$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa File: d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa (raw, json) Hash identifier: rsSfoRzzXKanCEYFaMsiXQS+jVAV+muCBSM8Ttrb5i0= Subject key identifier: 03:5D:71:92:08:53:31:32:90:3F:7E:83:CB:73:F2:43:2D:22:C4:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E66DA3C15B12B82A3A572CB80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 31898 IP address blocks: 140.238.32.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:3c:15:b1:2b:82:a3:a5:72:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=8f90c35a-4cef-4f73-a770-9462a6089eac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:e8:46:ce:75:1e:ce:0e:c1:1f:d0:2f:66: 14:62:fa:08:d9:02:48:1f:fa:67:cd:c0:29:36:22: 4f:95:ef:e4:32:ca:59:b9:31:e1:d5:3b:b1:4a:4a: 03:65:e1:e4:81:0c:6f:5c:00:02:2a:2a:1e:fe:d5: 93:90:20:b2:33:7e:ef:5d:ab:6b:80:5c:10:47:3f: 27:61:96:0c:51:e1:e9:ca:5a:de:dc:15:46:7a:8a: f1:06:be:24:7d:d7:17:12:55:81:74:3b:62:e3:a7: 8a:2d:ce:48:18:fe:37:22:e5:d5:a2:a0:c4:83:cf: 98:1f:e1:74:b4:c1:97:38:b2:4f:80:0f:1c:a5:7a: ec:36:8b:2b:aa:ba:b3:25:57:e0:88:67:24:7f:f1: 8a:58:91:31:5a:4c:e6:05:0d:0a:3a:33:3e:f2:90: d9:38:d7:c0:94:0c:e3:06:8a:7c:7d:cb:fb:71:34: 5a:94:64:b4:61:0c:6b:80:85:ca:de:b1:65:09:ff: 2d:d6:0e:6d:ff:9f:02:b9:ec:45:5a:f2:c0:ea:33: 66:4f:23:06:b3:9d:fd:18:a8:f7:7e:7b:03:c4:f5: a4:27:32:c7:b3:d4:81:36:11:42:92:eb:d4:a3:d8: e3:9b:9d:dc:f7:83:d8:d0:01:3f:71:7b:4b:06:bd: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5D:71:92:08:53:31:32:90:3F:7E:83:CB:73:F2:43:2D:22:C4:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d3ad39a7-12ca-3692-98e6-8e6fd277aabd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a3:93:28:f7:b2:65:91:67:40:d1:ff:2b:33:3b:6d:3a:6c: 5f:c2:90:f5:85:2c:ca:ab:71:4a:03:c4:37:58:c6:ac:11:15: 3f:e9:ff:1a:91:96:50:62:fd:8c:00:95:7a:4e:09:f3:d5:4f: e8:89:ec:75:9b:76:f0:e4:79:31:34:ce:d9:8c:de:f8:3f:9b: 71:58:49:52:b3:15:8b:b3:2a:02:05:60:5d:04:0c:14:41:ab: c4:d8:03:b6:71:41:00:ba:6f:b5:4e:81:e2:e3:ce:fc:c3:95: c7:92:69:18:f6:52:22:f5:7a:df:56:db:3f:5c:0c:6c:39:4a: 08:86:10:a2:6f:ad:c4:78:68:df:cc:30:14:f4:a7:41:2f:bc: b1:8b:27:ed:d7:3c:84:67:9d:67:7d:9f:82:19:c4:88:2e:ca: a3:41:31:e1:0d:45:7a:ae:e2:e9:ae:1a:fc:bb:93:33:c5:d0: 1f:53:54:1e:61:88:cf:97:9f:27:e8:09:74:16:bf:d0:98:3a: 8c:ca:39:88:9e:a8:1e:6e:41:e0:35:8e:a7:a2:cf:e6:ea:57: b5:07:ae:05:4d:07:ca:fb:02:85:78:6f:56:5d:d6:4b:ba:77: 28:06:cf:3b:58:4a:9a:b0:ad:04:e7:92:b3:0c:d1:5d:08:ce: d4:49:78:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2jwVsSuCo6Vyy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk OGY5MGMzNWEtNGNlZi00ZjczLWE3NzAtOTQ2MmE2MDg5ZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHzoRs51Hs4OwR/QL2YUYvoI2QJIH/pnzcAp NiJPle/kMspZuTHh1TuxSkoDZeHkgQxvXAACKioe/tWTkCCyM37vXatrgFwQRz8n YZYMUeHpylre3BVGeorxBr4kfdcXElWBdDti46eKLc5IGP43IuXVoqDEg8+YH+F0 tMGXOLJPgA8cpXrsNosrqrqzJVfgiGckf/GKWJExWkzmBQ0KOjM+8pDZONfAlAzj Bop8fcv7cTRalGS0YQxrgIXK3rFlCf8t1g5t/58CuexFWvLA6jNmTyMGs539GKj3 fnsDxPWkJzLHs9SBNhFCkuvUo9jjm53c94PY0AE/cXtLBr3WcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANdcZIIUzEykD9+g8tz8kMtIsR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDNhZDM5YTctMTJjYS0z NjkyLTk4ZTYtOGU2ZmQyNzdhYWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISjkyj3smWRZ0DR/yszO206bF/CkPWFLMqrcUoDxDdYxqwRFT/p/xqR llBi/YwAlXpOCfPVT+iJ7HWbdvDkeTE0ztmM3vg/m3FYSVKzFYuzKgIFYF0EDBRB q8TYA7ZxQQC6b7VOgeLjzvzDlceSaRj2UiL1et9W2z9cDGw5SgiGEKJvrcR4aN/M MBT0p0EvvLGLJ+3XPIRnnWd9n4IZxIguyqNBMeENRXqu4umuGvy7kzPF0B9TVB5h iM+XnyfoCXQWv9CYOozKOYieqB5uQeA1jqeiz+bqV7UHrgVNB8r7AoV4b1Zd1ku6 dygGzztYSpqwrQTnkrMM0V0IztRJeAw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:51:36 2026 by rpki-client