$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa File: d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa (raw, json) Hash identifier: md7qaMyM3WdOe+WZS9/FtaRtSdd3MA6yISIuz7IjMKY= Subject key identifier: 88:F4:E5:75:51:89:DA:80:46:88:E7:E7:43:15:FD:21:F9:F0:23:E3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E709F796BEF537F041FFE9C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa Signing time: Thu 09 Jul 2026 09:00:13 +0000 ROA not before: Thu 09 Jul 2026 09:00:13 +0000 ROA not after: Wed 07 Oct 2026 09:00:13 +0000 asID: 31898 IP address blocks: 140.91.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:70:9f:79:6b:ef:53:7f:04:1f:fe:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 9 09:00:13 2026 GMT Not After : Oct 7 09:00:13 2026 GMT Subject: CN=2231adaf-938f-4630-99a6-562efffe20c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0a:17:ef:66:40:66:4e:9f:0e:89:34:f3:fb: ac:5c:02:14:dd:75:50:22:12:66:63:17:d2:6b:fb: 94:2b:e6:8b:83:5f:04:9a:ea:81:e3:ec:aa:82:ab: b9:47:f9:c4:4b:92:16:7c:e5:58:a8:69:1b:de:72: ce:ef:25:a5:6b:fe:2c:fd:c2:02:a7:c9:4b:18:fb: a7:23:12:00:16:73:aa:f4:ea:c8:ce:46:be:c4:16: 57:3a:c8:57:df:3d:d2:07:43:c6:e8:b2:2d:e2:44: 7a:72:c1:f3:6c:67:68:13:2a:26:1d:72:f7:c4:d1: 38:b8:71:c8:79:00:ab:cc:fe:e4:77:1b:28:be:09: dc:36:4e:d9:26:8b:07:5e:af:36:13:a7:18:d8:8a: 0c:34:76:29:97:a5:78:03:f7:bf:97:98:92:fa:a4: 31:63:03:4a:e9:8c:1c:49:06:47:ef:50:29:83:e7: 3e:46:0c:e2:b2:a1:db:cf:df:23:55:f7:e7:d3:a1: 4a:99:d9:24:62:f6:a6:28:37:1e:5d:f1:9a:9e:e7: 8f:c9:ea:a2:f6:26:42:97:c1:30:59:61:55:c9:13: c9:dc:6b:43:e8:96:f8:42:c9:78:a8:b0:58:f1:ce: 72:6a:0f:bb:e3:df:88:43:59:1c:44:3a:31:7e:2e: 91:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F4:E5:75:51:89:DA:80:46:88:E7:E7:43:15:FD:21:F9:F0:23:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d2d2d74e-1a25-327a-ac00-ac51bfcbbcc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:2a:7a:56:1a:09:d7:18:2b:a4:3c:73:5e:1e:f4:e1:74:31: 79:9a:f4:b1:af:92:a5:bb:a6:c9:9e:6b:d6:f3:44:e0:20:51: f2:08:d0:4f:37:df:40:f3:eb:f6:26:51:59:91:da:0d:fe:28: a9:d4:1f:a6:0f:74:1e:b1:1d:f8:c1:d7:c8:f0:d5:2d:c6:9f: 93:45:0b:7b:db:f4:08:a5:f8:f2:6c:8e:be:9a:70:ec:45:81: c4:5c:a3:4e:51:52:bb:3c:19:5d:9d:2c:1d:56:28:4f:a7:d3: 1c:64:69:30:65:46:22:92:fb:c6:34:da:b9:69:26:16:45:50: 83:8f:1d:5a:32:ec:f5:38:14:5a:3a:d3:4f:09:c6:13:55:90: f2:52:69:b2:f3:e8:fa:1a:e2:fc:4b:f9:79:23:10:55:87:53: 8b:56:a4:31:2c:49:d5:81:4d:c2:ad:83:60:23:73:87:e8:5a: 02:d5:cb:c0:ea:ec:b9:87:8e:f3:35:e8:1d:8d:31:a9:1a:d6: b6:d1:cd:97:fc:76:f0:fa:9a:d3:14:19:d2:07:e2:c6:87:03: 90:93:59:85:6e:df:dd:68:1e:9c:9c:96:e0:18:80:b7:4a:45: 13:f1:e7:18:10:45:02:93:8e:e0:a8:df:82:04:f5:af:e6:ef: b8:ed:23:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5wn3lr71N/BB/+nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwOTA5MDAxM1oXDTI2MTAwNzA5MDAxM1owLzEtMCsGA1UEAxMk MjIzMWFkYWYtOTM4Zi00NjMwLTk5YTYtNTYyZWZmZmUyMGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAoX72ZAZk6fDok08/usXAIU3XVQIhJmYxfS a/uUK+aLg18EmuqB4+yqgqu5R/nES5IWfOVYqGkb3nLO7yWla/4s/cICp8lLGPun IxIAFnOq9OrIzka+xBZXOshX3z3SB0PG6LIt4kR6csHzbGdoEyomHXL3xNE4uHHI eQCrzP7kdxsovgncNk7ZJosHXq82E6cY2IoMNHYpl6V4A/e/l5iS+qQxYwNK6Ywc SQZH71Apg+c+RgzisqHbz98jVffn06FKmdkkYvamKDceXfGanuePyeqi9iZCl8Ew WWFVyRPJ3GtD6Jb4Qsl4qLBY8c5yag+749+IQ1kcRDoxfi6RqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj05XVRidqARojn50MV/SH58CPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDJkMmQ3NGUtMWEyNS0z MjdhLWFjMDAtYWM1MWJmY2JiY2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4qelYaCdcYK6Q8c14e9OF0MXma9LGvkqW7psmea9bzROAgUfII0E83 30Dz6/YmUVmR2g3+KKnUH6YPdB6xHfjB18jw1S3Gn5NFC3vb9Ail+PJsjr6acOxF gcRco05RUrs8GV2dLB1WKE+n0xxkaTBlRiKS+8Y02rlpJhZFUIOPHVoy7PU4FFo6 008JxhNVkPJSabLz6Poa4vxL+XkjEFWHU4tWpDEsSdWBTcKtg2Ajc4foWgLVy8Dq 7LmHjvM16B2NMaka1rbRzZf8dvD6mtMUGdIH4saHA5CTWYVu391oHpycluAYgLdK RRPx5xgQRQKTjuCo34IE9a/m77jtI20= -----END CERTIFICATE-----Generated at Mon Jul 13 02:47:06 2026 by rpki-client