$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3a86832-216e-315f-a33c-8fc2121df4c1.roa File: a3a86832-216e-315f-a33c-8fc2121df4c1.roa (raw, json) Hash identifier: i52oVtgWOVZeYfWLqRR61SN8teRad5H0LmpVKI/OU3Y= Subject key identifier: 02:D9:B8:FB:05:C6:51:4E:BE:F4:43:65:22:E0:83:AD:0B:42:C5:E2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7A64DAF55F5B96FBF8740E40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3a86832-216e-315f-a33c-8fc2121df4c1.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 31898 IP address blocks: 140.204.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:da:f5:5f:5b:96:fb:f8:74:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=5d2189a6-9ead-44d8-987e-a409d1e6ccef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a5:dc:18:59:d7:21:7e:fe:de:5e:39:51:4f: 88:28:f3:f8:6b:24:51:1f:bb:04:cf:fe:cf:5c:c2: 2c:13:a3:ec:97:a4:9b:8b:f3:49:56:24:8e:67:8e: 5c:11:52:76:e1:97:08:13:3d:e9:c5:29:2d:b2:74: 29:01:d7:c3:d3:0d:af:a2:45:3c:5e:43:ba:a0:27: c7:01:ec:a6:0f:0d:8d:80:38:c4:af:37:d9:7d:eb: 1e:64:d5:12:8c:53:ea:4a:a1:39:92:f9:97:03:ec: 11:fd:da:4d:1c:44:c5:21:79:35:fa:4d:f1:63:88: d8:2b:bb:47:6e:d7:66:76:65:74:4b:d2:d4:45:6c: 4c:00:1d:53:27:0f:62:1e:69:d6:ed:6d:6e:f5:cb: 70:f3:46:f0:b2:67:89:02:89:21:d1:dd:d3:5d:5a: 80:50:00:88:53:d2:11:04:45:c5:06:d3:c9:1d:b3: 01:c1:bb:3f:cc:ec:91:94:79:33:38:f3:25:1a:04: 89:72:61:c6:46:7d:13:f1:31:ee:37:8c:34:7c:37: 21:9d:24:2b:41:ca:54:68:58:64:59:33:ed:14:4b: 86:21:a0:5c:97:b1:4c:01:95:f9:91:cc:24:46:98: 33:86:d4:4b:7c:3d:6a:7b:1b:d8:56:bd:86:4e:5f: 1e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D9:B8:FB:05:C6:51:4E:BE:F4:43:65:22:E0:83:AD:0B:42:C5:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a3a86832-216e-315f-a33c-8fc2121df4c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0a:fe:df:30:16:b6:4a:aa:82:d1:b7:17:d9:83:fa:70:39: e7:40:53:8f:7e:73:0f:36:d2:be:1f:20:77:3e:53:4f:78:4d: 03:5d:15:b0:10:b8:10:66:27:d8:e3:1f:7d:ed:b1:1b:a1:0e: 81:ee:b7:85:40:f0:81:25:69:1f:e2:41:de:78:ed:ca:f4:d9: 05:98:78:86:80:95:2b:15:95:65:06:c5:42:65:e9:42:5e:df: 62:cd:2d:51:27:d0:65:d6:48:1f:b8:50:ed:c9:23:28:ea:bc: ae:47:48:0b:17:38:4f:55:ac:71:98:a0:cc:18:38:14:26:37: b0:bf:35:34:d1:0f:74:5b:04:1e:ca:c6:d7:16:eb:73:dd:ca: 93:e2:29:3b:63:be:ad:c2:8c:f2:25:69:44:9d:e6:86:74:0c: 5b:db:b6:fa:13:3c:0b:47:f1:af:d8:2a:91:1e:81:39:5f:46: 67:47:c9:fe:e9:48:ba:ce:45:07:9e:9f:e2:35:c3:e5:a5:b8: 31:e1:a9:ec:4e:70:f7:fc:37:5b:27:99:1d:37:fe:9b:e7:11: 68:3c:35:ad:ac:b6:13:27:7a:d4:cc:72:6e:a6:07:32:a7:f9: 38:8d:7d:f4:3f:42:0d:a4:c2:0e:3b:9a:ad:89:f0:6e:d9:01: f8:88:be:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNr1X1uW+/h0DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk NWQyMTg5YTYtOWVhZC00NGQ4LTk4N2UtYTQwOWQxZTZjY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6XcGFnXIX7+3l45UU+IKPP4ayRRH7sEz/7P XMIsE6Psl6Sbi/NJViSOZ45cEVJ24ZcIEz3pxSktsnQpAdfD0w2vokU8XkO6oCfH AeymDw2NgDjErzfZfeseZNUSjFPqSqE5kvmXA+wR/dpNHETFIXk1+k3xY4jYK7tH btdmdmV0S9LURWxMAB1TJw9iHmnW7W1u9ctw80bwsmeJAokh0d3TXVqAUACIU9IR BEXFBtPJHbMBwbs/zOyRlHkzOPMlGgSJcmHGRn0T8THuN4w0fDchnSQrQcpUaFhk WTPtFEuGIaBcl7FMAZX5kcwkRpgzhtRLfD1qexvYVr2GTl8e5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALZuPsFxlFOvvRDZSLgg60LQsXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTNhODY4MzItMjE2ZS0z MTVmLWEzM2MtOGZjMjEyMWRmNGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0K/t8wFrZKqoLRtxfZg/pwOedAU49+cw820r4fIHc+U094TQNdFbAQ uBBmJ9jjH33tsRuhDoHut4VA8IElaR/iQd547cr02QWYeIaAlSsVlWUGxUJl6UJe 32LNLVEn0GXWSB+4UO3JIyjqvK5HSAsXOE9VrHGYoMwYOBQmN7C/NTTRD3RbBB7K xtcW63PdypPiKTtjvq3CjPIlaUSd5oZ0DFvbtvoTPAtH8a/YKpEegTlfRmdHyf7p SLrORQeen+I1w+WluDHhqexOcPf8N1snmR03/pvnEWg8Na2sthMnetTMcm6mBzKn +TiNffQ/Qg2kwg47mq2J8G7ZAfiIvj8= -----END CERTIFICATE-----Generated at Mon Jul 13 02:53:06 2026 by rpki-client