$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7605494-21f3-3dca-8ee3-bd5f13c46074.roa File: a7605494-21f3-3dca-8ee3-bd5f13c46074.roa (raw, json) Hash identifier: pbmXbTQkznRONHeEj6wEg15TwL8j1tAMGxpLMnFsWXo= Subject key identifier: 64:91:65:A9:36:9A:8C:63:34:B8:AA:74:EB:28:2F:16:27:29:BD:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE53387BA63F0F490B900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7605494-21f3-3dca-8ee3-bd5f13c46074.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.68.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e5:33:87:ba:63:f0:f4:90:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=62a9ffa8-bbed-4544-aacd-ded5a88512db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:5f:ed:ed:79:ee:ca:cd:0d:5a:8a:21:a0: 49:e7:fc:b3:3c:57:d0:a5:7c:1c:68:07:0d:34:c0: 42:17:65:b8:d2:5f:3a:19:47:e2:bd:12:d6:d6:17: eb:c9:69:10:53:16:52:be:15:92:87:0e:19:f5:8e: df:c3:15:83:21:c4:7b:82:cf:32:3a:1b:f5:16:52: ae:19:65:2a:3c:8c:21:ed:ba:dc:b5:b8:b3:5e:86: e2:0e:9c:57:e4:c4:b0:7d:15:69:39:6c:25:a1:93: 45:81:b3:4f:e2:6b:39:63:3f:f3:88:a3:29:eb:5b: 59:d5:70:f1:1d:53:c8:67:0c:61:05:16:88:66:3a: 65:55:1e:58:67:70:04:95:a9:8b:4f:c8:c0:48:b9: ad:ec:07:aa:10:d0:c2:9a:d2:80:5e:11:5a:47:7a: 90:bd:78:f1:c9:92:4a:da:34:7c:75:c6:9f:f8:02: ed:3a:22:96:84:f7:8b:b1:03:8b:62:24:9b:5e:2a: 75:cf:af:2e:0f:ad:f4:42:c0:ff:bd:19:35:78:ee: e4:0f:14:9e:24:df:bc:43:84:e0:5e:f5:d8:50:cd: c6:3f:2a:e1:d5:1a:aa:07:e5:79:2e:95:a5:18:df: 4d:94:37:34:76:86:d2:2e:d3:19:6e:69:1e:19:0f: 61:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:91:65:A9:36:9A:8C:63:34:B8:AA:74:EB:28:2F:16:27:29:BD:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a7605494-21f3-3dca-8ee3-bd5f13c46074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.68.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a7:0f:94:17:b6:1d:1c:c5:a7:de:f5:69:c4:29:b4:da:f0: 8c:82:25:d2:3b:01:bc:85:7f:73:89:6e:7f:6f:d4:55:6d:af: 87:41:88:fa:d6:59:29:b0:af:15:42:94:9f:64:04:75:0f:a3: 5f:1e:3c:5d:21:0f:ad:94:17:00:1a:6d:28:fb:5e:94:69:50: 0d:70:78:31:ff:52:e3:09:2f:41:5b:60:53:27:17:67:a1:20: c6:d5:67:cd:7b:47:85:bd:af:52:3e:c4:a4:b6:89:74:7f:97: fc:82:71:49:4c:5a:7c:b8:68:5e:38:1e:d3:4b:c4:ed:7f:cf: b8:5e:c9:7f:d1:46:83:04:fd:b9:82:01:3d:66:41:98:fb:7b: c0:9d:85:26:1e:fd:50:a4:00:ac:72:39:08:53:5a:30:64:7d: ce:3d:49:46:a4:fe:a0:4c:7f:de:90:94:5f:19:72:94:4a:20: b8:65:85:84:3a:83:48:ee:3e:f4:62:dc:ff:26:8d:8c:87:2e: 85:d5:4c:96:2d:8e:d5:b4:02:79:63:ca:31:16:4a:b5:cc:51: b5:42:bf:d3:10:ad:f8:10:d4:17:ae:1b:62:2d:a6:90:15:eb: 87:cc:09:ab:ea:4f:e1:5d:bc:54:a7:cf:8d:18:d8:1a:77:88: a5:a9:41:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOUzh7pj8PSQuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk NjJhOWZmYTgtYmJlZC00NTQ0LWFhY2QtZGVkNWE4ODUxMmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVhf7e157srNDVqKIaBJ5/yzPFfQpXwcaAcN NMBCF2W40l86GUfivRLW1hfryWkQUxZSvhWShw4Z9Y7fwxWDIcR7gs8yOhv1FlKu GWUqPIwh7brctbizXobiDpxX5MSwfRVpOWwloZNFgbNP4ms5Yz/ziKMp61tZ1XDx HVPIZwxhBRaIZjplVR5YZ3AElamLT8jASLmt7AeqENDCmtKAXhFaR3qQvXjxyZJK 2jR8dcaf+ALtOiKWhPeLsQOLYiSbXip1z68uD630QsD/vRk1eO7kDxSeJN+8Q4Tg XvXYUM3GPyrh1RqqB+V5LpWlGN9NlDc0dobSLtMZbmkeGQ9hdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSRZak2moxjNLiqdOsoLxYnKb3NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYTc2MDU0OTQtMjFmMy0z ZGNhLThlZTMtYmQ1ZjEzYzQ2MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADynD5QXth0cxafe9WnEKbTa8IyCJdI7AbyFf3OJbn9v1FVtr4dBiPrW WSmwrxVClJ9kBHUPo18ePF0hD62UFwAabSj7XpRpUA1weDH/UuMJL0FbYFMnF2eh IMbVZ817R4W9r1I+xKS2iXR/l/yCcUlMWny4aF44HtNLxO1/z7heyX/RRoME/bmC AT1mQZj7e8CdhSYe/VCkAKxyOQhTWjBkfc49SUak/qBMf96QlF8ZcpRKILhlhYQ6 g0juPvRi3P8mjYyHLoXVTJYtjtW0AnljyjEWSrXMUbVCv9MQrfgQ1BeuG2ItppAV 64fMCavqT+FdvFSnz40Y2Bp3iKWpQeU= -----END CERTIFICATE-----Generated at Tue Sep 22 16:55:59 2026 by rpki-client