$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa File: 2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa (raw, json) Hash identifier: kOuuDXrv9LUTfpUcawIqxInjz7D/FrcnUxYmT3NxGe8= Subject key identifier: A3:77:5D:E9:AA:32:72:2A:A4:CD:2F:6D:AE:06:B0:49:AC:73:5F:84 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0ED231F86DEAD0BDA09BED00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.91.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:31:f8:6d:ea:d0:bd:a0:9b:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=fb871cf2-798e-40c8-8169-c729da516dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:b1:f0:f6:f5:88:2a:bc:16:fe:61:d5:5b: 46:d5:ef:58:ce:d2:36:14:d2:07:e3:eb:76:da:6c: b6:66:ce:ab:b0:45:6b:09:32:a0:8d:1d:63:8f:c0: 4f:b2:3c:5e:b7:d2:ab:e0:ca:16:c9:1f:17:0f:33: df:68:c1:74:75:18:3b:22:50:ef:72:01:0b:77:60: 9b:41:04:fe:ad:70:fd:73:fd:f9:95:af:c8:ce:3d: 82:d3:17:4c:7f:3a:68:9f:1c:f2:5f:27:09:26:24: 56:e5:e8:1e:d9:e6:8b:64:8f:44:70:51:67:72:a8: 4a:e1:c3:1e:c4:8c:fd:28:f2:83:86:51:ca:87:8d: 17:d2:e0:b0:b0:4b:2f:00:20:2a:16:4e:80:d7:63: 5e:70:91:4f:6a:c8:b7:e6:5d:8c:c9:f0:78:a1:2b: 4a:c3:af:d8:0d:af:48:37:4a:51:ff:e1:c6:f5:72: d9:fa:17:bc:b6:71:b7:46:99:37:4e:53:d2:28:64: 8e:a8:1f:6d:40:c0:99:cf:82:ee:84:bf:4b:25:cf: 00:b1:53:02:17:2b:8f:c2:8a:9f:9c:bb:ec:61:ff: 3b:e5:4a:ea:17:2b:80:c5:ab:e0:cf:3c:05:a9:65: b8:9e:c3:82:1e:c2:1e:e8:b1:e6:ef:e0:c9:0b:3e: cd:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:77:5D:E9:AA:32:72:2A:A4:CD:2F:6D:AE:06:B0:49:AC:73:5F:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2591e8ad-b3c2-32a7-8963-f6a5aa6eacc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:4e:bf:64:6b:57:c3:28:f4:4a:4c:ac:31:bc:25:5c:94:6d: da:1f:a1:72:4c:f4:dc:0f:0d:33:14:0c:f1:19:21:4c:c0:73: 1f:96:72:81:85:0b:9a:9e:a1:bd:36:c9:c2:db:6d:52:3c:5b: b4:8e:32:cd:4b:08:6a:cb:e0:2a:ca:b8:4a:74:3d:d4:9b:3f: 36:35:cc:41:19:e7:31:e0:7a:25:1c:c8:6b:0d:1d:ff:7b:12: 4f:ac:67:c5:d8:62:95:e4:cb:7a:62:5b:f2:b4:dc:68:8a:19: a3:2b:d9:fe:2c:ae:bc:53:bc:8e:01:15:a2:01:cb:60:57:3a: e6:c2:f7:ad:a9:5a:59:57:06:b0:b0:bc:69:bf:78:68:59:f2: f7:0e:c8:ee:5c:eb:54:b1:84:06:26:ce:d1:a6:44:10:d0:9d: ff:fc:ae:57:0a:3d:7b:86:2f:2d:86:a1:0c:f6:24:6f:ab:e0: 28:3d:17:9d:e4:c7:ea:86:5c:c6:f0:64:0c:8e:cf:56:10:72: 15:9b:c0:bc:b4:ae:cc:bf:3d:10:a1:7b:45:23:66:da:c5:48: 44:3a:89:d3:70:bb:aa:3c:10:77:3d:80:62:65:d1:6d:67:6a: 65:17:ef:87:7e:21:36:76:5f:80:84:b6:e2:4d:ed:72:76:fa: f9:59:bd:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0jH4berQvaCb7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZmI4NzFjZjItNzk4ZS00MGM4LTgxNjktYzcyOWRhNTE2ZGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpKx8Pb1iCq8Fv5h1VtG1e9YztI2FNIH4+t2 2my2Zs6rsEVrCTKgjR1jj8BPsjxet9Kr4MoWyR8XDzPfaMF0dRg7IlDvcgELd2Cb QQT+rXD9c/35la/Izj2C0xdMfzponxzyXycJJiRW5ege2eaLZI9EcFFncqhK4cMe xIz9KPKDhlHKh40X0uCwsEsvACAqFk6A12NecJFPasi35l2MyfB4oStKw6/YDa9I N0pR/+HG9XLZ+he8tnG3Rpk3TlPSKGSOqB9tQMCZz4LuhL9LJc8AsVMCFyuPwoqf nLvsYf875UrqFyuAxavgzzwFqWW4nsOCHsIe6LHm7+DJCz7NBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKN3XemqMnIqpM0vba4GsEmsc1+EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjU5MWU4YWQtYjNjMi0z MmE3LTg5NjMtZjZhNWFhNmVhY2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpOv2RrV8Mo9EpMrDG8JVyUbdofoXJM9NwPDTMUDPEZIUzAcx+WcoGF C5qeob02ycLbbVI8W7SOMs1LCGrL4CrKuEp0PdSbPzY1zEEZ5zHgeiUcyGsNHf97 Ek+sZ8XYYpXky3piW/K03GiKGaMr2f4srrxTvI4BFaIBy2BXOubC962pWllXBrCw vGm/eGhZ8vcOyO5c61SxhAYmztGmRBDQnf/8rlcKPXuGLy2GoQz2JG+r4Cg9F53k x+qGXMbwZAyOz1YQchWbwLy0rsy/PRChe0UjZtrFSEQ6idNwu6o8EHc9gGJl0W1n amUX74d+ITZ2X4CEtuJN7XJ2+vlZvRA= -----END CERTIFICATE-----Generated at Sun Oct 11 03:50:34 2026 by rpki-client