$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa File: 9418af1a-01b2-371f-9a01-d75ddb948f1c.roa (raw, json) Hash identifier: +fQteMVJrdu9qCQYrcnqZpeT00eHtk60epM4eNP6/kc= Subject key identifier: 1F:AE:81:0E:F7:B4:C0:0E:3A:6C:59:72:4B:0B:AB:28:02:05:34:3C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC714A4FDFD295D1E42240 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.204.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:71:4a:4f:df:d2:95:d1:e4:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=8bbff923-853f-41b7-a8f8-f2b57e9d8941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:0d:1a:e9:8c:b1:34:03:1d:29:39:d7:95: ba:5b:7c:6a:7f:c4:f0:12:7b:56:36:05:6a:ac:d3: e8:a1:20:bc:67:01:5a:f8:74:2c:c2:3a:e3:f7:b3: 61:28:79:a2:03:34:c7:0f:32:bd:07:ee:f3:00:fb: 5f:71:9f:50:2e:31:dc:ad:95:f5:4c:19:7a:d6:a0: d3:2d:d4:64:fa:c3:61:c9:98:a3:bd:28:a8:85:4c: d6:11:e4:d6:59:14:41:be:86:73:13:e5:3e:31:83: 02:3a:cc:7b:97:3b:e9:f0:36:37:6a:dc:bc:75:1a: de:3a:e3:b6:52:b4:db:e0:c7:9e:0a:2a:69:36:71: 97:c7:fa:37:bc:9f:d8:0e:2c:f0:fa:f1:28:76:73: 82:ae:8a:c4:c1:43:7e:11:05:cb:17:bf:dd:63:a5: 29:c0:96:7a:7e:da:5c:cd:7c:e7:91:d4:2b:36:37: d1:60:0b:ed:bc:61:5a:2c:62:15:2e:65:2a:9c:cf: 22:11:f2:01:4d:cd:29:bc:df:8b:53:3c:1f:ca:76: 9f:7d:a2:a3:fa:22:0f:13:2e:ca:cd:ba:1f:57:79: 22:89:38:fb:da:4c:89:5f:f9:59:d1:1a:ba:55:6f: 7e:48:5d:9c:b6:e3:8c:3b:ca:c7:2b:52:a1:a0:1d: 14:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:AE:81:0E:F7:B4:C0:0E:3A:6C:59:72:4B:0B:AB:28:02:05:34:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:20:28:24:fe:1a:fa:bf:fb:ec:bc:56:26:b8:a3:ea:c5:6d: 64:68:c7:ad:d2:16:35:80:bd:51:2e:7d:63:c1:66:e6:cb:04: ea:f1:0a:81:4f:2e:59:8f:f6:b8:35:d2:40:22:19:f1:c4:94: d4:be:60:f7:18:f1:ee:e2:cf:01:16:82:98:d8:fb:37:34:cc: 15:db:19:22:82:dc:10:9e:cc:19:26:d2:65:a2:1d:25:9f:96: 7f:0e:38:58:8a:d4:48:b8:4e:cb:af:e9:85:67:51:8d:e4:d4: 1b:70:a0:7a:7a:1b:f3:37:c5:ab:e7:2b:e3:94:b1:97:30:8d: aa:45:de:ee:60:43:ff:46:63:db:77:41:dd:db:74:e7:1b:e0: ec:43:5b:1b:25:55:b4:8d:9c:99:7e:6a:97:ac:83:cc:05:73: 61:ee:a7:84:e4:3a:de:88:ea:31:4f:74:58:e3:1e:7a:5b:3f: 5d:78:3d:40:b4:ec:9b:83:23:14:bd:29:b3:3c:d9:34:a4:a2: 54:e0:35:e3:df:b3:80:fc:b3:55:ea:57:dd:c0:30:2d:c8:3f: 1b:3e:65:c3:19:cb:1f:d0:96:9a:5a:a2:96:fd:23:0e:b6:8a: e5:03:ac:94:c9:b5:42:d4:c3:7c:bd:f8:93:1c:ef:1a:b9:1e: 7f:30:31:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvHFKT9/SldHkIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk OGJiZmY5MjMtODUzZi00MWI3LWE4ZjgtZjJiNTdlOWQ4OTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMENGumMsTQDHSk515W6W3xqf8TwEntWNgVq rNPooSC8ZwFa+HQswjrj97NhKHmiAzTHDzK9B+7zAPtfcZ9QLjHcrZX1TBl61qDT LdRk+sNhyZijvSiohUzWEeTWWRRBvoZzE+U+MYMCOsx7lzvp8DY3aty8dRreOuO2 UrTb4MeeCippNnGXx/o3vJ/YDizw+vEodnOCrorEwUN+EQXLF7/dY6UpwJZ6ftpc zXznkdQrNjfRYAvtvGFaLGIVLmUqnM8iEfIBTc0pvN+LUzwfynaffaKj+iIPEy7K zbofV3kiiTj72kyJX/lZ0Rq6VW9+SF2ctuOMO8rHK1KhoB0UowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+ugQ73tMAOOmxZcksLqygCBTQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTQxOGFmMWEtMDFiMi0z NzFmLTlhMDEtZDc1ZGRiOTQ4ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4gKCT+Gvq/++y8Via4o+rFbWRox63SFjWAvVEufWPBZubLBOrxCoFP LlmP9rg10kAiGfHElNS+YPcY8e7izwEWgpjY+zc0zBXbGSKC3BCezBkm0mWiHSWf ln8OOFiK1Ei4Tsuv6YVnUY3k1BtwoHp6G/M3xavnK+OUsZcwjapF3u5gQ/9GY9t3 Qd3bdOcb4OxDWxslVbSNnJl+apesg8wFc2Hup4TkOt6I6jFPdFjjHnpbP114PUC0 7JuDIxS9KbM82TSkolTgNePfs4D8s1XqV93AMC3IPxs+ZcMZyx/Qlppaopb9Iw62 iuUDrJTJtULUw3y9+JMc7xq5Hn8wMRs= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:32 2026 by rpki-client