$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/429af24c-bbb6-38ac-90c8-67da8be029ef.roa File: 429af24c-bbb6-38ac-90c8-67da8be029ef.roa (raw, json) Hash identifier: VwGK0uaL7wk9fFgCqg7tNDQZjjJgj7kGlGnCNSotnco= Subject key identifier: 14:E5:85:BF:21:44:5F:39:E9:9B:01:E9:EE:63:C1:FF:2E:26:B9:FC Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F2C6BDB5815AA6B9335D73BC0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/429af24c-bbb6-38ac-90c8-67da8be029ef.roa Signing time: Mon 14 Sep 2026 15:28:20 +0000 ROA not before: Mon 14 Sep 2026 15:28:20 +0000 ROA not after: Sun 13 Dec 2026 16:28:20 +0000 asID: 834 IP address blocks: 141.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:6b:db:58:15:aa:6b:93:35:d7:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 14 15:28:20 2026 GMT Not After : Dec 13 16:28:20 2026 GMT Subject: CN=59720a77-9337-4ef6-a630-55a669c80602 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:98:a9:b4:59:c9:d1:5d:e0:20:33:53:a8: 04:fd:02:01:f2:28:55:1f:97:ee:29:ba:fc:0e:e6: 99:09:00:87:93:04:31:ca:58:76:dd:fb:07:7b:60: f4:07:cd:f9:f7:b5:6d:63:f7:27:e0:ec:ae:85:89: fe:c0:0f:8a:e3:68:25:5d:43:02:03:7f:23:2d:0f: 0b:b0:34:3b:ed:6c:12:74:ec:b1:d2:a5:e1:58:82: d0:7a:92:dd:65:24:83:93:2e:eb:bf:78:72:b1:21: 31:a1:bd:d7:9d:02:7e:e7:43:95:f7:12:98:e9:18: 2e:0b:46:95:4a:4d:ea:1d:fc:99:66:44:72:dc:b8: 00:58:14:46:e0:46:29:88:8a:71:6b:fd:ac:2a:d2: f7:d7:6f:9a:8f:4f:e4:02:e3:fa:ea:9a:87:c8:bc: 39:02:0d:51:f7:f6:22:6f:5c:b2:70:3b:1b:a4:37: 3e:44:8c:48:5d:17:be:d9:8c:a0:da:db:90:6b:2e: 6a:fe:c3:ad:9f:65:e7:03:69:9d:22:73:b2:e1:18: 21:93:20:46:70:94:e8:d5:cf:79:55:fb:c3:2e:7b: 19:4a:e4:00:84:2f:a2:60:81:20:07:d5:63:09:2a: 26:ec:fb:95:d8:8a:2f:67:ca:da:68:2d:bf:dc:bd: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E5:85:BF:21:44:5F:39:E9:9B:01:E9:EE:63:C1:FF:2E:26:B9:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/429af24c-bbb6-38ac-90c8-67da8be029ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:e7:79:9c:29:b9:e7:dd:6d:55:b4:10:00:b2:2a:21:a7:a2: 6f:08:9c:5a:85:78:e1:2b:4b:9b:7e:99:8a:b1:e9:88:d4:7d: 64:da:34:71:85:f7:64:75:5d:be:d8:a6:ec:8e:5d:3e:8c:c6: 49:cf:34:1c:b5:a2:15:5a:d7:1a:94:c6:1b:7d:22:74:08:99: 1c:9e:8e:a9:38:5f:a6:18:8d:e3:35:bc:3c:17:44:9d:00:0f: f0:d7:e1:a3:3f:f1:15:3b:5a:53:1f:e9:6f:74:3e:ca:44:c9: d7:20:fd:0e:11:b3:c8:81:e7:ac:ab:d4:8b:84:55:e0:b2:fc: 48:48:cf:90:4b:ae:33:22:e2:ff:af:c3:da:25:f2:40:67:62: 59:0d:75:36:a0:93:81:43:63:37:05:63:5a:c5:99:37:7e:e6: 31:c0:e6:72:25:80:24:a1:20:49:c1:98:8b:8e:23:3f:1a:bd: 4b:a3:d5:1a:0c:3b:03:86:e6:cb:a0:29:93:f0:f2:12:3c:e7: 10:76:33:50:16:2a:d5:49:0e:87:5b:a0:00:e3:4b:42:91:4e: 1e:21:46:50:3f:2d:93:5f:80:26:1c:b2:90:9f:58:d0:41:2e: 4b:39:b1:f0:61:9f:1c:75:b6:49:70:90:fb:0b:4e:8e:bd:d1: 6b:11:b5:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sa9tYFaprkzXXO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkxNDE1MjgyMFoXDTI2MTIxMzE2MjgyMFowLzEtMCsGA1UEAxMk NTk3MjBhNzctOTMzNy00ZWY2LWE2MzAtNTVhNjY5YzgwNjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunSYqbRZydFd4CAzU6gE/QIB8ihVH5fuKbr8 DuaZCQCHkwQxylh23fsHe2D0B83597VtY/cn4OyuhYn+wA+K42glXUMCA38jLQ8L sDQ77WwSdOyx0qXhWILQepLdZSSDky7rv3hysSExob3XnQJ+50OV9xKY6RguC0aV Sk3qHfyZZkRy3LgAWBRG4EYpiIpxa/2sKtL312+aj0/kAuP66pqHyLw5Ag1R9/Yi b1yycDsbpDc+RIxIXRe+2Yyg2tuQay5q/sOtn2XnA2mdInOy4RghkyBGcJTo1c95 VfvDLnsZSuQAhC+iYIEgB9VjCSom7PuV2IovZ8raaC2/3L0i4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTlhb8hRF856ZsB6e5jwf8uJrn8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNDI5YWYyNGMtYmJiNi0z OGFjLTkwYzgtNjdkYThiZTAyOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADneZwpuefdbVW0EACyKiGnom8InFqFeOErS5t+mYqx6YjUfWTaNHGF 92R1Xb7YpuyOXT6MxknPNBy1ohVa1xqUxht9InQImRyejqk4X6YYjeM1vDwXRJ0A D/DX4aM/8RU7WlMf6W90PspEydcg/Q4Rs8iB56yr1IuEVeCy/EhIz5BLrjMi4v+v w9ol8kBnYlkNdTagk4FDYzcFY1rFmTd+5jHA5nIlgCShIEnBmIuOIz8avUuj1RoM OwOG5sugKZPw8hI85xB2M1AWKtVJDodboADjS0KRTh4hRlA/LZNfgCYcspCfWNBB Lks5sfBhnxx1tklwkPsLTo690WsRtRI= -----END CERTIFICATE-----Generated at Mon Sep 21 11:48:46 2026 by rpki-client