$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61ad5ff4-921e-3165-86a2-1946844a2f6e.roa File: 61ad5ff4-921e-3165-86a2-1946844a2f6e.roa (raw, json) Hash identifier: JEcYXtRaA/FiAXHlI0ctYuPNAkvgzpS9xOo2WiDkY9k= Subject key identifier: C2:5B:1D:16:44:FC:C3:1B:52:17:89:7D:83:D8:CE:DC:74:06:43:D8 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE3729F5A4962D3A4BA60 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61ad5ff4-921e-3165-86a2-1946844a2f6e.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e3:72:9f:5a:49:62:d3:a4:ba:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=d857e611-5812-4df0-bb59-2b00a47aa2cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:a8:f9:89:b0:39:ea:39:6a:c8:91:c2:a2: 7c:4e:82:eb:11:a6:c6:93:d0:67:79:81:a3:bb:e0: 9b:17:fa:19:1f:60:00:b5:eb:38:7c:97:d4:ad:b2: d8:ad:d4:63:c8:82:ea:43:c8:b3:01:20:9e:04:d3: d8:14:ba:10:3f:91:f3:62:4c:a1:85:08:3c:9c:d0: 83:ab:af:41:d7:e5:0f:94:f3:95:7c:90:4d:d2:4d: 8a:f8:f7:b6:0f:51:36:a4:6e:04:38:b8:b2:e2:38: a1:3c:f3:a0:c4:0e:8f:3e:77:83:7e:60:f8:d1:a8: 82:ea:f4:f5:e0:95:18:4f:b1:9e:24:f6:01:da:89: 9b:aa:45:2a:df:ab:fe:fe:c9:2f:d5:45:1e:f7:d8: 67:19:70:e7:b2:63:f1:89:49:6e:36:40:34:47:00: 85:f4:64:eb:ad:3b:ec:23:21:e3:d7:d0:fc:95:1a: d0:28:84:93:c0:9f:8e:43:50:44:02:2d:02:5a:ca: ba:fb:8b:15:1b:1e:77:93:c1:45:b0:ea:52:46:3f: a9:79:b1:57:fd:3e:8b:ef:81:d0:fc:3e:79:20:97: 52:9e:10:13:23:23:fd:7e:86:ad:03:7f:72:20:60: a9:8f:a7:23:99:27:fa:93:41:ed:77:0a:1f:91:81: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5B:1D:16:44:FC:C3:1B:52:17:89:7D:83:D8:CE:DC:74:06:43:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/61ad5ff4-921e-3165-86a2-1946844a2f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:20:e3:8b:66:20:92:0f:ab:47:19:e5:6d:33:84:4e:ab:8b: 45:cf:4f:d5:04:9a:92:48:4d:d2:03:a8:12:ca:f6:77:4e:da: 56:71:02:27:81:ac:1d:50:ae:e5:d4:c5:0b:ef:e0:f4:e0:2d: 13:84:ba:43:9c:11:96:38:91:3e:00:a2:26:fd:09:4c:e1:e8: c7:5b:b9:8d:ee:65:05:19:67:c7:2c:82:80:ab:91:56:ae:92: 66:23:1f:27:a2:e9:c8:dd:8f:14:39:21:28:82:85:c6:29:3b: e5:9e:5d:16:fd:88:54:02:cb:a4:83:da:14:58:b5:b5:cd:0d: 4e:db:4f:1b:af:ab:3a:ce:c4:1e:30:41:d3:0f:a5:ea:be:8f: 44:89:64:6d:4a:fd:4a:c5:37:68:d4:35:ba:21:6f:4c:00:14: 72:ea:f5:ed:9f:6c:af:59:94:5c:84:a5:a9:45:86:34:bb:2c: e1:31:90:33:11:35:2f:f5:55:25:bc:05:55:ca:58:1d:c3:6d: dc:71:29:b1:74:8a:b0:a2:dc:f1:ff:34:67:cb:01:fe:d6:6d: de:89:da:1c:44:5f:2b:d5:0b:16:8d:4e:51:82:82:72:ac:c9: d8:26:ae:2e:ca:cf:f3:11:1e:1f:35:29:ed:2b:31:da:4a:d6: d6:55:43:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbONyn1pJYtOkumAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZDg1N2U2MTEtNTgxMi00ZGYwLWJiNTktMmIwMGE0N2FhMmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcKo+YmwOeo5asiRwqJ8ToLrEabGk9BneYGj u+CbF/oZH2AAtes4fJfUrbLYrdRjyILqQ8izASCeBNPYFLoQP5HzYkyhhQg8nNCD q69B1+UPlPOVfJBN0k2K+Pe2D1E2pG4EOLiy4jihPPOgxA6PPneDfmD40aiC6vT1 4JUYT7GeJPYB2ombqkUq36v+/skv1UUe99hnGXDnsmPxiUluNkA0RwCF9GTrrTvs IyHj19D8lRrQKISTwJ+OQ1BEAi0CWsq6+4sVGx53k8FFsOpSRj+pebFX/T6L74HQ /D55IJdSnhATIyP9foatA39yIGCpj6cjmSf6k0HtdwofkYFPIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJbHRZE/MMbUheJfYPYztx0BkPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjFhZDVmZjQtOTIxZS0z MTY1LTg2YTItMTk0Njg0NGEyZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFv4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkg44tmIJIPq0cZ5W0zhE6ri0XPT9UEmpJITdIDqBLK9ndO2lZxAieB rB1QruXUxQvv4PTgLROEukOcEZY4kT4Aoib9CUzh6MdbuY3uZQUZZ8csgoCrkVau kmYjHyei6cjdjxQ5ISiChcYpO+WeXRb9iFQCy6SD2hRYtbXNDU7bTxuvqzrOxB4w QdMPpeq+j0SJZG1K/UrFN2jUNbohb0wAFHLq9e2fbK9ZlFyEpalFhjS7LOExkDMR NS/1VSW8BVXKWB3DbdxxKbF0irCi3PH/NGfLAf7Wbd6J2hxEXyvVCxaNTlGCgnKs ydgmri7Kz/MRHh81Ke0rMdpK1tZVQ3s= -----END CERTIFICATE-----Generated at Tue Sep 22 19:07:23 2026 by rpki-client