$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f691cd7-db3e-3fd2-bcea-936507389137.roa File: 5f691cd7-db3e-3fd2-bcea-936507389137.roa (raw, json) Hash identifier: lbhbM7lJPNmHo9609Ex/xhW7Qeb/T0xu+K69bsZzai8= Subject key identifier: DE:A0:A7:97:34:2F:AE:5E:C5:47:9D:D4:5D:F3:65:F1:A0:99:6B:74 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1B623EF89A39BE209E985800 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f691cd7-db3e-3fd2-bcea-936507389137.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:3e:f8:9a:39:be:20:9e:98:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=c2bb0ea7-0f9f-4969-b990-7567d4c8896b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:79:66:e2:08:1b:1b:ec:7a:4c:46:2c:34:a1: f2:76:ea:19:52:91:7d:fc:f7:ae:cf:15:69:8b:31: 77:89:a1:f2:34:33:e0:ec:bf:c9:50:e0:21:40:35: e3:ee:0a:b2:3a:f6:36:da:86:2a:b9:37:62:8d:35: d5:d5:6f:ea:c6:9c:ed:83:c8:79:98:8a:98:cd:50: 28:a0:6e:da:f3:9b:1f:14:6c:cd:a9:4d:18:4a:b0: 81:1c:24:5e:7b:6d:cb:0b:14:40:d1:1c:d1:9b:c6: ae:ec:cd:a4:a2:7d:90:df:b2:7e:cf:29:9f:03:14: d2:ec:8f:7d:bc:65:85:83:77:1e:85:bd:4a:9c:e7: 2c:5f:60:32:ba:e6:10:92:f5:2c:25:04:f9:4d:f6: aa:2e:49:45:26:0c:7a:db:54:69:12:a8:bd:ad:6f: 50:a0:37:1c:a9:a9:03:15:cc:a2:56:e5:20:4c:21: 8c:ae:0a:06:ef:68:be:2e:3e:41:26:da:a6:6e:71: 4b:b2:a0:48:6f:11:63:c9:9b:47:de:da:78:7b:9c: ca:67:75:03:e4:00:c1:d8:39:85:f7:b3:75:40:05: fd:f4:3d:95:7a:e1:d2:e4:99:1d:25:0d:aa:cc:d0: d2:48:f3:de:86:66:4e:12:f5:1b:ab:c7:95:b3:52: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A0:A7:97:34:2F:AE:5E:C5:47:9D:D4:5D:F3:65:F1:A0:99:6B:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5f691cd7-db3e-3fd2-bcea-936507389137.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:41:65:f8:8f:89:71:c4:7a:80:a3:e1:4d:bd:64:5e:1f:e3: c0:a3:ab:44:41:80:02:f3:bd:01:73:1f:4d:96:26:7f:33:c9: 2d:66:95:62:a1:ab:08:6b:86:60:73:17:d2:56:10:e1:80:f0: 5d:35:53:ce:8d:6f:da:53:b8:7d:ca:af:f3:67:7a:b7:9a:ee: f5:41:bc:17:05:4e:a9:14:4b:d4:4a:a5:c3:87:1e:27:dc:f5: 10:8e:bb:dd:6b:ef:69:02:64:a5:61:80:93:95:df:77:72:be: 71:c0:31:d3:13:40:5c:b1:99:02:54:48:84:50:de:89:6b:9f: 0f:b4:a6:76:fa:6c:44:49:40:2b:a4:b8:3a:a8:fb:e4:0e:ca: 6a:91:f0:81:51:d2:21:0d:6e:16:60:96:28:02:9f:22:49:aa: 74:56:f3:43:2a:f1:21:a1:1e:89:45:22:1d:64:5e:72:d3:1c: b2:08:3b:14:25:ab:6f:45:7c:75:97:7c:f3:e8:8f:af:1b:d8: 8b:f5:1e:2c:10:27:20:02:b7:b7:6c:5f:1b:a3:e5:2b:fa:8d: 88:d0:28:11:30:7f:29:e9:6a:94:6b:22:94:f0:46:b4:95:d9: 07:b2:7d:e8:3d:5a:00:ad:55:bc:d0:60:af:6a:68:8c:02:34: 4f:3a:5f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYj74mjm+IJ6YWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk YzJiYjBlYTctMGY5Zi00OTY5LWI5OTAtNzU2N2Q0Yzg4OTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonlm4ggbG+x6TEYsNKHyduoZUpF9/PeuzxVp izF3iaHyNDPg7L/JUOAhQDXj7gqyOvY22oYquTdijTXV1W/qxpztg8h5mIqYzVAo oG7a85sfFGzNqU0YSrCBHCRee23LCxRA0RzRm8au7M2kon2Q37J+zymfAxTS7I99 vGWFg3cehb1KnOcsX2AyuuYQkvUsJQT5TfaqLklFJgx621RpEqi9rW9QoDccqakD FcyiVuUgTCGMrgoG72i+Lj5BJtqmbnFLsqBIbxFjyZtH3tp4e5zKZ3UD5ADB2DmF 97N1QAX99D2VeuHS5JkdJQ2qzNDSSPPehmZOEvUbq8eVs1JD2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN6gp5c0L65exUed1F3zZfGgmWt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNWY2OTFjZDctZGIzZS0z ZmQyLWJjZWEtOTM2NTA3Mzg5MTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdBZfiPiXHEeoCj4U29ZF4f48Cjq0RBgALzvQFzH02WJn8zyS1mlWKh qwhrhmBzF9JWEOGA8F01U86Nb9pTuH3Kr/Nnerea7vVBvBcFTqkUS9RKpcOHHifc 9RCOu91r72kCZKVhgJOV33dyvnHAMdMTQFyxmQJUSIRQ3olrnw+0pnb6bERJQCuk uDqo++QOymqR8IFR0iENbhZgligCnyJJqnRW80Mq8SGhHolFIh1kXnLTHLIIOxQl q29FfHWXfPPoj68b2Iv1HiwQJyACt7dsXxuj5Sv6jYjQKBEwfynpapRrIpTwRrSV 2Qeyfeg9WgCtVbzQYK9qaIwCNE86X5w= -----END CERTIFICATE-----Generated at Fri Sep 25 18:07:54 2026 by rpki-client