$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c29440-b4c7-3b87-a043-1fbb06e72564.roa File: 87c29440-b4c7-3b87-a043-1fbb06e72564.roa (raw, json) Hash identifier: hycLfO6dj9mAZ7J9x1fd5MO5P1a/lleyWenIcCbn1AQ= Subject key identifier: B8:7E:47:54:0F:82:64:53:44:75:50:70:54:9A:3A:56:DF:BF:92:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CD36EA3A9C1CA2CD461A0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c29440-b4c7-3b87-a043-1fbb06e72564.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.245.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d3:6e:a3:a9:c1:ca:2c:d4:61:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=f48235ec-d9c9-4e10-9e76-0761f3349521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:eb:28:2f:a6:dd:3c:f8:9f:d9:f8:5f:70: 22:8f:34:15:fe:c7:4d:ba:12:f2:ef:59:1a:10:71: e3:3c:cb:10:93:e0:67:1a:63:88:9b:bc:3a:e7:39: 8f:c7:94:12:67:3d:18:84:9b:d3:fb:b0:35:a9:84: 7e:ed:8d:4d:d8:63:83:89:7b:9c:eb:cf:bc:8f:7a: 18:99:81:68:2e:af:26:21:b8:8f:2f:0b:81:62:92: de:37:44:c4:4e:9e:e8:b4:ed:2f:25:9a:d0:1b:e4: b5:35:17:5e:16:b0:52:04:bb:97:40:b2:ba:a3:16: a6:a0:0a:b3:18:4d:06:f6:21:c4:d8:fc:e1:e6:83: 7d:75:13:8e:f5:91:dc:25:90:30:d1:f9:2c:a6:5a: 1d:fe:2e:99:c3:b8:c4:52:a1:97:0c:7e:1f:49:31: 91:12:5b:dc:a5:6d:cb:7e:59:ca:fe:4f:fa:be:67: 8e:f9:d1:80:56:1b:aa:f1:cd:19:ca:8c:e1:44:07: da:85:47:f7:1b:6c:fd:b2:4a:a3:1f:12:1b:97:d1: 6b:d5:6d:ab:6a:93:84:c8:43:f3:8a:d2:5e:2f:e7: c8:0b:c1:34:f9:e6:08:15:38:fb:41:e4:09:3a:4e: ba:5f:ff:2b:8c:1a:c3:10:28:07:4a:3d:7d:21:c2: 5d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7E:47:54:0F:82:64:53:44:75:50:70:54:9A:3A:56:DF:BF:92:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87c29440-b4c7-3b87-a043-1fbb06e72564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.245.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:28:4f:84:7a:04:46:90:c3:3a:e9:74:6c:0e:e3:7f:02:e7: 53:a6:09:38:fc:46:bf:9a:ee:31:05:07:08:58:b3:38:7b:7f: e0:ac:5d:fa:dd:0d:f9:70:10:3b:d2:c5:89:33:6f:81:e4:38: 30:20:e5:ce:c1:82:2c:e2:cf:37:d0:bf:a5:69:96:6c:9c:db: 91:10:50:77:d5:84:2d:e2:1e:b5:6f:67:c8:d8:d2:60:a4:2a: 60:06:92:77:68:3c:ba:27:5c:48:8c:e6:7e:29:58:53:f7:db: 3c:d3:97:df:37:a8:69:e3:f0:ca:bd:99:d3:93:a8:94:c5:41: 87:87:cd:62:3e:f5:68:75:1a:13:28:f8:61:86:a2:2c:bc:ec: 1c:d4:54:92:e2:46:05:cb:82:0b:3e:4d:37:f3:36:95:bc:d3: 6e:19:f3:6b:31:ee:f5:4b:ea:98:20:35:6f:55:7f:26:d6:cb: 8e:0a:87:ab:03:32:d1:a2:29:e8:d9:59:2c:22:dc:39:e3:93: b6:a4:62:0b:c7:16:de:09:55:60:3b:d8:53:e2:9a:03:97:b3: 41:3d:07:f0:cd:58:e3:4b:29:b1:19:f1:63:61:f2:d2:7d:18: c9:20:a0:be:4b:21:d0:a6:48:8b:39:bc:c6:40:d2:ee:e0:c6: 5f:b3:15:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNNuo6nByizUYaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ZjQ4MjM1ZWMtZDljOS00ZTEwLTllNzYtMDc2MWYzMzQ5NTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs33rKC+m3Tz4n9n4X3AijzQV/sdNuhLy71ka EHHjPMsQk+BnGmOIm7w65zmPx5QSZz0YhJvT+7A1qYR+7Y1N2GODiXuc68+8j3oY mYFoLq8mIbiPLwuBYpLeN0TETp7otO0vJZrQG+S1NRdeFrBSBLuXQLK6oxamoAqz GE0G9iHE2Pzh5oN9dROO9ZHcJZAw0fksplod/i6Zw7jEUqGXDH4fSTGRElvcpW3L flnK/k/6vmeO+dGAVhuq8c0ZyozhRAfahUf3G2z9skqjHxIbl9Fr1W2rapOEyEPz itJeL+fIC8E0+eYIFTj7QeQJOk66X/8rjBrDECgHSj19IcJd5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh+R1QPgmRTRHVQcFSaOlbfv5LAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODdjMjk0NDAtYjRjNy0z Yjg3LWEwNDMtMWZiYjA2ZTcyNTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjPVQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUoT4R6BEaQwzrpdGwO438C51OmCTj8Rr+a7jEFBwhYszh7f+CsXfrd DflwEDvSxYkzb4HkODAg5c7BgizizzfQv6Vplmyc25EQUHfVhC3iHrVvZ8jY0mCk KmAGkndoPLonXEiM5n4pWFP32zzTl983qGnj8Mq9mdOTqJTFQYeHzWI+9Wh1GhMo +GGGoiy87BzUVJLiRgXLggs+TTfzNpW8024Z82sx7vVL6pggNW9VfybWy44Kh6sD MtGiKejZWSwi3Dnjk7akYgvHFt4JVWA72FPimgOXs0E9B/DNWONLKbEZ8WNh8tJ9 GMkgoL5LIdCmSIs5vMZA0u7gxl+zFZM= -----END CERTIFICATE-----Generated at Tue Sep 22 00:12:10 2026 by rpki-client