$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa File: d439a7f2-8439-3bbb-8cf3-52a351b70849.roa (raw, json) Hash identifier: 9CKqO3SMeCAwGFsQNRSUOp96zfePGkHjUgxNYZeamXs= Subject key identifier: 84:08:D3:29:06:6F:91:FC:A1:F5:15:F2:5F:85:DC:06:27:33:AA:CE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAA27030A2409DC6ACCA85080 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.204.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:03:0a:24:09:dc:6a:cc:a8:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=cfd98d7b-bd45-4933-880d-a4d60e07b5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:f7:42:ae:87:5a:ee:9e:d6:fe:2b:2e:e9:e5: ad:64:2d:1e:a8:2f:23:60:89:74:dc:b3:29:2b:c9: 23:c9:3c:e4:c2:d2:e9:1d:dd:c7:e0:7a:18:c6:3b: 9f:e3:b4:f5:5e:c7:8a:8a:bb:a3:11:52:42:e8:3d: a6:a3:af:41:9a:39:61:47:3a:c2:a7:a6:4d:07:cc: c4:2b:71:eb:57:99:2b:55:4a:f0:0c:1e:ec:72:3f: 79:d3:e6:2d:6d:cf:82:26:ce:67:a1:87:cb:38:c9: 1c:51:91:8a:10:e9:08:24:93:d3:0e:16:c0:3f:5e: bb:da:5c:4e:ae:8c:46:07:19:19:83:07:d1:b8:7d: 27:14:ea:a7:31:b8:ce:85:99:4f:2a:c4:f5:11:7d: 23:2c:0e:7f:87:46:0b:92:78:dd:d3:5e:52:c7:c9: 90:58:49:3f:8c:68:2f:0b:4a:4c:cd:57:1d:f0:6e: 57:27:85:bf:b7:58:6d:e0:ab:ce:60:60:53:2d:3b: 03:32:aa:3a:18:a0:7f:af:14:ac:22:78:0e:46:87: be:1a:bf:5b:3e:52:3a:c2:6e:15:f3:cc:1b:fe:d7: bc:c1:99:32:0c:76:78:8d:a9:99:9b:81:16:14:a0: aa:be:6d:fd:51:3e:ac:38:a8:f1:5c:d0:06:c0:73: 8e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:08:D3:29:06:6F:91:FC:A1:F5:15:F2:5F:85:DC:06:27:33:AA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d439a7f2-8439-3bbb-8cf3-52a351b70849.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:cb:6f:98:b2:b7:3d:2d:30:f4:d0:cd:f4:fc:b6:ca:db:8d: 14:fb:cb:b9:4d:11:6b:58:37:da:6a:25:4b:3a:e3:5d:0b:94: c9:65:73:f9:4d:7a:b2:7f:f4:1b:5a:78:ab:5b:8e:61:08:d8: 7c:7c:07:2a:f9:54:3b:65:66:9f:bb:c3:19:99:32:b8:21:b0: b6:0b:e8:85:a7:f7:ea:0b:f7:c7:f5:f3:2c:3d:ce:4b:f4:6a: 3a:ac:9d:6a:a2:99:3d:3b:2e:46:1f:85:bf:56:1e:2b:bf:21: 39:0e:c7:87:11:d8:0e:97:fc:a7:ae:16:15:5c:c2:fd:30:10: 57:92:69:74:67:7c:c8:1f:15:3c:7e:fa:3d:89:fe:83:98:dd: 84:fa:fb:38:89:e8:f3:3d:22:1b:e2:7c:a8:ac:b1:cd:e6:9c: 16:1b:77:73:6c:1d:81:21:65:2b:06:b1:7f:ac:fa:69:ee:f9: fc:26:df:e7:90:1f:0e:c8:bb:61:bb:55:14:58:6a:c3:88:2e: 96:8c:28:cb:52:de:b0:f2:ca:eb:6e:0b:b0:e7:a0:68:e5:e6: 5d:fa:d0:a9:b6:1e:21:40:e3:dd:24:68:10:f4:46:3a:5b:88: 42:20:4f:98:81:09:91:76:34:5d:4c:f8:81:22:8e:a2:db:d5: d2:a0:ef:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJwMKJAncasyoUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk Y2ZkOThkN2ItYmQ0NS00OTMzLTg4MGQtYTRkNjBlMDdiNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvdCroda7p7W/isu6eWtZC0eqC8jYIl03LMp K8kjyTzkwtLpHd3H4HoYxjuf47T1XseKirujEVJC6D2mo69BmjlhRzrCp6ZNB8zE K3HrV5krVUrwDB7scj950+Ytbc+CJs5noYfLOMkcUZGKEOkIJJPTDhbAP1672lxO roxGBxkZgwfRuH0nFOqnMbjOhZlPKsT1EX0jLA5/h0YLknjd015Sx8mQWEk/jGgv C0pMzVcd8G5XJ4W/t1ht4KvOYGBTLTsDMqo6GKB/rxSsIngORoe+Gr9bPlI6wm4V 88wb/te8wZkyDHZ4jamZm4EWFKCqvm39UT6sOKjxXNAGwHOOIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQI0ykGb5H8ofUV8l+F3AYnM6rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDQzOWE3ZjItODQzOS0z YmJiLThjZjMtNTJhMzUxYjcwODQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDLb5iytz0tMPTQzfT8tsrbjRT7y7lNEWtYN9pqJUs6410LlMllc/lN erJ/9BtaeKtbjmEI2Hx8Byr5VDtlZp+7wxmZMrghsLYL6IWn9+oL98f18yw9zkv0 ajqsnWqimT07LkYfhb9WHiu/ITkOx4cR2A6X/KeuFhVcwv0wEFeSaXRnfMgfFTx+ +j2J/oOY3YT6+ziJ6PM9IhvifKissc3mnBYbd3NsHYEhZSsGsX+s+mnu+fwm3+eQ Hw7Iu2G7VRRYasOILpaMKMtS3rDyyutuC7DnoGjl5l360Km2HiFA490kaBD0Rjpb iEIgT5iBCZF2NF1M+IEijqLb1dKg78c= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:27 2026 by rpki-client