$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa File: eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa (raw, json) Hash identifier: /zby14rqaZ0gkKdzlObLkArTXQU9ixDsXxoKjctw2nY= Subject key identifier: 4F:AE:15:9B:B8:13:9E:D0:22:EF:6D:07:93:38:E6:C7:2D:E0:77:38 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD72732E901FB12B8CA40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.238.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d7:27:32:e9:01:fb:12:b8:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e70e32ad-27a3-431f-b695-7f4e8e20feef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a9:bd:0d:cc:a4:ff:aa:54:34:67:3e:a6:d8: 34:3c:cb:3f:6d:44:70:8d:b4:00:80:60:01:d9:25: f5:ab:77:5f:50:e6:70:73:5a:bc:91:13:de:71:a4: 37:22:05:4a:60:ec:eb:8d:08:1d:8c:e4:74:d0:45: 93:9c:1e:ea:82:75:46:c1:d1:ef:e0:91:d2:35:ea: 3a:7d:03:ef:06:5e:2b:7e:10:67:c7:8f:64:37:ab: ea:4f:bf:ba:c2:be:4b:aa:d6:95:95:88:59:38:fb: 61:bb:cd:9e:32:b9:61:ef:c2:3d:d8:dd:a6:17:ad: cb:2e:38:ca:5f:7f:bb:7c:1a:0c:73:c6:91:e7:a1: 99:28:70:ee:8a:15:af:ad:69:bc:51:69:6a:8b:ff: 7b:ae:9c:1d:92:26:46:09:17:c4:e2:26:b5:a1:b9: 15:d7:16:9a:51:0a:52:63:34:78:0e:89:2f:d7:a7: 34:5e:e5:f1:f9:92:b7:fd:08:05:0e:83:15:99:46: 70:aa:57:36:68:82:6d:d9:05:ca:e6:8e:48:35:07: f8:c7:9b:cd:0e:3d:08:9f:ba:0b:0a:f3:84:f7:5a: eb:36:8f:b7:cb:26:e9:63:fa:7b:fc:b0:c0:e6:07: 35:36:41:1a:e6:53:30:31:96:75:8d:44:04:a6:54: 07:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AE:15:9B:B8:13:9E:D0:22:EF:6D:07:93:38:E6:C7:2D:E0:77:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/eca2cd42-f182-369c-bf37-64d9a6d8e51a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:19:89:83:63:31:c3:6d:aa:f8:61:b6:27:69:ad:36:54:4b: dc:57:dd:01:0a:96:0d:28:75:0b:6d:52:09:12:8a:76:0d:5f: 5a:29:21:84:72:1d:e3:13:84:e7:48:be:82:4f:f5:b6:4c:fc: 5d:2f:a8:bb:8a:e7:98:3f:13:3f:f9:1c:db:50:42:e4:10:99: 89:59:44:62:28:dc:df:54:0f:c3:d5:0f:79:66:e8:51:72:64: a1:9e:c1:0c:2a:02:eb:8b:0e:ac:7c:45:d2:ec:57:b5:4f:8c: 53:38:b2:81:ae:0d:40:5e:01:a0:48:f0:c5:db:b9:20:5f:24: 3e:77:ea:02:df:5f:96:e5:77:8e:a2:3e:95:a9:be:65:1a:69: 97:ce:2b:eb:de:c2:a3:a4:0e:8e:dd:05:be:b1:6b:ea:33:58: 1c:29:bd:7b:c8:f1:f8:8b:cb:36:97:54:4b:6c:a3:fd:ad:b0: b9:ae:be:4c:6a:ef:03:1c:cc:2a:e8:57:d6:b5:78:20:2e:83: 96:b9:df:f3:07:59:9d:df:0b:ec:7d:66:97:6f:fe:af:9a:3d: 7b:1a:08:90:81:ab:d8:a7:d2:f9:09:9e:03:1a:c1:52:1f:37: 03:4f:5f:b0:af:a1:94:b9:9d:a4:87:81:65:ce:d8:56:1e:bc: 25:f3:76:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNcnMukB+xK4ykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTcwZTMyYWQtMjdhMy00MzFmLWI2OTUtN2Y0ZThlMjBmZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzam9Dcyk/6pUNGc+ptg0PMs/bURwjbQAgGAB 2SX1q3dfUOZwc1q8kRPecaQ3IgVKYOzrjQgdjOR00EWTnB7qgnVGwdHv4JHSNeo6 fQPvBl4rfhBnx49kN6vqT7+6wr5LqtaVlYhZOPthu82eMrlh78I92N2mF63LLjjK X3+7fBoMc8aR56GZKHDuihWvrWm8UWlqi/97rpwdkiZGCRfE4ia1obkV1xaaUQpS YzR4Dokv16c0XuXx+ZK3/QgFDoMVmUZwqlc2aIJt2QXK5o5INQf4x5vNDj0In7oL CvOE91rrNo+3yybpY/p7/LDA5gc1NkEa5lMwMZZ1jUQEplQHCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+uFZu4E57QIu9tB5M45sct4Hc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWNhMmNkNDItZjE4Mi0z NjljLWJmMzctNjRkOWE2ZDhlNTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFjO4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwZiYNjMcNtqvhhtidprTZUS9xX3QEKlg0odQttUgkSinYNX1opIYRy HeMThOdIvoJP9bZM/F0vqLuK55g/Ez/5HNtQQuQQmYlZRGIo3N9UD8PVD3lm6FFy ZKGewQwqAuuLDqx8RdLsV7VPjFM4soGuDUBeAaBI8MXbuSBfJD536gLfX5bld46i PpWpvmUaaZfOK+vewqOkDo7dBb6xa+ozWBwpvXvI8fiLyzaXVEtso/2tsLmuvkxq 7wMczCroV9a1eCAug5a53/MHWZ3fC+x9Zpdv/q+aPXsaCJCBq9in0vkJngMawVIf NwNPX7CvoZS5naSHgWXO2FYevCXzdk0= -----END CERTIFICATE-----Generated at Fri Oct 2 02:59:54 2026 by rpki-client