$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e3e7bd0-3934-311d-b339-48017307a35b.roa File: 0e3e7bd0-3934-311d-b339-48017307a35b.roa (raw, json) Hash identifier: bAhcWFzBls/DUIeM8ae2ihaap8yttK8+D1J6hXvexhs= Subject key identifier: E8:32:3E:3E:1F:38:66:B2:65:B6:D0:02:A0:C3:B3:40:87:F1:95:AD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A9EE0EFFD63DA88E2A540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e3e7bd0-3934-311d-b339-48017307a35b.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:9e:e0:ef:fd:63:da:88:e2:a5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=cfc3b33f-9009-40d1-a7ea-94cd934f907c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c9:b8:08:ed:c6:9b:1e:61:5e:bc:66:bd:e9: db:f2:1a:b0:af:95:d1:9a:b8:7c:5c:9f:a2:b2:bb: c6:ec:da:4b:70:74:ed:1f:8d:d6:b2:b3:05:ba:38: b9:c7:40:41:c8:7d:5c:f1:4f:e1:b4:3a:12:ea:2d: 98:cd:cb:81:e7:dd:82:d3:ae:be:2d:90:0c:ec:94: 75:cf:eb:16:4b:a1:b6:d4:bb:71:38:c9:cd:84:95: af:1c:b8:3b:92:e3:6a:45:5e:94:d7:23:67:57:f9: ca:e6:4b:fc:46:f5:bf:bd:c5:e2:1a:80:b4:4a:00: bc:1f:86:ac:62:2f:5e:23:5f:e3:1f:8c:99:dc:20: cb:b4:d1:cb:2e:a6:54:9a:a6:bf:57:99:47:fe:1d: fd:67:b5:ba:41:72:b5:c8:e3:b1:34:f9:ab:c4:15: 63:2c:d5:36:6f:dd:42:de:c7:ef:f9:ec:4c:bc:8b: a7:48:66:7d:d3:54:55:dd:b5:3c:b8:55:bb:78:e2: 77:9f:cd:82:c5:4f:84:72:71:4b:40:95:8e:67:d0: 60:9d:50:7c:3b:49:b0:e2:a5:78:b3:7c:51:98:ba: b1:ff:9c:39:d9:3f:61:b7:f6:87:95:e3:f2:30:40: 6f:43:3a:59:20:ce:ea:42:8c:b2:52:e7:90:d4:e0: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:32:3E:3E:1F:38:66:B2:65:B6:D0:02:A0:C3:B3:40:87:F1:95:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e3e7bd0-3934-311d-b339-48017307a35b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:76:54:f0:d7:65:f1:8b:80:55:b4:66:4d:d2:c9:96:5e:e4: 66:6d:3f:7b:fe:1f:f4:7a:5e:db:05:dd:18:d7:4b:7c:06:19: e3:b3:74:46:f3:db:cb:9e:cc:9a:ba:79:ea:ef:74:0f:ef:d0: c1:19:56:6d:45:09:bb:50:bc:5b:9e:15:27:cc:ca:bc:18:58: b9:06:39:e7:5f:7b:fc:6f:3b:2d:c0:af:6f:e6:ca:8b:eb:04: 18:58:56:c3:34:b7:21:9d:61:9b:9e:64:a2:b3:71:dd:da:65: 46:c5:16:6e:5a:e2:8d:b0:72:79:45:85:c1:72:05:23:06:7d: 84:e7:f6:cf:b9:86:ea:58:78:e7:a3:a6:61:df:aa:de:c4:14: 66:dd:d5:12:fb:b9:1c:2d:5f:38:ae:99:5e:0c:d7:d9:64:cc: 24:df:22:9a:30:a4:19:29:08:f2:ce:6f:26:45:27:56:f8:e4: 2b:c5:46:60:99:0b:b4:97:01:42:4e:4f:0b:8d:21:10:ff:8a: f0:b0:24:ec:49:c4:d9:0b:4e:81:ce:2f:1a:f9:d4:f6:2a:b8: 2d:5d:08:a9:5f:20:ce:00:79:be:f9:6f:ad:fe:3c:88:97:90: 98:aa:08:af:69:55:cb:ff:f4:76:70:14:b6:5b:ae:82:80:d5: 05:a1:53:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mp7g7/1j2ojipUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk Y2ZjM2IzM2YtOTAwOS00MGQxLWE3ZWEtOTRjZDkzNGY5MDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8m4CO3Gmx5hXrxmvenb8hqwr5XRmrh8XJ+i srvG7NpLcHTtH43WsrMFuji5x0BByH1c8U/htDoS6i2YzcuB592C066+LZAM7JR1 z+sWS6G21LtxOMnNhJWvHLg7kuNqRV6U1yNnV/nK5kv8RvW/vcXiGoC0SgC8H4as Yi9eI1/jH4yZ3CDLtNHLLqZUmqa/V5lH/h39Z7W6QXK1yOOxNPmrxBVjLNU2b91C 3sfv+exMvIunSGZ901RV3bU8uFW7eOJ3n82CxU+EcnFLQJWOZ9BgnVB8O0mw4qV4 s3xRmLqx/5w52T9ht/aHlePyMEBvQzpZIM7qQoyyUueQ1OBILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOgyPj4fOGayZbbQAqDDs0CH8ZWtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMGUzZTdiZDAtMzkzNC0z MTFkLWIzMzktNDgwMTczMDdhMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMxAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC52VPDXZfGLgFW0Zk3SyZZe5GZtP3v+H/R6XtsF3RjXS3wGGeOzdEbz 28uezJq6eervdA/v0MEZVm1FCbtQvFueFSfMyrwYWLkGOedfe/xvOy3Ar2/myovr BBhYVsM0tyGdYZueZKKzcd3aZUbFFm5a4o2wcnlFhcFyBSMGfYTn9s+5hupYeOej pmHfqt7EFGbd1RL7uRwtXziumV4M19lkzCTfIpowpBkpCPLObyZFJ1b45CvFRmCZ C7SXAUJOTwuNIRD/ivCwJOxJxNkLToHOLxr51PYquC1dCKlfIM4Aeb75b63+PIiX kJiqCK9pVcv/9HZwFLZbroKA1QWhU3s= -----END CERTIFICATE-----Generated at Fri Apr 17 15:23:11 2026 by rpki-client