$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa File: 0d2c580c-ba11-3551-b662-e0e416396c1b.roa (raw, json) Hash identifier: T6SFimNNtxSu+SjoqucWQkf2VLgBn1dTFb1y4+QVUDg= Subject key identifier: A2:E5:29:C4:3E:E8:E9:CD:D8:6C:AA:E3:30:D4:6C:BB:D9:B2:40:E1 Certificate issuer: /CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Certificate serial: 010D0C9F4328584F549D684A6DA13EC04D3AB414 Authority key identifier: 77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 27370 IP address blocks: 140.241.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:68:4a:6d:a1:3e:c0:4d:3a:b4:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a8478d-2e70-4659-8d85-8edbac09d675 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=adf3e98a-515b-4eb8-896e-69a1d0b826fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:37:17:07:31:25:6f:a9:cb:42:4d:59:b5:7f: dc:5f:b7:fa:a8:36:09:15:8c:2e:5c:7f:3a:9e:9e: b5:51:12:6a:3d:aa:ba:75:7a:1c:5f:c2:d5:dc:1f: 8a:87:3d:50:3e:cf:51:70:c9:d0:9d:0a:13:f1:65: 9d:86:f7:e0:2a:18:85:de:27:c9:d9:38:b0:34:92: 6c:47:f5:65:ed:e5:54:6d:79:fe:1e:34:6c:2e:b4: 4b:ac:46:64:e8:58:91:eb:eb:f6:7a:39:f9:44:eb: f5:30:06:5b:ca:82:25:f8:3a:3b:fa:d3:ff:64:5d: b8:03:c5:a9:66:d7:5b:ef:24:0c:40:e1:af:29:93: 2b:7e:33:87:77:2c:23:aa:1c:11:b6:87:60:da:73: e4:34:cb:04:f8:57:92:15:ce:40:f8:2f:99:81:1d: b4:5a:8c:eb:3a:ae:b4:cf:0a:43:a3:ba:2a:07:e8: 39:b1:c0:4c:e9:20:05:d9:d6:18:ed:9a:d3:20:f6: d1:b4:29:e0:6e:25:3c:00:0b:1a:a4:73:f4:ce:3a: 27:73:ba:69:cd:2b:c9:3c:08:1a:ea:fd:3b:c3:a4: 8b:66:49:e1:5c:24:87:cc:81:80:63:69:94:17:79: 77:b2:6e:7c:bf:72:cd:f2:58:33:f4:7f:0d:88:19: c9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:E5:29:C4:3E:E8:E9:CD:D8:6C:AA:E3:30:D4:6C:BB:D9:B2:40:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/0d2c580c-ba11-3551-b662-e0e416396c1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675/a9a8478d-2e70-4659-8d85-8edbac09d675.crl X509v3 Authority Key Identifier: keyid:77:DE:D7:AB:0E:46:F5:30:83:A0:BD:40:E0:BD:D6:36:06:39:A8:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9a8478d-2e70-4659-8d85-8edbac09d675.cer sbgp-ipAddrBlock: critical IPv4: 140.241.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:30:7f:53:46:06:14:a5:d0:b0:2a:9a:c3:02:ad:9f:b0:d5: 34:89:9a:99:8d:fc:8f:7c:e0:a9:30:c7:af:60:e2:83:2e:52: 08:6d:ab:67:31:82:f8:d4:c9:5f:00:69:46:3c:38:54:37:47: 07:8c:98:0b:3c:ab:01:98:df:61:bb:aa:69:cc:6d:f8:66:73: f5:b1:8c:a1:8c:46:44:35:d1:eb:32:86:4c:7a:71:ea:45:4d: a1:d3:ea:4a:d3:14:8d:1b:28:a8:86:3e:ef:e0:1f:b9:47:d0: e4:2c:fb:8d:08:c5:d9:49:bc:4f:cc:d1:65:31:d5:ee:67:5a: 88:a1:ae:61:54:cc:67:dd:6e:a1:5c:5e:6d:ea:31:58:6f:45: 9f:04:0d:d0:5a:5a:0f:f1:8c:34:1e:54:66:46:1f:d5:e7:21: 19:35:65:d1:88:b6:53:13:77:17:e4:a1:a8:d0:37:15:7f:6e: ab:18:95:8e:7d:e1:9d:90:cf:ce:9d:0e:3a:9a:f5:c3:d2:05: ed:22:3d:4e:c1:d0:c5:40:1d:d1:d0:ae:8c:a3:e9:8d:2d:cc: d0:f3:d6:1d:a5:e4:aa:f4:b4:0f:25:e1:34:4b:53:11:1c:73: a1:97:c3:88:63:fa:03:7e:40:82:77:41:06:0e:41:c7:4f:27: dc:88:e2:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWhKbaE+wE06tBQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlhODQ3OGQtMmU3MC00NjU5LThkODUtOGVkYmFjMDlk Njc1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YWRmM2U5OGEtNTE1Yi00ZWI4LTg5NmUtNjlhMWQwYjgyNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TcXBzElb6nLQk1ZtX/cX7f6qDYJFYwuXH86 np61URJqPaq6dXocX8LV3B+Khz1QPs9RcMnQnQoT8WWdhvfgKhiF3ifJ2TiwNJJs R/Vl7eVUbXn+HjRsLrRLrEZk6FiR6+v2ejn5ROv1MAZbyoIl+Do7+tP/ZF24A8Wp Ztdb7yQMQOGvKZMrfjOHdywjqhwRtodg2nPkNMsE+FeSFc5A+C+ZgR20WozrOq60 zwpDo7oqB+g5scBM6SAF2dYY7ZrTIPbRtCngbiU8AAsapHP0zjonc7ppzSvJPAga 6v07w6SLZknhXCSHzIGAY2mUF3l3sm58v3LN8lgz9H8NiBnJEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLlKcQ+6OnN2Gyq4zDUbLvZskDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWE4 NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRiYWMwOWQ2NzUvMGQyYzU4MGMtYmExMS0z NTUxLWI2NjItZTBlNDE2Mzk2YzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlhODQ3OGQtMmU3MC00NjU5LThk ODUtOGVkYmFjMDlkNjc1L2E5YTg0NzhkLTJlNzAtNDY1OS04ZDg1LThlZGJhYzA5 ZDY3NS5jcmwwHwYDVR0jBBgwFoAUd97Xqw5G9TCDoL1A4L3WNgY5qGcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWE4NDc4ZC0yZTcwLTQ2NTktOGQ4NS04ZWRi YWMwOWQ2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPEDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgwf1NGBhSl0LAqmsMCrZ+w1TSJmpmN/I984Kkwx69g4oMuUghtq2cx gvjUyV8AaUY8OFQ3RweMmAs8qwGY32G7qmnMbfhmc/WxjKGMRkQ10esyhkx6cepF TaHT6krTFI0bKKiGPu/gH7lH0OQs+40IxdlJvE/M0WUx1e5nWoihrmFUzGfdbqFc Xm3qMVhvRZ8EDdBaWg/xjDQeVGZGH9XnIRk1ZdGItlMTdxfkoajQNxV/bqsYlY59 4Z2Qz86dDjqa9cPSBe0iPU7B0MVAHdHQroyj6Y0tzNDz1h2l5Kr0tA8l4TRLUxEc c6GXw4hj+gN+QIJ3QQYOQcdPJ9yI4ig= -----END CERTIFICATE-----Generated at Tue Sep 29 04:39:16 2026 by rpki-client