$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa File: 9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa (raw, json) Hash identifier: JhRjdKLPsA2LbSeAKxshw8jIWgFwXirZ+AysGxz+Ci4= Subject key identifier: 56:0F:E6:78:71:FE:58:39:AB:C9:F9:13:A3:CF:B6:37:EE:C2:DE:E5 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584D52433B9F7BFA367E3B665A80 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 49304 IP address blocks: 140.235.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:3b:9f:7b:fa:36:7e:3b:66:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=aff73fcf-c948-4a33-9d0b-e251e39351f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:a7:bb:29:e8:73:50:3c:10:ff:fb:2f:03:40: 72:0c:dc:4a:e8:57:14:f6:ef:31:83:33:d5:9d:d9: 07:0d:b1:69:40:f1:ec:f2:09:53:8b:fc:2b:cd:cb: 24:c7:7a:38:83:ab:3b:bd:75:5d:21:3e:28:87:99: a8:46:83:b3:76:07:71:30:2b:da:8c:94:b8:40:1c: 96:55:49:0b:07:aa:d7:56:ff:c5:0f:65:4a:1c:1d: 74:b4:a2:bb:1f:b1:de:a3:b6:b3:ab:d6:e4:c9:b0: 2a:4d:8b:34:cf:82:60:d1:7f:13:82:2b:16:83:bc: 8d:10:94:ee:57:d0:26:89:80:39:dc:90:6a:89:29: e1:3f:5a:a4:21:d8:da:91:d4:ad:58:8b:7b:1a:c6: 41:38:f0:23:d8:51:63:06:1f:89:3b:26:6c:09:18: 1a:dc:34:c5:15:d4:b4:e7:cc:02:b1:03:68:8d:8f: dc:57:25:19:1d:50:e3:75:b3:16:54:54:25:fb:f3: d8:4f:99:5a:0c:e8:6c:a6:31:49:70:89:db:5c:3f: 24:23:7c:56:7a:e3:a5:d0:bf:7d:33:a8:e7:e1:fd: 04:e3:45:0e:15:81:dc:7f:12:dd:05:30:84:7a:3a: 90:7b:68:9f:1b:eb:d6:d7:f4:55:db:db:5b:58:78: c9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0F:E6:78:71:FE:58:39:AB:C9:F9:13:A3:CF:B6:37:EE:C2:DE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:59:c0:2f:75:11:a3:63:dc:fb:30:b5:73:96:1b:ab:80:06: 97:d0:e3:54:1e:e1:74:05:04:d2:d6:ea:eb:da:ee:5f:49:4f: 1d:8c:98:c2:48:ce:31:6c:2d:06:ac:8c:d8:0c:87:fd:30:3c: 15:d4:4e:90:80:3e:39:62:2e:a1:81:a2:21:4d:da:34:2f:d1: 50:a1:40:75:38:61:84:fd:d9:17:a9:2d:82:48:cd:d2:0f:da: d3:eb:91:f0:64:7b:49:3f:8d:2e:a0:5a:71:1a:92:e7:64:72: 59:a2:b5:e0:4e:02:9a:25:42:b9:ec:16:40:01:9b:9b:6d:2d: f5:db:0a:3e:17:9b:76:25:cc:70:c0:5f:ae:fa:7c:f1:d5:8c: 3a:0f:90:c7:5a:c1:98:74:a3:84:e5:2b:e6:7d:e4:17:a2:41: a5:6b:91:b7:cc:ee:39:57:50:43:71:67:0e:18:b9:05:4d:b5: 48:f1:44:e6:2a:bc:d2:b6:96:c7:2b:54:69:f3:82:8a:cd:56: 36:28:21:1a:37:21:1e:76:54:5e:aa:0b:91:07:01:19:7a:07: e5:dd:81:47:8c:81:a3:fa:96:e5:81:27:ba:dd:f5:e1:9b:ca: 71:40:29:4e:d0:ed:b1:82:dc:31:47:8b:59:e4:76:2a:09:9b: ee:5a:41:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQzufe/o2fjtmWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YWZmNzNmY2YtYzk0OC00YTMzLTlkMGItZTI1MWUzOTM1MWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqe7KehzUDwQ//svA0ByDNxK6FcU9u8xgzPV ndkHDbFpQPHs8glTi/wrzcskx3o4g6s7vXVdIT4oh5moRoOzdgdxMCvajJS4QByW VUkLB6rXVv/FD2VKHB10tKK7H7Heo7azq9bkybAqTYs0z4Jg0X8TgisWg7yNEJTu V9AmiYA53JBqiSnhP1qkIdjakdStWIt7GsZBOPAj2FFjBh+JOyZsCRga3DTFFdS0 58wCsQNojY/cVyUZHVDjdbMWVFQl+/PYT5laDOhspjFJcInbXD8kI3xWeuOl0L99 M6jn4f0E40UOFYHcfxLdBTCEejqQe2ifG+vW1/RV29tbWHjJIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYP5nhx/lg5q8n5E6PPtjfuwt7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvOWM3YzQxZjAtYTZhOC0z NmUzLWI5ZTktZDAxYWFkOGU1YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpZwC91EaNj3PswtXOWG6uABpfQ41Qe4XQFBNLW6uva7l9JTx2MmMJI zjFsLQasjNgMh/0wPBXUTpCAPjliLqGBoiFN2jQv0VChQHU4YYT92RepLYJIzdIP 2tPrkfBke0k/jS6gWnEakudkclmiteBOApolQrnsFkABm5ttLfXbCj4Xm3YlzHDA X676fPHVjDoPkMdawZh0o4TlK+Z95BeiQaVrkbfM7jlXUENxZw4YuQVNtUjxROYq vNK2lscrVGnzgorNVjYoIRo3IR52VF6qC5EHARl6B+XdgUeMgaP6luWBJ7rd9eGb ynFAKU7Q7bGC3DFHi1nkdioJm+5aQTk= -----END CERTIFICATE-----Generated at Fri Apr 17 11:46:36 2026 by rpki-client