$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa File: 864760ea-664f-3545-b87d-96e88c28d43c.roa (raw, json) Hash identifier: g1TxNp0PAz9sPyMAPpo+tO4bxJSVf2xBTxSFBr6hz34= Subject key identifier: 96:F7:22:CB:00:BD:4B:02:5A:AB:74:02:ED:B4:9D:0A:92:7C:4E:A6 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CCC6B3E736D8105614F00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.204.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:cc:6b:3e:73:6d:81:05:61:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=b885e15e-d691-4101-962c-02572c60ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:67:3f:e3:e9:78:38:c1:66:51:8b:4a:4a:39: 80:54:e0:06:6c:d8:12:ec:33:4e:77:40:f0:74:e7: 7a:bc:57:27:e3:90:ad:bd:a6:49:d7:37:3d:82:79: 74:f6:20:1b:a8:e3:69:dc:db:65:f4:fd:e3:dd:a3: 89:d6:9f:a8:22:02:27:83:d7:9e:da:03:57:72:5e: cb:1d:a2:5d:eb:e9:25:ca:3b:39:b4:92:ce:37:5e: d0:06:d9:a5:d4:cd:9b:66:0f:e5:bb:83:4c:0f:34: 06:08:fe:6c:b1:6b:57:0f:bf:75:9a:53:34:ec:f6: e0:c2:d6:21:39:fd:cb:34:4b:9b:16:5e:a4:76:29: a3:69:f0:a9:38:fb:a3:b0:8a:7b:c5:b4:1a:c7:2f: 2f:83:c3:4d:9c:d4:9e:c0:0f:ff:38:53:f2:e1:ee: be:3f:a9:e1:9c:d1:d2:78:12:bb:d0:21:04:a7:5d: 45:ac:a3:c2:26:e6:0a:45:12:da:76:96:98:24:9c: aa:23:44:0d:3a:7c:b9:fd:91:7e:f5:9b:33:c7:6d: cd:ec:93:18:a3:5a:ad:33:f4:b1:ad:a0:b4:22:48: d4:9f:ab:42:34:96:3b:d1:86:a1:c6:5b:ab:b7:fd: 46:17:fc:78:8a:c1:43:19:be:18:21:19:67:25:7f: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F7:22:CB:00:BD:4B:02:5A:AB:74:02:ED:B4:9D:0A:92:7C:4E:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/864760ea-664f-3545-b87d-96e88c28d43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4e:69:ed:d3:64:9c:06:ec:0f:a3:77:ac:9d:89:96:4b:74: ff:07:5f:af:05:66:e0:50:e6:5c:3e:99:06:14:50:07:52:b8: 25:35:db:94:f7:c6:d1:ce:d2:37:4e:23:51:d7:df:af:cb:8b: fe:d0:90:55:19:6c:3f:d6:ee:b9:f5:4b:fa:c1:05:35:4e:4c: 7e:4e:f2:b9:b4:fa:08:c4:fb:78:13:45:da:12:e2:9a:f2:bf: 83:2d:3e:80:14:7c:1c:fa:cd:c1:1a:68:6c:e0:6e:fb:e1:22: bb:81:66:8f:37:fb:36:f2:5a:ba:c2:a3:33:bb:ff:9e:ba:a3: 11:e3:e9:04:57:1c:66:f9:a3:96:f3:9b:d5:8f:ac:a4:7f:d2: 2d:00:0c:4a:19:89:41:7d:50:3b:33:71:93:21:ff:44:c1:f4: 72:bb:55:5b:ba:c6:41:8d:6c:e6:5c:71:2e:71:63:e3:5e:eb: ca:f5:2a:61:5f:0d:21:2d:73:f2:73:c8:13:42:e1:97:65:26: 29:b9:04:b1:db:b5:20:54:79:56:e6:96:58:db:2f:b3:e6:e1: 66:a8:59:f3:bc:87:43:6a:12:22:09:e7:19:fe:72:73:57:0e: 77:18:69:4d:38:2d:fa:4b:78:84:40:ef:ec:2e:99:b9:e4:0c: 0e:2a:08:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPMxrPnNtgQVhTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk Yjg4NWUxNWUtZDY5MS00MTAxLTk2MmMtMDI1NzJjNjBlZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2c/4+l4OMFmUYtKSjmAVOAGbNgS7DNOd0Dw dOd6vFcn45CtvaZJ1zc9gnl09iAbqONp3Ntl9P3j3aOJ1p+oIgIng9ee2gNXcl7L HaJd6+klyjs5tJLON17QBtml1M2bZg/lu4NMDzQGCP5ssWtXD791mlM07PbgwtYh Of3LNEubFl6kdimjafCpOPujsIp7xbQaxy8vg8NNnNSewA//OFPy4e6+P6nhnNHS eBK70CEEp11FrKPCJuYKRRLadpaYJJyqI0QNOny5/ZF+9Zszx23N7JMYo1qtM/Sx raC0IkjUn6tCNJY70Yahxlurt/1GF/x4isFDGb4YIRlnJX89rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJb3IssAvUsCWqt0Au20nQqSfE6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODY0NzYwZWEtNjY0Zi0z NTQ1LWI4N2QtOTZlODhjMjhkNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMx2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJOae3TZJwG7A+jd6ydiZZLdP8HX68FZuBQ5lw+mQYUUAdSuCU125T3 xtHO0jdOI1HX36/Li/7QkFUZbD/W7rn1S/rBBTVOTH5O8rm0+gjE+3gTRdoS4pry v4MtPoAUfBz6zcEaaGzgbvvhIruBZo83+zbyWrrCozO7/566oxHj6QRXHGb5o5bz m9WPrKR/0i0ADEoZiUF9UDszcZMh/0TB9HK7VVu6xkGNbOZccS5xY+Ne68r1KmFf DSEtc/JzyBNC4ZdlJim5BLHbtSBUeVbmlljbL7Pm4WaoWfO8h0NqEiIJ5xn+cnNX DncYaU04LfpLeIRA7+wumbnkDA4qCGI= -----END CERTIFICATE-----Generated at Tue Sep 22 19:05:25 2026 by rpki-client