$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa File: 194a2536-f5c7-30fa-a3f2-891677b761c0.roa (raw, json) Hash identifier: Bq6Qn8sKlS4NLpNSuVANxKnSI7d/ScOQrlqbDwjW7iM= Subject key identifier: 55:B7:2E:3E:A1:E1:1D:53:7F:F9:BA:5C:BA:BD:C7:66:72:DC:1B:0E Certificate issuer: /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Certificate serial: 010D0C9F4328584F20F7C350813EC6176B927C00 Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 401015 IP address blocks: 140.221.128.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c3:50:81:3e:c6:17:6b:92:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=1b716df0-f6e2-4a21-8202-86b0ae0de7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:da:f6:e6:68:86:22:60:5e:a4:75:eb:a3:68: 5b:e8:64:6a:02:d8:b7:46:88:e5:79:c0:7f:6b:cb: ba:c1:1b:e5:e6:00:a4:73:55:9d:62:d6:06:e4:2c: 49:67:3e:53:57:aa:e7:44:9f:cd:33:ce:cc:c2:76: 67:70:78:63:0c:83:62:14:68:de:c8:1e:60:a0:49: f6:b0:1b:74:58:df:06:e2:5b:eb:6c:ee:54:09:dc: 9f:92:5b:49:74:67:76:2a:06:2f:ff:2a:23:8d:70: 43:39:55:11:99:0a:2c:75:43:f6:75:3b:5a:1f:7e: 3a:b8:13:f9:e4:f6:d2:bc:e1:6a:dc:bb:ba:1a:ff: 81:c1:22:4e:bb:18:81:6e:3d:57:04:f1:98:f3:9a: 81:29:5c:d4:41:33:98:18:ed:99:02:52:4a:b1:78: 3e:c3:9b:7a:92:87:29:c7:89:f3:3a:87:6a:a7:ea: fd:ed:b1:5c:a2:7f:12:9c:e1:58:65:80:f8:09:b5: e1:17:53:bb:93:76:62:28:16:ea:84:8b:92:33:e0: 25:ea:bb:be:69:9d:c8:a0:86:bd:b1:b7:4f:7e:1b: 52:1e:fb:88:08:d2:6b:50:36:88:f9:3d:f4:da:27: 0c:56:41:d1:80:c5:c4:e3:1e:61:98:2f:e1:1f:1f: d4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:B7:2E:3E:A1:E1:1D:53:7F:F9:BA:5C:BA:BD:C7:66:72:DC:1B:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/194a2536-f5c7-30fa-a3f2-891677b761c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl X509v3 Authority Key Identifier: keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer sbgp-ipAddrBlock: critical IPv4: 140.221.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:cf:aa:2c:98:e2:29:f0:63:f5:b9:5a:6b:dc:bc:c5:ba:a7: 18:65:7f:47:09:99:d2:53:9f:78:35:a4:4a:99:4a:6a:7e:5c: 11:74:42:9d:60:9a:46:81:56:b4:e2:d4:06:69:dc:ba:7c:40: 67:1b:b7:3e:82:af:c9:e0:81:a8:e7:8d:aa:6d:f0:b8:57:fe: 53:cf:5d:69:36:80:1b:4b:ec:21:37:33:f4:7c:87:f6:4b:11: 0a:1c:2b:40:1c:69:b0:83:b4:1b:da:21:1b:6c:c1:81:56:c3: 71:16:8d:c1:b1:a0:99:2d:34:9e:5f:19:2e:07:90:3b:4d:e2: 93:7a:eb:b9:26:6a:e9:18:c5:ed:16:de:dc:d4:d6:8a:f5:1c: 71:33:37:11:a7:4b:a1:a7:00:9d:b1:e6:fa:2e:5a:4b:b0:32: 85:8e:28:22:db:26:c0:4b:db:7b:bf:59:b6:6c:6e:6a:66:41: 65:c2:35:6e:fc:92:11:cd:eb:c5:e3:c5:ce:70:c3:81:88:29: 47:c7:97:9b:22:d2:22:73:81:b7:29:06:42:fa:b4:38:03:2d: 20:5d:68:71:aa:aa:c2:d0:d3:94:fb:04:34:1b:dd:0b:5c:04: 40:60:27:79:c1:0f:dc:fa:2c:f6:7a:09:03:97:e2:fd:8f:ec: 1f:bf:52:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98NQgT7GF2uSfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1 ZmY1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk MWI3MTZkZjAtZjZlMi00YTIxLTgyMDItODZiMGFlMGRlN2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndr25miGImBepHXro2hb6GRqAti3RojlecB/ a8u6wRvl5gCkc1WdYtYG5CxJZz5TV6rnRJ/NM87MwnZncHhjDINiFGjeyB5goEn2 sBt0WN8G4lvrbO5UCdyfkltJdGd2KgYv/yojjXBDOVURmQosdUP2dTtaH346uBP5 5PbSvOFq3Lu6Gv+BwSJOuxiBbj1XBPGY85qBKVzUQTOYGO2ZAlJKsXg+w5t6kocp x4nzOodqp+r97bFcon8SnOFYZYD4CbXhF1O7k3ZiKBbqhIuSM+Al6ru+aZ3IoIa9 sbdPfhtSHvuICNJrUDaI+T302icMVkHRgMXE4x5hmC/hHx/ULQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFW3Lj6h4R1Tf/m6XLq9x2Zy3BsOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvMTk0YTI1MzYtZjVjNy0z MGZhLWEzZjItODkxNjc3Yjc2MWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2 ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2 NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5 ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjN2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILPqiyY4inwY/W5WmvcvMW6pxhlf0cJmdJTn3g1pEqZSmp+XBF0Qp1g mkaBVrTi1AZp3Lp8QGcbtz6Cr8nggajnjapt8LhX/lPPXWk2gBtL7CE3M/R8h/ZL EQocK0AcabCDtBvaIRtswYFWw3EWjcGxoJktNJ5fGS4HkDtN4pN667kmaukYxe0W 3tzU1or1HHEzNxGnS6GnAJ2x5vouWkuwMoWOKCLbJsBL23u/WbZsbmpmQWXCNW78 khHN68Xjxc5ww4GIKUfHl5si0iJzgbcpBkL6tDgDLSBdaHGqqsLQ05T7BDQb3Qtc BEBgJ3nBD9z6LPZ6CQOX4v2P7B+/UlA= -----END CERTIFICATE-----Generated at Mon Sep 28 22:36:15 2026 by rpki-client