$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa File: 8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa (raw, json) Hash identifier: jOlBPJlDkPvPY2X41PbAYvF+bctTlvd0BDpq+dMD8CA= Subject key identifier: C2:9D:3B:D9:8B:30:2D:56:38:F3:90:D4:2D:0F:1A:38:BC:C3:F7:03 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CBDB2115E3C4751C8BBA81EE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa Signing time: Tue 03 Feb 2026 14:00:39 +0000 ROA not before: Tue 03 Feb 2026 14:00:39 +0000 ROA not after: Mon 04 May 2026 13:00:39 +0000 asID: 31898 IP address blocks: 140.204.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bd:b2:11:5e:3c:47:51:c8:bb:a8:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 3 14:00:39 2026 GMT Not After : May 4 13:00:39 2026 GMT Subject: CN=ac8b9a0c-be00-45dd-bd3e-d766a1c3b786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:d6:9c:f4:96:ac:ac:16:9c:31:3e:9d:89: d6:9f:77:ec:be:ad:58:36:76:09:85:18:43:d6:37: c6:22:f9:17:27:4b:43:2b:fc:df:cb:3d:21:9f:e8: 95:a5:78:8a:5a:fa:42:d1:0f:1b:39:31:0f:e7:1b: b6:d1:16:c7:4c:da:51:7d:fb:3a:78:f4:f8:a5:f0: 2e:54:69:84:81:08:b5:5b:67:17:a1:eb:b0:a9:a2: 84:6f:16:4e:91:78:07:54:32:bc:6b:8c:89:36:44: 5c:34:be:27:43:d5:92:4c:66:e5:8e:46:cf:6c:18: 95:c7:53:ea:cf:f9:14:d9:8c:ac:0a:31:05:01:82: 94:cd:e0:84:bc:14:95:80:4c:93:fb:4e:2a:eb:f2: d7:0e:32:5a:32:ec:87:25:ca:a7:55:c9:16:77:21: 2c:55:16:19:7b:36:10:47:95:9c:a6:c9:01:14:4d: ea:b6:5f:2d:83:a0:70:75:21:89:ea:92:d6:8d:fd: 85:29:d0:30:d3:f6:f1:3b:29:78:85:a0:d9:09:b6: 7d:a7:86:05:76:99:c3:1b:e6:8e:44:1b:d7:b6:b8: 4f:f7:a2:4a:1d:d8:54:fc:6a:5f:b0:22:c1:2b:6c: a8:51:1b:77:eb:20:36:29:40:23:8a:43:e4:8f:41: 01:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9D:3B:D9:8B:30:2D:56:38:F3:90:D4:2D:0F:1A:38:BC:C3:F7:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ec:ec:5c:0d:7d:9c:ed:35:3f:80:fb:75:3f:2a:a1:d3:18: ae:57:73:f0:0d:d1:ef:ea:d8:d1:de:2c:7f:30:12:09:7f:79: 87:89:de:7a:27:cb:5a:42:87:e3:81:71:62:8a:25:7c:90:80: 25:61:38:93:d7:10:7c:a5:eb:11:52:32:ae:19:b3:49:d8:f6: a7:99:1f:f6:e7:ee:a4:a2:3f:bd:05:00:b8:a1:c6:2a:44:7f: 35:4c:7b:64:e1:b4:4e:11:ed:1d:61:40:9c:92:58:63:6f:bc: 93:8e:39:41:a4:6d:49:78:80:c0:83:e1:5f:fc:5a:d8:23:10: 86:9f:55:85:ec:2d:20:79:54:b4:16:78:06:c1:ae:9f:6f:26: 85:e0:31:fc:97:3c:67:1e:2b:13:8d:5e:78:49:8a:fc:80:37: a4:8d:14:e6:24:b8:c5:ba:38:44:ec:c1:b8:89:ee:c1:40:71: 35:48:56:cb:37:02:11:d2:88:99:96:c4:51:9b:e5:b3:ad:e1: b4:7a:24:23:ac:6d:f5:b5:50:19:b8:44:ba:b2:2a:bd:1c:32: eb:16:36:ed:49:fd:1f:93:ce:aa:76:82:98:ab:dc:48:a3:27: c9:d2:9b:e8:50:15:a8:f1:20:34:81:4a:3a:4e:97:2c:7e:ec: fe:1a:eb:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy9shFePEdRyLuoHuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMzE0MDAzOVoXDTI2MDUwNDEzMDAzOVowLzEtMCsGA1UEAxMk YWM4YjlhMGMtYmUwMC00NWRkLWJkM2UtZDc2NmExYzNiNzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjfWnPSWrKwWnDE+nYnWn3fsvq1YNnYJhRhD 1jfGIvkXJ0tDK/zfyz0hn+iVpXiKWvpC0Q8bOTEP5xu20RbHTNpRffs6ePT4pfAu VGmEgQi1W2cXoeuwqaKEbxZOkXgHVDK8a4yJNkRcNL4nQ9WSTGbljkbPbBiVx1Pq z/kU2YysCjEFAYKUzeCEvBSVgEyT+04q6/LXDjJaMuyHJcqnVckWdyEsVRYZezYQ R5WcpskBFE3qtl8tg6BwdSGJ6pLWjf2FKdAw0/bxOyl4haDZCbZ9p4YFdpnDG+aO RBvXtrhP96JKHdhU/GpfsCLBK2yoURt36yA2KUAjikPkj0EBrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKdO9mLMC1WOPOQ1C0PGji8w/cDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY2N2U0YmMtODk1Mi0z NDFlLWI0YTUtNGVjOGI5ODM1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbs7FwNfZztNT+A+3U/KqHTGK5Xc/AN0e/q2NHeLH8wEgl/eYeJ3non y1pCh+OBcWKKJXyQgCVhOJPXEHyl6xFSMq4Zs0nY9qeZH/bn7qSiP70FALihxipE fzVMe2ThtE4R7R1hQJySWGNvvJOOOUGkbUl4gMCD4V/8WtgjEIafVYXsLSB5VLQW eAbBrp9vJoXgMfyXPGceKxONXnhJivyAN6SNFOYkuMW6OETswbiJ7sFAcTVIVss3 AhHSiJmWxFGb5bOt4bR6JCOsbfW1UBm4RLqyKr0cMusWNu1J/R+Tzqp2gpir3Eij J8nSm+hQFajxIDSBSjpOlyx+7P4a69c= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:32 2026 by rpki-client