$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa File: 12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa (raw, json) Hash identifier: vkBF6Sw/ua/+XKc0P0iWoShEm9lp82Hrd5F3/eBLy3c= Subject key identifier: AE:5F:D7:42:8C:67:C2:E4:7D:BD:61:7B:97:08:A2:29:9A:EE:79:FA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FAF58AB272B2B32807455A700 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 140.204.4.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:ab:27:2b:2b:32:80:74:55:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=0f0d269b-7ed8-4a0f-98ee-8f08bb2cf6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:dd:fa:a3:12:d8:f0:df:89:e7:a0:fe:fd: af:a9:40:06:0c:31:a2:0f:f9:ba:ab:33:41:01:b3: 87:20:bf:03:52:5f:84:e3:6d:1d:06:ce:65:31:ff: 98:8f:9f:3f:fd:11:3d:af:47:33:c3:29:ab:98:12: 53:47:89:b7:ef:da:12:96:ce:1d:81:b5:c6:f2:34: e6:c4:b1:43:90:f8:18:d4:1d:43:17:be:c1:e7:06: 2a:8d:5e:45:fa:0b:8b:8a:16:20:17:3e:c8:2d:4d: 67:e5:28:07:ec:68:d1:31:40:23:82:9b:2e:40:98: d0:27:88:8b:34:5e:be:45:88:43:9a:64:9c:60:fd: 5f:cc:77:91:c5:7f:89:dc:1d:2a:df:08:06:cc:62: 5a:68:86:ff:50:81:b1:6b:c9:b8:76:f1:95:c1:72: 8b:54:df:be:35:a9:67:df:57:ad:d1:31:04:05:5a: 34:23:e8:15:30:ef:e7:70:0a:cd:ba:4d:d5:67:93: c3:e9:ba:6d:ac:dc:31:ab:79:6f:dd:3c:42:3b:43: dc:6a:09:e2:f4:82:9c:b7:cc:d3:c6:f6:22:f4:f4: f8:9f:89:f2:f6:01:18:e9:4c:15:74:ae:a1:cc:81: 70:6e:f3:69:b6:79:5f:f7:26:5a:d8:d7:c8:ba:df: 95:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:5F:D7:42:8C:67:C2:E4:7D:BD:61:7B:97:08:A2:29:9A:EE:79:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/12e082cd-bf10-3bcb-b7d9-ede990bf4c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.4.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d3:75:62:af:6d:75:22:06:47:ee:61:09:0b:31:d3:e2:1e: 10:47:11:f2:1e:7d:c1:cc:28:3f:20:96:78:3a:31:5c:14:79: 0c:a8:0f:f4:53:4b:10:cf:ce:73:99:1d:a4:b0:f4:6f:e4:fd: 65:dd:e6:43:06:2c:aa:db:18:fb:df:c3:8d:49:db:07:2c:22: a7:8f:a4:2d:69:50:dc:c9:17:83:5d:ff:ba:d1:68:ac:59:6d: b9:22:cb:db:e5:f5:19:21:b8:64:5f:3a:b9:86:c1:a4:22:32: fd:e9:e0:aa:cc:71:98:47:12:fc:58:30:29:30:e9:70:19:47: 1e:9e:56:ac:05:c1:84:ae:e5:a2:36:85:79:40:05:02:0b:fb: 14:71:fe:32:d3:8d:e0:2b:35:82:6c:14:7d:16:f3:3c:80:df: 49:56:bc:bf:c1:6b:cb:2a:0d:5a:6d:c4:26:8f:a7:1d:38:d9: 35:b0:8c:ed:ea:66:fc:ab:9c:01:44:99:15:6f:81:b3:6b:0a: 65:65:9c:ec:2f:c6:ec:65:3f:3c:4b:5f:6c:03:07:c1:50:db: ec:f1:6f:7f:ee:71:95:63:ce:01:49:2d:b7:2d:8a:c3:5c:91: ab:cf:59:df:67:01:e9:e2:39:5f:40:f0:b0:fb:0a:ae:58:fb: 41:f6:32:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWKsnKysygHRVpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk MGYwZDI2OWItN2VkOC00YTBmLTk4ZWUtOGYwOGJiMmNmNmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkzd+qMS2PDfieeg/v2vqUAGDDGiD/m6qzNB AbOHIL8DUl+E420dBs5lMf+Yj58//RE9r0czwymrmBJTR4m379oSls4dgbXG8jTm xLFDkPgY1B1DF77B5wYqjV5F+guLihYgFz7ILU1n5SgH7GjRMUAjgpsuQJjQJ4iL NF6+RYhDmmScYP1fzHeRxX+J3B0q3wgGzGJaaIb/UIGxa8m4dvGVwXKLVN++Naln 31et0TEEBVo0I+gVMO/ncArNuk3VZ5PD6bptrNwxq3lv3TxCO0Pcagni9IKct8zT xvYi9PT4n4ny9gEY6UwVdK6hzIFwbvNptnlf9yZa2NfIut+VZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5f10KMZ8Lkfb1he5cIoima7nn6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTJlMDgyY2QtYmYxMC0z YmNiLWI3ZDktZWRlOTkwYmY0YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnTdWKvbXUiBkfuYQkLMdPiHhBHEfIefcHMKD8glng6MVwUeQyoD/RT SxDPznOZHaSw9G/k/WXd5kMGLKrbGPvfw41J2wcsIqePpC1pUNzJF4Nd/7rRaKxZ bbkiy9vl9RkhuGRfOrmGwaQiMv3p4KrMcZhHEvxYMCkw6XAZRx6eVqwFwYSu5aI2 hXlABQIL+xRx/jLTjeArNYJsFH0W8zyA30lWvL/Ba8sqDVptxCaPpx042TWwjO3q ZvyrnAFEmRVvgbNrCmVlnOwvxuxlPzxLX2wDB8FQ2+zxb3/ucZVjzgFJLbctisNc kavPWd9nAeniOV9A8LD7Cq5Y+0H2MiE= -----END CERTIFICATE-----Generated at Thu Nov 5 14:55:03 2026 by rpki-client