$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa File: 1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa (raw, json) Hash identifier: DyOuoU+zMhzuvbE5GObNqum3ulVNqqIn0ESs0aiFKFc= Subject key identifier: 5E:B2:3A:E1:65:37:BB:37:1E:30:A3:45:05:8A:BC:ED:CF:50:8C:4B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037A457FCE12E2619451D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a4:57:fc:e1:2e:26:19:45:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=e59ec207-f942-4bde-996b-2135b76bf47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d0:6f:5f:84:9d:eb:b4:7d:58:35:cf:54:fe: 8a:11:22:a6:73:f4:9a:02:84:b2:c4:d7:61:05:db: 35:83:e4:3e:d8:1d:6f:e8:67:5b:ce:63:f9:3c:a0: 53:7e:74:5c:29:ef:df:e7:5f:c9:73:e5:48:63:a0: a4:c7:c8:f2:9f:40:fe:87:a8:0f:7f:c8:5e:c1:4d: 21:c9:de:c3:01:c4:8e:ee:f0:56:07:26:ac:a1:ac: 8f:19:5c:58:bf:1e:31:b1:6b:67:b9:17:1d:44:77: bf:fa:1c:cd:25:0d:26:39:63:77:f6:98:04:8b:49: a9:ac:7d:f0:98:fb:27:c8:d4:9c:c2:7b:3c:ba:95: 14:3a:8d:05:b9:8f:37:d1:e3:da:ce:2c:eb:9e:73: 6c:d9:cb:37:d1:03:1b:48:9d:14:6f:72:1a:cc:a2: cd:18:b2:d9:4f:ae:ba:ed:03:43:41:b0:cd:2c:c8: 95:14:5b:40:10:e3:dd:5e:4e:ab:c8:7f:25:ed:f8: c3:3e:87:ac:6c:94:24:66:62:38:9c:9e:6e:30:d2: 89:65:70:41:1f:cc:37:53:d0:0c:c9:8c:07:ba:d5: 3d:78:99:8f:71:97:f0:65:37:a1:4f:34:89:86:cf: b6:6c:ee:c8:67:31:66:9a:06:ec:2d:98:31:9f:b9: 92:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B2:3A:E1:65:37:BB:37:1E:30:A3:45:05:8A:BC:ED:CF:50:8C:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1a4cbab1-dfcb-3bee-8197-3e26cf2888c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.56.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:43:43:4f:9b:8d:d0:6d:81:cc:b6:8f:98:95:17:59:a3:b3: 9f:df:4a:6b:e2:22:20:65:b9:c7:28:70:37:a1:5a:ba:1d:f2: 9b:c7:c1:9b:5d:15:8e:44:6e:a7:33:43:38:2f:4b:63:7e:58: 4e:bc:d5:81:d0:56:ae:cd:1d:8b:23:6d:fe:b8:90:3c:03:e2: b5:e5:0a:09:38:a4:f7:e6:88:83:0d:d1:e9:c8:6a:03:29:37: 25:78:17:8d:01:8d:3c:42:f9:b0:2b:d8:79:91:7b:2c:bf:1e: d6:c5:12:e2:b9:6c:b5:d6:2c:9a:b0:5d:9b:b4:9e:32:ea:a4: 4a:c9:93:07:4c:46:23:8a:b7:5d:bd:70:c1:41:65:e1:0f:e7: 98:12:4e:09:51:9a:34:53:a7:db:3d:cb:b2:e4:db:fc:22:6c: ba:df:33:8d:11:85:16:3e:16:b6:be:45:8f:f2:30:02:2b:96: c1:4d:90:c8:6f:88:d1:6a:c2:62:61:fe:6e:96:54:f5:a3:3e: d5:2c:91:ff:d0:fe:9d:a3:d7:b0:2c:5f:52:69:bd:27:df:9c: 72:35:cb:76:99:a4:7a:bf:71:f3:e4:46:e8:18:f0:22:72:bd: 4c:1d:e7:cd:92:a4:e0:3a:4e:a1:d9:13:29:43:d2:b0:d3:5b: 90:9b:b0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6RX/OEuJhlFHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZTU5ZWMyMDctZjk0Mi00YmRlLTk5NmItMjEzNWI3NmJmNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNBvX4Sd67R9WDXPVP6KESKmc/SaAoSyxNdh Bds1g+Q+2B1v6GdbzmP5PKBTfnRcKe/f51/Jc+VIY6Ckx8jyn0D+h6gPf8hewU0h yd7DAcSO7vBWByasoayPGVxYvx4xsWtnuRcdRHe/+hzNJQ0mOWN39pgEi0mprH3w mPsnyNScwns8upUUOo0FuY830ePazizrnnNs2cs30QMbSJ0Ub3IazKLNGLLZT666 7QNDQbDNLMiVFFtAEOPdXk6ryH8l7fjDPoesbJQkZmI4nJ5uMNKJZXBBH8w3U9AM yYwHutU9eJmPcZfwZTehTzSJhs+2bO7IZzFmmgbsLZgxn7mSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6yOuFlN7s3HjCjRQWKvO3PUIxLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWE0Y2JhYjEtZGZjYi0z YmVlLTgxOTctM2UyNmNmMjg4OGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpDQ0+bjdBtgcy2j5iVF1mjs5/fSmviIiBluccocDehWrod8pvHwZtd FY5EbqczQzgvS2N+WE681YHQVq7NHYsjbf64kDwD4rXlCgk4pPfmiIMN0enIagMp NyV4F40BjTxC+bAr2HmReyy/HtbFEuK5bLXWLJqwXZu0njLqpErJkwdMRiOKt129 cMFBZeEP55gSTglRmjRTp9s9y7Lk2/wibLrfM40RhRY+Fra+RY/yMAIrlsFNkMhv iNFqwmJh/m6WVPWjPtUskf/Q/p2j17AsX1JpvSffnHI1y3aZpHq/cfPkRugY8CJy vUwd582SpOA6TqHZEylD0rDTW5CbsBg= -----END CERTIFICATE-----Generated at Tue Sep 22 09:53:25 2026 by rpki-client