$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa File: b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa (raw, json) Hash identifier: 9D49dm14P58sDv+qZJPC0yNhBIzqkUgL1hTjL7AcZLs= Subject key identifier: A3:20:A0:CE:8A:51:64:52:06:62:12:87:D6:9A:57:EE:54:B7:4B:6A Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F119CE96EB6F76D911BB6C980 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.91.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:e9:6e:b6:f7:6d:91:1b:b6:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6cb836ed-d810-4a5a-81d3-ed76e770b1ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:46:f9:3f:f3:c0:7f:77:e3:96:97:74:07:75: 8a:26:83:53:7b:82:91:0a:50:a4:cb:2d:00:b6:32: ff:d5:d5:c1:cd:17:8e:98:53:8b:f2:ad:92:48:39: a9:21:23:0e:ae:6d:ea:5e:e8:f2:56:4b:55:2d:94: 64:aa:3a:a2:d4:50:90:13:28:12:c2:ee:24:d7:8f: a7:97:85:29:ae:15:b0:92:6d:f4:d1:c5:2a:47:30: 18:db:ea:31:97:fa:66:87:02:e2:42:1a:5c:a6:d7: 5b:0b:5e:f6:e0:8b:9b:6f:61:ca:a5:2d:3e:4f:b9: 54:4d:2f:98:16:32:7c:9b:80:ef:92:fc:16:a1:ce: a1:ab:bb:27:49:0a:ad:6f:68:80:b5:1f:f8:ee:3c: 99:04:47:cc:49:f5:12:b7:40:45:20:fe:e1:b2:63: 0e:a9:74:38:4c:39:86:9f:ab:2f:53:9d:ab:f7:ed: 55:e0:5a:e4:1a:08:b9:d8:27:47:97:38:e2:f1:58: 61:e5:04:62:fb:a5:ff:13:8b:f1:b8:64:25:67:02: 4d:8c:ed:d7:c5:08:e1:7d:c1:1d:7a:d0:b0:46:f7: 71:32:f6:95:46:4a:1c:5e:53:13:6f:43:f7:90:f3: 12:6d:a6:41:ab:2a:c4:9d:c1:c9:24:e2:cb:84:75: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:20:A0:CE:8A:51:64:52:06:62:12:87:D6:9A:57:EE:54:B7:4B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0f9160e-2c0c-3822-ac57-4ced5d08d8e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.208.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:64:d3:1f:ab:2a:e4:60:52:49:95:c0:7e:b1:29:14:06:d4: 4b:64:5a:f9:37:d5:99:31:aa:18:86:3a:12:30:1d:4f:06:a1: 3b:57:38:2a:a6:6c:2b:24:1d:61:5e:94:a0:2f:5d:6a:1c:7a: 97:e1:ee:18:9b:ba:71:6c:67:4b:5e:0e:04:3a:db:c7:52:e5: 1d:37:31:02:ca:93:a3:5b:19:60:0d:86:62:f1:ae:70:ef:f0: 71:f6:19:db:ed:d0:56:29:fc:dd:c6:cb:2c:92:d2:97:b1:d3: 84:80:fa:d1:3c:67:70:02:f1:18:d9:9b:15:04:c0:fb:93:fa: 55:f9:9f:66:d2:28:db:00:62:38:31:d1:b8:fb:26:e2:fe:9f: c8:46:79:90:25:ed:cb:06:52:94:d3:18:5e:d0:6a:1c:65:05: 3e:80:e0:01:2d:47:49:4e:56:72:e9:a2:e3:23:1c:b8:78:6f: c2:41:3b:3c:0e:7e:a0:42:c7:49:a2:eb:e3:82:6f:ca:10:3f: ce:36:f4:ba:86:75:f4:c0:30:bf:76:e4:8f:1c:97:cf:83:10: 9f:2c:3e:f8:e9:af:16:10:4b:f1:7c:15:fe:f3:82:68:32:7c: a6:6a:a5:88:51:db:cc:cc:57:7f:b3:d8:c9:a9:5c:88:ed:fe: b1:a1:e5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOlutvdtkRu2yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmNiODM2ZWQtZDgxMC00YTVhLTgxZDMtZWQ3NmU3NzBiMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUb5P/PAf3fjlpd0B3WKJoNTe4KRClCkyy0A tjL/1dXBzReOmFOL8q2SSDmpISMOrm3qXujyVktVLZRkqjqi1FCQEygSwu4k14+n l4UprhWwkm300cUqRzAY2+oxl/pmhwLiQhpcptdbC1724Iubb2HKpS0+T7lUTS+Y FjJ8m4DvkvwWoc6hq7snSQqtb2iAtR/47jyZBEfMSfUSt0BFIP7hsmMOqXQ4TDmG n6svU52r9+1V4FrkGgi52CdHlzji8Vhh5QRi+6X/E4vxuGQlZwJNjO3XxQjhfcEd etCwRvdxMvaVRkocXlMTb0P3kPMSbaZBqyrEncHJJOLLhHU1dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMgoM6KUWRSBmISh9aaV+5Ut0tqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjBmOTE2MGUtMmMwYy0z ODIyLWFjNTctNGNlZDVkMDhkOGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlk0x+rKuRgUkmVwH6xKRQG1EtkWvk31ZkxqhiGOhIwHU8GoTtXOCqm bCskHWFelKAvXWocepfh7hibunFsZ0teDgQ628dS5R03MQLKk6NbGWANhmLxrnDv 8HH2Gdvt0FYp/N3GyyyS0pex04SA+tE8Z3AC8RjZmxUEwPuT+lX5n2bSKNsAYjgx 0bj7JuL+n8hGeZAl7csGUpTTGF7QahxlBT6A4AEtR0lOVnLpouMjHLh4b8JBOzwO fqBCx0mi6+OCb8oQP8429LqGdfTAML925I8cl8+DEJ8sPvjprxYQS/F8Ff7zgmgy fKZqpYhR28zMV3+z2MmpXIjt/rGh5WY= -----END CERTIFICATE-----Generated at Mon Sep 21 18:11:26 2026 by rpki-client