$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49fed419-cbe9-3e19-a580-7a43ae9e134e.roa File: 49fed419-cbe9-3e19-a580-7a43ae9e134e.roa (raw, json) Hash identifier: wn++i0okIEfgyLfQP2IbrmFcm2ccyPgEyxfGHyJLthY= Subject key identifier: FF:9E:4E:E6:B3:D3:FE:8B:E1:B0:F9:E8:29:A6:55:1E:B6:FB:C6:02 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10378B95BC32DA2991E14780 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49fed419-cbe9-3e19-a580-7a43ae9e134e.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:8b:95:bc:32:da:29:91:e1:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=8049f84f-cfe4-4be5-aa10-c0d75e293b4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:00:29:e9:52:cc:f3:98:d6:db:db:54:a9: 24:0a:21:1b:e9:c8:9a:b3:21:8d:ad:15:34:88:c7: 39:87:3f:ae:5f:94:ce:fb:fe:c5:50:13:19:dc:c3: 28:e4:e6:b1:24:ee:12:87:75:9e:9e:70:a9:4e:dd: 6a:b8:e7:6a:c3:3b:82:79:ae:9d:ea:77:09:bd:79: 00:2f:45:33:14:d2:4d:48:ad:f2:b6:01:09:b2:55: a6:9f:dd:66:ba:6d:0c:1b:91:24:4f:04:24:8e:43: a0:76:c1:60:6b:84:ed:79:90:85:07:7a:1f:a0:3f: 4c:42:00:e2:8c:a2:6a:33:16:d2:87:44:22:86:5f: b1:bd:fa:f1:d6:ae:98:bc:ae:f3:62:68:c1:a1:a0: be:e0:2e:96:9a:a3:e8:1d:e4:8a:ce:be:9d:0e:f9: 92:14:3f:c6:5c:b2:9a:44:0b:23:ab:e3:6a:b9:b2: f0:f4:9b:7c:d2:f7:e6:27:cb:b2:64:21:48:5f:d0: 88:9e:10:3b:97:15:f3:8d:ad:53:e8:db:f7:42:28: 3f:1a:6a:57:03:15:9c:74:88:e7:c4:5f:a9:59:3d: 68:45:d7:2d:b9:10:5d:b0:bc:68:99:6a:d0:b5:86: 6c:05:93:51:bd:d0:27:34:c8:ce:92:f4:ff:d3:38: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9E:4E:E6:B3:D3:FE:8B:E1:B0:F9:E8:29:A6:55:1E:B6:FB:C6:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49fed419-cbe9-3e19-a580-7a43ae9e134e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:b6:dc:a2:58:a1:c7:12:56:c0:e6:8c:43:e9:72:bd:eb:e3: 57:6c:fa:72:b7:4e:9f:d6:de:27:86:5b:8b:67:a7:ef:ae:c6: ee:b2:b5:ff:29:03:5c:86:cf:78:2a:4b:bb:5f:1e:79:06:a1: ff:87:d8:d9:e2:96:d9:5b:cf:5c:27:79:5b:64:dd:77:0e:d2: 5e:85:93:c3:37:7e:83:25:80:84:ba:55:4a:cb:f3:88:bb:9b: f2:e6:5b:b3:01:36:48:ea:d0:c8:78:c1:88:73:49:28:3d:3b: 1e:ef:df:8c:6a:fe:3a:cb:68:36:b1:de:6c:86:13:f2:82:2b: 63:0c:57:1c:76:78:79:3e:ee:88:bf:3e:f6:a3:5d:d0:37:47: fd:3c:15:06:7c:ff:9d:e7:5f:6c:77:ac:92:33:7d:bc:20:c6: 02:49:58:56:87:65:53:8d:dc:29:b3:9e:98:93:81:8f:85:9d: 35:a3:33:09:ec:46:46:2b:7f:33:a2:76:e1:7c:66:38:2b:39: 17:da:a8:e0:3b:79:f2:02:1c:3f:55:e8:10:ee:c9:32:1d:c6: 67:f4:1f:a2:a8:ce:9e:8f:c2:73:91:b2:59:40:d2:39:75:41: 5e:49:de:6f:90:98:4b:dc:b0:64:84:21:dc:e0:ef:34:3b:ba: 7d:cb:4a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN4uVvDLaKZHhR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ODA0OWY4NGYtY2ZlNC00YmU1LWFhMTAtYzBkNzVlMjkzYjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHQAKelSzPOY1tvbVKkkCiEb6ciasyGNrRU0 iMc5hz+uX5TO+/7FUBMZ3MMo5OaxJO4Sh3WennCpTt1quOdqwzuCea6d6ncJvXkA L0UzFNJNSK3ytgEJslWmn91mum0MG5EkTwQkjkOgdsFga4TteZCFB3ofoD9MQgDi jKJqMxbSh0Qihl+xvfrx1q6YvK7zYmjBoaC+4C6WmqPoHeSKzr6dDvmSFD/GXLKa RAsjq+NqubLw9Jt80vfmJ8uyZCFIX9CInhA7lxXzja1T6Nv3Qig/GmpXAxWcdIjn xF+pWT1oRdctuRBdsLxomWrQtYZsBZNRvdAnNMjOkvT/0zhqiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+eTuaz0/6L4bD56CmmVR62+8YCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDlmZWQ0MTktY2JlOS0z ZTE5LWE1ODAtN2E0M2FlOWUxMzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa23KJYoccSVsDmjEPpcr3r41ds+nK3Tp/W3ieGW4tnp++uxu6ytf8p A1yGz3gqS7tfHnkGof+H2Nniltlbz1wneVtk3XcO0l6Fk8M3foMlgIS6VUrL84i7 m/LmW7MBNkjq0Mh4wYhzSSg9Ox7v34xq/jrLaDax3myGE/KCK2MMVxx2eHk+7oi/ PvajXdA3R/08FQZ8/53nX2x3rJIzfbwgxgJJWFaHZVON3CmznpiTgY+FnTWjMwns RkYrfzOiduF8ZjgrORfaqOA7efICHD9V6BDuyTIdxmf0H6Kozp6PwnORsllA0jl1 QV5J3m+QmEvcsGSEIdzg7zQ7un3LSog= -----END CERTIFICATE-----Generated at Tue Sep 22 14:59:24 2026 by rpki-client