$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa File: 9a00d5d0-8834-3899-9788-c77084566c30.roa (raw, json) Hash identifier: TxPUjwt6BaG4cnXmIRuJEHWFd26ek20Mjj3C8QDQkss= Subject key identifier: 50:9A:50:CB:66:EE:E5:DD:4F:E6:97:FA:2F:96:71:7B:E5:00:12:25 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64F995CEA4817AA7EA6180 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 140.204.72.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:f9:95:ce:a4:81:7a:a7:ea:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=96d4d0b0-4528-4b13-8dbc-24c1f66c91f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:15:4a:43:2d:e1:99:41:6e:5b:91:12:3c:dd: 03:70:9a:ab:51:bd:8d:65:d5:ff:fb:28:f2:ca:78: 03:97:7a:34:54:48:28:21:72:5d:58:86:f7:f3:c1: 3d:f3:6a:6e:7f:2b:df:90:2c:1e:fa:ad:d7:b9:9b: 86:6a:20:09:f0:7f:b7:4b:bf:eb:24:5c:b2:1d:97: 6d:5f:42:db:4b:b7:15:2a:05:2d:79:c5:3f:b1:31: c5:11:06:34:7b:e2:69:da:b5:ae:ec:6f:87:d3:fc: 2f:47:34:3b:5d:d1:13:04:08:1f:58:ac:51:8f:ee: 29:40:ac:82:4a:9d:e3:31:25:d0:37:e3:48:33:ab: 32:da:ea:58:ef:3e:e6:0a:db:60:6b:25:cf:bb:05: 39:47:e1:9f:6f:67:bd:b3:98:69:12:f4:fc:16:7d: 13:8c:c2:f2:1e:b2:ae:56:1b:c7:26:51:81:a8:69: 15:d2:9b:c9:90:04:c8:da:dc:6e:bf:9a:70:07:15: 14:69:9b:c4:24:70:85:d3:64:12:8d:e2:0c:e4:6a: 9a:f8:74:02:5d:a2:d5:c9:38:dd:22:28:0e:d5:b5: ae:e2:49:51:2f:5c:9c:dc:48:c9:fa:dc:e2:4e:b5: e9:4a:b7:25:8c:9c:c2:14:8a:fc:d1:5b:e8:20:33: 87:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9A:50:CB:66:EE:E5:DD:4F:E6:97:FA:2F:96:71:7B:E5:00:12:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a00d5d0-8834-3899-9788-c77084566c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.72.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:82:fb:19:ab:1d:09:44:fb:98:57:07:00:49:7d:e9:19:f5: e0:a3:6e:aa:49:f5:9e:4a:90:93:5d:61:76:89:60:47:e0:0b: 92:d1:b8:b2:4e:67:41:0e:7a:cd:d3:47:9d:a2:a7:72:00:b4: bc:9e:5e:ec:89:db:e9:8b:3e:7b:1f:aa:46:dd:7b:5e:a6:62: 92:81:44:91:74:49:c4:3f:9f:f8:94:d3:83:1e:25:4f:96:bf: 08:6e:de:2b:fe:73:35:50:cb:3a:d1:66:ff:98:48:a8:28:29: 89:73:8b:87:d4:a3:2f:26:b0:0d:df:60:a0:30:a1:85:6b:d2: 6c:b8:c3:8c:6e:47:e0:f6:c0:97:f1:b4:75:fc:69:43:fc:f7: 67:f6:4a:40:db:08:0f:81:16:c6:c9:6b:12:8a:bb:89:98:7b: da:ba:74:6e:cc:44:34:93:bd:43:92:06:d6:45:5b:ed:d4:a8: bb:6c:06:7f:0b:53:92:fe:f4:1a:ad:6d:0e:a7:dd:c7:f4:78: f3:54:3c:4d:98:41:5a:61:17:cb:f8:cf:cd:f3:60:9a:28:97: d0:7a:6d:7a:37:31:f7:60:3c:e9:0a:28:40:23:a1:ed:6c:02: bc:e6:c7:07:3c:4e:64:dc:76:95:33:d6:fa:62:7a:e5:9e:ec: ab:7b:09:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZPmVzqSBeqfqYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk OTZkNGQwYjAtNDUyOC00YjEzLThkYmMtMjRjMWY2NmM5MWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxVKQy3hmUFuW5ESPN0DcJqrUb2NZdX/+yjy yngDl3o0VEgoIXJdWIb388E982pufyvfkCwe+q3XuZuGaiAJ8H+3S7/rJFyyHZdt X0LbS7cVKgUtecU/sTHFEQY0e+Jp2rWu7G+H0/wvRzQ7XdETBAgfWKxRj+4pQKyC Sp3jMSXQN+NIM6sy2upY7z7mCttgayXPuwU5R+Gfb2e9s5hpEvT8Fn0TjMLyHrKu VhvHJlGBqGkV0pvJkATI2txuv5pwBxUUaZvEJHCF02QSjeIM5Gqa+HQCXaLVyTjd IigO1bWu4klRL1yc3EjJ+tziTrXpSrcljJzCFIr80VvoIDOHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCaUMtm7uXdT+aX+i+WcXvlABIlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWEwMGQ1ZDAtODgzNC0z ODk5LTk3ODgtYzc3MDg0NTY2YzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWC+xmrHQlE+5hXBwBJfekZ9eCjbqpJ9Z5KkJNdYXaJYEfgC5LRuLJO Z0EOes3TR52ip3IAtLyeXuyJ2+mLPnsfqkbde16mYpKBRJF0ScQ/n/iU04MeJU+W vwhu3iv+czVQyzrRZv+YSKgoKYlzi4fUoy8msA3fYKAwoYVr0my4w4xuR+D2wJfx tHX8aUP892f2SkDbCA+BFsbJaxKKu4mYe9q6dG7MRDSTvUOSBtZFW+3UqLtsBn8L U5L+9BqtbQ6n3cf0ePNUPE2YQVphF8v4z83zYJool9B6bXo3MfdgPOkKKEAjoe1s Arzmxwc8TmTcdpUz1vpieuWe7Kt7CYw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:50:48 2026 by rpki-client