$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/889a58be-f8c6-36b9-9438-e6fc275d63f4.roa File: 889a58be-f8c6-36b9-9438-e6fc275d63f4.roa (raw, json) Hash identifier: bJvPe+x8nr9xm4t1kHshmDqevCHSENMLam1gFT3nlJg= Subject key identifier: 3F:08:0D:C1:C3:57:C2:8E:B1:78:87:8B:8F:90:6F:65:72:D4:78:FD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6DD4CA82212D90291AFD5200 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/889a58be-f8c6-36b9-9438-e6fc275d63f4.roa Signing time: Wed 08 Jul 2026 09:00:12 +0000 ROA not before: Wed 08 Jul 2026 09:00:12 +0000 ROA not after: Tue 06 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.245.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6d:d4:ca:82:21:2d:90:29:1a:fd:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 8 09:00:12 2026 GMT Not After : Oct 6 09:00:12 2026 GMT Subject: CN=811e1669-146a-4fc2-947d-e9c4a0ee7e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c8:8e:65:dc:b1:29:34:3a:f9:7d:23:4d:72: 2f:f1:f1:53:6e:b0:d6:61:fd:b6:56:e1:38:e5:3f: 29:e8:a1:70:8f:48:bd:1f:47:b0:a8:5c:ff:64:d5: c0:cd:8f:28:17:66:03:b9:29:65:93:14:d7:8c:a8: 72:1a:bc:7b:44:2d:6f:20:90:0e:d6:34:5f:0a:b4: 0f:51:a7:72:50:14:2d:ce:1f:b7:93:93:19:b7:c6: 33:f5:17:4c:72:a9:e9:f3:53:56:8e:b7:b4:ec:fe: 75:ff:fd:3b:b8:fc:9a:29:28:ef:97:8d:42:3d:e5: 5e:71:35:81:76:b7:c4:04:08:17:cb:4b:a6:ab:b8: 48:eb:68:e9:c4:3a:1a:a3:6e:f7:39:a2:35:3f:ba: 13:65:35:b3:d1:46:b2:06:79:a7:dc:4f:af:ab:3f: 0c:98:33:d0:b4:ca:df:d4:bd:de:cc:b3:90:ab:30: fa:d3:68:59:3a:b5:72:1b:c3:f9:d3:96:08:de:5c: 27:98:9a:02:1c:ec:32:03:f1:a5:59:4c:49:35:df: 7d:28:ef:84:c7:ea:55:c9:de:55:5a:6c:36:2d:0e: b9:d1:22:78:db:1d:8f:8e:5f:7c:3c:87:08:6b:27: d8:a9:e9:60:b7:e6:7f:95:41:fe:76:a9:25:e2:6a: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:0D:C1:C3:57:C2:8E:B1:78:87:8B:8F:90:6F:65:72:D4:78:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/889a58be-f8c6-36b9-9438-e6fc275d63f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e8:40:f1:82:12:c2:a1:55:1f:6b:ab:a1:78:0f:5f:29:b7: 37:cf:c3:8a:1c:8f:0e:fc:e0:9c:1c:b8:2e:cf:50:4f:2f:75: 05:dd:f4:96:f3:b0:01:de:c5:f1:87:48:18:74:eb:86:21:82: 6a:3c:01:43:f1:95:73:63:16:d8:47:f7:1e:14:95:b9:57:1b: 96:47:51:00:20:2c:14:25:d9:36:51:2f:9b:68:6b:d6:29:c4: 5b:f5:2d:d3:44:a9:fc:05:68:04:8e:ff:b6:eb:ac:53:70:30: db:89:38:1a:ed:4a:a7:fc:9e:e1:ff:e3:5c:35:38:00:ea:05: ac:a3:e9:3c:df:2a:8f:4e:12:92:d4:82:38:8b:4e:2f:32:3f: b6:65:f1:40:d6:76:ee:2a:28:29:1d:1f:a7:91:7a:83:39:32: 27:64:37:99:e9:10:70:c9:97:ab:c2:a8:01:66:3c:49:f4:b6: b2:45:8c:42:f9:b6:f9:17:f6:d2:72:59:64:d6:5e:97:7b:43: 0d:1b:e2:cd:c0:6b:ed:10:fc:46:ba:26:29:c2:cf:89:63:93: 48:97:92:28:a9:25:0e:14:6d:ea:2f:96:4e:4d:ba:dc:af:2c: be:5b:a9:5f:4a:ef:a5:84:c7:4b:97:7e:78:bf:84:92:db:71: 6f:f5:09:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MqCIS2QKRr9UgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk ODExZTE2NjktMTQ2YS00ZmMyLTk0N2QtZTljNGEwZWU3ZTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMiOZdyxKTQ6+X0jTXIv8fFTbrDWYf22VuE4 5T8p6KFwj0i9H0ewqFz/ZNXAzY8oF2YDuSllkxTXjKhyGrx7RC1vIJAO1jRfCrQP UadyUBQtzh+3k5MZt8Yz9RdMcqnp81NWjre07P51//07uPyaKSjvl41CPeVecTWB drfEBAgXy0umq7hI62jpxDoao273OaI1P7oTZTWz0UayBnmn3E+vqz8MmDPQtMrf 1L3ezLOQqzD602hZOrVyG8P505YI3lwnmJoCHOwyA/GlWUxJNd99KO+Ex+pVyd5V Wmw2LQ650SJ42x2Pjl98PIcIayfYqelgt+Z/lUH+dqkl4mopzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8IDcHDV8KOsXiHi4+Qb2Vy1Hj9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODg5YTU4YmUtZjhjNi0z NmI5LTk0MzgtZTZmYzI3NWQ2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjPUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGboQPGCEsKhVR9rq6F4D18ptzfPw4ocjw784JwcuC7PUE8vdQXd9Jbz sAHexfGHSBh064Yhgmo8AUPxlXNjFthH9x4UlblXG5ZHUQAgLBQl2TZRL5toa9Yp xFv1LdNEqfwFaASO/7brrFNwMNuJOBrtSqf8nuH/41w1OADqBayj6TzfKo9OEpLU gjiLTi8yP7Zl8UDWdu4qKCkdH6eReoM5MidkN5npEHDJl6vCqAFmPEn0trJFjEL5 tvkX9tJyWWTWXpd7Qw0b4s3Aa+0Q/Ea6JinCz4ljk0iXkiipJQ4Ubeovlk5Nutyv LL5bqV9K76WEx0uXfni/hJLbcW/1Cb4= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:53 2026 by rpki-client