$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa File: e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa (raw, json) Hash identifier: TmFMMCOegqxbllP8cLZagOlkhlgQZCG4imZ8CyHcim8= Subject key identifier: 38:EA:48:C3:FF:8D:16:9D:E8:2E:3F:CD:23:32:94:51:22:C0:43:CC Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CAFBC81E82AB3B64D22F4E880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 31898 IP address blocks: 140.204.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:81:e8:2a:b3:b6:4d:22:f4:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=cbef70e3-055d-4326-b5e3-882b1e64a593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7a:35:d2:28:4f:43:ea:57:14:12:2a:e7:68: ac:1d:ac:da:97:f7:a9:51:a9:bc:b3:5c:85:3e:e5: c5:17:85:e1:92:0b:f5:67:d5:e5:68:1c:bf:63:32: 12:b4:6c:ed:96:17:09:97:3b:3d:29:69:84:c9:a2: 40:8d:3c:59:8a:c3:7b:0a:d0:10:64:50:e7:ee:78: fa:e5:6e:85:84:a8:b9:7d:e3:07:42:52:17:8f:86: 9a:8e:2e:3b:5b:4a:40:27:9d:dc:60:48:fc:a7:d7: 22:b9:e2:8f:c0:34:0a:b5:e1:65:95:b7:a9:53:3e: 57:51:a2:e1:86:03:25:62:4a:b0:26:24:ac:66:9b: 39:6c:a4:48:08:6c:28:c4:e1:3c:55:4e:36:da:53: 7d:51:25:82:cf:cf:e7:a1:31:81:83:9c:e7:57:b1: fd:ed:e5:3f:b8:b7:c6:94:66:6b:9a:ba:ec:22:10: bd:f2:0b:5a:c3:07:fb:47:f7:76:3e:be:6d:e1:b1: 0d:45:3c:2a:42:af:db:6e:ce:42:cd:19:ec:4f:ed: 21:5e:b2:cb:72:0e:72:66:b9:a9:69:d2:87:91:df: 0c:59:30:0d:a8:26:5c:f3:16:3b:1c:af:0c:ae:ee: 80:e9:66:99:f0:46:e9:37:a5:99:94:4c:9f:02:1a: 47:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:EA:48:C3:FF:8D:16:9D:E8:2E:3F:CD:23:32:94:51:22:C0:43:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e9f8602b-800c-38c6-bafc-e2bfc90d3778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.48.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:35:91:29:fa:85:a9:8f:af:57:dc:ed:82:21:fe:1c:0f:03: c2:73:9f:0d:6a:61:47:0f:7a:00:42:d1:ba:bb:c8:ef:92:0d: 33:90:15:03:ef:22:f1:02:c9:29:e9:f0:77:60:6c:0d:27:51: 56:f9:a0:09:da:ad:a0:bb:5d:c9:31:65:e4:0d:ba:a9:e7:02: 1d:7f:01:5a:e7:95:e3:f4:92:54:29:9f:a6:6a:88:5b:b9:f3: 79:a3:da:8d:1d:4e:fe:37:2a:7e:2f:a1:26:02:e8:6d:15:02: c7:1d:6a:7e:63:8f:92:94:b1:94:84:24:be:c7:c9:15:2e:2e: 55:31:02:96:86:9a:f6:91:22:32:08:66:de:83:49:5b:86:c3: b3:23:64:15:73:21:28:7b:13:a1:9c:1d:2b:c5:6e:32:80:0f: 9f:70:9e:25:84:eb:77:a0:0f:60:1d:a8:2f:6f:1c:1d:8d:12: bd:58:17:b7:5f:f3:fb:dd:40:1c:1d:8e:c4:70:3c:dc:2c:ca: 6d:ba:b6:9f:6c:fa:46:33:34:cf:90:3a:69:01:c9:36:e1:2c: 7b:66:f6:b7:4d:f4:10:86:b1:b7:bf:1d:91:b3:4b:0b:82:d7: 0e:25:0d:fb:87:3b:d2:c0:28:d7:0c:1e:6d:d9:3a:a8:f9:b2: be:3d:6d:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIHoKrO2TSL06IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk Y2JlZjcwZTMtMDU1ZC00MzI2LWI1ZTMtODgyYjFlNjRhNTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXo10ihPQ+pXFBIq52isHazal/epUam8s1yF PuXFF4Xhkgv1Z9XlaBy/YzIStGztlhcJlzs9KWmEyaJAjTxZisN7CtAQZFDn7nj6 5W6FhKi5feMHQlIXj4aaji47W0pAJ53cYEj8p9ciueKPwDQKteFllbepUz5XUaLh hgMlYkqwJiSsZps5bKRICGwoxOE8VU422lN9USWCz8/noTGBg5znV7H97eU/uLfG lGZrmrrsIhC98gtawwf7R/d2Pr5t4bENRTwqQq/bbs5CzRnsT+0hXrLLcg5yZrmp adKHkd8MWTANqCZc8xY7HK8Mru6A6WaZ8EbpN6WZlEyfAhpH7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjqSMP/jRad6C4/zSMylFEiwEPMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTlmODYwMmItODAwYy0z OGM2LWJhZmMtZTJiZmM5MGQzNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGE1kSn6hamPr1fc7YIh/hwPA8Jznw1qYUcPegBC0bq7yO+SDTOQFQPv IvECySnp8HdgbA0nUVb5oAnaraC7XckxZeQNuqnnAh1/AVrnleP0klQpn6ZqiFu5 83mj2o0dTv43Kn4voSYC6G0VAscdan5jj5KUsZSEJL7HyRUuLlUxApaGmvaRIjII Zt6DSVuGw7MjZBVzISh7E6GcHSvFbjKAD59wniWE63egD2AdqC9vHB2NEr1YF7df 8/vdQBwdjsRwPNwsym26tp9s+kYzNM+QOmkByTbhLHtm9rdN9BCGsbe/HZGzSwuC 1w4lDfuHO9LAKNcMHm3ZOqj5sr49bYU= -----END CERTIFICATE-----Generated at Thu Feb 26 03:26:33 2026 by rpki-client