$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa File: ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa (raw, json) Hash identifier: N6yrOhdpmvzAUDjczZA/9snQ8rCywE7X0f1YQJEi3uk= Subject key identifier: D5:0F:7F:26:E2:60:52:EA:A3:23:1A:96:86:A5:49:33:A4:91:0D:B4 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D7F9A74F60AED081A8FA9D540 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 140.204.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:74:f6:0a:ed:08:1a:8f:a9:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=24659b31-684c-460f-8f6d-92ac1dcc2197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:2f:5b:c6:06:b0:5b:ce:40:a4:79:fa:fd: c7:31:03:d1:07:e5:3b:dd:1e:63:1b:07:73:bc:66: af:27:69:6d:ee:49:02:30:68:93:af:42:e9:35:36: 1f:d6:77:a4:76:08:64:1e:54:67:d6:28:49:69:f9: 41:bc:86:79:a2:4b:1b:4b:4e:a4:86:37:0a:7e:14: b3:f9:d0:47:eb:86:a4:12:db:b2:be:89:bd:0b:69: ac:7a:69:2f:cc:29:be:5e:51:74:5d:b7:cd:6a:92: 40:14:a5:74:a8:5c:3a:9a:7e:bd:18:e7:08:51:9a: 9c:a4:51:66:59:b7:b2:96:58:14:14:61:c1:f8:fd: 3c:63:b1:02:cc:32:0f:6b:b1:be:ca:81:6a:85:e6: c2:1c:f0:e2:71:4b:2c:1d:44:92:54:11:f5:c2:8c: 36:ee:48:af:53:c7:cf:fe:e3:fc:ce:d3:f0:15:8e: 51:ea:94:1f:1e:7f:00:b5:58:ba:6f:95:fa:21:ad: c2:15:78:63:61:3e:d3:22:86:89:75:ae:75:43:93: fd:83:62:c0:87:08:d9:22:4b:84:72:83:c1:a6:13: 98:f9:a7:aa:2c:1d:39:9f:76:7a:cf:48:b7:c8:43: 80:9b:a2:4f:43:63:9e:88:3c:d2:be:bf:71:0a:f4: c3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:0F:7F:26:E2:60:52:EA:A3:23:1A:96:86:A5:49:33:A4:91:0D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ba6fd69e-38a6-3cc9-9b00-857e950199a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.52.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2f:f5:6f:01:3b:a6:90:0b:22:4c:61:01:4c:04:bb:47:96: 5a:90:fa:57:32:09:25:1f:03:ce:44:f2:a0:3b:63:cb:ba:a9: d7:d1:18:80:9b:83:b2:c5:bd:3b:aa:c4:66:98:f2:f2:5b:07: cf:91:86:80:10:0f:ca:87:27:0e:19:c4:8a:ca:df:d3:d7:9c: cf:85:61:ae:bd:0f:28:88:7d:4e:4a:d0:75:c2:71:3c:d0:79: 1b:4b:14:51:1c:d0:37:c0:55:7e:e8:d7:4f:f8:de:fa:2f:cf: 6b:7f:77:be:b3:1f:33:3c:07:29:5e:d3:47:14:0d:60:c2:c4: 0c:58:99:4b:d1:7d:a4:4f:f1:7e:06:94:2e:a2:5e:a7:7c:14: 54:bf:3b:cc:23:c8:3e:10:69:73:cb:1e:9a:c5:ef:12:0c:23: 0b:cc:e6:e3:a8:d7:1b:50:59:b6:ce:32:ba:86:f4:c5:36:6c: 5e:b6:ca:bf:0d:c7:9d:d7:11:f7:d9:2c:09:8d:8d:10:96:81: 2d:c1:f0:65:57:1d:1c:1c:9c:39:9b:75:21:03:b1:8b:5f:b7: f5:e7:88:49:6c:24:11:85:9c:e6:13:6c:67:3c:f8:27:32:78: 81:46:58:42:85:58:32:9d:41:7a:e7:23:cc:35:88:41:11:45: 32:0e:72:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mnT2Cu0IGo+p1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk MjQ2NTliMzEtNjg0Yy00NjBmLThmNmQtOTJhYzFkY2MyMTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha0vW8YGsFvOQKR5+v3HMQPRB+U73R5jGwdz vGavJ2lt7kkCMGiTr0LpNTYf1nekdghkHlRn1ihJaflBvIZ5oksbS06khjcKfhSz +dBH64akEtuyvom9C2msemkvzCm+XlF0XbfNapJAFKV0qFw6mn69GOcIUZqcpFFm WbeyllgUFGHB+P08Y7ECzDIPa7G+yoFqhebCHPDicUssHUSSVBH1wow27kivU8fP /uP8ztPwFY5R6pQfHn8AtVi6b5X6Ia3CFXhjYT7TIoaJda51Q5P9g2LAhwjZIkuE coPBphOY+aeqLB05n3Z6z0i3yEOAm6JPQ2OeiDzSvr9xCvTDuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUPfybiYFLqoyMaloalSTOkkQ20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmE2ZmQ2OWUtMzhhNi0z Y2M5LTliMDAtODU3ZTk1MDE5OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4v9W8BO6aQCyJMYQFMBLtHllqQ+lcyCSUfA85E8qA7Y8u6qdfRGICb g7LFvTuqxGaY8vJbB8+RhoAQD8qHJw4ZxIrK39PXnM+FYa69DyiIfU5K0HXCcTzQ eRtLFFEc0DfAVX7o10/43vovz2t/d76zHzM8Byle00cUDWDCxAxYmUvRfaRP8X4G lC6iXqd8FFS/O8wjyD4QaXPLHprF7xIMIwvM5uOo1xtQWbbOMrqG9MU2bF62yr8N x53XEffZLAmNjRCWgS3B8GVXHRwcnDmbdSEDsYtft/XniElsJBGFnOYTbGc8+Ccy eIFGWEKFWDKdQXrnI8w1iEERRTIOclk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:21:13 2026 by rpki-client