$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa File: 9418af1a-01b2-371f-9a01-d75ddb948f1c.roa (raw, json) Hash identifier: QF18nIBfRbn1ffmGOXEYi9kR2T/IRiuHD/OCjUu0dp8= Subject key identifier: F1:EA:C9:2F:F2:64:E2:40:28:87:07:39:4A:90:02:DE:A1:40:8C:29 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1302377C1D4A6482A5330720 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa Signing time: Sat 05 Sep 2026 13:00:12 +0000 ROA not before: Sat 05 Sep 2026 13:00:12 +0000 ROA not after: Fri 04 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.204.46.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:13:02:37:7c:1d:4a:64:82:a5:33:07:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 13:00:12 2026 GMT Not After : Dec 4 14:00:12 2026 GMT Subject: CN=d95da6d0-df85-438a-b51b-dc10d34340ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:17:84:95:42:c5:09:72:ba:cb:70:5c:ab:e9: 7e:33:b5:da:9e:b8:28:59:34:d3:0d:63:53:06:e3: 11:1b:11:0d:77:3a:01:bb:c5:a1:6a:f7:1f:fe:70: 3a:c2:dc:6a:d5:32:85:d5:6e:92:56:96:81:a0:8a: 21:87:dd:10:13:5e:0d:23:b0:99:18:6d:b4:82:b6: ce:4f:75:4c:65:e5:fa:ac:02:10:ca:df:c7:53:3c: b7:00:63:9a:e4:83:3c:0e:03:a2:23:bf:27:97:ac: 47:38:7f:c6:9d:b9:36:08:b6:a1:9b:72:14:5d:b6: 90:7f:d6:d7:35:6b:29:21:b8:f0:df:d3:25:40:36: 20:d4:38:5c:75:93:35:d5:28:79:08:3b:01:a5:9b: 0c:70:d6:30:e0:3e:ef:3f:2f:59:49:f1:79:e9:1b: d3:6a:89:21:cc:6e:38:65:f5:08:79:fa:ca:fc:f8: 8e:73:5b:a8:be:07:87:87:6f:cc:6f:ca:30:2e:40: 9b:7c:17:e7:29:07:13:30:3a:0b:99:b0:54:59:60: 4e:e9:3f:05:2f:54:27:ac:eb:a1:f8:98:a3:89:10: af:2d:46:e7:fc:a5:51:f0:a5:50:97:a3:57:72:e9: d6:d5:f1:46:6b:cf:a1:6f:31:e0:81:33:70:c8:33: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EA:C9:2F:F2:64:E2:40:28:87:07:39:4A:90:02:DE:A1:40:8C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9418af1a-01b2-371f-9a01-d75ddb948f1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.204.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:57:70:cc:8a:38:cc:94:dd:98:ae:ba:70:ba:dc:b6:fd:4a: 55:5a:bc:bd:a7:c0:8a:d8:84:1f:2a:86:b0:8b:e6:f0:d0:99: 23:e1:da:a4:b1:16:3f:f9:d6:8b:be:61:5a:a1:c3:4f:f0:fb: 95:81:29:71:cc:b6:89:fa:4f:ec:f8:68:cc:84:0d:67:d5:60: e3:92:f4:10:bc:d2:f7:55:ba:99:a0:bd:da:55:aa:15:ca:05: 4f:e5:bd:44:25:96:1c:ad:b7:28:d7:a9:84:6d:f0:c2:58:25: 27:f5:59:ad:55:28:71:fa:25:ee:db:06:a9:03:3d:22:eb:0e: e3:74:2e:7e:d2:7b:d0:81:18:4d:7c:19:ee:9c:63:67:3a:b3: 14:63:78:0c:c6:38:4f:9d:88:8e:e1:5d:d2:89:3f:32:7e:04: b9:3e:9d:c9:9f:ac:0a:de:50:7f:5a:7f:cc:75:e0:75:fd:1f: e8:51:a7:c0:89:52:4c:3c:14:4f:6a:4f:db:0f:82:5c:3a:71: 15:59:61:38:f2:64:dd:b2:79:84:f5:25:92:4a:3c:50:13:18: e5:5e:69:3c:30:15:ac:5e:5c:1c:a5:b8:15:62:bb:e2:c3:9d: f4:d8:9b:66:40:08:3b:f0:d8:a9:a9:5e:bc:db:71:fe:f9:51: 32:48:33:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjd8HUpkgqUzByAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk ZDk1ZGE2ZDAtZGY4NS00MzhhLWI1MWItZGMxMGQzNDM0MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlheElULFCXK6y3Bcq+l+M7XanrgoWTTTDWNT BuMRGxENdzoBu8Whavcf/nA6wtxq1TKF1W6SVpaBoIohh90QE14NI7CZGG20grbO T3VMZeX6rAIQyt/HUzy3AGOa5IM8DgOiI78nl6xHOH/Gnbk2CLahm3IUXbaQf9bX NWspIbjw39MlQDYg1DhcdZM11Sh5CDsBpZsMcNYw4D7vPy9ZSfF56RvTaokhzG44 ZfUIefrK/PiOc1uovgeHh2/Mb8owLkCbfBfnKQcTMDoLmbBUWWBO6T8FL1QnrOuh +JijiRCvLUbn/KVR8KVQl6NXcunW1fFGa8+hbzHggTNwyDNZZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHqyS/yZOJAKIcHOUqQAt6hQIwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTQxOGFmMWEtMDFiMi0z NzFmLTlhMDEtZDc1ZGRiOTQ4ZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjMwuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRXcMyKOMyU3ZiuunC63Lb9SlVavL2nwIrYhB8qhrCL5vDQmSPh2qSx Fj/51ou+YVqhw0/w+5WBKXHMton6T+z4aMyEDWfVYOOS9BC80vdVupmgvdpVqhXK BU/lvUQllhyttyjXqYRt8MJYJSf1Wa1VKHH6Je7bBqkDPSLrDuN0Ln7Se9CBGE18 Ge6cY2c6sxRjeAzGOE+diI7hXdKJPzJ+BLk+ncmfrAreUH9af8x14HX9H+hRp8CJ Ukw8FE9qT9sPglw6cRVZYTjyZN2yeYT1JZJKPFATGOVeaTwwFaxeXByluBViu+LD nfTYm2ZACDvw2KmpXrzbcf75UTJIM4k= -----END CERTIFICATE-----Generated at Tue Sep 22 08:14:52 2026 by rpki-client