$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ac0376-dfe4-3ec7-bfa0-a9e59f36d052.roa File: 32ac0376-dfe4-3ec7-bfa0-a9e59f36d052.roa (raw, json) Hash identifier: /zY464NGjf+JRubqCsmFFCCv88jfJft+u52hnB0vu1c= Subject key identifier: 8B:9A:EC:90:78:FF:F6:27:2C:AF:C1:92:73:E9:38:1D:8A:7D:23:DA Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86953F2CB1709ABE6346E500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ac0376-dfe4-3ec7-bfa0-a9e59f36d052.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.204.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:3f:2c:b1:70:9a:be:63:46:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=5cc8093a-dbae-4b82-b36f-93baa1565336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8f:1d:80:97:d7:b8:0e:97:d3:f5:bb:5c:7f: 65:9e:a8:76:cb:ce:bf:5c:9e:cf:52:ba:ed:bc:5f: f0:1a:a8:cc:22:3c:78:a5:c7:a1:e2:57:6f:1c:50: 70:21:d0:66:fc:20:a4:fc:fc:1b:53:1a:51:ef:63: 98:8b:a6:e1:11:5a:59:1e:56:3d:4e:4d:ff:96:27: 9c:74:42:42:a7:a9:73:a1:ad:b0:83:34:8c:18:28: a8:6f:b9:8f:ea:d8:07:84:c9:f9:22:83:4b:26:01: 06:81:63:39:79:62:9b:47:93:3f:ce:48:01:61:03: ab:e0:1d:43:d2:da:cb:ee:46:21:f3:d9:af:19:d1: f6:28:93:5b:6c:d9:43:27:a7:7b:d7:59:9d:7f:68: b2:d3:11:a7:f6:fd:3c:e1:a3:31:83:61:bb:c9:0f: 6d:83:3f:5d:c5:4f:16:ee:0b:f3:81:e4:47:32:b0: b5:df:72:cd:c2:aa:ce:f0:b1:87:33:bf:14:b5:36: 91:d8:0e:58:f0:75:d3:7d:d8:b1:55:70:89:89:1e: 2b:19:a4:81:d5:df:c9:f7:ec:a4:cf:8d:99:ee:17: 88:33:c8:43:9e:c3:b6:7a:c0:f2:26:16:29:ea:57: ac:e9:1c:ac:1c:f1:bc:7e:b4:c1:6d:10:52:ca:5e: 05:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:EC:90:78:FF:F6:27:2C:AF:C1:92:73:E9:38:1D:8A:7D:23:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32ac0376-dfe4-3ec7-bfa0-a9e59f36d052.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:89:30:ee:4f:ad:4f:e5:d8:8d:e0:98:11:e6:6f:ab:02:fb: 0a:a4:41:77:e9:89:62:85:e1:62:dc:52:b6:ff:b8:bf:78:bc: 84:d3:59:21:32:64:e6:b2:0d:ad:75:8a:4d:d8:27:9a:02:3f: f5:98:57:1b:67:d3:be:ff:88:73:2e:88:e0:21:34:43:01:c1: c1:bd:be:ae:dc:d7:fd:c4:82:06:b8:ed:b7:4a:4a:c7:e1:94: b0:37:ab:75:c4:4d:08:19:c3:c9:5e:4a:bc:6f:da:5f:73:9e: f8:dc:9e:d2:51:01:1c:f7:61:38:7c:3e:76:dd:72:9a:44:22: c8:e3:d8:70:cf:dd:cd:26:d4:7f:21:e9:89:6c:8a:f5:bb:ab: de:e3:b7:fb:24:d0:68:f3:e6:d3:fa:96:88:32:e4:43:a6:37: b2:97:62:c2:81:8d:49:4d:35:36:4b:1b:f3:98:22:4b:e3:16: 64:1b:ba:fe:3e:62:e4:54:7e:6a:0d:ae:ad:c0:a8:06:53:de: aa:c0:08:e6:f9:fc:56:a7:1c:19:ef:c3:69:fe:0c:aa:5f:16: 58:29:6f:17:67:52:2a:63:8c:30:55:4a:c4:0c:8d:08:1f:54: b8:31:68:69:35:8e:f1:0f:67:62:15:ee:98:1a:f1:82:e2:98: 2d:0a:b0:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlT8ssXCavmNG5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NWNjODA5M2EtZGJhZS00YjgyLWIzNmYtOTNiYWExNTY1MzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio8dgJfXuA6X0/W7XH9lnqh2y86/XJ7PUrrt vF/wGqjMIjx4pceh4ldvHFBwIdBm/CCk/PwbUxpR72OYi6bhEVpZHlY9Tk3/liec dEJCp6lzoa2wgzSMGCiob7mP6tgHhMn5IoNLJgEGgWM5eWKbR5M/zkgBYQOr4B1D 0trL7kYh89mvGdH2KJNbbNlDJ6d711mdf2iy0xGn9v084aMxg2G7yQ9tgz9dxU8W 7gvzgeRHMrC133LNwqrO8LGHM78UtTaR2A5Y8HXTfdixVXCJiR4rGaSB1d/J9+yk z42Z7heIM8hDnsO2esDyJhYp6les6RysHPG8frTBbRBSyl4FhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIua7JB4//YnLK/BknPpOB2KfSPaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzJhYzAzNzYtZGZlNC0z ZWM3LWJmYTAtYTllNTlmMzZkMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCJMO5PrU/l2I3gmBHmb6sC+wqkQXfpiWKF4WLcUrb/uL94vITTWSEy ZOayDa11ik3YJ5oCP/WYVxtn077/iHMuiOAhNEMBwcG9vq7c1/3Egga47bdKSsfh lLA3q3XETQgZw8leSrxv2l9znvjcntJRARz3YTh8PnbdcppEIsjj2HDP3c0m1H8h 6YlsivW7q97jt/sk0Gjz5tP6logy5EOmN7KXYsKBjUlNNTZLG/OYIkvjFmQbuv4+ YuRUfmoNrq3AqAZT3qrACOb5/FanHBnvw2n+DKpfFlgpbxdnUipjjDBVSsQMjQgf VLgxaGk1jvEPZ2IV7pga8YLimC0KsH0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:27 2026 by rpki-client