$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7d1f1764-0ef6-3f74-8a43-20815dabf812.roa File: 7d1f1764-0ef6-3f74-8a43-20815dabf812.roa (raw, json) Hash identifier: wYG4pheAxpRJ3Mt+mv7O3ahoYMcng31muA+RubGz8UI= Subject key identifier: 60:C4:73:86:5C:6C:24:78:95:D3:70:ED:60:86:8A:74:58:06:90:5B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A82BC666E90A1A07A0D80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7d1f1764-0ef6-3f74-8a43-20815dabf812.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.91.224.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:82:bc:66:6e:90:a1:a0:7a:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=8c86f532-86ae-47d6-a513-91817fb4257c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d1:71:4b:1d:1b:98:74:db:1e:02:df:83:d2: a8:ec:6a:44:a1:19:76:05:9f:41:1a:6d:57:d2:eb: 22:b7:05:3b:99:7c:a8:4c:9e:fa:b6:95:f5:23:80: ad:7d:78:ed:1b:ba:dd:bb:81:dd:54:1f:cf:66:7b: 4d:29:3f:8d:84:db:59:b2:57:87:fb:02:5d:8e:ff: 1a:bf:53:61:dd:e2:25:19:48:a5:fd:41:9e:7c:78: a5:95:5d:8a:ea:51:52:83:1e:20:93:fc:7e:05:55: 73:f1:e9:c7:b5:62:bc:98:a5:9c:35:73:da:57:76: d5:1f:a6:2d:c9:38:c3:b7:d4:18:5a:f5:b2:6b:5c: d3:5d:c4:5f:35:78:a8:8c:98:16:37:4f:3f:ff:68: d7:20:64:ec:c5:2c:fe:86:3d:96:35:80:53:88:65: 6e:92:fb:98:5e:d5:b6:0d:5a:5a:7e:6c:48:dd:bc: a1:94:8b:fa:ac:e6:fc:0f:ab:c4:41:e6:b6:06:2f: 8a:5e:ee:f6:44:0d:7b:29:f0:51:68:73:f1:a8:cd: ff:ef:69:b1:68:d2:c8:58:e4:c5:4e:01:32:ab:1c: c1:53:33:89:eb:04:e6:1d:67:de:d9:ab:72:5a:29: 91:72:1a:52:12:03:40:b2:c8:91:a3:e3:eb:b4:2f: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C4:73:86:5C:6C:24:78:95:D3:70:ED:60:86:8A:74:58:06:90:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/7d1f1764-0ef6-3f74-8a43-20815dabf812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:48:2d:72:73:bf:cf:93:25:80:39:b1:02:93:a9:1b:07:7e: 1f:6b:db:b2:55:d8:ae:ad:29:2e:3e:17:b6:96:61:e4:7b:d4: b7:fe:b0:fe:ba:a6:73:3a:69:ee:a9:1d:98:9b:87:88:07:dc: aa:bd:6e:c9:00:83:c4:8c:5c:68:e8:ca:39:d0:97:f6:ec:b2: db:0a:28:9c:d6:85:4a:0e:32:78:2c:05:c7:1b:0e:dc:ad:b0: 1f:76:d1:e2:4a:0b:4d:3e:b4:fc:25:38:7d:7f:2d:13:75:48: 54:5b:27:5c:92:4b:c8:61:c9:62:80:5b:15:5a:a8:fd:12:fa: 21:6b:cd:2f:d2:a5:89:e5:f5:35:7d:d1:aa:be:48:7c:62:70: 00:78:a6:74:4e:d8:f1:35:09:24:0c:e2:81:39:5d:76:0d:e6: 14:ad:b3:99:67:3b:3c:8f:bd:d4:72:79:f8:47:fb:e4:70:7a: 70:94:2a:e4:27:e6:cf:6c:69:b1:c6:64:7b:38:e1:91:08:11: 81:58:26:43:a0:10:e7:5c:c6:b1:7e:d0:f4:14:e2:5b:11:e9: aa:e8:9c:b0:0d:bb:59:2e:ed:ad:28:5e:29:eb:d8:c5:c4:45: 21:51:9d:b9:e2:b9:7b:59:a4:85:ec:a3:f8:4f:ae:49:0b:ae: cf:40:df:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moK8Zm6QoaB6DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk OGM4NmY1MzItODZhZS00N2Q2LWE1MTMtOTE4MTdmYjQyNTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9FxSx0bmHTbHgLfg9Ko7GpEoRl2BZ9BGm1X 0usitwU7mXyoTJ76tpX1I4CtfXjtG7rdu4HdVB/PZntNKT+NhNtZsleH+wJdjv8a v1Nh3eIlGUil/UGefHillV2K6lFSgx4gk/x+BVVz8enHtWK8mKWcNXPaV3bVH6Yt yTjDt9QYWvWya1zTXcRfNXiojJgWN08//2jXIGTsxSz+hj2WNYBTiGVukvuYXtW2 DVpafmxI3byhlIv6rOb8D6vEQea2Bi+KXu72RA17KfBRaHPxqM3/72mxaNLIWOTF TgEyqxzBUzOJ6wTmHWfe2atyWimRchpSEgNAssiRo+PrtC8ybwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDEc4ZcbCR4ldNw7WCGinRYBpBbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvN2QxZjE3NjQtMGVmNi0z Zjc0LThhNDMtMjA4MTVkYWJmODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRILXJzv8+TJYA5sQKTqRsHfh9r27JV2K6tKS4+F7aWYeR71Lf+sP66 pnM6ae6pHZibh4gH3Kq9bskAg8SMXGjoyjnQl/bsstsKKJzWhUoOMngsBccbDtyt sB920eJKC00+tPwlOH1/LRN1SFRbJ1ySS8hhyWKAWxVaqP0S+iFrzS/SpYnl9TV9 0aq+SHxicAB4pnRO2PE1CSQM4oE5XXYN5hSts5lnOzyPvdRyefhH++RwenCUKuQn 5s9sabHGZHs44ZEIEYFYJkOgEOdcxrF+0PQU4lsR6aronLANu1ku7a0oXinr2MXE RSFRnbniuXtZpIXso/hPrkkLrs9A3+M= -----END CERTIFICATE-----Generated at Fri Apr 17 15:18:46 2026 by rpki-client