$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa File: 8936a13d-455f-353e-841a-22653a65c03b.roa (raw, json) Hash identifier: KG1OszsHBz5RXKpJrOjVxTjcGDIwbSmSwOYqbrq/ce0= Subject key identifier: E9:A7:E6:71:68:6A:49:25:65:0F:91:7B:E1:F7:06:4B:6D:2C:A1:A3 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0ED24201C7D9224A00066300 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.91.90.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:42:01:c7:d9:22:4a:00:06:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=4172349a-ed7a-4986-8617-fcabdbc48bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:24:6b:01:75:9a:90:44:c6:95:ab:ed:29:d7: 39:60:ae:03:27:81:57:69:72:90:e0:ea:e0:e7:ea: 37:75:4a:56:d7:b4:7f:d8:ab:d4:b5:e9:f9:d3:24: 27:d9:9f:ee:34:5b:9d:87:be:b0:72:39:81:3f:55: 7f:fa:7f:a3:7c:5e:dc:05:ae:93:1e:c8:4e:66:df: 91:eb:f9:1d:c4:51:77:93:4d:36:d4:3b:97:e5:23: 74:ab:ca:a2:3e:8f:88:1d:94:b6:7f:73:27:92:c5: 82:69:a3:e4:2a:3d:85:a8:d9:d7:ef:a3:9c:45:26: 31:8b:84:46:59:6c:f6:56:a1:d5:5c:f8:9a:0b:c9: 27:55:bf:be:60:68:76:87:a2:27:ad:1d:b8:29:39: 0c:7c:35:ec:a0:85:72:35:9e:bc:c0:0a:13:8d:72: 82:9f:96:32:70:5b:1d:36:ed:91:5e:50:22:6d:2a: db:b7:b1:7c:7a:f6:c4:c0:1e:aa:0f:4b:11:14:70: 55:d7:62:01:5d:25:60:19:56:24:10:3a:da:33:a1: cc:27:22:8a:d8:b0:ab:4a:b7:af:9b:97:51:e3:9a: fb:cf:e7:62:6b:78:69:de:a0:c0:83:38:be:84:04: 4c:e3:d0:96:b5:ea:43:35:2c:c7:b8:9c:31:e1:ee: c5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A7:E6:71:68:6A:49:25:65:0F:91:7B:E1:F7:06:4B:6D:2C:A1:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8936a13d-455f-353e-841a-22653a65c03b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:9b:3f:16:26:ab:fb:17:dd:88:64:1d:cf:69:84:ad:8e:cf: 2b:f8:c2:84:5c:52:a2:a7:24:56:0a:1c:63:75:70:b6:16:3f: 4f:56:1b:44:ab:9c:d8:72:54:e4:ea:0e:6f:48:d7:f4:79:0b: 52:50:1f:23:b8:7a:80:13:62:cf:b9:87:ec:72:a3:42:98:c4: 70:3c:90:ba:5a:4b:0f:6b:5e:28:1c:55:5d:b1:20:9f:61:b2: 91:22:f2:e5:ba:b7:84:f5:89:98:eb:2a:6b:5f:22:1f:d0:8e: f3:ec:9a:a7:d6:1d:79:58:1f:af:5b:9e:e3:98:43:03:16:47: ae:4e:e8:35:60:0e:60:b4:af:09:15:aa:64:32:35:2c:90:a8: 96:52:bd:df:b9:b1:d1:57:fe:65:88:e0:60:09:8f:01:fb:e0: c0:d9:58:71:a9:9d:7f:42:ae:6d:11:91:31:ca:ba:c1:e6:bf: e8:b3:d3:29:54:e4:39:c4:aa:f3:78:7b:af:fd:3f:03:29:94: 1c:1e:de:72:59:9a:43:d2:24:82:44:e4:22:be:d8:2b:2b:c4: 8c:92:8c:8f:83:f3:26:c5:ca:59:54:1f:08:ff:7b:8b:0c:f8: bb:03:d6:69:42:ca:8f:91:76:cb:d5:ca:6f:c5:03:ed:fe:56: db:c1:bb:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kIBx9kiSgAGYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk NDE3MjM0OWEtZWQ3YS00OTg2LTg2MTctZmNhYmRiYzQ4YmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSRrAXWakETGlavtKdc5YK4DJ4FXaXKQ4Org 5+o3dUpW17R/2KvUten50yQn2Z/uNFudh76wcjmBP1V/+n+jfF7cBa6THshOZt+R 6/kdxFF3k0021DuX5SN0q8qiPo+IHZS2f3MnksWCaaPkKj2FqNnX76OcRSYxi4RG WWz2VqHVXPiaC8knVb++YGh2h6InrR24KTkMfDXsoIVyNZ68wAoTjXKCn5YycFsd Nu2RXlAibSrbt7F8evbEwB6qD0sRFHBV12IBXSVgGVYkEDraM6HMJyKK2LCrSrev m5dR45r7z+dia3hp3qDAgzi+hARM49CWtepDNSzHuJwx4e7FkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmn5nFoakklZQ+Re+H3BkttLKGjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvODkzNmExM2QtNDU1Zi0z NTNlLTg0MWEtMjI2NTNhNjVjMDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWbPxYmq/sX3YhkHc9phK2Ozyv4woRcUqKnJFYKHGN1cLYWP09WG0Sr nNhyVOTqDm9I1/R5C1JQHyO4eoATYs+5h+xyo0KYxHA8kLpaSw9rXigcVV2xIJ9h spEi8uW6t4T1iZjrKmtfIh/QjvPsmqfWHXlYH69bnuOYQwMWR65O6DVgDmC0rwkV qmQyNSyQqJZSvd+5sdFX/mWI4GAJjwH74MDZWHGpnX9Crm0RkTHKusHmv+iz0ylU 5DnEqvN4e6/9PwMplBwe3nJZmkPSJIJE5CK+2CsrxIySjI+D8ybFyllUHwj/e4sM +LsD1mlCyo+RdsvVym/FA+3+VtvBux8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:17:54 2026 by rpki-client