$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa File: 40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa (raw, json) Hash identifier: 95Ad+ulQRlyMSJGU9leO19+gmtGTTb60Ybok3m+P0KE= Subject key identifier: FE:2D:72:28:5A:94:ED:63:06:2D:33:5D:80:EF:31:AE:9E:C7:1F:A1 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584F9BCDCE319D2FDA352C571440 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 1239 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ce:31:9d:2f:da:35:2c:57:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=d98bbb53-f21c-4a36-8bfb-781880a7009e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:d6:9a:94:e0:2b:35:5e:41:59:77:1a:21: 91:ca:40:0f:2d:a9:94:df:f6:e3:b2:df:7d:a9:de: ce:32:a3:75:7e:42:46:9f:55:4a:c1:22:1d:fa:2b: 2c:92:e2:b1:dd:ef:5f:e2:e3:2f:ad:ab:66:a4:b7: 64:41:c8:bc:6f:d4:13:54:4d:72:0a:c1:a1:49:28: 5f:60:04:07:d0:0f:30:26:a0:f7:0b:fa:04:0a:c9: 12:da:7c:11:44:87:47:35:83:18:e2:10:d0:a8:f8: 09:84:c3:dc:40:fc:38:7b:d5:e8:b7:ff:68:da:db: f6:c9:e2:5e:9b:1f:ba:ad:0e:fe:fd:24:b4:ad:13: cb:ba:be:c1:ee:c8:eb:8b:f2:07:6b:f8:cc:1f:cd: ad:7d:4b:2e:03:81:15:09:59:22:4f:c5:f6:cb:2e: 98:42:14:98:8e:db:fa:b8:bc:bb:21:b6:c8:57:bb: 51:2a:41:8b:57:3e:8c:d0:72:9c:ff:72:00:bf:1b: 17:45:da:be:46:16:59:f8:28:c0:72:22:ab:18:b5: 82:fa:83:ca:1f:55:8e:cb:80:e7:ee:32:74:7b:63: 87:64:2c:7f:ea:30:af:f3:27:73:f3:be:fa:8e:01: 52:94:1c:ae:77:7f:85:63:89:6a:86:63:58:1e:cc: 9e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:2D:72:28:5A:94:ED:63:06:2D:33:5D:80:EF:31:AE:9E:C7:1F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:dd:a0:15:e1:3b:56:8e:29:84:fd:70:42:e2:39:48:d8:e9: 29:c3:3b:95:61:d1:49:eb:ed:a4:06:54:9a:bc:64:49:bf:42: e5:e8:44:c0:71:89:17:2b:54:f3:fc:8d:24:ec:15:b8:91:d6: 3a:14:1b:3b:54:9d:c6:3f:c3:fc:1f:0d:75:bc:d4:d5:3b:67: c3:8c:e3:97:87:77:ea:a1:14:2b:51:52:03:4d:96:35:4b:61: ac:b6:af:36:1d:64:a0:a8:c9:5d:bc:cd:a9:3a:2f:55:7a:97: 27:63:96:6f:bc:6b:49:b4:cc:2d:b8:2a:f3:08:da:00:90:ab: 26:ca:a0:94:fb:9a:5f:db:45:f7:56:67:24:c6:89:d7:08:27: 71:08:6b:e4:e6:b6:48:ad:04:8e:f4:fe:fc:6d:c7:6b:15:49: b2:51:ec:0c:1a:18:95:c9:01:d3:78:5d:81:d8:2f:60:57:a1: 42:fc:8d:48:20:3c:b0:cc:a0:38:5a:9f:3e:89:32:d0:0f:9b: 76:fb:f9:55:b0:e7:c3:54:a6:fa:8a:5b:a0:e8:f4:08:17:90: 05:9b:30:d5:78:a2:d5:fe:4d:a0:dd:12:1a:fd:ec:a4:49:fe: dd:6f:4c:6c:b6:22:2e:b6:35:b8:50:55:61:c4:9d:0b:f2:89: 28:95:ee:8b -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE+bzc4xnS/aNSxXFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDk4YmJiNTMtZjIxYy00YTM2LThiZmItNzgxODgwYTcwMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWfWmpTgKzVeQVl3GiGRykAPLamU3/bjst99 qd7OMqN1fkJGn1VKwSId+isskuKx3e9f4uMvratmpLdkQci8b9QTVE1yCsGhSShf YAQH0A8wJqD3C/oECskS2nwRRIdHNYMY4hDQqPgJhMPcQPw4e9Xot/9o2tv2yeJe mx+6rQ7+/SS0rRPLur7B7sjri/IHa/jMH82tfUsuA4EVCVkiT8X2yy6YQhSYjtv6 uLy7IbbIV7tRKkGLVz6M0HKc/3IAvxsXRdq+RhZZ+CjAciKrGLWC+oPKH1WOy4Dn 7jJ0e2OHZCx/6jCv8ydz8776jgFSlByud3+FY4lqhmNYHsyeEwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFP4tcihalO1jBi0zXYDvMa6exx+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDA2NDlmOGQtYTJjMS0z MmY4LTlmOTEtZTc2YWIxMmVmMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGzdoBXhO1aOKYT9cELiOUjY6SnDO5Vh0Unr7aQG VJq8ZEm/QuXoRMBxiRcrVPP8jSTsFbiR1joUGztUncY/w/wfDXW81NU7Z8OM45eH d+qhFCtRUgNNljVLYay2rzYdZKCoyV28zak6L1V6lydjlm+8a0m0zC24KvMI2gCQ qybKoJT7ml/bRfdWZyTGidcIJ3EIa+TmtkitBI70/vxtx2sVSbJR7AwaGJXJAdN4 XYHYL2BXoUL8jUggPLDMoDhanz6JMtAPm3b7+VWw58NUpvqKW6Do9AgXkAWbMNV4 otX+TaDdEhr97KRJ/t1vTGy2Ii62NbhQVWHEnQvyiSiV7os= -----END CERTIFICATE-----Generated at Thu Nov 5 05:10:19 2026 by rpki-client