$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa File: df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa (raw, json) Hash identifier: EEBTllG3Q7ZABEBf/m7btbsk06GmDvZQ2Ez3ZWA5ZqY= Subject key identifier: 76:A7:D7:42:05:B0:9B:ED:38:6E:BC:73:CD:73:2F:A1:51:FA:F5:AC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAE5E5430978005C189885100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 31898 IP address blocks: 140.204.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:54:30:97:80:05:c1:89:88:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=d98a56a8-7f48-4b68-a66b-5902d1af1414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:d1:79:2a:25:40:45:ad:42:ec:1a:ad:60: 07:4e:4d:89:be:95:fa:2f:9e:f1:9e:bd:bc:9d:8a: 9b:f0:10:c6:62:fe:c4:03:a2:35:26:55:be:33:bb: ba:4c:b3:ed:c7:7d:d3:d0:6b:0b:e6:c5:73:86:aa: 38:54:49:22:06:8b:26:bb:8b:11:21:b2:5d:02:64: ff:5b:d3:37:18:18:cc:ff:84:eb:6f:2b:99:36:f4: 4e:16:d6:6a:58:f4:e5:e8:a7:94:a0:39:4c:1c:6d: 1f:de:42:e3:fe:ee:7d:7c:2d:61:c7:a5:44:ea:0f: fc:1b:2b:0d:6c:f4:f1:20:b7:83:33:b7:fc:37:42: 49:4c:76:af:7b:c8:92:60:9a:3e:5c:16:23:29:b3: 0f:59:96:33:22:fb:ce:32:45:2b:b7:4a:6e:58:e2: e9:89:36:75:24:89:3a:bf:a3:95:88:3e:96:ac:31: 63:1b:f5:6f:1d:c8:84:c0:9e:07:35:ae:df:03:5e: 1f:c9:f6:c5:77:3f:13:4a:9e:e7:a3:46:5a:19:26: 8d:b6:f3:07:1d:4e:66:c5:e7:91:66:33:e6:51:e4: ce:d7:a3:1a:8b:30:4c:f8:53:5a:32:e4:79:4d:ba: c9:16:f9:8a:9d:a1:e6:98:b0:9d:d2:8a:86:14:2e: 71:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A7:D7:42:05:B0:9B:ED:38:6E:BC:73:CD:73:2F:A1:51:FA:F5:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/df2bc5b4-9e8d-32bd-95f0-44199847d2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:89:4d:0f:4f:7a:4f:a1:cf:64:54:ae:75:fb:90:00:08:75: 78:3e:42:96:6d:23:eb:a7:e6:8a:fe:be:d4:c1:ea:3e:34:4b: 3e:71:d5:04:60:8a:19:03:66:1e:7d:6e:2b:d8:51:f9:83:aa: 2c:3e:ce:81:05:cf:4a:53:a8:c9:46:0d:f0:07:52:7d:6d:36: 63:70:3d:19:30:2d:8e:29:23:e0:bd:fb:dc:e7:cf:e1:c8:53: d1:38:27:90:ea:ac:a3:0e:06:15:51:65:7c:81:9a:56:21:e6: c6:13:d9:8e:9a:09:9c:44:f4:c6:42:4d:12:6a:c7:f3:b5:82: e6:d0:26:fc:9c:52:0f:16:0e:3a:2e:63:78:cc:14:20:f8:aa: 7b:b8:19:91:0e:b4:ce:c7:c1:b8:27:55:1f:b8:90:c9:16:0f: 98:ca:d3:b1:0b:5f:d8:e5:5e:e0:cb:16:f8:0f:74:97:43:b3: 68:82:b8:95:3a:e9:76:9f:7e:09:4d:af:a4:90:1a:52:23:74: 3f:0e:4d:03:3d:82:e8:f2:9f:85:5d:a2:6d:06:90:53:f5:e3: c4:01:10:60:97:d9:66:e6:f4:5a:60:6d:7b:25:24:c2:0d:b2: 8c:b2:d4:d5:db:4e:4e:2e:61:79:79:53:7e:50:87:4d:e5:24: 93:92:6d:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXlQwl4AFwYmIUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk ZDk4YTU2YTgtN2Y0OC00YjY4LWE2NmItNTkwMmQxYWYxNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgnReSolQEWtQuwarWAHTk2JvpX6L57xnr28 nYqb8BDGYv7EA6I1JlW+M7u6TLPtx33T0GsL5sVzhqo4VEkiBosmu4sRIbJdAmT/ W9M3GBjM/4TrbyuZNvROFtZqWPTl6KeUoDlMHG0f3kLj/u59fC1hx6VE6g/8GysN bPTxILeDM7f8N0JJTHave8iSYJo+XBYjKbMPWZYzIvvOMkUrt0puWOLpiTZ1JIk6 v6OViD6WrDFjG/VvHciEwJ4HNa7fA14fyfbFdz8TSp7no0ZaGSaNtvMHHU5mxeeR ZjPmUeTO16MaizBM+FNaMuR5TbrJFvmKnaHmmLCd0oqGFC5xwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHan10IFsJvtOG68c81zL6FR+vWsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZGYyYmM1YjQtOWU4ZC0z MmJkLTk1ZjAtNDQxOTk4NDdkMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJWJTQ9Pek+hz2RUrnX7kAAIdXg+QpZtI+un5or+vtTB6j40Sz5x1QRg ihkDZh59bivYUfmDqiw+zoEFz0pTqMlGDfAHUn1tNmNwPRkwLY4pI+C9+9znz+HI U9E4J5DqrKMOBhVRZXyBmlYh5sYT2Y6aCZxE9MZCTRJqx/O1gubQJvycUg8WDjou Y3jMFCD4qnu4GZEOtM7HwbgnVR+4kMkWD5jK07ELX9jlXuDLFvgPdJdDs2iCuJU6 6XaffglNr6SQGlIjdD8OTQM9gujyn4Vdom0GkFP148QBEGCX2Wbm9FpgbXslJMIN soyy1NXbTk4uYXl5U35Qh03lJJOSbbg= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:30 2026 by rpki-client