$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9fab0b0f-8e1e-33dd-a20c-5a0ac943b397.roa File: 9fab0b0f-8e1e-33dd-a20c-5a0ac943b397.roa (raw, json) Hash identifier: oqNl4n28vxP5D3WZ+ikIMSzWzQf+nA6MEMv8v6QYQh0= Subject key identifier: 48:BB:D7:BC:2A:6A:96:C6:5B:E6:96:95:F0:97:DB:9E:08:F8:53:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A16E89B92FEAEAF33C7A9 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9fab0b0f-8e1e-33dd-a20c-5a0ac943b397.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.91.246.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:16:e8:9b:92:fe:ae:af:33:c7:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=c10e3e55-a532-443b-8c51-f8e31f00930e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:b5:42:f6:14:bc:3a:b5:f8:2d:24:2a:85: e8:a6:9a:0e:83:20:c1:a7:f7:6a:b6:5a:5b:ce:41: 7a:68:89:0b:85:4f:32:5e:e8:e3:d7:c1:9a:0d:2b: f5:aa:47:16:6e:87:9f:12:11:97:d4:39:cc:7a:e3: 83:50:8c:a6:23:f0:99:ab:46:f2:f5:bf:19:c5:c1: 76:c1:de:d4:2b:2f:2b:b4:27:53:82:3b:3b:74:99: 03:36:77:ad:cc:75:ef:f1:a4:44:40:90:16:bb:9e: 50:7e:52:2a:3d:11:e3:ae:ca:fd:a5:f2:a6:e1:4f: 4a:c8:c3:7b:81:f9:d8:3d:b5:81:0a:5e:29:34:98: 2c:de:91:dd:bd:1d:ed:b9:1f:29:42:af:5d:0d:c2: 72:d2:92:e1:ec:b6:dd:38:a8:de:e3:07:72:e2:58: 4c:47:20:7a:33:c7:ce:a3:24:12:05:6e:fb:72:7a: a5:fb:46:42:8c:55:e1:13:f1:27:ae:08:78:e8:1f: b0:99:37:3f:d3:10:37:e2:cc:5f:af:f6:44:99:ac: 75:0e:2e:c4:dc:c7:56:dd:0e:a2:a4:ea:61:f0:31: 20:ec:0b:99:71:4f:08:88:32:95:c6:0f:71:af:f4: c3:f7:ae:c3:21:cd:4a:73:6f:0f:22:00:2c:ce:49: 77:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BB:D7:BC:2A:6A:96:C6:5B:E6:96:95:F0:97:DB:9E:08:F8:53:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9fab0b0f-8e1e-33dd-a20c-5a0ac943b397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.246.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:78:0f:b7:73:1a:8d:00:c5:d9:f1:4e:a3:12:e9:de:33:a0: 06:f4:53:55:32:e9:19:50:9f:82:8e:1f:b9:08:ec:d8:f8:2c: c0:58:b6:80:5a:3a:80:43:df:e3:cc:e5:ac:31:8d:ca:12:a5: 73:cd:26:8b:41:ab:68:8e:e3:73:4d:ea:79:d2:79:66:bc:63: 89:93:ef:77:c4:65:68:c8:71:07:97:3a:1a:98:ea:9f:be:1c: 9f:0a:04:3f:d3:90:57:94:cf:bb:79:f2:d0:54:bc:d4:0e:ac: 97:83:28:c4:f9:76:32:3b:1a:0a:83:f0:fd:02:eb:f6:7f:f6: 2b:98:17:00:0c:c7:89:27:da:d1:ff:34:a8:9c:64:b2:78:c3: b0:84:25:0b:e2:e2:ae:e3:c0:18:06:18:01:b7:1c:ca:1d:e2: d5:6e:bc:8b:11:00:16:32:64:7b:8b:b0:bf:73:d9:db:45:ef: a0:d3:28:02:a2:48:cc:ae:40:2c:f9:5a:fb:66:50:ca:c7:d5: cb:55:03:d0:13:03:f5:08:f8:5e:82:1d:a8:47:96:9d:17:ed: 1a:49:96:cf:33:95:1f:c7:94:b8:a8:65:46:aa:0c:c3:a8:34: 0e:95:56:0b:f9:44:67:59:cf:09:e5:58:d8:92:26:c7:2c:cc: 17:8a:eb:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChbom5L+rq8zx6kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk YzEwZTNlNTUtYTUzMi00NDNiLThjNTEtZjhlMzFmMDA5MzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXK1QvYUvDq1+C0kKoXoppoOgyDBp/dqtlpb zkF6aIkLhU8yXujj18GaDSv1qkcWboefEhGX1DnMeuODUIymI/CZq0by9b8ZxcF2 wd7UKy8rtCdTgjs7dJkDNnetzHXv8aREQJAWu55QflIqPRHjrsr9pfKm4U9KyMN7 gfnYPbWBCl4pNJgs3pHdvR3tuR8pQq9dDcJy0pLh7LbdOKje4wdy4lhMRyB6M8fO oyQSBW77cnql+0ZCjFXhE/Enrgh46B+wmTc/0xA34sxfr/ZEmax1Di7E3MdW3Q6i pOph8DEg7AuZcU8IiDKVxg9xr/TD967DIc1Kc28PIgAszkl3OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi717wqapbGW+aWlfCX254I+FM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOWZhYjBiMGYtOGUxZS0z M2RkLWEyMGMtNWEwYWM5NDNiMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI14D7dzGo0AxdnxTqMS6d4zoAb0U1Uy6RlQn4KOH7kI7Nj4LMBYtoBa OoBD3+PM5awxjcoSpXPNJotBq2iO43NN6nnSeWa8Y4mT73fEZWjIcQeXOhqY6p++ HJ8KBD/TkFeUz7t58tBUvNQOrJeDKMT5djI7GgqD8P0C6/Z/9iuYFwAMx4kn2tH/ NKicZLJ4w7CEJQvi4q7jwBgGGAG3HMod4tVuvIsRABYyZHuLsL9z2dtF76DTKAKi SMyuQCz5WvtmUMrH1ctVA9ATA/UI+F6CHahHlp0X7RpJls8zlR/HlLioZUaqDMOo NA6VVgv5RGdZzwnlWNiSJscszBeK6xc= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:35 2026 by rpki-client