$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa File: 8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa (raw, json) Hash identifier: 3bGsW1nrMrd6Jq68vXEZgQVpN5LcurW7SDWi1YWnctI= Subject key identifier: E4:97:D2:A8:3A:A7:2A:50:B3:32:DB:CB:20:55:03:4E:F6:DA:9B:0D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4CEFECD92777983222080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.91.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:ce:fe:cd:92:77:79:83:22:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=596290f2-e061-409d-a8e6-71da3c29d38f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:59:e6:bc:0f:b5:a1:7e:18:15:66:20:b4:04: 4d:ce:41:d3:fe:45:22:6f:42:29:3a:28:f8:cd:eb: 83:70:15:2b:53:3d:7e:ae:f8:b4:b2:c1:31:75:3e: 71:93:e0:79:28:11:7d:09:2a:df:63:7b:2b:1f:53: 86:0b:e0:07:8c:47:8f:2e:78:02:33:f4:c3:55:fa: d9:67:8a:4f:7c:b0:a9:dd:44:dd:0c:a5:2f:bd:df: d2:b8:1c:fb:ce:7a:b6:67:50:e5:e3:23:ae:bc:97: f4:d6:35:f0:f3:94:26:28:2e:1a:a2:45:fd:f6:89: 40:30:e1:8b:6a:23:98:83:52:93:42:c4:a5:97:81: c2:2d:1e:dc:fa:a8:c2:bf:b9:64:79:d6:75:d1:95: 1f:15:70:2d:88:48:6a:10:b9:be:d4:38:f4:ab:7c: 2a:93:17:85:d6:b7:e3:86:cb:4f:d0:6e:dd:ad:39: f3:9b:23:b3:f6:2f:82:25:e8:10:af:bc:34:a0:39: 18:f8:bf:01:17:84:3b:20:0a:26:50:d8:e6:84:ac: f3:b4:6e:36:74:c7:e1:92:23:98:c3:b3:1c:17:2e: 26:7d:53:6a:10:e5:ab:3f:f0:72:34:f7:b0:79:2a: a0:2f:e2:e7:f4:ce:be:f0:79:95:b8:fe:4a:ca:1e: b8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:97:D2:A8:3A:A7:2A:50:B3:32:DB:CB:20:55:03:4E:F6:DA:9B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:e9:0c:27:7e:39:0a:7f:30:23:12:4e:68:92:fa:2d:4b:ad: 77:8b:ba:2c:03:d5:53:f3:3d:ff:d7:50:b2:cf:ad:48:0e:6e: c4:1a:83:b1:59:c4:6f:4c:95:39:e0:01:b6:c9:8d:fe:5a:24: 18:e8:8a:70:ab:06:ef:56:a3:a1:ed:57:d6:83:0c:c2:67:83: 96:ea:21:bf:95:ec:86:76:52:85:4d:f1:1b:40:04:3d:ed:38: 53:28:24:4d:89:e3:1b:9f:38:fb:cc:bc:1d:46:69:72:e0:ac: c1:e1:3e:f4:82:df:16:b0:c2:e9:f8:60:7d:f4:ea:5f:c0:1b: bc:f6:4a:5f:cb:78:cc:6a:9e:26:63:c7:34:32:eb:e0:d3:82: 9b:04:7c:15:18:8c:b5:de:fe:93:4e:f0:f6:a9:0d:37:05:df: 32:95:3d:7c:e6:5f:53:a0:5a:25:f1:9e:22:67:a9:0a:4d:e7: 82:ac:07:d1:af:4b:7f:3f:26:ad:dc:ed:ed:00:fd:c2:21:f3: aa:e4:19:b7:97:30:bc:cb:4d:c6:34:5b:8f:24:22:d2:51:73: 40:6d:6a:6d:68:77:db:de:51:0f:5b:11:07:a2:14:7c:48:cc: 1a:1a:da:58:67:97:51:33:07:48:cc:4d:6e:9e:3e:8f:e4:fd: 0d:10:7e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1M7+zZJ3eYMiIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk NTk2MjkwZjItZTA2MS00MDlkLWE4ZTYtNzFkYTNjMjlkMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlnmvA+1oX4YFWYgtARNzkHT/kUib0IpOij4 zeuDcBUrUz1+rvi0ssExdT5xk+B5KBF9CSrfY3srH1OGC+AHjEePLngCM/TDVfrZ Z4pPfLCp3UTdDKUvvd/SuBz7znq2Z1Dl4yOuvJf01jXw85QmKC4aokX99olAMOGL aiOYg1KTQsSll4HCLR7c+qjCv7lkedZ10ZUfFXAtiEhqELm+1Dj0q3wqkxeF1rfj hstP0G7drTnzmyOz9i+CJegQr7w0oDkY+L8BF4Q7IAomUNjmhKzztG42dMfhkiOY w7McFy4mfVNqEOWrP/ByNPeweSqgL+Ln9M6+8HmVuP5Kyh641QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSX0qg6pypQszLbyyBVA0722psNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODc5NmUwZjMtMzZmMi0z NGQyLTkzNzMtMWZkNGU0MjIwYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7pDCd+OQp/MCMSTmiS+i1LrXeLuiwD1VPzPf/XULLPrUgObsQag7FZ xG9MlTngAbbJjf5aJBjoinCrBu9Wo6HtV9aDDMJng5bqIb+V7IZ2UoVN8RtABD3t OFMoJE2J4xufOPvMvB1GaXLgrMHhPvSC3xawwun4YH306l/AG7z2Sl/LeMxqniZj xzQy6+DTgpsEfBUYjLXe/pNO8PapDTcF3zKVPXzmX1OgWiXxniJnqQpN54KsB9Gv S38/Jq3c7e0A/cIh86rkGbeXMLzLTcY0W48kItJRc0Btam1od9veUQ9bEQeiFHxI zBoa2lhnl1EzB0jMTW6ePo/k/Q0Qfuk= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:04 2026 by rpki-client