$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a9fa861d-0965-3235-9b7b-15c2fd46cd6f.roa File: a9fa861d-0965-3235-9b7b-15c2fd46cd6f.roa (raw, json) Hash identifier: afETKMaH+y0mZycN3x28prF1l8p264Z62yC/Ho/Vbyg= Subject key identifier: BE:3B:0D:BD:79:AA:4B:0D:46:BF:04:B9:DF:80:CB:96:6C:19:7E:80 Certificate issuer: /CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Certificate serial: 010D0C9F4328584F1E2D048D11F7122F9EDBCA80 Authority key identifier: 42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a9fa861d-0965-3235-9b7b-15c2fd46cd6f.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 400384 IP address blocks: 165.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2d:04:8d:11:f7:12:2f:9e:db:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a1d1c68-78c4-4731-a2e9-57408fe88b84 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=f3fffd31-0247-446f-9bfc-c0c46129bfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6c:97:b9:f6:aa:65:88:7c:8a:b5:dc:2e:cf: a3:60:74:9b:93:2c:fe:b4:f1:94:d0:97:16:d1:00: 90:7f:dc:2d:b6:89:ce:03:10:46:17:a0:32:75:bf: 3b:e3:d8:7d:86:a4:f2:ea:78:71:78:27:bf:31:c4: c5:24:84:69:b2:a9:c3:ef:52:1b:c3:22:3e:8e:1d: 61:22:7f:b4:c9:00:41:10:1b:87:fa:9e:ab:4a:4d: ef:f9:88:66:1a:20:c7:04:f1:e4:c0:db:ec:f9:6b: 39:a6:9f:50:9d:da:1b:1f:19:03:92:ae:cc:68:e6: bf:08:9a:d0:59:05:e1:0b:6d:d0:1c:17:36:90:d2: 56:48:b5:6d:21:40:6f:8d:86:6d:dc:0c:2b:a5:c8: ed:bb:31:d1:b3:0a:46:78:16:4a:03:82:f3:f9:47: bc:be:47:da:23:9c:b7:4a:09:ac:fe:1a:e6:d3:45: 90:8c:82:a9:c6:bc:c4:ab:54:e6:fb:47:7d:2e:fa: 7a:88:f5:73:40:bf:ba:23:03:94:ac:cb:0f:41:df: f8:fb:8d:2f:b3:50:71:89:2c:92:d9:1f:00:30:88: 53:d6:74:64:93:bd:44:35:79:0f:7f:b1:59:ac:7a: b6:89:d1:7d:90:15:61:0c:8c:33:a8:a7:b9:53:ac: 23:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:0D:BD:79:AA:4B:0D:46:BF:04:B9:DF:80:CB:96:6C:19:7E:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/a9fa861d-0965-3235-9b7b-15c2fd46cd6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84/7a1d1c68-78c4-4731-a2e9-57408fe88b84.crl X509v3 Authority Key Identifier: keyid:42:EB:AF:07:72:0D:18:32:AF:C0:7C:01:BC:98:0F:E2:4A:93:C3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a1d1c68-78c4-4731-a2e9-57408fe88b84.cer sbgp-ipAddrBlock: critical IPv4: 165.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:89:b8:22:fb:e3:a2:f5:1d:35:6e:15:fb:d8:9d:63:90:38: c5:8c:9e:3d:7b:78:22:16:f9:df:d9:b9:17:b8:fe:09:d3:91: 2d:b9:1d:7e:34:d4:98:65:01:d2:15:a1:dc:e4:11:5c:02:f2: 2a:0d:19:46:e7:4d:71:d3:e1:3b:80:87:34:54:9a:96:51:aa: 24:f4:df:1a:d7:44:84:a8:ca:7a:8e:33:84:80:42:8e:7e:f1: 70:b0:92:ba:ac:f3:37:0b:39:83:03:63:86:55:fc:7e:f2:5c: d5:58:63:24:c9:f0:47:95:b5:c3:4b:ec:c1:df:29:b2:13:6b: b9:26:f7:f5:a3:f8:e6:75:ed:25:82:23:31:8d:23:7d:f9:3c: c8:ae:a2:29:b1:e6:e2:3a:c6:94:c6:c6:8f:d2:d1:51:13:e5: ee:54:62:3c:0b:16:53:f1:91:8c:83:6b:15:4a:6b:fc:c8:9d: c5:b9:d5:31:37:d7:09:6b:e3:3d:60:de:98:5d:48:e1:a7:c6: 75:fa:39:79:8b:3a:3e:89:ed:d0:ba:60:21:ed:87:8d:28:54: 40:2e:f5:c9:4b:30:81:bf:b7:23:70:f1:91:28:cb:8c:2b:d8: a9:a4:3d:5f:c2:5e:95:3e:ad:c4:6e:85:16:89:18:4f:8d:fa: b3:9d:e2:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLQSNEfcSL57byoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExZDFjNjgtNzhjNC00NzMxLWEyZTktNTc0MDhmZTg4 Yjg0MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ZjNmZmZkMzEtMDI0Ny00NDZmLTliZmMtYzBjNDYxMjliZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWyXufaqZYh8irXcLs+jYHSbkyz+tPGU0JcW 0QCQf9wttonOAxBGF6Aydb8749h9hqTy6nhxeCe/McTFJIRpsqnD71IbwyI+jh1h In+0yQBBEBuH+p6rSk3v+YhmGiDHBPHkwNvs+Ws5pp9QndobHxkDkq7MaOa/CJrQ WQXhC23QHBc2kNJWSLVtIUBvjYZt3AwrpcjtuzHRswpGeBZKA4Lz+Ue8vkfaI5y3 Sgms/hrm00WQjIKpxrzEq1Tm+0d9Lvp6iPVzQL+6IwOUrMsPQd/4+40vs1BxiSyS 2R8AMIhT1nRkk71ENXkPf7FZrHq2idF9kBVhDIwzqKe5U6wjswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL47Db15qksNRr8Eud+Ay5ZsGX6AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YTFk MWM2OC03OGM0LTQ3MzEtYTJlOS01NzQwOGZlODhiODQvYTlmYTg2MWQtMDk2NS0z MjM1LTliN2ItMTVjMmZkNDZjZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ExZDFjNjgtNzhjNC00NzMxLWEy ZTktNTc0MDhmZTg4Yjg0LzdhMWQxYzY4LTc4YzQtNDczMS1hMmU5LTU3NDA4ZmU4 OGI4NC5jcmwwHwYDVR0jBBgwFoAUQuuvB3INGDKvwHwBvJgP4kqTw1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YTFkMWM2OC03OGM0LTQ3MzEtYTJlOS01NzQw OGZlODhiODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYxeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2JuCL746L1HTVuFfvYnWOQOMWMnj17eCIW+d/ZuRe4/gnTkS25HX40 1JhlAdIVodzkEVwC8ioNGUbnTXHT4TuAhzRUmpZRqiT03xrXRISoynqOM4SAQo5+ 8XCwkrqs8zcLOYMDY4ZV/H7yXNVYYyTJ8EeVtcNL7MHfKbITa7km9/Wj+OZ17SWC IzGNI335PMiuoimx5uI6xpTGxo/S0VET5e5UYjwLFlPxkYyDaxVKa/zIncW51TE3 1wlr4z1g3phdSOGnxnX6OXmLOj6J7dC6YCHth40oVEAu9clLMIG/tyNw8ZEoy4wr 2KmkPV/CXpU+rcRuhRaJGE+N+rOd4m4= -----END CERTIFICATE-----Generated at Sun Oct 4 18:09:51 2026 by rpki-client