$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/6e687f48-0c62-35f8-8d4f-af78115f8cda.roa File: 6e687f48-0c62-35f8-8d4f-af78115f8cda.roa (raw, json) Hash identifier: jzLMVhGP3PPgxK84Z/kfN2dw8STmBrX5W2S0SvvBm/I= Subject key identifier: 1E:9D:C0:C2:8F:80:32:15:5C:BD:BF:D4:FD:AD:EB:6F:8E:7F:67:B5 Certificate issuer: /CN=8c51fc03-881b-4bb7-a40c-ed520fa129f7 Certificate serial: 010D0C9F4328584F15CD08E8016C76CC5A929D80 Authority key identifier: 84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/6e687f48-0c62-35f8-8d4f-af78115f8cda.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 19695 IP address blocks: 140.235.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cd:08:e8:01:6c:76:cc:5a:92:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c51fc03-881b-4bb7-a40c-ed520fa129f7 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=7f9993d9-21a2-48eb-ae8b-75581ff573f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:64:59:fe:bb:9e:f5:7e:07:18:bf:f2:66:1d: c5:d0:64:96:6e:6d:44:66:ed:f7:93:72:cf:3a:ec: d3:23:40:b7:28:4b:dd:8e:4b:75:60:0a:b0:8c:fe: ed:32:ee:c7:6c:c9:fa:91:54:b7:96:d7:36:83:cd: bd:ca:c4:d0:28:a8:3b:53:e2:49:27:f7:b0:9b:00: df:6e:07:6c:ef:8c:1c:5c:81:d2:b6:d5:1a:43:44: f7:23:49:9a:8b:04:d3:d8:b0:20:96:53:b3:c4:f9: 46:f6:c3:c1:6a:aa:71:d2:50:e8:e6:e4:89:ca:b3: c4:88:16:f9:d9:17:10:cd:86:05:29:7d:52:9c:79: 41:7c:10:1b:95:80:5f:eb:7b:7d:98:51:fb:ce:06: 2f:a4:1b:d2:77:c7:d4:62:19:93:93:24:2d:e7:08: d6:d6:2d:6e:0f:dc:96:eb:66:61:45:ac:e8:30:0b: 79:82:eb:b0:af:1f:8f:4a:29:4a:91:18:fe:0b:29: 35:79:8b:51:f3:85:53:a9:09:aa:76:98:27:16:c2: 72:16:ac:09:0b:b1:6f:4f:bf:16:e6:53:02:ea:94: 73:a1:20:38:63:7e:c1:1b:58:87:c4:30:f0:b8:a6: af:14:38:0b:c5:e8:e2:06:3e:84:81:ef:ca:7e:be: ea:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:C0:C2:8F:80:32:15:5C:BD:BF:D4:FD:AD:EB:6F:8E:7F:67:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/6e687f48-0c62-35f8-8d4f-af78115f8cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7/8c51fc03-881b-4bb7-a40c-ed520fa129f7.crl X509v3 Authority Key Identifier: keyid:84:02:7A:A0:61:AF:E3:28:24:86:F4:D9:98:DF:DA:43:3E:4D:74:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c51fc03-881b-4bb7-a40c-ed520fa129f7.cer sbgp-ipAddrBlock: critical IPv4: 140.235.