$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6080b58f-e4c4-39a8-88ec-0da8a1f3a065.roa File: 6080b58f-e4c4-39a8-88ec-0da8a1f3a065.roa (raw, json) Hash identifier: d3KLjkng1FEwUYwP8CF9LTyt67BIXXcT5Evs3t7v+IQ= Subject key identifier: 59:30:EF:11:72:53:17:72:85:26:84:3E:DE:DA:21:EE:AF:4D:4F:6B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584FAF58AFCBFA6B25C01F8E2742 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6080b58f-e4c4-39a8-88ec-0da8a1f3a065.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 31898 IP address blocks: 140.204.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:af:cb:fa:6b:25:c0:1f:8e:27:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=2afb5eab-b679-4aff-a08c-6894aec04883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8c:b6:93:3e:fa:1d:52:02:6e:20:62:2a:cf: cb:57:35:d3:02:61:5a:f2:b8:2e:1a:12:9d:54:7b: 4f:dd:bd:6b:49:c7:03:79:fa:8c:e5:81:c3:cd:eb: 7a:d7:01:d6:c3:11:28:37:0f:1f:a9:b2:6e:f3:c1: 86:dd:38:9b:dd:01:ff:cf:e6:2b:17:a0:72:1c:f1: 1d:4f:27:49:9a:cc:f4:79:0f:ac:34:ae:94:16:10: 86:dd:a9:51:8d:d5:0b:76:3e:e7:03:2b:f4:55:0b: 71:e3:24:d7:08:91:6d:bd:0d:8b:d4:3c:6e:64:d9: b2:65:9e:ac:86:26:63:5b:26:19:1b:cd:62:71:dc: 7e:0d:ef:8c:63:d0:34:6e:7a:9e:b5:ee:93:c6:92: 7d:23:d9:3b:53:8c:67:e0:88:26:e8:47:44:42:df: e3:87:1c:c3:ac:28:e3:c6:cb:ea:88:4e:b8:82:38: c2:ae:94:ea:8e:0a:3d:4d:8a:1d:23:96:4d:86:3c: d1:08:8e:63:90:04:71:09:ae:18:88:99:20:af:ca: 60:1e:b7:9d:bd:9d:54:01:58:07:0a:21:ac:d7:76: 88:ef:57:e1:2b:f9:75:63:30:18:42:4b:e4:42:14: e5:25:48:53:5b:fe:66:47:f2:80:0e:0d:f9:4b:30: 06:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:30:EF:11:72:53:17:72:85:26:84:3E:DE:DA:21:EE:AF:4D:4F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6080b58f-e4c4-39a8-88ec-0da8a1f3a065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:5e:27:25:93:5d:5e:05:b0:5f:43:17:0e:90:a4:6c:4b:31: 29:3e:3d:2a:3e:ad:43:d2:37:16:a1:67:80:47:15:31:33:12: c4:9d:25:70:66:8d:9c:d1:5e:26:77:37:90:c6:01:92:30:f8: 0e:47:28:46:8c:81:35:b6:e1:85:27:05:d4:dd:f5:f1:4d:62: 07:06:af:4b:ca:fb:a7:d9:e7:5e:03:bc:c0:ab:dc:b9:26:b9: 7b:66:52:a0:03:41:77:c4:a5:b3:4f:3c:96:63:1d:b3:e6:21: fe:a8:40:39:dc:4b:d8:36:33:ce:7d:a6:c5:51:ef:f4:ba:bf: 16:65:38:a9:81:52:fd:9f:08:5e:e5:5e:1f:42:7e:fc:ba:00: b9:5e:da:1e:3a:53:db:fb:77:c8:22:17:d0:41:02:a1:44:be: c1:1a:c9:7a:ca:87:5c:e5:a9:df:87:28:0e:47:2b:b1:75:d2: 34:b3:18:56:02:83:ab:58:34:f4:a9:66:87:90:d2:76:23:13: d4:9c:89:f1:5b:76:53:65:3b:0b:4a:d9:31:63:eb:5b:5c:e0: 66:70:58:09:20:15:48:a8:46:d7:29:1f:7a:88:0c:63:9e:21: fd:1f:92:d2:29:88:ff:d6:62:98:00:5b:9c:ea:d0:f3:58:49: 95:19:5e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWK/L+mslwB+OJ0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk MmFmYjVlYWItYjY3OS00YWZmLWEwOGMtNjg5NGFlYzA0ODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIy2kz76HVICbiBiKs/LVzXTAmFa8rguGhKd VHtP3b1rSccDefqM5YHDzet61wHWwxEoNw8fqbJu88GG3Tib3QH/z+YrF6ByHPEd TydJmsz0eQ+sNK6UFhCG3alRjdULdj7nAyv0VQtx4yTXCJFtvQ2L1DxuZNmyZZ6s hiZjWyYZG81icdx+De+MY9A0bnqete6TxpJ9I9k7U4xn4Igm6EdEQt/jhxzDrCjj xsvqiE64gjjCrpTqjgo9TYodI5ZNhjzRCI5jkARxCa4YiJkgr8pgHredvZ1UAVgH CiGs13aI71fhK/l1YzAYQkvkQhTlJUhTW/5mR/KADg35SzAGEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFkw7xFyUxdyhSaEPt7aIe6vTU9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjA4MGI1OGYtZTRjNC0z OWE4LTg4ZWMtMGRhOGExZjNhMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMzIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNeJyWTXV4FsF9DFw6QpGxLMSk+PSo+rUPSNxahZ4BHFTEzEsSdJXBm jZzRXiZ3N5DGAZIw+A5HKEaMgTW24YUnBdTd9fFNYgcGr0vK+6fZ514DvMCr3Lkm uXtmUqADQXfEpbNPPJZjHbPmIf6oQDncS9g2M859psVR7/S6vxZlOKmBUv2fCF7l Xh9Cfvy6ALle2h46U9v7d8giF9BBAqFEvsEayXrKh1zlqd+HKA5HK7F10jSzGFYC g6tYNPSpZoeQ0nYjE9ScifFbdlNlOwtK2TFj61tc4GZwWAkgFUioRtcpH3qIDGOe If0fktIpiP/WYpgAW5zq0PNYSZUZXhM= -----END CERTIFICATE-----Generated at Thu Nov 5 14:54:53 2026 by rpki-client