$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa File: 0122ee3f-e947-3c1e-888d-9590ebad2788.roa (raw, json) Hash identifier: 6lkOQTnfuvckYGkIeIPwSXd+HJpw09d8pbH149UgVwc= Subject key identifier: ED:C2:3C:90:A7:E1:90:25:5A:B9:45:1B:C8:8A:11:D8:DB:BA:78:40 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF863759E054B3D7363C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.238.168.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f8:63:75:9e:05:4b:3d:73:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=a3df33fe-f66e-4431-a99d-27750ea38db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:39:d7:9e:dc:1d:ec:b5:bc:c7:f8:22:90:86: 54:5d:3a:d6:aa:44:75:a4:57:20:9f:9c:78:4f:ef: 9d:17:6c:1f:1e:10:82:41:a0:70:78:9b:3a:50:35: 9f:2c:6c:21:f0:3c:1a:3d:1d:35:7d:83:3f:ef:d2: 80:54:26:37:c9:d2:4a:36:a8:ed:fb:c1:fc:3c:9a: ea:a2:52:f3:47:3a:ac:88:24:6b:a7:6e:2b:51:a7: 25:f6:18:c4:4b:d9:be:5c:bc:c5:30:c5:78:51:ce: b9:91:3c:a2:e7:c7:0d:e1:27:c7:2d:0c:7c:c5:cf: 8c:94:51:88:0d:6b:54:c2:94:e7:15:53:a9:22:21: 0b:aa:2f:c6:03:57:d7:b0:65:df:e9:43:aa:8e:45: 7e:f3:76:d7:ac:49:3f:03:1d:5d:14:56:72:f2:7b: 52:99:44:95:ec:22:14:7a:3b:3b:74:74:ab:43:ac: 1f:42:b3:52:c8:8a:57:68:be:6d:93:0a:bc:fe:8e: c0:10:67:23:0f:72:7f:06:63:e6:f8:89:bf:63:ac: 43:d7:74:bd:b0:5b:56:2a:be:72:1f:ce:4d:7f:a1: 06:65:a5:0f:2c:f6:3d:c4:20:e4:19:1e:4d:61:cc: 0a:fa:fc:a4:cf:db:0e:0b:ad:f4:20:71:80:5b:21: 44:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C2:3C:90:A7:E1:90:25:5A:B9:45:1B:C8:8A:11:D8:DB:BA:78:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0122ee3f-e947-3c1e-888d-9590ebad2788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:99:23:09:80:18:89:d2:57:40:54:59:dd:31:5c:d0:0c:c0: fc:e9:31:65:97:87:d4:36:70:e4:d4:2f:88:56:c4:3a:64:d9: c2:ed:a8:02:b0:7d:14:be:30:82:f7:89:a3:dc:12:0f:13:5d: 2b:1c:94:86:8c:d0:48:a0:ae:25:ef:44:0d:6f:49:0d:b6:5a: c1:bf:88:ee:5a:e7:c1:e7:96:08:bc:63:1e:3a:34:7f:fa:54: 00:dc:fa:40:e2:64:38:75:61:44:8c:f4:e0:23:63:c9:3d:29: bf:1b:7f:dd:2f:ca:e9:49:d7:30:f8:5a:8b:3d:f6:6a:0a:35: 4c:62:83:51:be:95:64:a8:f1:f2:a8:65:66:3b:58:64:4d:3b: 9a:d3:00:1b:3b:71:46:f3:38:e3:4c:4d:af:73:d9:e8:7d:af: 1b:e6:b8:98:2d:3d:95:33:fc:bc:eb:0f:d8:53:56:df:62:80: 63:bc:c3:fb:70:a1:11:60:93:28:91:d4:99:d6:11:2d:b3:af: 8a:21:1e:8b:67:94:e8:e0:6e:fd:63:ea:5a:86:49:97:8a:a4: 0f:4d:a4:be:a0:8b:ae:c9:7e:f3:8f:e5:ac:17:a3:13:f4:26: d7:87:c2:71:f9:2f:26:e3:b6:1c:75:f3:3f:18:9c:78:60:92: c4:77:11:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPhjdZ4FSz1zY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk YTNkZjMzZmUtZjY2ZS00NDMxLWE5OWQtMjc3NTBlYTM4ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTnXntwd7LW8x/gikIZUXTrWqkR1pFcgn5x4 T++dF2wfHhCCQaBweJs6UDWfLGwh8DwaPR01fYM/79KAVCY3ydJKNqjt+8H8PJrq olLzRzqsiCRrp24rUacl9hjES9m+XLzFMMV4Uc65kTyi58cN4SfHLQx8xc+MlFGI DWtUwpTnFVOpIiELqi/GA1fXsGXf6UOqjkV+83bXrEk/Ax1dFFZy8ntSmUSV7CIU ejs7dHSrQ6wfQrNSyIpXaL5tkwq8/o7AEGcjD3J/BmPm+Im/Y6xD13S9sFtWKr5y H85Nf6EGZaUPLPY9xCDkGR5NYcwK+vykz9sOC630IHGAWyFEGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3CPJCn4ZAlWrlFG8iKEdjbunhAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDEyMmVlM2YtZTk0Ny0z YzFlLTg4OGQtOTU5MGViYWQyNzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjO6oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqZIwmAGInSV0BUWd0xXNAMwPzpMWWXh9Q2cOTUL4hWxDpk2cLtqAKw fRS+MIL3iaPcEg8TXSsclIaM0EigriXvRA1vSQ22WsG/iO5a58Hnlgi8Yx46NH/6 VADc+kDiZDh1YUSM9OAjY8k9Kb8bf90vyulJ1zD4Wos99moKNUxig1G+lWSo8fKo ZWY7WGRNO5rTABs7cUbzOONMTa9z2eh9rxvmuJgtPZUz/LzrD9hTVt9igGO8w/tw oRFgkyiR1JnWES2zr4ohHotnlOjgbv1j6lqGSZeKpA9NpL6gi67JfvOP5awXoxP0 JteHwnH5Lybjthx18z8YnHhgksR3EeM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:50:23 2026 by rpki-client