$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa File: eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa (raw, json) Hash identifier: FNKZ7oflUv0Pzsy5TUy5TblvwFNDUrDDdjTWdyb26DI= Subject key identifier: 49:4B:F6:5E:CB:18:3F:B6:C1:31:3A:D7:0D:34:24:0C:2D:91:8D:66 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E6B0A0C88E17B9607322ABCC0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 140.238.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:0c:88:e1:7b:96:07:32:2a:bc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=f2e04a34-0ebf-4088-baaf-3557f2018cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ec:67:a6:05:01:3f:9f:cf:b8:0d:f0:67:f0: 21:c5:f2:81:c1:54:11:45:f1:62:84:4e:e9:20:1d: 62:5d:b4:1a:24:52:39:ba:15:35:72:78:f6:55:f9: 47:fe:2e:3f:cf:9a:78:06:61:e4:33:23:2f:fc:24: d6:8a:c8:12:bf:f4:c5:ef:39:32:fd:9f:82:91:cc: 1f:d3:54:6e:41:1b:67:f3:a7:df:ba:23:2d:6e:2a: af:f5:ae:5c:dd:a7:5e:bf:8a:fd:2c:0e:85:6b:43: 61:bb:0a:da:4a:34:d7:79:85:c6:9d:7c:ea:f1:17: 0e:7f:86:2e:4e:d3:0c:13:b9:90:3e:44:4c:01:7e: 87:e7:cb:4a:c4:2f:8f:5f:a3:dc:35:45:f1:1b:2b: 02:8a:58:26:94:96:27:45:0d:73:bc:45:cf:c2:77: c7:5b:c7:62:6e:4d:07:cf:96:d1:16:f7:41:d4:9c: 05:3c:c5:46:81:71:da:3d:bf:a8:09:0c:ad:18:8d: 1e:cb:6d:24:5f:9f:ae:e7:47:d6:7a:7e:41:4a:b6: 9f:4b:49:25:b9:86:0b:4b:61:9b:b9:05:e6:47:53: 35:d2:e2:37:29:d2:ec:35:91:22:57:6f:d3:6c:29: e0:7f:b5:87:9a:40:19:f1:54:3c:68:fc:d9:2c:d9: 71:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:4B:F6:5E:CB:18:3F:B6:C1:31:3A:D7:0D:34:24:0C:2D:91:8D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f4:5a:99:92:ee:5d:bf:fe:70:71:19:07:6a:57:c7:31:6d: 17:f8:ba:de:b9:9c:47:93:6f:ad:8c:2b:76:0f:c8:85:b5:99: 00:e5:d0:75:7f:aa:63:2e:c2:2f:c3:d0:65:7b:4a:10:f4:b7: 0e:65:bf:fb:80:fd:09:a4:bf:53:7e:7a:83:07:ea:90:d5:86: a9:7e:a4:39:62:4a:ba:ec:e5:c6:21:04:33:bc:1c:2e:62:e0: 46:d3:b4:98:dd:d1:b1:51:d2:45:34:49:21:39:18:9e:e5:54: 6f:2e:46:7f:9e:01:65:47:2a:5a:8d:8b:39:f6:4d:91:78:dc: e6:b4:2f:06:7c:6d:5d:87:cf:da:8f:07:d2:e2:f4:24:ee:ae: 85:3b:6d:b1:1a:75:8f:e5:f4:bc:33:18:ab:76:62:2a:15:9e: a3:fc:03:55:7e:ba:9d:94:ea:39:9a:b6:1f:ac:4e:02:37:dc: 6a:93:49:11:61:03:9b:01:2c:7a:1a:29:8e:9b:e5:3a:31:8b: 9b:6f:a3:9a:2e:e4:cc:1f:d1:5c:3d:85:fb:f0:24:3b:3d:f9: 5c:0c:84:3f:ff:2f:f2:fd:d5:f1:9b:e4:1e:be:e7:dc:ee:d9: c3:04:04:72:87:16:61:6c:57:1b:d0:b6:d4:ee:73:de:91:54: a6:f6:30:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rCgyI4XuWBzIqvMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk ZjJlMDRhMzQtMGViZi00MDg4LWJhYWYtMzU1N2YyMDE4Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOxnpgUBP5/PuA3wZ/AhxfKBwVQRRfFihE7p IB1iXbQaJFI5uhU1cnj2VflH/i4/z5p4BmHkMyMv/CTWisgSv/TF7zky/Z+Ckcwf 01RuQRtn86ffuiMtbiqv9a5c3adev4r9LA6Fa0NhuwraSjTXeYXGnXzq8RcOf4Yu TtMME7mQPkRMAX6H58tKxC+PX6PcNUXxGysCilgmlJYnRQ1zvEXPwnfHW8dibk0H z5bRFvdB1JwFPMVGgXHaPb+oCQytGI0ey20kX5+u50fWen5BSrafS0kluYYLS2Gb uQXmR1M10uI3KdLsNZEiV2/TbCngf7WHmkAZ8VQ8aPzZLNlxuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElL9l7LGD+2wTE61w00JAwtkY1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNhMmNkNDItZjE4Mi0z NjljLWJmMzctNjRkOWE2ZDhlNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjO4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB70WpmS7l2//nBxGQdqV8cxbRf4ut65nEeTb62MK3YPyIW1mQDl0HV/ qmMuwi/D0GV7ShD0tw5lv/uA/Qmkv1N+eoMH6pDVhql+pDliSrrs5cYhBDO8HC5i 4EbTtJjd0bFR0kU0SSE5GJ7lVG8uRn+eAWVHKlqNizn2TZF43Oa0LwZ8bV2Hz9qP B9Li9CTuroU7bbEadY/l9LwzGKt2YioVnqP8A1V+up2U6jmath+sTgI33GqTSRFh A5sBLHoaKY6b5Toxi5tvo5ou5Mwf0Vw9hfvwJDs9+VwMhD//L/L91fGb5B6+59zu 2cMEBHKHFmFsVxvQttTuc96RVKb2MNw= -----END CERTIFICATE-----Generated at Mon Jul 13 02:49:38 2026 by rpki-client