$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa File: 8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa (raw, json) Hash identifier: bDsoeWmpgE8RkAqmHjqxLZDp3J8jHMqXxDHx1Vn9hJg= Subject key identifier: 27:43:6A:89:7D:2B:59:1E:D5:01:F8:EF:B1:A4:AB:75:65:D5:A0:36 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F10379E03A7D25004818E7C80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:9e:03:a7:d2:50:04:81:8e:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=9a6a545a-e5b2-4ce8-ab7e-216764a0a64b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:ee:26:99:72:89:cc:db:82:ad:66:80:45: 86:36:9d:2e:27:3a:34:54:cc:93:47:c9:43:22:b6: 2c:86:fa:c7:b9:5e:40:7f:f6:cb:b6:e6:89:34:1e: 8a:e9:60:d0:b5:64:1e:4d:f9:03:43:43:b0:62:00: 99:6c:68:21:a6:32:4b:51:35:4d:f5:c7:2e:cf:a3: 93:99:79:95:82:cf:e5:ef:01:64:8f:fc:44:2f:f0: dc:48:7b:f9:d5:ac:64:07:0f:22:f3:fe:7f:87:4f: 7e:78:fa:a5:00:3c:72:e5:bd:ff:c1:31:09:7c:65: 6c:e0:09:2e:f7:48:66:cc:51:34:9f:7e:05:5a:61: 0c:86:dd:d8:d0:34:c3:a1:7a:e1:9f:e5:45:f0:ef: 3d:c9:89:8e:e7:4f:02:2d:17:50:2d:1f:f5:42:25: 46:89:31:e1:3b:87:c8:29:10:14:09:77:90:86:7c: d9:da:15:4e:6d:05:83:8a:da:c9:2b:38:e6:45:16: d6:e0:45:2f:54:08:d2:9f:84:d8:91:75:c6:62:14: a8:c4:3c:71:02:60:f4:b8:02:96:20:57:3c:2e:55: a3:21:39:be:0e:b9:30:b3:3c:42:a4:44:9d:78:20: 4a:bc:12:8a:0b:0f:fd:b8:c7:e1:f3:23:04:ba:1d: 35:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:6A:89:7D:2B:59:1E:D5:01:F8:EF:B1:A4:AB:75:65:D5:A0:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8796e0f3-36f2-34d2-9373-1fd4e4220c7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:39:a3:68:8f:23:60:84:05:78:1d:49:19:fa:88:94:71:75: 76:13:1d:c1:67:30:d1:25:25:5e:20:28:05:ae:ce:b0:b0:09: c8:df:15:37:5c:cb:4e:4c:d5:29:f5:19:31:69:90:47:95:9e: 1e:1b:35:76:16:15:3c:4d:fe:74:e5:56:d5:d6:2e:a4:c7:0a: 86:94:e9:91:65:4a:e5:c8:c7:bf:64:03:66:f9:95:45:f0:e1: d4:00:6a:54:d5:d6:f7:8a:d8:c8:57:53:f8:b4:48:54:0d:5e: 8f:fb:76:80:b9:c1:b2:be:0d:86:20:65:fd:ac:04:bb:7a:91: 29:95:b9:79:73:1b:34:8d:c4:80:a0:c9:32:bf:54:ca:c5:7b: 95:76:15:d4:63:ca:bd:0f:9b:de:f0:c9:a5:de:fe:d3:a2:8a: eb:8f:4b:22:8e:98:93:1f:53:ed:37:0e:b1:2f:77:92:bb:fa: 41:d8:f7:ff:31:51:fc:71:1a:e8:b6:5d:af:c7:d2:c0:56:45: ea:e1:9a:ea:ad:88:d5:ed:fa:da:8a:a8:16:4a:e0:0f:97:d4: 83:61:61:20:51:1a:60:70:74:a6:e1:6f:94:39:e0:e9:95:ab: a5:b0:1a:13:8d:42:6c:af:38:89:84:a2:6a:2b:4a:27:10:8c: 30:b5:91:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN54Dp9JQBIGOfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk OWE2YTU0NWEtZTViMi00Y2U4LWFiN2UtMjE2NzY0YTBhNjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCzuJplyiczbgq1mgEWGNp0uJzo0VMyTR8lD IrYshvrHuV5Af/bLtuaJNB6K6WDQtWQeTfkDQ0OwYgCZbGghpjJLUTVN9ccuz6OT mXmVgs/l7wFkj/xEL/DcSHv51axkBw8i8/5/h09+ePqlADxy5b3/wTEJfGVs4Aku 90hmzFE0n34FWmEMht3Y0DTDoXrhn+VF8O89yYmO508CLRdQLR/1QiVGiTHhO4fI KRAUCXeQhnzZ2hVObQWDitrJKzjmRRbW4EUvVAjSn4TYkXXGYhSoxDxxAmD0uAKW IFc8LlWjITm+DrkwszxCpESdeCBKvBKKCw/9uMfh8yMEuh01mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdDaol9K1ke1QH477Gkq3Vl1aA2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODc5NmUwZjMtMzZmMi0z NGQyLTkzNzMtMWZkNGU0MjIwYzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI05o2iPI2CEBXgdSRn6iJRxdXYTHcFnMNElJV4gKAWuzrCwCcjfFTdc y05M1Sn1GTFpkEeVnh4bNXYWFTxN/nTlVtXWLqTHCoaU6ZFlSuXIx79kA2b5lUXw 4dQAalTV1veK2MhXU/i0SFQNXo/7doC5wbK+DYYgZf2sBLt6kSmVuXlzGzSNxICg yTK/VMrFe5V2FdRjyr0Pm97wyaXe/tOiiuuPSyKOmJMfU+03DrEvd5K7+kHY9/8x UfxxGui2Xa/H0sBWRerhmuqtiNXt+tqKqBZK4A+X1INhYSBRGmBwdKbhb5Q54OmV q6WwGhONQmyvOImEomorSicQjDC1kUw= -----END CERTIFICATE-----Generated at Sun Sep 20 23:16:16 2026 by rpki-client