$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa File: cf7e073c-165b-3ad9-8846-77672348ef57.roa (raw, json) Hash identifier: +N6/6/fRMSSvxLLo2OOx2xKD0Zuds78wGW1vOXYV2A0= Subject key identifier: 27:C2:15:33:47:91:19:D1:7E:4C:32:22:F6:F4:C2:58:12:E3:27:CB Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1CA9F76F6E53CCA9A1800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.204.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:ca:9f:76:f6:e5:3c:ca:9a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=2a656eb9-fef3-4a30-93f8-ce2f5a1fba4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b8:b1:bb:95:da:4b:01:fb:23:f3:8f:f0:ce: f8:79:65:1b:8f:28:09:a0:57:66:83:ba:aa:cf:80: 64:af:46:1e:0a:2a:5d:32:dd:f6:a4:01:4b:95:19: ea:e6:63:43:60:c6:79:60:a2:f4:84:da:c5:37:a6: ec:e2:de:6e:4f:32:5b:29:ef:db:37:0f:96:fe:79: a9:0d:90:0e:50:53:63:ce:81:2a:b9:01:41:5a:14: 38:7c:c0:96:90:22:a0:61:12:0b:cc:93:52:f2:1d: 21:d6:f6:f6:0e:54:e8:18:05:8b:55:15:31:39:c2: 90:b3:40:b0:ec:30:ab:a6:8c:6c:65:64:83:91:98: 10:34:32:07:86:9c:5f:d9:44:a6:3f:76:e1:c5:53: 86:91:68:c1:5f:dc:9c:bf:76:4f:04:2e:b9:39:1c: 64:41:ee:fd:e6:92:b5:f2:c2:b0:10:c8:7d:5c:7a: d6:06:a7:dc:a3:57:96:47:94:3b:f0:9c:2a:53:88: 09:4c:46:7c:ec:98:89:cf:a7:17:1f:4e:29:f7:7d: dd:dd:6f:af:d7:4a:36:d0:e1:75:c1:a2:02:dc:24: f5:93:63:f8:75:3b:ef:a3:87:e4:86:7e:e3:dc:a2: 14:0c:13:6c:99:89:32:73:eb:fe:9f:1c:17:a3:e9: 00:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C2:15:33:47:91:19:D1:7E:4C:32:22:F6:F4:C2:58:12:E3:27:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf7e073c-165b-3ad9-8846-77672348ef57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:74:15:a6:84:8f:6b:41:d1:46:2b:ef:84:74:01:8a:f3:50: 6e:85:d9:17:5c:c7:b2:a9:7a:7d:b7:3f:c3:04:eb:14:7c:53: 7f:2a:3f:e3:3f:9a:08:c9:56:ad:bc:4a:ef:70:6d:e5:b1:7d: 61:83:9a:9d:9c:d7:a6:36:ff:ee:f4:3c:07:14:c4:fe:7a:db: cd:6c:27:8f:c2:b5:e3:37:b6:89:82:cd:4a:fc:b7:4e:f3:b1: 52:dc:a3:55:bb:8f:ef:ef:2e:7b:2f:de:f7:75:27:7d:86:16: d2:16:54:73:17:6c:92:30:b4:ee:b8:69:8c:0e:de:51:b6:a5: 3e:27:22:35:06:19:2e:88:c9:ee:49:c6:fb:56:56:7b:c1:c0: 1e:81:36:f4:f9:e0:59:02:d9:20:f6:13:61:96:b2:84:2a:2c: dc:59:06:5b:59:8f:6f:2f:92:e2:18:13:38:61:46:ea:b9:2c: 7b:56:89:89:79:69:79:17:24:8d:ca:e7:1a:b1:1a:d0:bc:aa: 18:59:7c:90:c2:29:21:b1:d4:18:c2:13:89:ce:84:97:a9:4e: 72:30:eb:e3:a5:eb:6f:98:1b:11:b8:fe:e0:27:ae:85:27:be: 2a:85:41:dc:dc:0d:3a:c2:88:28:66:55:1f:e3:f1:78:15:ae: 0b:8a:09:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cqfdvblPMqaGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk MmE2NTZlYjktZmVmMy00YTMwLTkzZjgtY2UyZjVhMWZiYTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ixu5XaSwH7I/OP8M74eWUbjygJoFdmg7qq z4Bkr0YeCipdMt32pAFLlRnq5mNDYMZ5YKL0hNrFN6bs4t5uTzJbKe/bNw+W/nmp DZAOUFNjzoEquQFBWhQ4fMCWkCKgYRILzJNS8h0h1vb2DlToGAWLVRUxOcKQs0Cw 7DCrpoxsZWSDkZgQNDIHhpxf2USmP3bhxVOGkWjBX9ycv3ZPBC65ORxkQe795pK1 8sKwEMh9XHrWBqfco1eWR5Q78JwqU4gJTEZ87JiJz6cXH04p933d3W+v10o20OF1 waIC3CT1k2P4dTvvo4fkhn7j3KIUDBNsmYkyc+v+nxwXo+kAZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfCFTNHkRnRfkwyIvb0wlgS4yfLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2Y3ZTA3M2MtMTY1Yi0z YWQ5LTg4NDYtNzc2NzIzNDhlZjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI10FaaEj2tB0UYr74R0AYrzUG6F2Rdcx7Kpen23P8ME6xR8U38qP+M/ mgjJVq28Su9wbeWxfWGDmp2c16Y2/+70PAcUxP56281sJ4/CteM3tomCzUr8t07z sVLco1W7j+/vLnsv3vd1J32GFtIWVHMXbJIwtO64aYwO3lG2pT4nIjUGGS6Iye5J xvtWVnvBwB6BNvT54FkC2SD2E2GWsoQqLNxZBltZj28vkuIYEzhhRuq5LHtWiYl5 aXkXJI3K5xqxGtC8qhhZfJDCKSGx1BjCE4nOhJepTnIw6+Ol62+YGxG4/uAnroUn viqFQdzcDTrCiChmVR/j8XgVrguKCSc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:30:34 2026 by rpki-client