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:7a:ce:61:01:6d:13:88:fe:91:ae:4c:27:3c:e3:8d:46:8c: 66:c2:a0:74:45:8c:40:74:a7:74:2b:1d:7a:61:f0:24:91:7e: 8a:3b:5f:f7:e3:60:b6:43:7c:af:d7:59:9a:dc:af:ce:5f:3b: 0d:54:69:07:38:2d:10:d8:90:97:21:c0:f7:6f:a3:f1:fd:4e: 0c:b7:19:7b:43:91:5f:ce:c2:e6:37:2f:91:6c:e1:10:2e:fa: ec:e7:30:92:da:e8:fc:71:e8:b8:4d:50:d8:36:dd:9b:15:0b: b7:52:7c:db:f0:25:7b:27:12:cc:0f:58:93:2b:72:25:07:58: 70:0c:18:71:a7:16:e8:3d:ca:62:8e:07:4e:d7:d3:c3:c5:c9: c2:cc:f0:f6:a9:b0:ec:a0:ff:22:43:fa:03:b9:7d:b9:bd:c7: fa:2e:77:27:8b:9a:76:f3:c9:ab:40:e7:c7:97:30:aa:43:a8: 67:26:84:d3:ae:31:3a:1c:0d:a0:2f:cd:e4:41:75:9d:08:2b: 0f:58:08:df:95:b2:3b:10:54:35:e2:06:91:a4:d8:8c:58:b1: 2f:88:73:49:95:cf:f2:b7:8a:5f:33:63:07:99:77:25:88:c3: 92:e8:5d:48:53:d2:d0:b9:6f:3b:dc:4f:d4:f0:6c:70:0b:81: f9:a2:fa:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzQjoAWx2zFqSnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGM1MWZjMDMtODgxYi00YmI3LWE0MGMtZWQ1MjBmYTEy OWY3MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk N2Y5OTkzZDktMjFhMi00OGViLWFlOGItNzU1ODFmZjU3M2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9GRZ/rue9X4HGL/yZh3F0GSWbm1EZu33k3LP OuzTI0C3KEvdjkt1YAqwjP7tMu7HbMn6kVS3ltc2g829ysTQKKg7U+JJJ/ewmwDf bgds74wcXIHSttUaQ0T3I0maiwTT2LAgllOzxPlG9sPBaqpx0lDo5uSJyrPEiBb5 2RcQzYYFKX1SnHlBfBAblYBf63t9mFH7zgYvpBvSd8fUYhmTkyQt5wjW1i1uD9yW 62ZhRazoMAt5guuwrx+PSilKkRj+Cyk1eYtR84VTqQmqdpgnFsJyFqwJC7FvT78W 5lMC6pRzoSA4Y37BG1iHxDDwuKavFDgLxejiBj6Ege/Kfr7qCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6dwMKPgDIVXL2/1P2t62+Of2e1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84YzUx ZmMwMy04ODFiLTRiYjctYTQwYy1lZDUyMGZhMTI5ZjcvNmU2ODdmNDgtMGM2Mi0z NWY4LThkNGYtYWY3ODExNWY4Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGM1MWZjMDMtODgxYi00YmI3LWE0 MGMtZWQ1MjBmYTEyOWY3LzhjNTFmYzAzLTg4MWItNGJiNy1hNDBjLWVkNTIwZmEx MjlmNy5jcmwwHwYDVR0jBBgwFoAUhAJ6oGGv4ygkhvTZmN/aQz5NdFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84YzUxZmMwMy04ODFiLTRiYjctYTQwYy1lZDUy MGZhMTI5ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK96zmEBbROI/pGuTCc8441GjGbCoHRFjEB0p3QrHXph8CSRfoo7X/fj YLZDfK/XWZrcr85fOw1UaQc4LRDYkJchwPdvo/H9Tgy3GXtDkV/OwuY3L5Fs4RAu +uznMJLa6Pxx6LhNUNg23ZsVC7dSfNvwJXsnEswPWJMrciUHWHAMGHGnFug9ymKO B07X08PFycLM8PapsOyg/yJD+gO5fbm9x/oudyeLmnbzyatA58eXMKpDqGcmhNOu MTocDaAvzeRBdZ0IKw9YCN+VsjsQVDXiBpGk2IxYsS+Ic0mVz/K3il8zYweZdyWI w5LoXUhT0tC5bzvcT9TwbHALgfmi+sM= -----END CERTIFICATE-----Generated at Mon Sep 21 02:27:54 2026 by rpki-client