$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa File: 875e3249-ea3a-314c-828a-d5a876662717.roa (raw, json) Hash identifier: Aol24RgqpgFeBCuARWznEKmhKsRj7zCk8Ninz/FAZNs= Subject key identifier: AF:47:A9:B1:87:44:71:1E:C0:E5:6C:2A:17:70:F3:DB:AA:3C:6D:4B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5EC45756FFD2B69D531680 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.91.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:c4:57:56:ff:d2:b6:9d:53:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=9ea8f97d-f281-4759-9af4-b919e6befbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c6:90:62:03:55:cf:ae:ad:5f:e4:91:3d:00: db:8a:a9:58:0e:66:bd:e6:d4:a1:01:a9:fa:28:0a: 59:29:f7:95:fa:2b:d6:10:ab:ef:a6:96:6b:ba:f0: 5a:46:46:3e:ba:8d:98:7f:9d:27:42:0d:39:8a:8d: 11:0c:56:ce:37:3f:15:01:f3:c9:00:c2:e8:c5:63: 81:59:38:10:72:ec:5e:67:f3:99:b6:64:6d:01:cf: 7a:0c:b2:68:ac:da:08:a9:b4:6f:65:ac:6d:17:9c: 16:bc:72:4d:80:f0:f9:83:7b:b7:13:74:e4:ea:1c: 9e:df:ac:98:1c:45:18:dc:d9:87:62:60:2e:09:d0: 71:97:19:14:fe:46:be:41:77:0e:52:a3:ad:94:e1: 4a:92:b7:26:e6:2a:6f:5f:b3:dd:44:6a:72:23:71: ea:5e:38:3e:8f:c8:8e:51:e3:84:d2:91:18:bb:42: 5c:2c:24:9a:3f:1a:7a:90:d3:df:b6:3e:38:1b:84: 22:0c:2d:75:e3:4a:88:08:99:05:02:95:e6:29:37: d1:0c:89:91:70:bd:eb:bc:38:8f:2f:2b:d5:50:d3: 2d:49:57:d6:75:57:c3:04:19:6d:1b:0e:c8:01:33: 96:48:49:64:b5:e2:c2:ae:26:da:03:98:d6:31:00: 29:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:47:A9:B1:87:44:71:1E:C0:E5:6C:2A:17:70:F3:DB:AA:3C:6D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/875e3249-ea3a-314c-828a-d5a876662717.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.234.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:c9:2a:2e:ef:4d:92:46:9d:88:7e:bb:f6:5a:ae:fc:fe:c3: 7e:bb:7c:c6:d5:8f:d7:9d:eb:8d:ff:7f:12:e8:cd:6a:bc:35: 50:14:5b:dd:dc:43:5d:6a:26:54:c9:80:40:60:10:c8:c7:23: 27:a6:79:e8:04:7e:b0:4c:55:09:5f:ea:bd:aa:e6:49:75:d5: 20:e0:ad:29:e8:b1:fb:68:5e:e5:36:1b:a2:6f:8a:22:8d:c1: 83:ba:98:3f:27:ed:8d:9c:fd:bd:87:a4:e8:34:a1:84:91:96: a8:72:41:a2:46:23:11:46:87:29:15:1f:cb:a1:6d:bf:eb:89: a3:f9:1c:f2:61:a8:1a:ed:f0:44:0a:b3:9f:fb:78:11:ef:95: d4:01:f5:0d:47:29:e7:2d:62:6f:b7:ed:f6:4f:36:fe:a9:3e: d4:ce:62:03:bc:29:b7:b1:d6:24:d2:4b:02:2c:5a:73:6a:82: 5b:8f:fd:62:e3:b2:3d:ed:3e:8f:ce:73:37:b0:a3:2a:c4:b6: d3:84:93:cf:3e:db:1e:29:30:2f:9b:e0:14:92:63:a6:6d:80: 05:30:fe:d5:bc:b9:48:9e:d0:bf:7b:eb:5b:68:3e:2c:cc:b9: 68:e8:f4:e7:c0:6d:74:e2:e2:ab:9b:f7:e9:0f:98:df:24:99: 22:ea:98:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXsRXVv/Stp1TFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk OWVhOGY5N2QtZjI4MS00NzU5LTlhZjQtYjkxOWU2YmVmYmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MaQYgNVz66tX+SRPQDbiqlYDma95tShAan6 KApZKfeV+ivWEKvvppZruvBaRkY+uo2Yf50nQg05io0RDFbONz8VAfPJAMLoxWOB WTgQcuxeZ/OZtmRtAc96DLJorNoIqbRvZaxtF5wWvHJNgPD5g3u3E3Tk6hye36yY HEUY3NmHYmAuCdBxlxkU/ka+QXcOUqOtlOFKkrcm5ipvX7PdRGpyI3HqXjg+j8iO UeOE0pEYu0JcLCSaPxp6kNPftj44G4QiDC1140qICJkFApXmKTfRDImRcL3rvDiP LyvVUNMtSVfWdVfDBBltGw7IATOWSElkteLCribaA5jWMQAphQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9HqbGHRHEewOVsKhdw89uqPG1LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODc1ZTMyNDktZWEzYS0z MTRjLTgyOGEtZDVhODc2NjYyNzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLJKi7vTZJGnYh+u/Zarvz+w367fMbVj9ed643/fxLozWq8NVAUW93c Q11qJlTJgEBgEMjHIyemeegEfrBMVQlf6r2q5kl11SDgrSnosftoXuU2G6JviiKN wYO6mD8n7Y2c/b2HpOg0oYSRlqhyQaJGIxFGhykVH8uhbb/riaP5HPJhqBrt8EQK s5/7eBHvldQB9Q1HKectYm+37fZPNv6pPtTOYgO8Kbex1iTSSwIsWnNqgluP/WLj sj3tPo/OczewoyrEttOEk88+2x4pMC+b4BSSY6ZtgAUw/tW8uUie0L9761toPizM uWjo9OfAbXTi4qub9+kPmN8kmSLqmFI= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:05 2026 by rpki-client