$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa File: 21da4dcd-40e9-3f45-8119-dec62e2629ac.roa (raw, json) Hash identifier: 4/WWTFyCSvPNFIGzpgKqKLRxsbCnt99+D9fU/OA4BmY= Subject key identifier: 84:32:F0:11:D6:49:72:36:BC:17:4F:AF:DE:F3:F9:33:99:83:2E:3F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B625797A1E1BBADF9883C00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:57:97:a1:e1:bb:ad:f9:88:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=a2a124ac-00ca-4be4-88c8-3635c933672d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9b:91:6c:74:54:02:ee:2c:96:91:73:89:d8: cf:0d:78:08:d5:54:84:27:46:bd:4e:22:ff:03:37: 7a:a6:23:7d:fc:37:34:ce:84:67:65:b7:e5:67:2f: 12:ac:76:c7:ef:b2:b1:99:17:f7:af:a9:a0:15:bb: 65:29:76:68:61:ec:c6:f7:e2:59:fb:e9:0c:27:e2: 6c:ef:80:2d:6d:65:5b:fc:a7:b3:ee:3f:f7:b4:ad: 55:5d:7e:e6:21:52:8c:92:ca:8f:ff:14:c7:85:f2: 3d:d1:1f:97:f9:a9:45:63:55:4f:3e:10:c1:1a:f0: 29:74:38:03:1f:79:9c:d2:4e:7b:b7:33:6c:e2:ea: a9:78:6b:cd:c8:be:14:72:37:d7:3e:fb:94:e8:c9: 70:a3:6b:17:e1:f7:c5:4a:40:9c:11:8c:23:b2:35: a6:0d:d3:25:74:3e:34:2a:7d:cb:77:10:37:8b:ee: c9:25:c9:80:e7:97:84:63:47:a4:50:96:62:2c:b1: 32:f0:fb:73:38:56:77:6f:e2:26:a9:53:83:eb:29: 33:8c:2d:bf:72:bf:7b:c7:d9:be:06:89:0a:9d:57: 7a:68:d7:8f:37:0e:c4:fb:18:d1:b3:7b:2a:37:8a: d2:87:7c:00:08:33:da:21:fa:e4:91:68:93:52:d3: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:32:F0:11:D6:49:72:36:BC:17:4F:AF:DE:F3:F9:33:99:83:2E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21da4dcd-40e9-3f45-8119-dec62e2629ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:02:8b:aa:23:3b:59:d6:7f:99:a8:19:a4:45:70:1b:a0:4b: 10:52:80:eb:f9:47:3c:d6:ff:c8:b0:57:a2:fb:dd:f6:e5:6e: 3a:b3:27:5c:45:eb:b8:f3:3c:05:1f:a4:59:31:be:f8:fb:ab: b5:da:15:06:49:54:be:0c:06:7b:3e:e0:47:17:ca:2d:38:c5: 48:6f:f2:ae:3e:f3:74:e5:de:a5:ad:83:5d:03:1e:e3:74:17: 12:07:21:4d:1d:5c:2f:77:1d:2c:3d:13:db:f5:98:8b:91:7a: fb:4d:67:25:96:f7:a5:c6:d2:85:c3:8f:b8:d7:e4:05:fe:c7: 1a:52:6a:00:c1:59:6c:4c:e2:c9:8d:07:51:ea:a2:da:17:16: 76:7d:9d:1f:4a:bd:fe:7b:45:1d:ab:0d:cc:2f:3f:19:5a:bf: dc:e0:f3:cc:2c:23:1d:28:63:46:ca:02:e8:b9:9d:64:13:ac: 82:62:24:f3:21:8b:f6:2f:fc:0b:1e:cd:a6:18:5c:f6:5b:f5: e2:d3:4e:47:e6:25:99:cf:1c:c3:09:3f:df:c5:cc:60:ed:ad: 30:88:4c:8a:ee:f3:ef:76:2a:70:1f:77:19:18:93:bf:01:09: cf:cc:02:97:d4:76:3b:6a:f4:29:43:f0:f1:4f:fb:dc:de:dd: cd:54:8b:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYleXoeG7rfmIPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YTJhMTI0YWMtMDBjYS00YmU0LTg4YzgtMzYzNWM5MzM2NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpuRbHRUAu4slpFzidjPDXgI1VSEJ0a9TiL/ Azd6piN9/Dc0zoRnZbflZy8SrHbH77KxmRf3r6mgFbtlKXZoYezG9+JZ++kMJ+Js 74AtbWVb/Kez7j/3tK1VXX7mIVKMksqP/xTHhfI90R+X+alFY1VPPhDBGvApdDgD H3mc0k57tzNs4uqpeGvNyL4UcjfXPvuU6Mlwo2sX4ffFSkCcEYwjsjWmDdMldD40 Kn3LdxA3i+7JJcmA55eEY0ekUJZiLLEy8PtzOFZ3b+ImqVOD6ykzjC2/cr97x9m+ BokKnVd6aNePNw7E+xjRs3sqN4rSh3wACDPaIfrkkWiTUtOTYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQy8BHWSXI2vBdPr97z+TOZgy4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjFkYTRkY2QtNDBlOS0z ZjQ1LTgxMTktZGVjNjJlMjYyOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIACi6ojO1nWf5moGaRFcBugSxBSgOv5RzzW/8iwV6L73fblbjqzJ1xF 67jzPAUfpFkxvvj7q7XaFQZJVL4MBns+4EcXyi04xUhv8q4+83Tl3qWtg10DHuN0 FxIHIU0dXC93HSw9E9v1mIuRevtNZyWW96XG0oXDj7jX5AX+xxpSagDBWWxM4smN B1HqotoXFnZ9nR9Kvf57RR2rDcwvPxlav9zg88wsIx0oY0bKAui5nWQTrIJiJPMh i/Yv/AsezaYYXPZb9eLTTkfmJZnPHMMJP9/FzGDtrTCITIru8+92KnAfdxkYk78B Cc/MApfUdjtq9ClD8PFP+9ze3c1Ui4o= -----END CERTIFICATE-----Generated at Tue Sep 22 17:25:24 2026 by rpki-client