$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa File: 3e9187c0-23cd-379a-98c6-064fe0b32f16.roa (raw, json) Hash identifier: 453kf3qbfgC1/FCINufXSPIOzODk8F6HVbVcnC7EglE= Subject key identifier: 21:2F:88:34:1C:18:B9:99:AE:E5:12:62:46:7F:51:B3:82:EC:96:C3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A8104C0A98B9B99DBEFE0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.50.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:81:04:c0:a9:8b:9b:99:db:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=0bbd3b94-c800-4a5d-b2b7-29f956df3562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:3c:2d:db:02:45:56:6d:73:36:92:c2:b1: 65:6b:75:2d:9b:81:0c:2c:22:67:d4:23:35:33:e7: 4f:ea:a2:4d:9d:68:a0:38:ca:17:74:a5:5e:89:fd: 4c:fd:50:69:a5:7a:89:e0:2f:98:8a:8e:03:f0:b2: 0a:ef:f6:05:62:6e:5b:26:c3:79:83:7d:7a:8d:83: 44:98:da:1a:25:e5:5f:c2:03:07:91:32:73:50:b2: 46:43:17:af:60:61:f8:3b:40:47:0a:26:5c:de:61: 1d:c0:19:61:7c:9f:76:26:5a:4e:3c:a4:5f:60:cf: 2f:db:b1:a8:f4:89:49:4e:f4:9e:5e:32:62:e1:a7: 18:5c:96:35:fd:22:8e:97:2d:88:27:99:b5:26:dc: ed:ac:9a:66:a1:21:db:d7:38:ce:8d:93:0e:d2:18: bd:3e:92:66:96:a1:06:54:a1:2a:f7:78:97:24:6b: 10:5a:42:34:1b:9f:81:ac:26:0d:c1:72:56:bd:3d: da:76:2e:92:9b:1a:3a:4a:4b:3f:2e:33:2b:d8:a3: 85:16:db:4a:d5:7c:1f:a6:53:e6:a8:1c:d4:c6:38: 47:42:33:79:fb:ff:4d:28:7f:34:d9:37:31:7d:c7: 92:15:09:55:b3:96:5d:5c:0f:81:8b:b9:cc:c4:bd: 50:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2F:88:34:1C:18:B9:99:AE:E5:12:62:46:7F:51:B3:82:EC:96:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3e9187c0-23cd-379a-98c6-064fe0b32f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.50.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:ce:77:b4:b0:37:4f:c1:22:66:44:30:e0:2f:39:ec:56:b3: 9d:73:a3:1c:ab:25:be:9a:67:90:65:19:6e:4d:9e:a9:c8:03: d0:dc:bc:9d:4d:04:3c:47:96:ed:85:3a:e7:42:de:4c:1a:9f: 88:6a:7c:05:3b:7f:7d:6b:e4:b3:aa:70:68:be:30:4f:7c:2b: 56:f8:2b:4d:49:03:ba:df:bf:ef:9a:74:ba:b5:91:87:72:a9: d4:03:13:4b:6b:1d:cf:da:0d:d2:74:20:c0:2e:d6:f0:c3:15: 94:dc:10:15:9f:aa:ac:71:2b:89:0e:4f:b3:a3:14:da:7f:77: ef:9e:f2:11:38:9d:51:22:85:d7:58:c0:7c:1a:16:7c:57:ef: de:df:95:b2:73:1c:f1:e8:85:1b:ca:cc:d5:c9:76:b2:f2:e5: 59:9d:36:c4:19:f8:b4:48:e2:d5:f8:4a:0b:91:1d:d7:0d:67: 2c:01:c2:93:64:10:f4:22:71:d5:08:c3:0f:e5:4d:e9:64:df: 79:31:4f:94:2a:b2:05:d7:86:80:fb:b2:51:c0:c2:41:f8:86: 46:17:4a:17:32:cb:2c:f9:73:6d:b9:3f:29:00:f6:4e:cf:d2: 81:67:47:0c:84:93:7e:4f:91:69:37:ed:dd:2f:ed:7f:e6:66: 61:6c:86:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moEEwKmLm5nb7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MGJiZDNiOTQtYzgwMC00YTVkLWIyYjctMjlmOTU2ZGYzNTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTg8LdsCRVZtczaSwrFla3Utm4EMLCJn1CM1 M+dP6qJNnWigOMoXdKVeif1M/VBppXqJ4C+Yio4D8LIK7/YFYm5bJsN5g316jYNE mNoaJeVfwgMHkTJzULJGQxevYGH4O0BHCiZc3mEdwBlhfJ92JlpOPKRfYM8v27Go 9IlJTvSeXjJi4acYXJY1/SKOly2IJ5m1JtztrJpmoSHb1zjOjZMO0hi9PpJmlqEG VKEq93iXJGsQWkI0G5+BrCYNwXJWvT3adi6Smxo6Sks/LjMr2KOFFttK1XwfplPm qBzUxjhHQjN5+/9NKH802TcxfceSFQlVs5ZdXA+Bi7nMxL1QewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCEviDQcGLmZruUSYkZ/UbOC7JbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2U5MTg3YzAtMjNjZC0z NzlhLTk4YzYtMDY0ZmUwYjMyZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjOd7SwN0/BImZEMOAvOexWs51zoxyrJb6aZ5BlGW5NnqnIA9DcvJ1N BDxHlu2FOudC3kwan4hqfAU7f31r5LOqcGi+ME98K1b4K01JA7rfv++adLq1kYdy qdQDE0trHc/aDdJ0IMAu1vDDFZTcEBWfqqxxK4kOT7OjFNp/d++e8hE4nVEihddY wHwaFnxX797flbJzHPHohRvKzNXJdrLy5VmdNsQZ+LRI4tX4SguRHdcNZywBwpNk EPQicdUIww/lTelk33kxT5QqsgXXhoD7slHAwkH4hkYXShcyyyz5c225PykA9k7P 0oFnRwyEk35PkWk37d0v7X/mZmFshqQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:43:09 2026 by rpki-client