$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa File: 815a54e3-8123-31cb-96ee-31a99dbd5486.roa (raw, json) Hash identifier: tMwWNdZeAwOZsRPK52UbrELrZHpUdwy4/La2dltGFPY= Subject key identifier: 74:0D:73:33:FC:F4:89:B1:D6:81:E7:3C:6F:E5:63:C1:94:43:B7:E9 Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb Certificate serial: 010D0C9F4328584F4974621CF3B62A4740C0BE40 Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401243 IP address blocks: 140.235.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:62:1c:f3:b6:2a:47:40:c0:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=75cc132a-36ec-4fcb-b105-474d9c4eb77e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:02:b3:f1:d8:2a:6c:b4:b0:0d:bd:fd:e0:e3: 59:5d:e9:12:ef:7b:c5:cb:fa:dc:73:9d:45:49:7a: 13:d8:ac:ed:2c:ca:df:27:79:6e:f5:16:14:df:5b: 5c:a0:17:e0:55:17:f0:f9:05:c3:fe:9d:99:fe:0b: ee:98:38:27:c3:bb:ac:34:c6:c4:22:92:1d:7c:bc: c9:41:c8:04:f5:2f:c7:7e:e6:2e:39:67:49:21:64: 96:89:18:41:db:6f:9c:49:71:8a:67:db:95:9a:25: e3:3f:b0:e3:10:29:92:05:40:99:4a:b2:d5:8e:c4: 8a:40:bd:22:03:a9:7d:01:5c:73:bb:97:4c:8f:45: fd:39:f1:59:98:e9:da:38:e4:cb:65:1d:73:21:97: a7:64:cf:f7:de:5b:61:47:30:d8:df:01:16:95:a2: c7:82:a9:f1:99:83:f8:78:c2:f8:8a:b8:67:c6:2c: aa:1f:77:dd:09:37:99:db:01:aa:aa:e3:80:92:46: e2:98:c9:05:55:b5:1e:b1:37:cb:26:29:89:72:06: 41:47:1c:40:71:91:3f:72:92:c4:78:6c:55:28:34: fa:4b:d2:51:46:a2:32:2d:f1:8f:26:d8:8a:1a:07: 0a:1b:ac:4c:6a:86:7e:2f:34:79:c4:60:44:14:cc: 15:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0D:73:33:FC:F4:89:B1:D6:81:E7:3C:6F:E5:63:C1:94:43:B7:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/815a54e3-8123-31cb-96ee-31a99dbd5486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl X509v3 Authority Key Identifier: keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer sbgp-ipAddrBlock: critical IPv4: 140.235.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f5:a6:0a:13:94:72:43:e4:d9:e4:e0:1c:46:94:42:9f:7b: 4f:cc:0a:47:6a:59:20:ea:4d:fe:73:7b:3e:59:bd:4a:2b:16: 2d:f6:6d:9c:86:1a:e6:7e:93:d5:5e:c9:ab:20:56:21:83:db: 69:eb:69:30:5c:5e:81:38:b6:32:1d:6c:d1:d3:4a:b5:6e:4b: 44:b5:6a:7f:5f:94:d0:ae:95:37:dc:7c:b4:4a:2b:7e:79:8e: d3:b7:03:7f:77:bc:e0:b1:6d:87:cc:e7:2d:0a:30:36:b5:30: 54:94:36:f7:c2:ca:86:bd:3e:b8:28:62:56:7c:10:8f:56:fa: 27:13:a5:c0:03:9c:fb:95:8b:68:4e:67:b3:1f:fe:81:f0:82: 10:58:ee:8c:6c:a4:1c:af:b3:dc:ba:2f:90:03:af:84:15:2b: 33:ad:4b:b3:f3:c6:0d:ef:72:8b:a9:34:ce:6e:4e:34:d0:21: 26:05:d4:02:32:fa:53:31:bb:18:45:09:ee:a3:5a:8e:94:57: e1:5a:a6:e3:0a:48:14:33:02:15:90:5f:60:74:f0:e0:b0:2c: cc:02:6c:df:d1:9a:b0:3e:33:be:d8:64:a1:1d:c7:36:a1:f0: 60:81:09:1f:b6:0e:0b:5e:6f:64:90:56:35:f3:af:3e:99:db: 27:02:01:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdGIc87YqR0DAvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2NkY2VkMjEtOGYwNC00MjczLThmOGEtMDc1OTNjMzk2 OGZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzVjYzEzMmEtMzZlYy00ZmNiLWIxMDUtNDc0ZDljNGViNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQKz8dgqbLSwDb394ONZXekS73vFy/rcc51F SXoT2KztLMrfJ3lu9RYU31tcoBfgVRfw+QXD/p2Z/gvumDgnw7usNMbEIpIdfLzJ QcgE9S/HfuYuOWdJIWSWiRhB22+cSXGKZ9uVmiXjP7DjECmSBUCZSrLVjsSKQL0i A6l9AVxzu5dMj0X9OfFZmOnaOOTLZR1zIZenZM/33lthRzDY3wEWlaLHgqnxmYP4 eML4irhnxiyqH3fdCTeZ2wGqquOAkkbimMkFVbUesTfLJimJcgZBRxxAcZE/cpLE eGxVKDT6S9JRRqIyLfGPJtiKGgcKG6xMaoZ+LzR5xGBEFMwVRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQNczP89Imx1oHnPG/lY8GUQ7fpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jY2Rj ZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5M2MzOTY4ZmIvODE1YTU0ZTMtODEyMy0z MWNiLTk2ZWUtMzFhOTlkYmQ1NDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2NkY2VkMjEtOGYwNC00MjczLThm OGEtMDc1OTNjMzk2OGZiL2NjZGNlZDIxLThmMDQtNDI3My04ZjhhLTA3NTkzYzM5 NjhmYi5jcmwwHwYDVR0jBBgwFoAUstSdhUSY71nqCHYPz711A7DiR8cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jY2RjZWQyMS04ZjA0LTQyNzMtOGY4YS0wNzU5 M2MzOTY4ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOuNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL1pgoTlHJD5Nnk4BxGlEKfe0/MCkdqWSDqTf5zez5ZvUorFi32bZyG GuZ+k9VeyasgViGD22nraTBcXoE4tjIdbNHTSrVuS0S1an9flNCulTfcfLRKK355 jtO3A393vOCxbYfM5y0KMDa1MFSUNvfCyoa9PrgoYlZ8EI9W+icTpcADnPuVi2hO Z7Mf/oHwghBY7oxspByvs9y6L5ADr4QVKzOtS7Pzxg3vcoupNM5uTjTQISYF1AIy +lMxuxhFCe6jWo6UV+FapuMKSBQzAhWQX2B08OCwLMwCbN/RmrA+M77YZKEdxzah 8GCBCR+2Dgteb2SQVjXzrz6Z2ycCAak= -----END CERTIFICATE-----Generated at Tue Sep 29 04:33:56 2026 by rpki-client