$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/1eb8b60a-d70b-385b-85cc-aec03971f694.roa File: 1eb8b60a-d70b-385b-85cc-aec03971f694.roa (raw, json) Hash identifier: zwQYwqhyaLI6aMeoQMs9zkVb5Sk3vBmgEUzp1CPCgos= Subject key identifier: CD:7B:2D:55:DD:47:E6:54:BD:20:66:A4:DB:DA:54:7D:E0:E7:28:77 Certificate issuer: /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Certificate serial: 010D0C9F4328584F4972C401DAAD979894040C00 Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/1eb8b60a-d70b-385b-85cc-aec03971f694.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 152179 IP address blocks: 23.140.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c4:01:da:ad:97:98:94:04:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d90c7511-35e4-4f12-bd7b-fb8bb5ab5055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4a:b1:c2:6c:2e:06:c9:f7:01:3b:78:66:99: 89:a9:45:b9:0d:f1:97:f0:e5:c5:d3:37:69:54:96: 04:15:35:bd:3e:7d:1c:9e:52:36:8a:13:90:60:97: d6:1f:09:85:87:38:cb:b8:8c:b5:b2:3f:9e:0e:f1: 87:43:47:49:ba:6d:b8:4f:bb:70:2a:6a:e9:3a:a5: 90:53:7f:3d:b1:8d:8d:16:be:69:95:b6:d9:63:0d: 1c:c3:aa:52:38:fb:54:f9:10:7b:43:ee:49:7f:bc: 4e:85:cc:00:1f:96:b1:34:b7:18:a9:74:0d:be:30: 65:a8:07:2b:20:64:8f:60:4d:fd:d5:41:55:f4:51: e2:68:88:c8:36:1f:10:92:77:d1:46:9c:9f:f3:c9: 9d:5d:da:28:00:c8:b4:f6:28:0f:cb:30:f5:55:49: 59:9f:86:cc:88:dc:73:39:ee:aa:b7:93:f8:4f:ec: 70:9d:f2:9f:17:09:d3:94:ab:65:a8:d7:0d:cd:6a: 9a:e4:8d:a7:a4:67:8d:21:08:77:e5:61:6a:31:bf: 45:8f:ac:b5:54:6e:26:57:9f:69:84:88:10:9c:64: db:2e:46:9c:e1:38:b9:16:06:3b:48:92:bb:b9:00: 0d:9f:36:99:92:60:34:b4:14:06:35:f7:6d:cc:ea: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7B:2D:55:DD:47:E6:54:BD:20:66:A4:DB:DA:54:7D:E0:E7:28:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/1eb8b60a-d70b-385b-85cc-aec03971f694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl X509v3 Authority Key Identifier: keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer sbgp-ipAddrBlock: critical IPv4: 23.140.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6b:d2:da:04:75:34:cc:25:dc:9a:af:39:52:94:39:a4:b0: 74:14:9a:6b:6a:1a:b8:79:73:34:b3:03:84:01:aa:01:0c:eb: 54:eb:8c:c5:82:76:c4:5b:3b:86:f1:eb:71:57:14:b6:0e:dc: 19:bb:73:2c:41:c9:b6:c7:c8:fb:f8:a8:cd:ed:2a:11:d9:6e: f6:fd:3a:b8:fd:c5:83:02:96:0c:5c:12:50:04:07:3c:68:fb: f6:ae:a3:08:82:44:63:02:ea:7e:d3:2f:be:8f:c3:c4:06:a0: 55:1b:45:ca:a4:e1:dc:1d:fa:11:bb:76:fc:9a:88:68:e0:ba: cc:63:92:b5:ee:34:ff:99:e8:8f:2a:11:c8:d2:36:99:cd:d4: cd:e2:34:ae:7e:ec:42:5f:9c:08:81:db:19:40:fc:d2:7d:1b: 30:6f:f0:5f:c1:d8:e8:81:fc:37:7c:0d:19:91:49:09:12:e6: 0f:55:01:e6:15:37:4b:cc:28:5e:85:55:85:db:0f:e2:bd:82: 26:19:34:c1:52:40:86:5c:a2:3f:80:c9:3c:22:fe:55:60:82: ce:00:fd:0b:80:df:a2:1a:0d:39:95:a4:e0:f2:e8:dd:c1:f7: b4:58:d9:9f:a6:0b:a4:a7:c8:b8:a9:b7:f2:b9:17:6f:f2:0d: 5a:08:08:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsQB2q2XmJQEDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy OWVjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDkwYzc1MTEtMzVlNC00ZjEyLWJkN2ItZmI4YmI1YWI1MDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEqxwmwuBsn3ATt4ZpmJqUW5DfGX8OXF0zdp VJYEFTW9Pn0cnlI2ihOQYJfWHwmFhzjLuIy1sj+eDvGHQ0dJum24T7twKmrpOqWQ U389sY2NFr5plbbZYw0cw6pSOPtU+RB7Q+5Jf7xOhcwAH5axNLcYqXQNvjBlqAcr IGSPYE391UFV9FHiaIjINh8QknfRRpyf88mdXdooAMi09igPyzD1VUlZn4bMiNxz Oe6qt5P4T+xwnfKfFwnTlKtlqNcNzWqa5I2npGeNIQh35WFqMb9Fj6y1VG4mV59p hIgQnGTbLkac4Ti5FgY7SJK7uQANnzaZkmA0tBQGNfdtzOojbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM17LVXdR+ZUvSBmpNvaVH3g5yh3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5 MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvMWViOGI2MGEtZDcwYi0z ODViLTg1Y2MtYWVjMDM5NzFmNjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2 MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5 YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4woMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJr0toEdTTMJdyarzlSlDmksHQUmmtqGrh5czSzA4QBqgEM61TrjMWC dsRbO4bx63FXFLYO3Bm7cyxBybbHyPv4qM3tKhHZbvb9Orj9xYMClgxcElAEBzxo +/auowiCRGMC6n7TL76Pw8QGoFUbRcqk4dwd+hG7dvyaiGjgusxjkrXuNP+Z6I8q EcjSNpnN1M3iNK5+7EJfnAiB2xlA/NJ9GzBv8F/B2OiB/Dd8DRmRSQkS5g9VAeYV N0vMKF6FVYXbD+K9giYZNMFSQIZcoj+AyTwi/lVggs4A/QuA36IaDTmVpODy6N3B 97RY2Z+mC6SnyLipt/K5F2/yDVoICFo= -----END CERTIFICATE-----Generated at Sat Sep 26 04:42:59 2026 by rpki-client