$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa File: 8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa (raw, json) Hash identifier: ZWVltpEcjjNEMp/ZpJYnvONUQcReK5g9guFkct3wKgo= Subject key identifier: 75:45:E3:A0:8C:66:30:76:F2:65:0C:58:DC:D8:18:83:9B:30:2C:EF Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A0D9904005F4DFF4C4C40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.204.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0d:99:04:00:5f:4d:ff:4c:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=8a2ffa1c-3a7a-4e09-a2b3-e8ee967cf3e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d4:33:05:42:75:54:be:82:3c:7a:6e:8e:14: 9f:ff:46:40:f2:28:d8:36:2d:9d:29:28:5b:2e:37: dd:81:59:d3:79:d2:d7:03:ff:83:42:ee:b1:42:87: cc:ff:43:a9:48:81:b5:b6:03:25:d3:fc:c9:5d:b3: d3:1f:cd:53:18:f4:43:d5:e8:9c:2c:6e:89:86:43: 61:2e:57:44:b2:28:3f:cf:38:ca:80:f1:6c:dc:30: 77:81:24:3a:51:df:d5:6e:22:e7:e5:6f:97:81:80: 30:78:67:8b:a1:59:15:88:8e:cc:7f:b2:21:a7:14: e8:7a:bc:47:23:87:27:3b:78:dc:30:93:dd:26:8b: de:6c:16:f1:73:98:4c:9b:00:5a:10:1f:fc:57:cf: ea:1b:6b:88:48:db:74:fe:7f:f4:eb:99:47:3a:c7: 77:76:f4:27:ac:50:b6:b6:4b:c0:47:c3:7e:15:97: 19:10:52:fc:39:e9:e8:d3:6c:69:f3:35:ed:0b:16: f0:57:bc:97:34:ab:49:13:5f:e8:92:d6:3e:21:f0: d4:4f:f6:29:b1:15:91:83:30:e0:64:ea:71:ad:0d: 17:0b:96:bf:d7:a4:cc:ce:97:10:f4:9d:bc:3e:bb: e2:0a:6d:66:3e:25:c6:87:88:ca:92:5f:74:a9:b8: 9f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:45:E3:A0:8C:66:30:76:F2:65:0C:58:DC:D8:18:83:9B:30:2C:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8057aec5-1a2a-3ee4-9df1-3ff2826eb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:5e:c4:09:63:e5:41:e9:6b:da:8f:71:f1:a3:dc:98:21:25: f6:f4:ad:41:94:b9:65:75:e3:7c:a4:2c:71:73:e4:9f:e0:19: 70:c0:fd:d1:bb:9e:a5:90:78:41:7f:b7:d0:ad:83:8e:1c:5a: 11:d6:bc:c8:0a:62:70:74:49:30:ac:6d:26:c8:65:78:a3:35: e6:11:59:de:33:1d:42:fb:bd:46:80:93:11:11:76:03:a5:c9: f4:47:e3:13:81:7c:8b:8e:7e:af:a3:02:15:a3:08:77:cd:16: 2f:8a:8c:8a:a1:73:2f:10:ee:50:b4:8f:da:40:cc:47:10:9e: 73:6a:8c:38:b4:ef:6d:a6:4e:ef:ff:86:d4:47:8b:d8:bc:9b: e9:a7:eb:79:d9:f0:77:cb:17:c8:4c:6b:73:95:34:6f:53:40: 6f:0f:60:7e:b8:cb:6f:6f:f9:57:5d:29:a5:d1:34:76:02:38: 8e:24:5f:0b:f0:33:16:12:bd:7e:57:ff:88:64:82:4c:78:5b: 13:13:5b:dd:d4:33:cc:e0:74:eb:f1:85:ff:9a:6e:29:92:d4: ed:32:70:78:10:6d:9c:51:ec:41:8a:9a:f4:10:95:9f:67:98: 77:3b:d7:0c:75:bd:54:e5:d5:c4:f4:42:1a:0b:d1:fb:e7:80: da:e4:c8:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCg2ZBABfTf9MTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk OGEyZmZhMWMtM2E3YS00ZTA5LWEyYjMtZThlZTk2N2NmM2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9QzBUJ1VL6CPHpujhSf/0ZA8ijYNi2dKShb LjfdgVnTedLXA/+DQu6xQofM/0OpSIG1tgMl0/zJXbPTH81TGPRD1eicLG6JhkNh LldEsig/zzjKgPFs3DB3gSQ6Ud/VbiLn5W+XgYAweGeLoVkViI7Mf7IhpxToerxH I4cnO3jcMJPdJovebBbxc5hMmwBaEB/8V8/qG2uISNt0/n/065lHOsd3dvQnrFC2 tkvAR8N+FZcZEFL8Oeno02xp8zXtCxbwV7yXNKtJE1/oktY+IfDUT/YpsRWRgzDg ZOpxrQ0XC5a/16TMzpcQ9J28PrviCm1mPiXGh4jKkl90qbifUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVF46CMZjB28mUMWNzYGIObMCzvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODA1N2FlYzUtMWEyYS0z ZWU0LTlkZjEtM2ZmMjgyNmViOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhexAlj5UHpa9qPcfGj3JghJfb0rUGUuWV143ykLHFz5J/gGXDA/dG7 nqWQeEF/t9Ctg44cWhHWvMgKYnB0STCsbSbIZXijNeYRWd4zHUL7vUaAkxERdgOl yfRH4xOBfIuOfq+jAhWjCHfNFi+KjIqhcy8Q7lC0j9pAzEcQnnNqjDi0722mTu// htRHi9i8m+mn63nZ8HfLF8hMa3OVNG9TQG8PYH64y29v+VddKaXRNHYCOI4kXwvw MxYSvX5X/4hkgkx4WxMTW93UM8zgdOvxhf+abimS1O0ycHgQbZxR7EGKmvQQlZ9n mHc71wx1vVTl1cT0QhoL0fvngNrkyJs= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:00 2026 by rpki-client