a: 59:13:2c:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5f31cGz/zBC4Yu5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwMzA5MDAxMloXDTI2MTAwMTA5MDAxMlowLzEtMCsGA1UEAxMk NWM3YjI0OGMtNGQxMC00NzQ5LWJhYTktMDNjZWMyMDJiZjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQzO+gVr1BNgPVBN8hRN6KnGPCQC7S8if6HV eVRwUsc6JQzEXEi1QnqmpV4xv4ZDmwpv2XDAqXl09bZEZy7yQ8ZbvBIj/Q6jJw2T Qhe8NmLX4tMk3MTS/ha3rNwmDbMf+hT7s/wMcFBsHrZ34cVzX3Bxlkez9i3nYonr WflESk+dw0OLNVVTKTnDzeUiqv6YpyNbC1dPbAatCsTncNEIcV4FKgI/PjnqJD+S 7Bvi9EhdUyiw3cTZI6sC+ImkCPVoZJyVO3m7rdrfqOZNk93w/4IsodiFH7RRepaQ a5J74zuCNm/J3jRU9jVvJv4ju/EE7NR+Eq3FmeNM0CMye14wdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXLtCXw3mVxAKCBfpuI7sbSmPQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGU2NGZhYWMtNGVkOC0z MzhiLThkNmQtOTI0NTY1M2I0NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0ILGb9P1UiAefb5ZOMGlb0atD/yrcmLT+VY7I2VOCU3UN4kbW6UtsU w8DatHRzXSgtUWVqJEx5+xmuwDtCRNeafzqtn00H0WG0NRqUBtRgSChAUZa9dY0W tjTHSaqfdlJUu6CQ67iw082sD5DBTj0D3HXXivYNY5tv2UXpFdvOSNdWlprfxeKz j9z2+W/n+pfbyh/rmtvyQQHbgz4Tx0TPnVzhbcIFou6I9KlyAAVtPw2m5kvhIj+r fYW4nJCGZbz93OOXCU6NE2PmYCHyr86ai8+0ibmPZwybSvErjOaMN2PW/ILtNf6x 63EBOh1jW2S6IqmqqbX+LwFMelkTLAI= -----END CERTIFICATE-----Generated at Mon Jul 13 02:46:34 2026 by rpki-client