$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa File: d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa (raw, json) Hash identifier: 4NmNZrL0/md4g0TVTAq7w2jMTvPumLTvjAmDt1eN8Iw= Subject key identifier: 1D:DF:34:AC:09:4E:26:5A:12:A1:FB:CB:8E:DC:6D:F6:29:50:F4:8C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC82819BF0EA36ABC29B00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.91.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:82:81:9b:f0:ea:36:ab:c2:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=dc5768d8-2f07-4d7f-953e-9726b3e3533a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:82:c9:bf:ff:10:af:e0:9c:da:30:74:e0:6d: 83:bc:83:b7:20:1b:d2:04:0f:45:a0:91:1f:84:44: 98:2d:5d:df:39:d1:f2:42:77:9d:2b:b8:a3:e2:f3: 56:4f:50:3a:ac:23:77:41:fe:d5:47:2d:8e:2d:45: 81:40:e8:11:65:4b:b9:b3:ed:68:36:57:6b:7f:33: 42:84:0c:53:a9:6a:74:c9:1e:8b:9c:de:31:51:bc: 01:a6:e3:73:fb:45:d2:af:12:51:d0:09:20:c8:0a: db:31:22:a8:26:bb:a4:2c:b5:f2:99:21:ec:d2:57: f6:ef:6d:7a:a8:ab:cb:2d:21:15:80:6f:10:a8:46: b6:c9:0e:70:2f:aa:c4:2a:25:ef:cd:af:52:eb:3d: 19:69:c0:49:b0:87:65:b7:d2:e3:9a:ad:80:92:29: 19:a2:1f:44:85:ba:43:83:63:e0:fc:00:3f:d9:1d: 07:66:68:1b:23:9b:f8:94:25:d0:c2:e3:59:b2:be: fa:e9:27:97:ab:a1:10:b8:55:08:35:11:01:5f:97: a4:37:40:21:00:58:f8:31:fa:e5:9c:a1:70:6b:0e: c2:c9:ce:2b:b6:d9:ca:bc:4e:95:b4:5e:20:e9:d5: 4b:dd:1a:a3:18:11:f7:da:3c:4c:65:a4:90:c5:58: a5:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:34:AC:09:4E:26:5A:12:A1:FB:CB:8E:DC:6D:F6:29:50:F4:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:35:2b:10:28:4a:f7:34:47:7f:59:df:5c:96:6f:67:76:2f: ad:a5:5f:8a:4e:cf:5c:26:53:97:c3:76:b9:6f:62:94:4e:82: 9b:b2:57:dc:7d:fa:ec:e4:32:eb:fc:67:8b:98:58:58:81:61: e3:e3:1f:a4:91:c5:58:45:ff:7c:a0:f2:a6:2f:ef:9f:a0:4f: d8:43:9c:db:49:16:f5:02:a0:b5:6f:a6:a4:e3:29:8f:d5:04: 16:01:83:51:a4:e2:70:1f:a6:87:f6:78:1d:76:7d:69:5e:07: 02:d7:2a:7c:81:86:73:29:88:63:d0:a3:a0:06:e9:1e:e6:2a: 25:e6:22:f0:6e:07:aa:2e:92:c8:4a:bb:9c:aa:0f:07:29:6f: 0a:71:01:c1:a9:89:ef:8d:71:c4:e5:63:b5:1f:a5:99:98:49: cc:27:c3:2a:81:21:2a:59:c2:73:63:1b:d8:d2:b6:2e:55:1c: 4a:7a:54:b1:33:b5:45:26:b2:04:cf:24:43:bc:56:e6:a0:a8: 0a:c1:c1:55:4b:c1:27:22:e7:bc:d3:87:52:4c:20:2a:67:b1: 2c:6c:db:87:b4:29:2c:1b:05:55:e8:04:7c:ef:d5:11:8d:95: 65:c0:37:b3:de:d7:14:e0:f8:a0:02:26:12:5c:b9:90:02:30: fe:9e:9b:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIKBm/DqNqvCmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZGM1NzY4ZDgtMmYwNy00ZDdmLTk1M2UtOTcyNmIzZTM1MzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgILJv/8Qr+Cc2jB04G2DvIO3IBvSBA9FoJEf hESYLV3fOdHyQnedK7ij4vNWT1A6rCN3Qf7VRy2OLUWBQOgRZUu5s+1oNldrfzNC hAxTqWp0yR6LnN4xUbwBpuNz+0XSrxJR0AkgyArbMSKoJrukLLXymSHs0lf27216 qKvLLSEVgG8QqEa2yQ5wL6rEKiXvza9S6z0ZacBJsIdlt9Ljmq2AkikZoh9EhbpD g2Pg/AA/2R0HZmgbI5v4lCXQwuNZsr766SeXq6EQuFUINREBX5ekN0AhAFj4Mfrl nKFwaw7Cyc4rttnKvE6VtF4g6dVL3RqjGBH32jxMZaSQxVilTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3fNKwJTiZaEqH7y47cbfYpUPSMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDJkMmQ3NGUtMWEyNS0z MjdhLWFjMDAtYWM1MWJmY2JiY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADY1KxAoSvc0R39Z31yWb2d2L62lX4pOz1wmU5fDdrlvYpROgpuyV9x9 +uzkMuv8Z4uYWFiBYePjH6SRxVhF/3yg8qYv75+gT9hDnNtJFvUCoLVvpqTjKY/V BBYBg1Gk4nAfpof2eB12fWleBwLXKnyBhnMpiGPQo6AG6R7mKiXmIvBuB6oukshK u5yqDwcpbwpxAcGpie+NccTlY7UfpZmYScwnwyqBISpZwnNjG9jSti5VHEp6VLEz tUUmsgTPJEO8VuagqArBwVVLwSci57zTh1JMICpnsSxs24e0KSwbBVXoBHzv1RGN lWXAN7Pe1xTg+KACJhJcuZACMP6emzc= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:18 2026 by rpki-client