$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa File: 6790a335-83f3-3721-9670-94018063b0da.roa (raw, json) Hash identifier: GGEpDF4i82mDnz/HEauyjbR1SNKt9X1drQ3+2PDhy4o= Subject key identifier: EE:6E:38:17:82:2E:32:E4:E0:22:42:4B:14:B3:BC:62:CA:1C:85:4F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC7EE7FF4E67826F94F920 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.91.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7e:e7:ff:4e:67:82:6f:94:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=cdab9384-f006-4cad-9195-9058e6590ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:79:c6:47:94:12:be:ca:36:25:d9:08:73: b7:43:1d:e1:d1:72:7f:f3:bf:1f:22:bd:8d:b1:41: a1:ca:cb:a7:7a:65:ca:0b:b3:54:87:81:d6:44:87: 17:68:84:82:c3:84:93:a9:e0:b9:77:cc:dc:e6:9b: 16:a7:86:4e:76:6f:c8:75:66:eb:e0:48:18:23:ca: f1:7a:8d:47:ee:26:9c:c5:35:62:45:8c:ba:75:ad: 0e:01:6c:cc:5c:bb:a4:37:c9:43:bb:b3:0e:de:63: b3:d4:58:10:23:81:2a:4d:e8:35:9f:11:7a:19:37: b8:64:d2:7a:cd:eb:6b:4c:e0:2a:44:43:ed:1b:8e: 52:f1:b7:2e:c4:ac:6f:f5:34:cd:dc:40:3b:56:27: f6:d3:a7:21:80:51:78:6b:ec:b7:18:f6:d3:01:e0: ed:72:5e:d2:be:ac:f7:f5:47:e6:0e:e8:da:6d:26: a1:c4:a3:ee:35:72:cf:da:27:f8:55:d6:fc:7e:1a: ec:f4:0d:d0:60:9e:9f:67:77:7d:11:43:06:2f:6a: 23:1d:e7:22:60:fa:5c:66:7f:7a:85:47:01:98:b5: a9:a2:8b:66:2d:f4:58:0f:06:94:05:dd:49:d5:cf: 99:9c:78:28:0a:be:55:cf:88:4a:ff:f3:99:8b:74: 74:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6E:38:17:82:2E:32:E4:E0:22:42:4B:14:B3:BC:62:CA:1C:85:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6790a335-83f3-3721-9670-94018063b0da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a4:25:8d:cb:2f:c0:90:99:1a:29:df:05:14:ed:e0:fc:b1: 41:0c:ce:48:fc:0d:52:43:84:a6:24:69:34:a8:82:5f:77:97: 2b:fb:b9:1b:ba:69:ff:54:40:3d:8c:a8:32:cf:72:a1:3a:98: 36:0d:3d:08:85:4c:aa:57:b4:41:88:90:50:21:2e:6c:fa:8d: e9:8a:ea:94:b6:2d:4c:ea:f1:8e:04:ee:34:4a:71:09:b2:e9: 84:22:6e:c2:fa:e7:e7:70:85:96:a3:44:b0:c2:2c:19:65:2c: f1:22:96:ec:90:2c:ef:d5:b0:4a:0f:eb:81:10:59:37:32:87: c0:11:95:e9:c2:60:33:06:33:62:b4:9b:99:4d:28:12:30:35: 06:36:9a:0e:0c:57:af:ef:ac:4e:98:b4:d1:6e:ce:86:d1:82: 2c:b1:b6:d3:6b:1f:96:13:27:43:af:91:a9:ab:a7:07:20:3f: 4b:ac:8e:7c:b8:c3:97:5b:4d:f6:59:a1:71:d5:e2:c4:5d:4c: 04:2e:bf:61:bb:13:0b:64:5f:0d:64:da:ee:af:05:05:b7:ef: 3b:97:46:57:46:c7:fc:62:4a:49:24:a1:33:e9:b0:27:46:21: 76:4a:07:8d:b3:bd:a3:a0:bc:01:34:99:38:5b:46:7d:d9:6c: be:d5:67:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvH7n/05ngm+U+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Y2RhYjkzODQtZjAwNi00Y2FkLTkxOTUtOTA1OGU2NTkwYWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7p5xkeUEr7KNiXZCHO3Qx3h0XJ/878fIr2N sUGhysunemXKC7NUh4HWRIcXaISCw4STqeC5d8zc5psWp4ZOdm/IdWbr4EgYI8rx eo1H7iacxTViRYy6da0OAWzMXLukN8lDu7MO3mOz1FgQI4EqTeg1nxF6GTe4ZNJ6 zetrTOAqREPtG45S8bcuxKxv9TTN3EA7Vif206chgFF4a+y3GPbTAeDtcl7Svqz3 9UfmDujabSahxKPuNXLP2if4Vdb8fhrs9A3QYJ6fZ3d9EUMGL2ojHeciYPpcZn96 hUcBmLWpootmLfRYDwaUBd1J1c+ZnHgoCr5Vz4hK//OZi3R08wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5uOBeCLjLk4CJCSxSzvGLKHIVPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjc5MGEzMzUtODNmMy0z NzIxLTk2NzAtOTQwMTgwNjNiMGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOkJY3LL8CQmRop3wUU7eD8sUEMzkj8DVJDhKYkaTSogl93lyv7uRu6 af9UQD2MqDLPcqE6mDYNPQiFTKpXtEGIkFAhLmz6jemK6pS2LUzq8Y4E7jRKcQmy 6YQibsL65+dwhZajRLDCLBllLPEiluyQLO/VsEoP64EQWTcyh8ARlenCYDMGM2K0 m5lNKBIwNQY2mg4MV6/vrE6YtNFuzobRgiyxttNrH5YTJ0OvkamrpwcgP0usjny4 w5dbTfZZoXHV4sRdTAQuv2G7EwtkXw1k2u6vBQW37zuXRldGx/xiSkkkoTPpsCdG IXZKB42zvaOgvAE0mThbRn3ZbL7VZ3E= -----END CERTIFICATE-----Generated at Thu Feb 26 03:31:43 2026 by rpki-client