$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa File: 9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa (raw, json) Hash identifier: DNKHzAwpGzhQBoQFGxRbpJHX9ZzDSVlrHzo6lJrD0vU= Subject key identifier: A4:C1:76:37:6A:7C:2F:A2:0C:46:B8:51:A9:F5:3E:F2:7B:13:61:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA3F9B33FEC27C72CB7300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 140.204.112.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:3f:9b:33:fe:c2:7c:72:cb:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=c7637e4b-ceb0-4f2f-bd74-96e91255d727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:b0:f7:e0:d6:0e:9d:d7:e8:ad:57:d6:93:37: fb:ac:54:1d:cb:dc:58:ad:f3:a8:9d:03:1b:e2:f3: 83:2c:d5:2a:6f:69:e3:7b:09:a1:db:12:0a:6c:93: ce:fb:b7:38:b9:86:dc:93:db:6b:16:44:23:22:76: 82:d9:ca:09:cd:3d:b4:8f:6c:ba:3c:bb:5e:85:f3: 19:98:9e:d7:e2:1e:0c:de:cc:0b:b2:13:b1:91:83: f0:bf:b4:48:68:f9:4d:b6:2b:48:8f:3a:82:f8:10: 05:ce:4a:b5:f5:48:ee:a9:d4:47:b2:6a:06:36:31: d9:56:cf:ad:a9:c7:a2:0c:83:69:19:17:25:aa:26: 98:36:82:66:c7:00:c0:2b:34:bc:48:cc:4a:95:61: 88:2e:b8:46:2c:ae:56:fb:e5:57:16:81:e9:15:29: 5a:d9:6a:8b:0e:95:75:eb:4d:a3:e7:5d:b3:6e:c3: 23:2a:ba:ee:51:4d:42:e7:03:d4:0b:00:3b:57:81: a6:82:e6:b3:a9:6f:a9:f8:ef:d7:b5:1a:1a:01:63: 66:b4:29:46:5c:49:b0:fa:0f:cb:5a:e3:c0:f4:61: 9f:66:17:a1:11:2f:8e:dd:2c:a4:88:0a:3a:d5:f9: 8f:9a:5b:00:c3:0f:d3:10:f5:20:6c:15:7d:03:39: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C1:76:37:6A:7C:2F:A2:0C:46:B8:51:A9:F5:3E:F2:7B:13:61:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9a1867fd-8419-3840-bc3a-c3e1c8a33de0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.112.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:6c:ff:44:47:5a:0e:77:ff:4d:b1:92:50:6f:fb:79:1b:1f: 74:2f:a5:de:aa:db:6d:be:5a:24:ae:ac:99:a9:a8:08:be:2b: 56:92:8d:cc:1f:4b:03:29:e5:87:72:a9:e0:b9:87:06:c2:d1: a4:a8:94:50:4a:ae:0a:83:7e:4b:ca:a4:62:7a:8c:6e:05:4c: b1:fe:ce:7a:4a:98:b5:c6:18:25:07:9f:9b:c9:63:21:15:08: 39:ae:c8:84:d2:d1:8e:c7:31:18:a3:73:3a:0f:fd:69:f1:61: a8:51:7a:2c:89:4b:45:ac:fc:a2:47:f4:b3:8e:94:fa:49:d4: 1b:d3:d3:7a:63:f5:13:49:32:8b:42:ff:b5:33:f5:01:f7:88: d7:dd:03:20:60:49:58:93:be:e1:9a:e6:ac:eb:68:ed:84:6d: b4:78:67:70:54:fb:f6:bb:42:18:c1:8e:07:11:67:02:c0:31: ef:c3:e6:7f:da:a0:cc:00:cb:4d:a2:54:c5:62:d6:e1:75:7f: f2:90:60:59:46:0d:7e:15:0a:34:46:c7:da:45:bb:7c:f4:f9: 4e:54:71:f5:70:51:0a:e5:89:eb:25:ab:29:7f:53:7d:fa:70: 4b:d6:7c:94:0f:ed:20:bc:3c:6c:44:d1:a2:29:0d:5b:c9:19: 1f:b7:a9:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2j+bM/7CfHLLcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk Yzc2MzdlNGItY2ViMC00ZjJmLWJkNzQtOTZlOTEyNTVkNzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7D34NYOndforVfWkzf7rFQdy9xYrfOonQMb 4vODLNUqb2njewmh2xIKbJPO+7c4uYbck9trFkQjInaC2coJzT20j2y6PLtehfMZ mJ7X4h4M3swLshOxkYPwv7RIaPlNtitIjzqC+BAFzkq19UjuqdRHsmoGNjHZVs+t qceiDINpGRclqiaYNoJmxwDAKzS8SMxKlWGILrhGLK5W++VXFoHpFSla2WqLDpV1 602j512zbsMjKrruUU1C5wPUCwA7V4GmguazqW+p+O/XtRoaAWNmtClGXEmw+g/L WuPA9GGfZhehES+O3SykiAo61fmPmlsAww/TEPUgbBV9AzmpoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTBdjdqfC+iDEa4Uan1PvJ7E2FUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWExODY3ZmQtODQxOS0z ODQwLWJjM2EtYzNlMWM4YTMzZGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVs/0RHWg53/02xklBv+3kbH3Qvpd6q222+WiSurJmpqAi+K1aSjcwf SwMp5YdyqeC5hwbC0aSolFBKrgqDfkvKpGJ6jG4FTLH+znpKmLXGGCUHn5vJYyEV CDmuyITS0Y7HMRijczoP/WnxYahReiyJS0Ws/KJH9LOOlPpJ1BvT03pj9RNJMotC /7Uz9QH3iNfdAyBgSViTvuGa5qzraO2EbbR4Z3BU+/a7QhjBjgcRZwLAMe/D5n/a oMwAy02iVMVi1uF1f/KQYFlGDX4VCjRGx9pFu3z0+U5UcfVwUQrlieslqyl/U336 cEvWfJQP7SC8PGxE0aIpDVvJGR+3qek= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:09 2026 by rpki-client