$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84be9f9e-881f-3bc0-926f-74b296b5b26e.roa File: 84be9f9e-881f-3bc0-926f-74b296b5b26e.roa (raw, json) Hash identifier: buHK5ugNsNV2yOkMCk4npmOyADIDq31Q1h7QqGvB4eo= Subject key identifier: 0A:AB:69:9D:F0:C7:0A:E5:BD:4D:95:D1:85:F9:5F:E2:73:8E:49:A0 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F49748B41F66F08A88A369720 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84be9f9e-881f-3bc0-926f-74b296b5b26e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40676 IP address blocks: 141.140.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8b:41:f6:6f:08:a8:8a:36:97:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a8da5e77-9852-489e-8fc1-b1d2a207d67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2e:23:7f:42:88:a5:63:19:36:aa:92:2f:5d: 87:cb:4b:c7:e8:12:e6:e3:90:e6:37:20:ad:16:71: f9:35:fa:dc:64:d5:78:66:98:fd:c4:4b:85:68:b7: f7:ad:21:68:0f:5b:03:f7:1a:c4:fe:2d:39:b8:30: 45:f7:bc:29:43:89:5a:b9:6a:6d:0e:f3:25:79:03: 00:b0:0a:fa:88:17:e1:2d:ee:3a:d2:51:d0:d5:9c: 26:a6:43:01:49:ef:a4:bd:5f:25:90:d9:87:36:c6: b2:fc:1e:39:77:5b:34:91:e2:42:8c:fa:01:98:01: 92:01:48:f7:76:d6:51:63:cf:08:64:90:9e:60:bf: 7d:8c:86:6e:e6:b7:de:70:1b:0b:f9:35:13:3c:f7: 82:b3:53:62:b2:62:86:2a:88:93:e6:15:07:ac:23: 5d:0f:67:2f:e6:83:74:eb:6c:63:09:53:fc:f5:6c: 17:7e:a3:1f:fc:9f:b5:71:71:64:b5:ed:de:9d:d8: 99:9a:5c:87:48:e8:c5:ea:3e:d2:8b:bb:37:78:b1: 17:24:7c:b5:96:62:93:e8:1e:41:69:77:57:08:fd: 17:18:0f:50:a2:20:15:af:44:bc:74:e1:18:94:11: e6:77:67:dc:af:55:a0:21:08:e7:6f:d0:5c:ff:65: 43:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AB:69:9D:F0:C7:0A:E5:BD:4D:95:D1:85:F9:5F:E2:73:8E:49:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/84be9f9e-881f-3bc0-926f-74b296b5b26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c0:91:d6:7d:e9:cc:ca:3b:0f:96:35:6c:d4:0b:93:06:3c: 38:60:68:8d:67:3f:cc:c6:53:70:9c:af:29:2b:bc:24:4a:b9: 71:11:49:63:e9:9e:bc:f3:d5:af:ae:11:f8:48:c9:d4:5f:ae: e0:b5:20:9c:57:f2:b0:ee:46:7f:df:17:99:60:a9:50:db:d7: 20:71:d1:10:b3:34:cb:a3:5d:34:3d:c8:2a:e0:0c:1f:96:45: ba:a1:69:4d:e9:21:54:d9:72:98:cc:d2:b6:a6:ee:ff:82:58: ec:dd:ca:96:9c:6b:71:f3:b8:ee:78:46:ac:d6:71:6c:62:58: 76:8a:cf:11:a9:56:dd:c8:b9:02:a3:3d:c7:a8:12:69:72:fe: 38:85:39:ea:da:65:ad:e8:7f:7a:a5:1a:49:a0:e3:a2:c0:c4: 80:7d:db:e6:46:8c:f5:fd:12:df:b4:20:25:30:e5:d1:51:18: 4b:f2:d7:74:9a:19:c1:81:93:28:3c:23:ba:d8:f0:18:20:79: 34:b8:d9:13:6c:63:ab:d5:de:45:b6:61:07:de:4f:e3:f3:b1: 71:e1:b7:02:89:a3:43:34:ec:3c:da:0a:49:2a:b7:8e:cf:21: 94:21:1b:e7:6e:71:3c:3c:3c:d5:da:2e:45:a2:fa:cc:d6:5a: 7c:c9:b2:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdItB9m8IqIo2lyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YThkYTVlNzctOTg1Mi00ODllLThmYzEtYjFkMmEyMDdkNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjS4jf0KIpWMZNqqSL12Hy0vH6BLm45DmNyCt FnH5NfrcZNV4Zpj9xEuFaLf3rSFoD1sD9xrE/i05uDBF97wpQ4lauWptDvMleQMA sAr6iBfhLe460lHQ1ZwmpkMBSe+kvV8lkNmHNsay/B45d1s0keJCjPoBmAGSAUj3 dtZRY88IZJCeYL99jIZu5rfecBsL+TUTPPeCs1NismKGKoiT5hUHrCNdD2cv5oN0 62xjCVP89WwXfqMf/J+1cXFkte3endiZmlyHSOjF6j7Si7s3eLEXJHy1lmKT6B5B aXdXCP0XGA9QoiAVr0S8dOEYlBHmd2fcr1WgIQjnb9Bc/2VDvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqraZ3wxwrlvU2V0YX5X+JzjkmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvODRiZTlmOWUtODgxZi0z YmMwLTkyNmYtNzRiMjk2YjViMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYweMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPAkdZ96czKOw+WNWzUC5MGPDhgaI1nP8zGU3CcrykrvCRKuXERSWPp nrzz1a+uEfhIydRfruC1IJxX8rDuRn/fF5lgqVDb1yBx0RCzNMujXTQ9yCrgDB+W RbqhaU3pIVTZcpjM0ram7v+CWOzdypaca3HzuO54RqzWcWxiWHaKzxGpVt3IuQKj PceoEmly/jiFOeraZa3of3qlGkmg46LAxIB92+ZGjPX9Et+0ICUw5dFRGEvy13Sa GcGBkyg8I7rY8BggeTS42RNsY6vV3kW2YQfeT+PzsXHhtwKJo0M07DzaCkkqt47P IZQhG+ducTw8PNXaLkWi+szWWnzJsr0= -----END CERTIFICATE-----Generated at Sat Sep 26 00:26:09 2026 by rpki-client