$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47a080a6-4d70-3002-920c-2cf1daee6458.roa File: 47a080a6-4d70-3002-920c-2cf1daee6458.roa (raw, json) Hash identifier: HQMqQReDdmiSKYU3PmURhGaZAsYaC28nd7ntx0a9vJ0= Subject key identifier: 7A:EB:4A:4A:38:37:5D:57:BF:E9:0C:DB:C0:3F:E9:EE:1F:64:85:58 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093D13B6A9305F77B16F9640 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47a080a6-4d70-3002-920c-2cf1daee6458.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.238.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3d:13:b6:a9:30:5f:77:b1:6f:96:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=9bd90bf2-bca6-456b-93d7-e96bbf390fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:b6:86:92:4b:c6:38:84:62:5e:1d:42:48: 42:d2:0e:fa:b2:5e:77:fa:77:fb:4c:19:c1:9a:3b: 2e:58:11:55:52:6c:68:16:e6:df:1b:d4:57:25:c8: bb:3e:0d:a2:27:e9:67:8b:39:13:38:92:c8:7f:bf: 98:dc:dc:4a:f4:30:c5:f1:21:9b:31:d6:1f:8a:71: 0c:54:13:c3:f6:62:55:d4:d1:fe:a6:6c:2d:1b:51: f9:63:b9:dc:73:fb:38:24:2c:54:1a:75:16:3d:82: f1:66:4d:ae:1d:e4:04:16:bd:dd:0e:74:17:18:c7: 63:18:e1:bb:ab:61:68:56:b5:98:23:11:b5:cf:58: 6c:c5:66:aa:5c:2d:3c:d7:b9:e6:12:26:66:b6:27: db:3e:01:ce:0c:e9:fe:a2:35:d3:42:50:fb:25:d5: 49:fa:fb:46:db:27:a8:0e:17:ba:ca:52:84:1b:ed: 85:a0:c2:d7:5d:5f:e1:dc:79:9c:38:ea:d9:33:da: b6:f0:da:51:b2:d6:bc:dc:d9:3a:03:e9:aa:fa:67: 0f:ce:31:a3:f0:62:93:3d:ca:11:15:01:c3:6d:30: 65:a9:b7:e6:92:03:3f:8e:6b:bf:32:48:14:27:18: 35:70:44:1f:b1:75:c7:43:68:5c:28:20:04:81:f8: 65:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:4A:4A:38:37:5D:57:BF:E9:0C:DB:C0:3F:E9:EE:1F:64:85:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/47a080a6-4d70-3002-920c-2cf1daee6458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f5:3f:09:db:9b:96:60:4b:87:ee:b7:c7:64:13:cd:c3:42: 3c:4e:47:3e:9c:d7:9b:af:1b:c3:92:9c:0b:e7:31:b2:81:36: d4:b7:71:94:e5:83:62:e6:41:f5:75:39:28:43:ca:27:cc:b4: 3a:50:d9:aa:49:8b:a6:9e:eb:ed:51:75:95:11:67:92:27:f2: 65:85:6e:ca:4f:4b:c2:b0:b0:1b:ad:68:1b:c2:dd:70:9d:e6: c6:55:81:e3:23:f3:2b:74:77:55:45:f8:cc:2c:c3:ec:a5:a1: d7:5a:52:50:a4:2b:55:9a:7b:c9:03:27:8d:ff:d7:f0:b5:51: 6d:a7:aa:2f:0d:b6:de:80:e5:b4:df:07:ec:ac:a7:97:25:df: 0a:c0:98:59:d6:e1:9e:bd:af:e3:46:ca:f2:9b:3b:bc:1b:c2: c1:54:04:11:e3:a5:03:b2:fb:27:4a:a3:86:e7:98:fc:42:83: 82:e5:f9:f0:ac:62:9c:28:20:9b:3c:4e:d0:af:58:31:bf:a5: 51:41:a8:72:7a:19:1c:16:25:d2:61:de:e3:65:b4:e7:ce:09: c4:a1:97:1d:6a:85:ef:d6:e7:37:5b:ce:b3:f2:d4:b4:e8:e9: b4:de:09:a8:4f:48:0b:63:de:a7:42:76:df:1d:ec:68:dd:61: a4:6b:7c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPRO2qTBfd7FvlkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OWJkOTBiZjItYmNhNi00NTZiLTkzZDctZTk2YmJmMzkwZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUu2hpJLxjiEYl4dQkhC0g76sl53+nf7TBnB mjsuWBFVUmxoFubfG9RXJci7Pg2iJ+lnizkTOJLIf7+Y3NxK9DDF8SGbMdYfinEM VBPD9mJV1NH+pmwtG1H5Y7ncc/s4JCxUGnUWPYLxZk2uHeQEFr3dDnQXGMdjGOG7 q2FoVrWYIxG1z1hsxWaqXC0817nmEiZmtifbPgHODOn+ojXTQlD7JdVJ+vtG2yeo Dhe6ylKEG+2FoMLXXV/h3HmcOOrZM9q28NpRsta83Nk6A+mq+mcPzjGj8GKTPcoR FQHDbTBlqbfmkgM/jmu/MkgUJxg1cEQfsXXHQ2hcKCAEgfhlZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrrSko4N11Xv+kM28A/6e4fZIVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDdhMDgwYTYtNGQ3MC0z MDAyLTkyMGMtMmNmMWRhZWU2NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj1Pwnbm5ZgS4fut8dkE83DQjxORz6c15uvG8OSnAvnMbKBNtS3cZTl g2LmQfV1OShDyifMtDpQ2apJi6ae6+1RdZURZ5In8mWFbspPS8KwsButaBvC3XCd 5sZVgeMj8yt0d1VF+Mwsw+yloddaUlCkK1Wae8kDJ43/1/C1UW2nqi8Ntt6A5bTf B+ysp5cl3wrAmFnW4Z69r+NGyvKbO7wbwsFUBBHjpQOy+ydKo4bnmPxCg4Ll+fCs YpwoIJs8TtCvWDG/pVFBqHJ6GRwWJdJh3uNltOfOCcShlx1qhe/W5zdbzrPy1LTo 6bTeCahPSAtj3qdCdt8d7GjdYaRrfPc= -----END CERTIFICATE-----Generated at Mon Sep 21 04:18:09 2026 by rpki-client