$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b7eccad-ddf3-337e-a811-458b21869002.roa File: 7b7eccad-ddf3-337e-a811-458b21869002.roa (raw, json) Hash identifier: u0U1Y2ScAcLaMj7r5gSNElvSd1mgtKSzVEY1LWtzank= Subject key identifier: 0E:62:39:A5:46:01:7C:3E:E8:6C:8E:4E:3B:F0:61:72:A7:94:73:07 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CA5F751C81B113B3425EE5040 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b7eccad-ddf3-337e-a811-458b21869002.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.204.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:51:c8:1b:11:3b:34:25:ee:50:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=a1d8d73e-bf5c-46d8-9565-b5e5b5cc5592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:44:7f:73:88:df:e7:ad:31:7a:31:52:f1:c4: c1:0c:71:a3:1d:7e:b0:30:78:6c:11:05:5e:12:87: 22:fd:86:82:4d:af:46:93:72:68:a6:a6:ca:06:96: e5:63:59:2a:70:09:55:2d:1d:f8:d7:32:59:d1:76: 51:1c:9e:18:71:cb:9c:c5:11:d3:40:90:a2:c9:aa: b9:08:17:30:70:31:7c:e2:2b:2f:fb:86:a0:73:66: f8:c2:4e:52:9f:85:df:8e:fc:9e:db:aa:7f:f0:f5: a1:1b:0f:a5:14:04:43:a4:92:8b:e6:0c:92:6d:8e: 9f:1f:64:94:19:fc:8e:15:b7:8e:18:8e:12:7b:d0: bb:01:21:76:7b:1b:ce:d3:4c:83:ad:7a:24:4b:ba: 6b:42:49:53:ab:c1:b6:a7:d3:f7:76:4f:af:17:0e: 3e:55:14:f3:4f:6e:64:48:ce:ee:75:bf:77:10:ad: 96:e7:eb:e8:5c:58:c1:a5:42:ad:61:a7:22:d6:e4: ae:b8:45:cf:7b:86:8a:a4:3f:47:40:5c:55:59:df: f6:c0:72:49:a7:a0:e8:9f:96:4d:95:34:f7:4c:40: bd:6b:ce:c1:e9:71:49:c0:54:42:8b:35:e2:0a:b5: ed:01:e6:e9:85:30:3e:de:99:34:4c:86:70:6a:28: 1f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:62:39:A5:46:01:7C:3E:E8:6C:8E:4E:3B:F0:61:72:A7:94:73:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7b7eccad-ddf3-337e-a811-458b21869002.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:1a:a9:05:78:8e:f8:98:5b:b7:62:91:28:95:a5:d7:97:2c: a9:49:c4:0c:97:56:39:af:75:f0:38:52:b8:e0:7d:f5:de:30: f2:e5:69:a5:04:16:32:86:23:20:9e:ec:ee:fc:c3:ed:b4:ec: 85:41:3a:bd:db:73:a6:01:4e:a0:5f:00:75:df:84:97:b5:b9: df:12:d5:a6:11:ce:69:e0:27:bd:da:99:18:94:f0:e7:34:7a: 3b:d4:16:7f:1c:7f:93:35:90:6f:6b:a3:83:09:88:57:f0:6d: a5:3e:42:9a:88:6e:d6:60:bb:17:34:a8:33:80:bc:28:0e:0a: dc:da:6a:47:38:8c:ea:6d:1f:9f:a0:88:39:59:6d:d4:c8:99: ce:79:99:31:82:34:e9:cb:18:41:90:f3:40:a4:e2:37:0e:5f: dd:19:55:8c:a8:a9:54:ed:0c:bd:78:25:32:f3:21:99:01:aa: 1f:6c:af:0e:02:b4:58:52:99:39:8e:5a:93:bb:c8:60:d3:19: 83:e0:66:5b:52:71:b5:0a:5c:70:65:94:35:80:b1:95:1f:dd: c9:a9:77:84:2b:ce:fb:94:f0:6b:5d:d9:21:f0:25:1a:cc:c1: 1d:30:5e:09:a2:93:4c:35:fe:87:c2:4b:a6:b2:56:9d:60:24: 0c:de:6b:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl91HIGxE7NCXuUEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk YTFkOGQ3M2UtYmY1Yy00NmQ4LTk1NjUtYjVlNWI1Y2M1NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkR/c4jf560xejFS8cTBDHGjHX6wMHhsEQVe Eoci/YaCTa9Gk3JopqbKBpblY1kqcAlVLR341zJZ0XZRHJ4YccucxRHTQJCiyaq5 CBcwcDF84isv+4agc2b4wk5Sn4Xfjvye26p/8PWhGw+lFARDpJKL5gySbY6fH2SU GfyOFbeOGI4Se9C7ASF2exvO00yDrXokS7prQklTq8G2p9P3dk+vFw4+VRTzT25k SM7udb93EK2W5+voXFjBpUKtYaci1uSuuEXPe4aKpD9HQFxVWd/2wHJJp6Don5ZN lTT3TEC9a87B6XFJwFRCizXiCrXtAebphTA+3pk0TIZwaigfIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5iOaVGAXw+6GyOTjvwYXKnlHMHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2I3ZWNjYWQtZGRmMy0z MzdlLWE4MTEtNDU4YjIxODY5MDAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsaqQV4jviYW7dikSiVpdeXLKlJxAyXVjmvdfA4UrjgffXeMPLlaaUE FjKGIyCe7O78w+207IVBOr3bc6YBTqBfAHXfhJe1ud8S1aYRzmngJ73amRiU8Oc0 ejvUFn8cf5M1kG9ro4MJiFfwbaU+QpqIbtZguxc0qDOAvCgOCtzaakc4jOptH5+g iDlZbdTImc55mTGCNOnLGEGQ80Ck4jcOX90ZVYyoqVTtDL14JTLzIZkBqh9srw4C tFhSmTmOWpO7yGDTGYPgZltScbUKXHBllDWAsZUf3cmpd4QrzvuU8Gtd2SHwJRrM wR0wXgmik0w1/ofCS6ayVp1gJAzea8Q= -----END CERTIFICATE-----Generated at Thu Feb 26 03:32:11 2026 by rpki-client