$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa File: b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa (raw, json) Hash identifier: A57gwjcC1XcpfNRIp+2kNVmm4Fzb17sGn8lrNCFiEmc= Subject key identifier: 18:59:6B:ED:9C:70:AC:F4:47:FE:7F:8D:E7:00:DE:58:33:A5:A2:3E Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CB981F7A0F3D4131C62BF1780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.204.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:f7:a0:f3:d4:13:1c:62:bf:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=d0faea19-b55a-42e2-a8de-9ead38109b8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:db:18:36:a1:58:5f:a3:b8:f7:0f:2c:3d:67: d4:f7:74:b5:01:3f:a7:ab:93:08:86:2c:2c:3a:e1: ea:73:e9:00:31:aa:34:70:13:7b:59:64:ea:0a:95: 64:2f:41:b0:8f:f1:23:c4:15:ba:d3:02:a3:0b:f2: 2e:4b:1f:0f:6b:da:33:63:4a:e5:dc:e8:dd:82:82: 43:f9:86:7f:57:a6:98:21:2e:ea:37:55:72:e6:72: ee:3c:88:aa:e3:87:19:46:8b:41:84:1d:3b:34:6a: 45:98:c5:b7:8d:b3:10:45:e3:00:86:31:78:1a:89: 10:97:f6:ba:ec:a6:41:65:1b:9a:33:97:b2:66:78: 43:51:39:17:b8:16:51:c1:10:27:bf:65:9a:2e:27: 07:a1:8a:9f:86:7d:0b:6e:12:7a:31:9e:b0:db:dc: 00:b8:90:3f:55:31:19:2b:6e:84:38:e5:8d:82:c7: e4:56:df:86:33:b7:76:51:b1:dc:b1:c4:0f:88:3d: c6:5c:fd:93:6a:6e:47:32:78:61:79:09:51:79:53: d3:8c:d7:05:3d:8b:95:85:4b:ce:81:a0:9f:9a:87: 6b:ca:6e:31:8a:be:0b:a2:71:97:d2:e6:db:3f:40: 4f:de:82:43:96:54:54:4e:89:77:d1:be:90:b1:da: 15:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:59:6B:ED:9C:70:AC:F4:47:FE:7F:8D:E7:00:DE:58:33:A5:A2:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b9f35f49-3bfe-388b-a94f-6f9f3dd1f08d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:95:81:f2:eb:1f:53:5d:90:80:3b:4a:a7:7f:73:fa:17:f6: 18:ed:0f:95:5e:c4:ff:a8:bb:74:52:57:c4:ff:ba:d1:bb:26: 31:08:2c:39:15:c6:ff:25:ea:ad:da:d9:8a:be:70:07:d7:f3: dc:f2:78:51:29:7b:b5:98:13:9c:f1:97:a7:7d:be:f9:b8:09: e0:0b:47:96:e2:db:af:4b:61:5d:9a:73:8e:9f:d5:a4:23:59: 25:d5:01:a0:84:ac:13:73:6e:2b:7a:11:7a:f0:9f:e2:b5:ea: 61:d0:37:5d:82:e4:2c:c6:36:f8:08:9e:64:a8:17:0d:89:2e: b4:e5:ee:fa:97:43:bc:2d:2f:fd:f1:58:31:3b:94:37:58:1e: 04:98:74:e5:00:d9:e0:c6:aa:16:9c:4d:f3:9c:90:1f:12:dc: d9:f5:ef:6c:f3:ee:02:c7:56:70:b6:19:98:17:ae:ad:48:c4: 26:e9:9d:a4:7f:2f:df:2a:e0:32:03:26:f1:7e:52:a3:70:88: fd:36:af:0f:5a:26:e3:f2:83:f9:45:e7:50:5f:6d:84:eb:d5: 95:d0:8c:a1:de:ff:f7:2d:85:8d:10:20:2f:ea:5c:bb:0a:cc: 57:3b:48:d1:0c:df:c4:dc:49:0b:93:27:71:80:13:d2:b6:98: 3f:9c:75:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gfeg89QTHGK/F4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ZDBmYWVhMTktYjU1YS00MmUyLWE4ZGUtOWVhZDM4MTA5YjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtsYNqFYX6O49w8sPWfU93S1AT+nq5MIhiws OuHqc+kAMao0cBN7WWTqCpVkL0Gwj/EjxBW60wKjC/IuSx8Pa9ozY0rl3OjdgoJD +YZ/V6aYIS7qN1Vy5nLuPIiq44cZRotBhB07NGpFmMW3jbMQReMAhjF4GokQl/a6 7KZBZRuaM5eyZnhDUTkXuBZRwRAnv2WaLicHoYqfhn0LbhJ6MZ6w29wAuJA/VTEZ K26EOOWNgsfkVt+GM7d2UbHcscQPiD3GXP2Tam5HMnhheQlReVPTjNcFPYuVhUvO gaCfmodrym4xir4LonGX0ubbP0BP3oJDllRUTol30b6QsdoV0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBhZa+2ccKz0R/5/jecA3lgzpaI+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjlmMzVmNDktM2JmZS0z ODhiLWE5NGYtNmY5ZjNkZDFmMDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGVgfLrH1NdkIA7Sqd/c/oX9hjtD5VexP+ou3RSV8T/utG7JjEILDkV xv8l6q3a2Yq+cAfX89zyeFEpe7WYE5zxl6d9vvm4CeALR5bi269LYV2ac46f1aQj WSXVAaCErBNzbit6EXrwn+K16mHQN12C5CzGNvgInmSoFw2JLrTl7vqXQ7wtL/3x WDE7lDdYHgSYdOUA2eDGqhacTfOckB8S3Nn172zz7gLHVnC2GZgXrq1IxCbpnaR/ L98q4DIDJvF+UqNwiP02rw9aJuPyg/lF51BfbYTr1ZXQjKHe//cthY0QIC/qXLsK zFc7SNEM38TcSQuTJ3GAE9K2mD+cdUQ= -----END CERTIFICATE-----Generated at Thu Feb 26 03:28:02 2026 by rpki-client