$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/087b8491-49cf-3a5b-be23-ed5735753f3c.roa File: 087b8491-49cf-3a5b-be23-ed5735753f3c.roa (raw, json) Hash identifier: 8IvprUuAAiieEc8aJNmxaWrczeWO60nj/ClEQFOmSXc= Subject key identifier: 9D:2E:69:DE:5F:50:BC:BB:CC:4E:A7:50:CB:55:B7:05:30:BC:8A:D6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F11A15A1EF6FA684D0E207380 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/087b8491-49cf-3a5b-be23-ed5735753f3c.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.91.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:5a:1e:f6:fa:68:4d:0e:20:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f49837df-ee65-48a2-9cf4-31650ef828f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:ca:3e:7f:fc:5f:30:0d:f6:52:3a:3a:54: b2:ee:80:b2:b5:a2:f5:49:f3:0d:f5:1c:ba:b6:1f: d5:13:da:d4:f3:72:d9:9a:f7:6c:40:06:f4:82:82: 3e:31:6e:27:ce:a4:fd:ce:14:d9:31:ba:6f:9c:74: 1f:86:e6:fa:c4:76:45:6b:2d:b7:b4:aa:0c:59:1f: 19:fa:52:c3:ad:03:05:21:64:05:1d:c0:66:88:82: 75:4c:ca:d4:39:2f:14:0f:ef:3f:f2:10:dd:d0:e5: eb:91:b6:e6:3f:8f:c9:ba:34:33:24:30:1b:a6:22: 0f:dc:ae:21:10:9d:3a:59:5f:bf:08:d2:d9:c5:d5: 67:a7:00:ba:fc:5d:f7:0c:4a:76:7c:80:66:0d:d9: 31:a4:03:cc:68:fe:80:15:ba:12:f1:10:3e:24:ca: a7:dd:97:d2:1e:26:20:d4:b7:c2:50:e5:a1:a1:f5: 1e:3e:e6:65:af:8f:5e:65:fe:21:a0:17:ea:27:a9: dc:c8:2e:39:c8:e0:9a:19:a4:b1:90:89:5d:eb:05: 4a:cf:38:96:9b:df:f9:32:f8:8e:19:93:f3:45:97: 51:5d:d3:17:af:b3:5c:2d:b9:c2:4a:c1:67:31:39: a9:c0:9f:67:f5:b0:39:df:07:7e:03:f5:d5:be:dd: cf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:2E:69:DE:5F:50:BC:BB:CC:4E:A7:50:CB:55:B7:05:30:BC:8A:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/087b8491-49cf-3a5b-be23-ed5735753f3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f1:ea:88:68:c9:f3:d3:9b:d6:bb:ff:e6:d6:dc:72:a7:fb: dd:20:ee:56:2a:c0:11:18:fa:bd:f6:e5:4e:0d:24:ec:68:d3: 37:31:e7:dc:45:1c:e4:65:69:79:ab:c6:9e:d6:0f:78:2d:64: 83:26:3f:ff:62:10:f4:dd:c2:09:cf:16:37:07:e6:7e:43:53: ee:19:5b:56:fa:de:96:16:08:d7:85:88:ea:ee:67:ea:31:89: 8b:2a:a1:34:3c:4d:b5:bc:55:f1:ea:95:77:9f:ad:85:b4:1b: e3:17:68:65:6f:ca:43:f8:2e:d4:2b:91:04:d1:0e:54:33:c9: bd:db:23:78:e0:0e:12:37:e1:e5:66:3c:7e:be:c3:62:bd:67: 23:89:42:2d:fc:9a:67:7e:a6:43:67:0e:ab:34:c2:5d:80:4c: ad:69:11:b7:eb:24:a4:aa:d7:25:1e:8a:05:5f:c5:d2:3d:94: 4f:4b:9c:ff:04:03:57:71:4a:b1:b9:35:e6:6d:50:88:7d:fe: 31:d0:a0:cb:bf:4a:9b:86:f5:b6:f6:e7:1e:65:d6:c6:5e:99: 2b:fe:51:06:1c:18:ea:2a:66:09:96:d5:ca:f5:9d:5f:e0:71: a0:bc:69:5b:b0:f1:2a:2e:ee:1c:99:26:cf:25:17:31:f0:0c: f3:31:5f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoVoe9vpoTQ4gc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ5ODM3ZGYtZWU2NS00OGEyLTljZjQtMzE2NTBlZjgyOGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYzKPn/8XzAN9lI6OlSy7oCytaL1SfMN9Ry6 th/VE9rU83LZmvdsQAb0goI+MW4nzqT9zhTZMbpvnHQfhub6xHZFay23tKoMWR8Z +lLDrQMFIWQFHcBmiIJ1TMrUOS8UD+8/8hDd0OXrkbbmP4/JujQzJDAbpiIP3K4h EJ06WV+/CNLZxdVnpwC6/F33DEp2fIBmDdkxpAPMaP6AFboS8RA+JMqn3ZfSHiYg 1LfCUOWhofUePuZlr49eZf4hoBfqJ6ncyC45yOCaGaSxkIld6wVKzziWm9/5MviO GZPzRZdRXdMXr7NcLbnCSsFnMTmpwJ9n9bA53wd+A/XVvt3P/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0uad5fULy7zE6nUMtVtwUwvIrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMDg3Yjg0OTEtNDljZi0z YTViLWJlMjMtZWQ1NzM1NzUzZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzx6ohoyfPTm9a7/+bW3HKn+90g7lYqwBEY+r325U4NJOxo0zcx59xF HORlaXmrxp7WD3gtZIMmP/9iEPTdwgnPFjcH5n5DU+4ZW1b63pYWCNeFiOruZ+ox iYsqoTQ8TbW8VfHqlXefrYW0G+MXaGVvykP4LtQrkQTRDlQzyb3bI3jgDhI34eVm PH6+w2K9ZyOJQi38mmd+pkNnDqs0wl2ATK1pEbfrJKSq1yUeigVfxdI9lE9LnP8E A1dxSrG5NeZtUIh9/jHQoMu/SpuG9bb25x5l1sZemSv+UQYcGOoqZgmW1cr1nV/g caC8aVuw8Sou7hyZJs8lFzHwDPMxX9k= -----END CERTIFICATE-----Generated at Tue Sep 22 15:08:13 2026 by rpki-client