$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa File: 8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa (raw, json) Hash identifier: uxZmZjBb8FGT3jva9unP05Nb7c6UbnsjZZI2fC/fyDU= Subject key identifier: 90:FF:94:B4:CD:BA:53:69:56:E2:32:10:F4:84:C0:F1:E6:F0:33:9C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7D0D5D059B1DBE84BCF00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d0:d5:d0:59:b1:db:e8:4b:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=8a91e337-2e51-4946-a22f-e0d9f97ef6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:f0:ae:76:b6:3d:36:b4:fa:54:06:55:20: c4:a7:a4:55:8e:a8:87:83:9f:d7:48:f5:61:ae:2a: 3e:75:7e:db:69:49:5c:d8:95:0b:0b:53:a3:ae:69: ed:5c:5c:40:91:d9:69:7f:95:b4:12:ac:52:5a:ec: 5d:04:f9:db:73:26:ea:60:82:e8:c2:4d:19:22:dd: 06:47:79:29:a2:37:4e:27:c7:f0:24:9c:7a:a0:21: 1c:ca:d0:57:a0:86:d4:bc:17:1f:5c:ca:af:11:f6: 53:d8:40:8b:bd:80:1f:4e:7f:bd:b8:7a:fc:80:92: 40:bb:1e:5d:31:42:ab:2a:68:ae:3a:f9:42:46:b6: 02:e6:68:ab:72:dd:b1:ef:44:7a:b7:56:22:49:b8: ee:4c:a2:76:f1:c5:fb:a6:58:b6:27:11:54:ce:a2: 6d:a5:95:9c:4c:f0:a4:92:34:70:b5:76:c6:9d:cb: 91:2c:14:45:83:79:14:89:53:18:98:79:30:a5:f0: 16:11:96:58:be:45:0b:bd:36:cb:6c:01:16:12:41: d6:1e:7a:07:46:d9:fa:83:1b:b6:59:6e:83:5f:4c: e9:14:69:d8:88:ef:f9:30:23:66:eb:de:85:d9:15: 36:40:48:d2:c6:75:ad:0b:c7:80:77:ae:8f:95:01: a1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:FF:94:B4:CD:BA:53:69:56:E2:32:10:F4:84:C0:F1:E6:F0:33:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8667e4bc-8952-341e-b4a5-4ec8b98354b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b5:96:9e:8d:7e:d1:cf:bb:16:e7:65:7b:76:7c:37:d0:e9: 69:e3:5d:b8:37:b5:e3:8a:fe:3d:a1:7d:13:81:1a:2d:11:90: cc:00:9e:fb:7b:7f:d7:62:f2:28:cb:c5:8a:7f:03:12:0c:84: fe:ca:9d:02:2d:0b:d0:2b:b6:9d:d1:4c:70:87:e8:b0:01:a4: 7e:73:22:92:0d:01:b8:8d:e0:3a:b5:87:06:15:ef:de:bb:0b: d1:c1:29:a4:72:f1:b1:ce:6a:59:53:09:ff:8e:8b:3d:be:e3: dd:f9:90:3d:ef:dd:90:22:a7:f0:16:be:f3:39:bd:0a:1c:85: b7:7c:36:f8:25:ca:d5:d3:9e:e7:98:bf:bb:6b:e0:e6:a5:f5: 8d:25:99:a1:77:70:40:06:af:72:9e:60:99:8b:41:08:f3:a6: c8:89:2b:6d:52:98:5d:06:d7:11:1e:a7:2d:04:3e:93:a7:83: dc:d0:e5:bd:30:98:5b:7d:98:bb:5f:c2:62:03:dc:d3:bf:4a: 2b:a3:bd:e7:24:e6:05:86:86:b5:08:85:19:19:cc:45:b5:cb: 02:a4:59:2c:d3:66:e0:9b:b1:e1:31:7d:60:48:65:b0:8d:f2: aa:c8:e8:aa:80:b3:44:4f:40:c5:58:78:70:cc:d5:36:fb:2b: 9a:f5:66:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99DV0Fmx2+hLzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk OGE5MWUzMzctMmU1MS00OTQ2LWEyMmYtZTBkOWY5N2VmNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKfwrna2PTa0+lQGVSDEp6RVjqiHg5/XSPVh rio+dX7baUlc2JULC1OjrmntXFxAkdlpf5W0EqxSWuxdBPnbcybqYILowk0ZIt0G R3kpojdOJ8fwJJx6oCEcytBXoIbUvBcfXMqvEfZT2ECLvYAfTn+9uHr8gJJAux5d MUKrKmiuOvlCRrYC5mirct2x70R6t1YiSbjuTKJ28cX7pli2JxFUzqJtpZWcTPCk kjRwtXbGncuRLBRFg3kUiVMYmHkwpfAWEZZYvkULvTbLbAEWEkHWHnoHRtn6gxu2 WW6DX0zpFGnYiO/5MCNm696F2RU2QEjSxnWtC8eAd66PlQGh5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJD/lLTNulNpVuIyEPSEwPHm8DOcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY2N2U0YmMtODk1Mi0z NDFlLWI0YTUtNGVjOGI5ODM1NGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMz+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO1lp6NftHPuxbnZXt2fDfQ6WnjXbg3teOK/j2hfROBGi0RkMwAnvt7 f9di8ijLxYp/AxIMhP7KnQItC9Artp3RTHCH6LABpH5zIpINAbiN4Dq1hwYV7967 C9HBKaRy8bHOallTCf+Oiz2+4935kD3v3ZAip/AWvvM5vQochbd8NvglytXTnueY v7tr4Oal9Y0lmaF3cEAGr3KeYJmLQQjzpsiJK21SmF0G1xEepy0EPpOng9zQ5b0w mFt9mLtfwmID3NO/Siujveck5gWGhrUIhRkZzEW1ywKkWSzTZuCbseExfWBIZbCN 8qrI6KqAs0RPQMVYeHDM1Tb7K5r1Zt4= -----END CERTIFICATE-----Generated at Mon Sep 21 18:33:39 2026 by rpki-client