$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa File: d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa (raw, json) Hash identifier: nWXO+BE9ryfuC2ZkS/yHXTIYhvAmtafiDkq7Kd3g3T8= Subject key identifier: 61:2A:BD:EA:D4:53:C9:EE:00:75:2A:77:F5:AF:60:DA:6B:DB:02:EE Certificate issuer: /CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Certificate serial: 010D0C9F4328584F3CE27C0A541C63D2139F6580 Authority key identifier: 1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 400402 IP address blocks: 140.235.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7c:0a:54:1c:63:d2:13:9f:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927fe362-89e4-4ae8-b9a2-61b0e5523c78 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=02422b1b-d206-453e-8b35-e8d1f614ad5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:aa:75:f9:66:b8:f0:0f:6e:2f:e3:eb:e9:68: dd:03:ca:a4:94:ff:65:7e:58:db:35:20:33:af:eb: e3:33:62:6d:87:d7:e9:24:08:19:c5:9c:5e:e8:4e: e4:c6:ea:13:06:26:f3:1a:d5:50:dd:12:4c:46:e9: 0b:e7:4e:17:4f:f3:5c:8e:29:7c:dc:c4:10:fc:61: 05:0f:50:1f:5c:d2:08:4a:db:b4:2e:79:f8:a3:e6: bc:e9:46:bd:85:95:95:74:99:97:d5:19:34:89:d7: de:45:6c:b3:69:8a:77:fe:39:0c:3e:49:e1:0a:69: 2e:9f:0a:58:9a:60:7b:cd:13:78:68:3b:db:4e:4a: fc:bd:0a:46:e5:f3:5b:b2:1c:7e:bb:40:00:e6:ec: 34:b3:7d:3d:4f:db:13:e1:dd:65:ac:01:8a:4c:4d: d5:a5:f7:98:9f:f6:a5:fa:c4:e4:ca:fa:42:61:9e: 5d:bf:e4:0d:e6:57:2b:fd:95:cf:d0:c8:6b:f2:b6: 05:af:a1:47:59:e9:7b:7b:6a:84:53:94:48:10:74: a9:b4:9f:fe:8f:2f:45:b2:8d:8e:ef:b5:2e:be:5f: d5:64:41:24:9e:08:7b:62:09:a8:57:00:b1:c5:f4: 0e:c9:6d:d6:df:65:33:8c:fe:ba:c3:0e:47:11:a4: 0e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:2A:BD:EA:D4:53:C9:EE:00:75:2A:77:F5:AF:60:DA:6B:DB:02:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/d4942b41-33b8-3cce-9a23-da1e76b5ef16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78/927fe362-89e4-4ae8-b9a2-61b0e5523c78.crl X509v3 Authority Key Identifier: keyid:1A:D7:07:02:55:B0:2A:AE:3B:F7:02:EC:7D:C4:2E:E5:65:BD:42:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/927fe362-89e4-4ae8-b9a2-61b0e5523c78.cer sbgp-ipAddrBlock: critical IPv4: 140.235.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5f:60:32:c2:1f:4b:8b:27:db:97:dd:5c:f9:6a:4d:bd:e7: cf:6c:4f:d1:43:5d:99:db:b1:db:9e:65:81:b3:c9:9f:08:08: 19:8d:6a:02:db:15:de:5d:7f:39:3a:12:27:b2:b9:8d:3c:1e: a2:75:54:3d:84:6f:d7:1b:e7:3e:2e:16:b1:e4:57:7b:cd:91: fd:dd:9d:48:30:25:76:f2:33:23:d5:51:bd:ce:ef:da:45:6d: 83:4f:c5:8a:0c:5b:2d:5c:54:66:9b:75:e1:46:40:27:a5:c0: 4e:ba:e1:b6:11:85:4a:30:57:d6:c9:88:56:0c:be:78:e4:0c: 04:97:3a:09:69:f9:91:77:3d:6e:0d:a6:a5:a3:ec:de:37:db: 95:b5:72:9b:09:89:91:f8:86:60:6d:92:f5:7c:94:62:28:d5: a4:f8:24:f4:6b:7e:10:46:a3:16:62:19:49:8d:48:bb:d3:c2: 9f:cf:72:30:ad:c5:5e:7f:3b:52:c6:47:a3:67:3f:2f:32:e2: c1:a7:d0:c4:f6:c1:14:6f:07:a8:d4:fb:39:48:d6:d2:6d:39: c2:74:48:32:62:4e:6f:2e:75:9d:ef:cc:24:07:04:63:68:be: b3:45:cc:bc:b4:29:c9:c5:18:c1:ed:bd:47:4a:16:29:a6:c2: 4f:c4:74:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nwKVBxj0hOfZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZmUzNjItODllNC00YWU4LWI5YTItNjFiMGU1NTIz Yzc4MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk MDI0MjJiMWItZDIwNi00NTNlLThiMzUtZThkMWY2MTRhZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKp1+Wa48A9uL+Pr6WjdA8qklP9lfljbNSAz r+vjM2Jth9fpJAgZxZxe6E7kxuoTBibzGtVQ3RJMRukL504XT/Ncjil83MQQ/GEF D1AfXNIIStu0Lnn4o+a86Ua9hZWVdJmX1Rk0idfeRWyzaYp3/jkMPknhCmkunwpY mmB7zRN4aDvbTkr8vQpG5fNbshx+u0AA5uw0s309T9sT4d1lrAGKTE3VpfeYn/al +sTkyvpCYZ5dv+QN5lcr/ZXP0Mhr8rYFr6FHWel7e2qEU5RIEHSptJ/+jy9Fso2O 77Uuvl/VZEEkngh7YgmoVwCxxfQOyW3W32UzjP66ww5HEaQOlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEqverUU8nuAHUqd/WvYNpr2wLuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85Mjdm ZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIwZTU1MjNjNzgvZDQ5NDJiNDEtMzNiOC0z Y2NlLTlhMjMtZGExZTc2YjVlZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTI3ZmUzNjItODllNC00YWU4LWI5 YTItNjFiMGU1NTIzYzc4LzkyN2ZlMzYyLTg5ZTQtNGFlOC1iOWEyLTYxYjBlNTUy M2M3OC5jcmwwHwYDVR0jBBgwFoAUGtcHAlWwKq479wLsfcQu5WW9QqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MjdmZTM2Mi04OWU0LTRhZTgtYjlhMi02MWIw ZTU1MjNjNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOt7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBfYDLCH0uLJ9uX3Vz5ak29589sT9FDXZnbsdueZYGzyZ8ICBmNagLb Fd5dfzk6EieyuY08HqJ1VD2Eb9cb5z4uFrHkV3vNkf3dnUgwJXbyMyPVUb3O79pF bYNPxYoMWy1cVGabdeFGQCelwE664bYRhUowV9bJiFYMvnjkDASXOglp+ZF3PW4N pqWj7N4325W1cpsJiZH4hmBtkvV8lGIo1aT4JPRrfhBGoxZiGUmNSLvTwp/PcjCt xV5/O1LGR6NnPy8y4sGn0MT2wRRvB6jU+zlI1tJtOcJ0SDJiTm8udZ3vzCQHBGNo vrNFzLy0KcnFGMHtvUdKFimmwk/EdFI= -----END CERTIFICATE-----Generated at Tue Sep 22 09:15:36 2026 by rpki-client