$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa File: 3b43806d-c024-3592-8e0d-0b5ac42b3924.roa (raw, json) Hash identifier: 86WRX/hKYS7IKn4vFvz1Q7LPAswVvC6v82jAj4SVxTE= Subject key identifier: C8:F8:D4:9E:3E:E6:EB:CF:2A:F1:2D:F2:1D:B4:9C:83:06:59:D8:72 Certificate issuer: /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Certificate serial: 010D0C9F4328584F3CE28AEF6FB44DE7F302C780 Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 62654 IP address blocks: 57.140.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:8a:ef:6f:b4:4d:e7:f3:02:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=0bc1c1bd-2906-443d-87b5-ade3a9103495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:19:b9:fb:c4:b2:1c:28:4a:db:7e:2f:64:21: 76:99:83:c8:81:8f:32:8b:24:e5:f2:ee:e7:02:09: 7f:0e:ff:83:54:f8:9d:98:a8:43:9a:c5:38:53:66: 72:a2:94:1b:f8:c9:45:d9:ad:c7:04:8f:b4:b8:96: 33:0f:57:c2:d1:ae:17:b7:a3:48:0b:fa:f6:0a:d0: 72:5e:d9:d0:f5:14:b6:ee:6b:78:ed:c0:f6:bc:71: 68:5e:51:23:ba:f1:7d:03:13:64:0a:86:57:e1:8e: 87:97:c4:e9:49:cc:24:b8:e0:50:fa:5a:d1:e6:b0: 5f:48:ea:b7:b4:df:5b:22:46:5b:d5:29:dc:b3:21: 15:fa:5a:84:24:70:45:4e:3f:d8:6e:82:ef:83:8c: 5e:c3:5a:07:34:9e:d4:d7:4c:7a:34:60:0a:57:02: 61:a1:4d:44:f3:97:2a:58:9b:4a:d4:0c:a5:23:c5: fb:f7:e2:2c:00:45:4d:4b:d6:62:9b:8b:d0:2d:5c: 7b:af:98:a0:ff:c6:c8:13:e5:a9:57:45:c3:19:1c: 00:26:5d:7b:dc:cc:cc:72:1f:80:6e:3f:5f:89:a0: 52:7a:28:0f:d5:54:87:da:8a:53:62:25:ba:9a:8f: 99:b1:2e:b9:b0:2e:0f:db:9f:21:98:78:0b:5c:82: 0b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F8:D4:9E:3E:E6:EB:CF:2A:F1:2D:F2:1D:B4:9C:83:06:59:D8:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/3b43806d-c024-3592-8e0d-0b5ac42b3924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl X509v3 Authority Key Identifier: keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer sbgp-ipAddrBlock: critical IPv4: 57.140.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:a4:85:4b:d0:6a:5f:21:76:0a:d3:09:4a:0e:f0:f8:22:d1: ee:22:d1:f8:a5:be:ee:c1:89:3d:ca:19:a4:9b:de:62:86:90: 03:7c:27:ee:5d:91:9b:b9:c4:7e:0e:f3:bf:9d:1f:7e:42:dc: 49:35:f2:b2:4f:4e:3a:5c:de:63:77:ec:b0:0a:70:81:35:6f: 88:ba:2a:49:bb:05:46:a3:ba:df:4c:1b:26:14:30:83:8c:35: b2:c2:8b:f4:55:d5:1f:95:25:c3:24:85:af:06:7f:22:b6:91: 9b:d9:84:79:e7:32:03:67:d6:60:d3:76:4e:3b:9d:0b:fd:15: 7a:0e:e2:92:6b:2a:98:bc:1d:01:93:70:b7:fe:b8:97:07:bc: e2:5c:36:22:49:0f:f3:e1:87:21:53:2a:c7:ec:b0:57:48:64: f2:14:bd:e7:51:4b:a1:de:76:98:2c:d5:29:21:b3:6f:2e:0b: af:80:ca:04:5e:8c:62:d7:8c:de:eb:e4:97:21:cb:34:a0:c1: a6:d6:d7:a7:78:92:42:4e:92:a9:57:f6:12:cd:e6:dd:8f:45: 3b:77:77:dd:e3:a2:e8:94:50:5e:1f:f5:10:a6:28:76:35:a0: 40:7b:23:f9:a3:d8:74:fb:bc:a9:ca:fe:57:fb:13:d0:54:5c: 59:bf:0d:5f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE884orvb7RN5/MCx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmMjlhMTYtZTdiMS00MGM4LTg3YmMtMzRlMmM1NjI0 ODYyMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MGJjMWMxYmQtMjkwNi00NDNkLTg3YjUtYWRlM2E5MTAzNDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBm5+8SyHChK234vZCF2mYPIgY8yiyTl8u7n Agl/Dv+DVPidmKhDmsU4U2ZyopQb+MlF2a3HBI+0uJYzD1fC0a4Xt6NIC/r2CtBy XtnQ9RS27mt47cD2vHFoXlEjuvF9AxNkCoZX4Y6Hl8TpScwkuOBQ+lrR5rBfSOq3 tN9bIkZb1SncsyEV+lqEJHBFTj/YboLvg4xew1oHNJ7U10x6NGAKVwJhoU1E85cq WJtK1AylI8X79+IsAEVNS9Zim4vQLVx7r5ig/8bIE+WpV0XDGRwAJl173MzMch+A bj9fiaBSeigP1VSH2opTYiW6mo+ZsS65sC4P258hmHgLXIILoQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMj41J4+5uvPKvEt8h20nIMGWdhyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYy OWExNi1lN2IxLTQwYzgtODdiYy0zNGUyYzU2MjQ4NjIvM2I0MzgwNmQtYzAyNC0z NTkyLThlMGQtMGI1YWM0MmIzOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmMjlhMTYtZTdiMS00MGM4LTg3 YmMtMzRlMmM1NjI0ODYyL2Q5ZjI5YTE2LWU3YjEtNDBjOC04N2JjLTM0ZTJjNTYy NDg2Mi5jcmwwHwYDVR0jBBgwFoAU2/qD/m2Wzcxs3joVtCCYnWPXtjMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWYyOWExNi1lN2IxLTQwYzgtODdiYy0zNGUy YzU2MjQ4NjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAOYwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEALKSFS9BqXyF2CtMJSg7w+CLR7iLR+KW+7sGJPcoZpJveYoaQA3wn7l2R m7nEfg7zv50ffkLcSTXysk9OOlzeY3fssApwgTVviLoqSbsFRqO630wbJhQwg4w1 ssKL9FXVH5UlwySFrwZ/IraRm9mEeecyA2fWYNN2TjudC/0Veg7ikmsqmLwdAZNw t/64lwe84lw2IkkP8+GHIVMqx+ywV0hk8hS951FLod52mCzVKSGzby4Lr4DKBF6M YteM3uvklyHLNKDBptbXp3iSQk6SqVf2Es3m3Y9FO3d33eOi6JRQXh/1EKYodjWg QHsj+aPYdPu8qcr+V/sT0FRcWb8NXw== -----END CERTIFICATE-----Generated at Tue Sep 22 21:04:22 2026 by rpki-client