$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa File: f12660d2-1f5c-3602-b7c6-695c022ef94d.roa (raw, json) Hash identifier: 5HcrwNSjccnGYr0eKds9iIeUborGd5meyN8x5Bvp9r4= Subject key identifier: FE:24:0C:C0:C5:F1:2B:35:FD:E0:96:68:4E:E8:43:65:DC:9B:6E:B3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1D27E735EF55482B41580 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 140.91.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d2:7e:73:5e:f5:54:82:b4:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=88ea232c-e179-449b-a7b4-89914e9c8e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:c4:35:e7:19:fa:6a:b4:9a:6c:5a:53:64: 9c:9c:b3:da:a4:c6:b4:c8:91:cd:82:ae:2e:fa:d4: 71:fc:bf:ed:19:95:6e:64:e7:1f:7d:4f:4e:b9:3a: 48:24:d3:1a:a2:b5:ec:e1:28:ef:23:be:f6:46:dc: 5b:32:e1:5c:bd:48:8a:05:e4:4a:52:d4:3b:ba:1b: ad:ca:55:3a:7c:c6:b1:21:f7:af:04:bb:2f:a1:b7: 5a:47:ab:7d:ad:81:d1:60:f6:97:52:84:c6:d3:1f: 0d:d7:d9:5c:c4:81:cb:82:2a:8d:d4:4f:6a:4c:5a: 43:4f:c7:41:5e:73:36:31:bd:2e:8a:de:0a:7b:a0: 86:bf:9b:26:5c:64:ef:c8:d7:cb:45:2d:be:af:32: fa:a7:5c:65:24:f8:52:d6:05:91:85:55:b9:61:49: 38:9f:8e:11:60:90:5f:16:bb:7c:2f:89:9e:9e:8b: e3:f4:a1:00:a0:4e:44:d4:34:62:a6:64:70:1b:2f: f1:9e:21:56:db:09:1f:60:7d:d4:4b:de:78:4f:24: e0:3e:ae:6d:41:02:95:83:0e:bb:2f:72:9c:18:3e: 74:d1:12:af:b2:f3:4b:31:9a:a3:b7:90:24:8c:77: 01:24:ee:c7:3d:4b:22:78:dc:37:fe:b3:05:d6:70: ae:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:24:0C:C0:C5:F1:2B:35:FD:E0:96:68:4E:E8:43:65:DC:9B:6E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f12660d2-1f5c-3602-b7c6-695c022ef94d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:c5:16:5b:a3:9f:52:36:28:bc:2c:5b:b4:6f:a4:c0:16:b9: 14:1f:c4:7e:fd:be:e1:a2:e3:34:65:e3:6e:26:a2:44:24:60: fd:5a:d6:07:d7:18:b6:d3:e4:68:9f:c0:77:79:07:9e:6e:8d: 1d:9c:9e:04:3e:f0:7f:5e:43:b1:cf:f0:d6:b0:08:45:53:bd: 59:81:79:42:a7:0c:d5:c2:06:29:31:ba:a4:04:87:aa:12:18: d5:11:9c:16:f9:ab:d7:d0:ba:2d:0c:5f:dc:24:8f:23:35:14: 78:71:0a:dc:21:83:30:d2:56:40:7e:6b:55:97:e2:da:74:81: 0f:9c:7d:83:9b:06:a5:0a:e1:d1:79:d7:17:56:32:d7:e8:15: 41:a0:fc:a3:dc:97:80:71:9b:3a:a6:1e:c9:25:56:94:bd:64: b7:f7:5f:d9:ad:f9:28:f6:91:a8:0d:3d:96:d0:45:6d:58:2f: 6a:06:d2:13:35:40:1d:f9:c8:47:90:50:e6:26:b5:82:64:bd: a7:11:b8:3d:c5:a2:01:2e:12:b9:3d:a3:e0:0e:3d:f8:0d:7f: 26:18:67:74:d3:23:97:a4:fe:43:cc:eb:84:f0:06:7c:c7:1b: 54:6e:90:58:e3:06:97:d8:24:92:5e:10:af:71:e3:88:d7:af: 6a:34:27:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dJ+c171VIK0FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk ODhlYTIzMmMtZTE3OS00NDliLWE3YjQtODk5MTRlOWM4ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZzENecZ+mq0mmxaU2ScnLPapMa0yJHNgq4u +tRx/L/tGZVuZOcffU9OuTpIJNMaorXs4SjvI772RtxbMuFcvUiKBeRKUtQ7uhut ylU6fMaxIfevBLsvobdaR6t9rYHRYPaXUoTG0x8N19lcxIHLgiqN1E9qTFpDT8dB XnM2Mb0uit4Ke6CGv5smXGTvyNfLRS2+rzL6p1xlJPhS1gWRhVW5YUk4n44RYJBf Frt8L4menovj9KEAoE5E1DRipmRwGy/xniFW2wkfYH3US954TyTgPq5tQQKVgw67 L3KcGD500RKvsvNLMZqjt5AkjHcBJO7HPUsieNw3/rMF1nCuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4kDMDF8Ss1/eCWaE7oQ2Xcm26zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZjEyNjYwZDItMWY1Yy0z NjAyLWI3YzYtNjk1YzAyMmVmOTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfFFlujn1I2KLwsW7RvpMAWuRQfxH79vuGi4zRl424mokQkYP1a1gfX GLbT5GifwHd5B55ujR2cngQ+8H9eQ7HP8NawCEVTvVmBeUKnDNXCBikxuqQEh6oS GNURnBb5q9fQui0MX9wkjyM1FHhxCtwhgzDSVkB+a1WX4tp0gQ+cfYObBqUK4dF5 1xdWMtfoFUGg/KPcl4BxmzqmHsklVpS9ZLf3X9mt+Sj2kagNPZbQRW1YL2oG0hM1 QB35yEeQUOYmtYJkvacRuD3FogEuErk9o+AOPfgNfyYYZ3TTI5ek/kPM64TwBnzH G1RukFjjBpfYJJJeEK9x44jXr2o0Jx4= -----END CERTIFICATE-----Generated at Thu Feb 26 03:29:28 2026 by rpki-client