$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa File: bbf87397-c5df-35c6-aef7-a3230538a0e5.roa (raw, json) Hash identifier: aj2jyi+APcwe+prYQYCnfXsUhah26oqhlvtuNpmhxCY= Subject key identifier: 98:B2:7B:B6:8B:12:6C:9D:C8:10:57:11:3D:67:1E:66:42:8F:F6:D5 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F3A17C81D60C95FAD7A059580 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 3939 IP address blocks: 140.174.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:c8:1d:60:c9:5f:ad:7a:05:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=1e9e86ba-a938-40fd-8272-ba24c0e877c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:54:b7:55:75:a3:fe:51:88:5c:c7:66:54: 32:e9:67:e2:01:6e:5c:4f:d1:6f:a3:71:23:64:72: c9:26:b4:7f:3c:e6:cb:cb:92:eb:98:62:00:3b:29: 63:a6:d1:48:55:8a:17:32:71:44:7b:62:ea:05:4f: a1:dc:d1:24:98:2b:a3:6e:40:2d:80:a5:22:32:1d: 2b:10:46:10:24:d7:b8:e9:b9:0b:29:7b:f5:ef:2c: 06:86:e7:e1:ce:9d:c2:12:e1:c2:a3:77:60:9f:f1: 40:9e:d8:ea:47:32:d7:7e:00:71:48:34:ea:32:99: b9:90:3a:6a:21:c1:b4:14:e8:f7:c0:4d:ed:fe:31: df:71:97:d9:b8:24:ff:98:9a:04:28:85:3f:88:77: 4a:8d:7c:40:15:fa:04:ea:c0:d9:9f:5e:57:ce:76: 2c:a5:be:79:20:fe:4e:dc:85:b3:c7:29:48:fb:0e: 7b:7a:3f:a9:8b:8a:0c:64:57:19:aa:3c:ff:b2:21: b0:62:ef:c0:24:8e:58:e7:81:c5:e9:fb:ce:ac:1b: 45:a4:61:a9:a1:a2:c3:c3:b8:84:75:2d:e9:a8:2f: 86:14:85:ad:1e:17:64:0b:21:0b:f4:24:73:28:21: e3:ad:57:ba:37:ed:7d:fd:7e:7f:f6:fc:3a:75:ce: 4d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B2:7B:B6:8B:12:6C:9D:C8:10:57:11:3D:67:1E:66:42:8F:F6:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/bbf87397-c5df-35c6-aef7-a3230538a0e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:00:49:3f:c4:0c:e3:69:25:4b:29:c9:98:76:9e:81:5e:6c: 75:68:2a:e4:f8:3a:c2:ab:14:18:56:a4:a9:9e:7b:8f:22:b3: 71:84:d6:92:c2:61:d5:c5:c0:76:24:1d:09:aa:26:a3:a5:72: ff:e6:19:d3:b6:97:1e:20:7d:62:6c:ac:95:ce:bc:26:66:9a: 0a:cb:c6:fc:66:c9:58:f9:33:d2:ae:e2:da:60:c1:a5:90:e6: 89:c4:87:8b:3a:65:8d:ba:b5:18:6f:51:0c:c6:89:42:1e:f7: d2:97:de:ae:71:6c:8c:83:1c:7b:cc:8d:3e:6a:61:4f:98:58: 2c:f5:bf:c3:fa:99:67:a7:0d:3f:8f:2d:58:b4:0f:13:c3:d4: 36:ba:2f:af:5f:e9:51:7c:e2:4c:08:16:ea:d6:aa:37:cb:c1: 02:c7:c3:23:2d:5f:91:13:8d:88:86:45:e2:66:5a:67:14:da: 1f:66:58:bb:30:18:ed:e4:4d:1e:a0:5f:76:e2:c2:36:ad:6a: b9:d3:dc:cc:4f:1f:28:28:73:c1:8d:90:b1:37:2f:34:45:6c: 85:3c:cd:32:e9:88:43:17:d5:4d:2d:12:3c:a1:8b:5f:f1:53: 5e:ac:8e:46:c4:a9:78:d1:32:f9:87:fd:1a:96:91:dc:a0:5a: cb:d8:96:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F8gdYMlfrXoFlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MWU5ZTg2YmEtYTkzOC00MGZkLTgyNzItYmEyNGMwZTg3N2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1tUt1V1o/5RiFzHZlQy6WfiAW5cT9Fvo3Ej ZHLJJrR/PObLy5LrmGIAOyljptFIVYoXMnFEe2LqBU+h3NEkmCujbkAtgKUiMh0r EEYQJNe46bkLKXv17ywGhufhzp3CEuHCo3dgn/FAntjqRzLXfgBxSDTqMpm5kDpq IcG0FOj3wE3t/jHfcZfZuCT/mJoEKIU/iHdKjXxAFfoE6sDZn15XznYspb55IP5O 3IWzxylI+w57ej+pi4oMZFcZqjz/siGwYu/AJI5Y54HF6fvOrBtFpGGpoaLDw7iE dS3pqC+GFIWtHhdkCyEL9CRzKCHjrVe6N+19/X5/9vw6dc5N5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiye7aLEmydyBBXET1nHmZCj/bVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYmJmODczOTctYzVkZi0z NWM2LWFlZjctYTMyMzA1MzhhMGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjK4iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQAST/EDONpJUspyZh2noFebHVoKuT4OsKrFBhWpKmee48is3GE1pLC YdXFwHYkHQmqJqOlcv/mGdO2lx4gfWJsrJXOvCZmmgrLxvxmyVj5M9Ku4tpgwaWQ 5onEh4s6ZY26tRhvUQzGiUIe99KX3q5xbIyDHHvMjT5qYU+YWCz1v8P6mWenDT+P LVi0DxPD1Da6L69f6VF84kwIFurWqjfLwQLHwyMtX5ETjYiGReJmWmcU2h9mWLsw GO3kTR6gX3biwjatarnT3MxPHygoc8GNkLE3LzRFbIU8zTLpiEMX1U0tEjyhi1/x U16sjkbEqXjRMvmH/RqWkdygWsvYlu0= -----END CERTIFICATE-----Generated at Mon Sep 21 21:43:02 2026 by rpki-client