$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa File: 40454913-b31e-3ac5-9bbb-95727c0511ad.roa (raw, json) Hash identifier: g/palwfggWlXee9kiAGG4Uf4/4fVyUq1yVbMcBfcRbs= Subject key identifier: 0A:6F:3B:FC:EE:2C:66:B9:FB:3F:85:37:EC:10:97:74:9D:5C:AF:09 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D86957D92CEE9394588D37100 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 31898 IP address blocks: 140.91.220.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:7d:92:ce:e9:39:45:88:d3:71:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=e8765cb6-3538-4ff0-b797-fbc0c0e443f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:77:6e:54:f6:08:4b:60:da:1e:6e:ce:93:2e: b2:ae:38:3b:26:73:ba:12:b9:17:28:ea:19:90:44: ab:f5:b8:f8:d5:a5:55:09:66:93:d2:25:43:b6:6a: d7:47:43:3c:fc:13:cd:fe:5b:df:92:d5:42:e0:5c: d6:e1:dc:65:04:fa:8e:5f:c5:0c:bc:5c:72:cf:ba: 03:63:2a:c6:1a:ca:72:93:b5:e4:1b:7c:18:dd:5b: 67:7d:aa:68:c7:72:0b:f4:5c:fc:1c:53:ec:21:85: 77:e6:cd:34:83:9d:d4:de:85:13:ca:26:eb:d2:62: 42:f8:05:c9:47:8b:4a:aa:47:fa:57:28:06:7f:85: cc:94:6c:32:cb:f1:bd:4a:0e:2e:a4:82:d8:10:71: b6:19:85:8e:0f:e8:d6:ba:19:ed:65:02:a2:fd:4e: 50:7d:86:57:5e:0e:e6:4a:f1:99:08:61:5b:fe:a3: 56:54:23:c5:b8:3c:f6:9b:c6:a9:73:0f:fc:65:8c: 63:6c:bd:d3:90:b3:d6:4e:5c:50:39:39:c7:2f:51: d5:de:fe:f1:cf:0e:03:c2:0b:1d:cf:7d:cc:cd:79: 24:ec:00:f9:63:bc:2b:ce:f4:c1:ce:86:a8:39:42: 3e:07:e4:e3:0a:ca:65:9c:27:ef:99:8a:6a:4b:b7: d3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:6F:3B:FC:EE:2C:66:B9:FB:3F:85:37:EC:10:97:74:9D:5C:AF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/40454913-b31e-3ac5-9bbb-95727c0511ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:27:c4:4c:2e:88:d1:3f:e7:9d:ff:68:ed:29:87:d9:12:19: 3d:a7:a8:c6:72:6a:22:87:9a:d3:41:0c:e7:9f:c4:6c:c5:60: 32:b7:36:35:d1:9f:2f:7b:8d:59:c2:49:96:f1:a3:97:08:ca: bd:0d:49:a0:db:8b:30:5c:aa:80:c1:65:0b:64:a7:79:98:9c: 38:99:09:6e:d2:01:9b:a3:c8:65:f8:af:d3:e7:71:a9:c7:c7: 2f:de:e7:4b:8f:3d:0e:f5:cf:b0:1b:c4:32:e5:bd:8a:75:7e: d1:56:08:5a:e4:b2:45:71:53:99:f9:ef:e7:ba:de:32:cc:f1: 9b:67:e9:cf:16:ee:88:d2:59:95:93:ef:a2:da:29:5d:33:fa: 41:27:07:20:49:52:84:e9:89:89:ad:85:bc:a6:0a:2f:7c:13: 29:02:4a:c1:b6:26:f1:ad:39:05:a9:68:70:e4:b4:79:d3:49: 35:37:25:ab:4c:ab:70:4d:36:9d:4e:11:3e:8e:c3:e8:6a:09: fd:c0:6d:f5:5a:57:e6:01:de:3a:cd:46:ac:a4:18:58:6a:c1: 31:37:5e:c3:35:79:c4:bb:8e:f0:c1:76:e5:22:30:e8:d8:cc: 90:3b:a1:09:aa:da:63:5c:6e:50:13:52:bb:4c:a9:8f:d5:a9: 94:72:2b:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlX2Szuk5RYjTcQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk ZTg3NjVjYjYtMzUzOC00ZmYwLWI3OTctZmJjMGMwZTQ0M2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnduVPYIS2DaHm7Oky6yrjg7JnO6ErkXKOoZ kESr9bj41aVVCWaT0iVDtmrXR0M8/BPN/lvfktVC4FzW4dxlBPqOX8UMvFxyz7oD YyrGGspyk7XkG3wY3Vtnfapox3IL9Fz8HFPsIYV35s00g53U3oUTyibr0mJC+AXJ R4tKqkf6VygGf4XMlGwyy/G9Sg4upILYEHG2GYWOD+jWuhntZQKi/U5QfYZXXg7m SvGZCGFb/qNWVCPFuDz2m8apcw/8ZYxjbL3TkLPWTlxQOTnHL1HV3v7xzw4Dwgsd z33MzXkk7AD5Y7wrzvTBzoaoOUI+B+TjCsplnCfvmYpqS7fTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApvO/zuLGa5+z+FN+wQl3SdXK8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDA0NTQ5MTMtYjMxZS0z YWM1LTliYmItOTU3MjdjMDUxMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsnxEwuiNE/553/aO0ph9kSGT2nqMZyaiKHmtNBDOefxGzFYDK3NjXR ny97jVnCSZbxo5cIyr0NSaDbizBcqoDBZQtkp3mYnDiZCW7SAZujyGX4r9PncanH xy/e50uPPQ71z7AbxDLlvYp1ftFWCFrkskVxU5n57+e63jLM8Ztn6c8W7ojSWZWT 76LaKV0z+kEnByBJUoTpiYmthbymCi98EykCSsG2JvGtOQWpaHDktHnTSTU3JatM q3BNNp1OET6Ow+hqCf3AbfVaV+YB3jrNRqykGFhqwTE3XsM1ecS7jvDBduUiMOjY zJA7oQmq2mNcblATUrtMqY/VqZRyKyM= -----END CERTIFICATE-----Generated at Fri Apr 17 15:20:46 2026 by rpki-client