$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa File: bfac7b22-b2ac-302d-aec1-af28620955f3.roa (raw, json) Hash identifier: lwPA32QQFZfTCDUjiPdDUxw/Ys54s1LZBiP1dNuUEvE= Subject key identifier: 83:14:54:06:27:BE:5A:A3:1F:21:CA:5A:E0:41:5C:7B:BA:A1:C6:D4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A3154F422ED8F62B267E0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.204.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:31:54:f4:22:ed:8f:62:b2:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=0985f0d9-50a2-427a-8f05-02d17b0f2f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e9:1d:c5:3b:d0:e6:41:e8:f5:09:a3:8c:7d: 3b:72:67:98:dc:7a:fb:12:5f:9c:96:7b:8b:df:4d: 83:91:3a:3b:0e:c5:ce:0e:f3:2a:c1:b5:ad:4f:9d: db:d1:4e:25:34:07:3a:ae:3a:dd:e9:7e:ab:3f:8d: 77:09:e2:14:21:22:37:43:ec:93:85:48:df:8f:94: 20:55:3b:d9:32:09:79:99:0a:7e:d4:c1:d0:15:d2: 0d:65:6c:93:e8:e9:cb:9d:8a:dc:fa:fa:c7:54:5f: 10:ab:65:b5:d9:cd:f0:e0:5f:8a:24:c8:87:63:9d: 7b:77:f5:8c:86:a5:05:1c:39:af:db:c7:74:de:91: af:f9:7d:3e:2e:aa:06:35:ba:7b:06:1b:0e:51:fd: 29:8c:62:63:16:30:5c:1f:f6:54:ee:92:df:a3:90: 72:b7:f4:a1:3a:7a:aa:be:e3:ce:92:ff:67:f2:dd: d7:a8:ca:f3:15:f3:33:f9:fa:d8:be:3f:27:0e:fc: d0:9b:ac:97:79:16:66:f9:46:02:1d:0c:a2:93:4b: e6:4f:fc:ef:f6:da:e4:e6:5a:68:f6:21:5f:1c:30: 22:09:f0:4c:02:45:2d:ec:a3:2b:a6:90:e0:8b:ce: 25:94:b4:08:ec:38:29:d2:89:c7:69:26:3f:3e:fc: 17:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:14:54:06:27:BE:5A:A3:1F:21:CA:5A:E0:41:5C:7B:BA:A1:C6:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bfac7b22-b2ac-302d-aec1-af28620955f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:45:bb:cf:b8:38:83:47:68:86:ac:65:08:23:43:d4:fb:8d: fe:27:a7:3d:f0:e8:be:88:28:61:fa:2a:71:b6:fc:3b:ba:5f: 7d:83:8a:88:33:be:ce:20:63:a9:db:15:a5:3b:4f:3d:4c:0a: bf:ac:2a:00:07:aa:52:f0:c6:2d:29:6e:13:b8:f7:21:c0:6c: b8:c8:6c:1e:2d:ab:ad:8f:77:9a:40:b1:df:9b:b4:a5:68:39: 4d:6a:d4:2a:fe:c1:45:15:31:ba:19:47:75:e0:b1:2f:48:30: 8e:ed:50:9b:07:1d:73:23:db:ad:43:d7:42:27:79:34:58:a2: ca:be:bd:4a:f5:5e:53:8a:75:be:cb:8e:07:7e:f3:0d:76:d7: c8:c7:1f:b6:1e:05:6e:9e:06:99:db:fe:1c:ac:3a:09:78:e2: e3:50:1d:51:11:b4:c4:f0:53:19:ea:78:49:71:50:4c:0a:21: 87:65:b9:2c:cd:c2:b5:cf:93:b3:f2:64:bd:81:a8:5a:e5:5f: 15:2d:da:b5:20:0b:a3:5d:46:fc:a8:eb:5b:6a:ba:8c:03:c4: 83:20:81:de:eb:7d:78:05:be:bc:ca:c2:9a:76:d4:60:05:e1: a0:d0:c2:04:a7:30:3c:43:07:5f:8d:f0:74:f9:19:0a:ce:15: 25:f2:3a:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCjFU9CLtj2KyZ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MDk4NWYwZDktNTBhMi00MjdhLThmMDUtMDJkMTdiMGYyZjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ukdxTvQ5kHo9QmjjH07cmeY3Hr7El+clnuL 302DkTo7DsXODvMqwbWtT53b0U4lNAc6rjrd6X6rP413CeIUISI3Q+yThUjfj5Qg VTvZMgl5mQp+1MHQFdINZWyT6OnLnYrc+vrHVF8Qq2W12c3w4F+KJMiHY517d/WM hqUFHDmv28d03pGv+X0+LqoGNbp7BhsOUf0pjGJjFjBcH/ZU7pLfo5Byt/ShOnqq vuPOkv9n8t3XqMrzFfMz+frYvj8nDvzQm6yXeRZm+UYCHQyik0vmT/zv9trk5lpo 9iFfHDAiCfBMAkUt7KMrppDgi84llLQI7Dgp0onHaSY/PvwXDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMUVAYnvlqjHyHKWuBBXHu6ocbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmZhYzdiMjItYjJhYy0z MDJkLWFlYzEtYWYyODYyMDk1NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9Fu8+4OINHaIasZQgjQ9T7jf4npz3w6L6IKGH6KnG2/Du6X32Diogz vs4gY6nbFaU7Tz1MCr+sKgAHqlLwxi0pbhO49yHAbLjIbB4tq62Pd5pAsd+btKVo OU1q1Cr+wUUVMboZR3XgsS9IMI7tUJsHHXMj261D10IneTRYosq+vUr1XlOKdb7L jgd+8w1218jHH7YeBW6eBpnb/hysOgl44uNQHVERtMTwUxnqeElxUEwKIYdluSzN wrXPk7PyZL2BqFrlXxUt2rUgC6NdRvyo61tquowDxIMggd7rfXgFvrzKwpp21GAF 4aDQwgSnMDxDB1+N8HT5GQrOFSXyOrE= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:34 2026 by rpki-client