$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc9757c-28bd-36a1-9968-0ca362af6b57.roa File: 3fc9757c-28bd-36a1-9968-0ca362af6b57.roa (raw, json) Hash identifier: QI+9y/ZjEN9ooklzZ2279C0SKO8Hspx3fBzaGvhdF/w= Subject key identifier: 34:9B:32:01:CD:60:4D:44:FC:30:C9:E1:DD:55:26:C4:C7:E6:10:7F Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EA786F36B39694D888AB9F400 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc9757c-28bd-36a1-9968-0ca362af6b57.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 54253 IP address blocks: 140.245.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f3:6b:39:69:4d:88:8a:b9:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=ac60f47a-19d1-408e-9810-9f8bf0ac963e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:eb:f9:7f:7f:23:90:27:ac:c9:d4:f3:6f:4e: 53:fa:79:f4:37:30:3a:57:82:61:ff:02:b0:61:8a: 00:75:81:e0:64:f0:84:df:c7:23:27:b5:02:ac:8f: 70:75:83:5d:6f:46:ce:72:d0:57:e9:37:57:2f:4b: 8f:4f:a9:de:9f:6d:e9:d6:60:ce:cd:55:b1:d7:05: bb:a9:08:79:b8:8d:49:8c:89:07:71:50:42:85:ba: 44:b9:73:57:cc:e3:ad:a0:26:b2:90:34:9c:81:d7: d0:03:40:96:2d:d4:76:44:9a:0e:ad:45:60:e8:21: 62:8b:01:69:39:c4:1d:b4:5f:0b:d8:9a:fc:67:73: 98:31:89:b0:30:47:c4:3f:d2:b1:62:fa:a9:7c:d6: 6b:58:12:23:3c:dc:1c:68:d3:8f:1d:ae:c0:0f:4d: cb:7d:bd:05:36:a8:f5:32:43:38:ea:fe:0a:20:d2: 1c:2e:26:df:b8:73:b3:cf:cc:bf:42:81:4f:25:ef: 6a:7d:77:66:a1:7f:a5:21:02:8b:14:cc:5a:4d:f3: 6c:0e:2f:37:50:b4:2e:e5:4f:c7:d3:85:4d:2b:ce: 63:d6:62:4d:28:0c:23:46:53:df:63:78:c8:e8:67: 4c:85:d3:22:bd:e1:b2:96:f4:4d:01:52:7f:ac:01: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9B:32:01:CD:60:4D:44:FC:30:C9:E1:DD:55:26:C4:C7:E6:10:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/3fc9757c-28bd-36a1-9968-0ca362af6b57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:29:b6:45:51:82:59:41:dd:89:2f:e1:3c:f7:93:be:5c:80: 8f:01:3f:3c:b3:b7:a2:e9:54:c7:b8:ad:72:df:3b:f3:da:0c: a9:ab:d8:b7:91:d8:c6:c1:e8:97:3e:ed:ec:d1:1f:ce:c5:af: 4a:7e:7c:b9:3b:9d:bf:9e:75:5a:6e:9e:69:a4:77:5a:0a:05: 1a:8e:70:7a:3c:d1:a8:ba:34:84:bd:c3:9e:92:2b:4c:d4:c6: c9:18:99:63:fa:56:a0:90:c9:f1:86:27:6a:89:ac:44:0e:b9: b1:eb:6a:b1:33:2e:73:eb:35:56:ac:99:af:80:ec:73:70:a6: f1:09:7b:27:b6:ba:ef:69:7e:fb:17:01:a6:ae:83:0c:db:57: 03:43:d1:62:26:61:8a:3e:b2:d4:cb:d1:a2:4a:fe:84:1c:f4: 78:fe:df:c0:bc:78:19:09:16:62:9a:d7:97:d8:f6:dd:ed:81: 02:cf:1f:20:24:1d:85:25:fc:22:ac:9e:52:2c:b7:fc:59:48: 16:fb:71:90:d6:03:d6:0c:aa:cf:bc:db:fa:6f:b6:6d:d8:ba: c8:67:7b:48:de:b9:1a:af:76:03:7e:7c:a1:65:62:50:a9:80: 66:19:e0:6e:72:ca:04:20:33:dd:31:e1:86:22:00:a3:f4:28: 0c:25:f2:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvNrOWlNiIq59AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWM2MGY0N2EtMTlkMS00MDhlLTk4MTAtOWY4YmYwYWM5NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguv5f38jkCesydTzb05T+nn0NzA6V4Jh/wKw YYoAdYHgZPCE38cjJ7UCrI9wdYNdb0bOctBX6TdXL0uPT6nen23p1mDOzVWx1wW7 qQh5uI1JjIkHcVBChbpEuXNXzOOtoCaykDScgdfQA0CWLdR2RJoOrUVg6CFiiwFp OcQdtF8L2Jr8Z3OYMYmwMEfEP9KxYvqpfNZrWBIjPNwcaNOPHa7AD03Lfb0FNqj1 MkM46v4KINIcLibfuHOzz8y/QoFPJe9qfXdmoX+lIQKLFMxaTfNsDi83ULQu5U/H 04VNK85j1mJNKAwjRlPfY3jI6GdMhdMiveGylvRNAVJ/rAFgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSbMgHNYE1E/DDJ4d1VJsTH5hB/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvM2ZjOTc1N2MtMjhiZC0z NmExLTk5NjgtMGNhMzYyYWY2YjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYptkVRgllB3Ykv4Tz3k75cgI8BPzyzt6LpVMe4rXLfO/PaDKmr2LeR 2MbB6Jc+7ezRH87Fr0p+fLk7nb+edVpunmmkd1oKBRqOcHo80ai6NIS9w56SK0zU xskYmWP6VqCQyfGGJ2qJrEQOubHrarEzLnPrNVasma+A7HNwpvEJeye2uu9pfvsX AaaugwzbVwND0WImYYo+stTL0aJK/oQc9Hj+38C8eBkJFmKa15fY9t3tgQLPHyAk HYUl/CKsnlIst/xZSBb7cZDWA9YMqs+82/pvtm3Yushne0jeuRqvdgN+fKFlYlCp gGYZ4G5yygQgM90x4YYiAKP0KAwl8pM= -----END CERTIFICATE-----Generated at Wed Jul 29 09:28:23 2026 by rpki-client