$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa File: bb2f7395-412d-3902-9022-8fed5a5aabf1.roa (raw, json) Hash identifier: TA6iK8jvXcAdK0xkEFTRmHOvu0ocRhO3fJxnSsQ1gBI= Subject key identifier: 6F:08:4F:AB:E5:92:03:0B:C8:3E:2D:0F:8F:8F:B6:A9:6F:31:05:CD Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F1037A2AB318DEDF27601CB00 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa Signing time: Fri 04 Sep 2026 13:00:12 +0000 ROA not before: Fri 04 Sep 2026 13:00:12 +0000 ROA not after: Thu 03 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:37:a2:ab:31:8d:ed:f2:76:01:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 4 13:00:12 2026 GMT Not After : Dec 3 14:00:12 2026 GMT Subject: CN=ffa73d73-79ae-43b6-81be-80d869927f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:a7:38:80:7d:0f:fc:22:4e:37:5b:64:c2: 07:43:1a:50:4b:76:1d:0a:ea:96:fc:2a:0c:06:04: 8c:35:c1:13:7c:db:b3:30:46:d7:3c:64:1c:48:e2: e3:4b:75:83:cd:a4:e2:0e:95:62:08:78:73:3b:a9: 2b:a6:a2:de:87:a0:88:15:38:36:63:4c:2f:a7:fa: e3:a3:55:e7:67:1c:82:70:38:b8:68:56:8b:e2:c2: 40:8f:40:c0:d3:7c:85:b0:76:98:54:5d:87:83:c1: 28:d4:7f:58:50:73:b8:6b:fd:22:7a:b9:db:34:1b: 1d:6b:99:5b:cc:d8:92:9c:03:4e:bf:a2:4f:92:29: a3:a5:57:46:d2:35:a3:45:1f:68:b9:39:1e:f6:16: 5a:7f:e2:63:94:ae:5a:f5:47:28:ee:6b:f6:63:f2: 2e:21:9c:f3:a2:bd:35:c3:d1:0c:00:e8:8b:8d:07: b4:5d:2f:01:e0:8c:66:ea:69:23:fa:f4:23:01:d3: 0f:f1:b3:c0:15:f8:11:97:2c:cf:c8:a4:13:56:70: d8:82:6c:94:06:85:6b:63:56:43:ee:77:ae:bf:f4: 87:ac:77:2b:87:ba:ce:26:6a:10:d5:b2:46:a5:c0: 49:87:aa:e8:a8:54:db:5b:e5:ff:09:40:77:6e:e2: 13:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:08:4F:AB:E5:92:03:0B:C8:3E:2D:0F:8F:8F:B6:A9:6F:31:05:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb2f7395-412d-3902-9022-8fed5a5aabf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:20:36:c1:47:c6:ab:6d:ad:6a:60:82:e4:73:1b:da:f9:07: 94:aa:05:b9:0b:c8:d9:1e:05:77:c9:b6:01:ad:bb:86:9a:8f: 71:e4:d1:ad:a6:56:11:4f:09:a5:d6:a1:1b:53:94:ca:71:51: d8:43:b0:2e:a3:15:dc:42:05:3c:7b:ef:d5:2a:78:1c:eb:9e: 17:83:3c:0a:b3:ab:34:f7:93:4a:db:7f:6b:dd:2e:fb:e2:e8: 3d:14:43:9e:39:9d:b1:15:91:07:81:55:c0:e4:1e:5e:d3:75: 70:91:d3:7c:23:7d:7e:0a:c3:a0:69:41:f6:9a:03:a4:c5:0a: a3:a8:6c:dd:ad:ae:3a:69:35:d4:3a:93:51:72:82:72:0f:f1: 24:3d:ea:30:d3:e5:2f:28:65:26:c6:46:57:a2:56:fc:5f:53: 6f:17:9f:92:e6:83:a8:7b:eb:9c:b1:fe:71:4b:2d:ab:3f:2c: ce:a2:48:7a:3c:d4:f9:82:3f:85:30:8e:51:e5:ad:51:3d:be: 2f:0b:5c:1e:bd:aa:f1:49:fb:d8:2c:35:b6:a9:ed:04:ff:c4: 6a:c6:c4:0e:20:ca:27:03:e0:55:8a:1c:4e:e8:2e:cf:49:f9: 5a:42:ea:9b:8d:7f:36:70:fa:dd:9d:05:b0:47:b2:0a:30:31: fa:cb:a3:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8QN6KrMY3t8nYBywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwNDEzMDAxMloXDTI2MTIwMzE0MDAxMlowLzEtMCsGA1UEAxMk ZmZhNzNkNzMtNzlhZS00M2I2LTgxYmUtODBkODY5OTI3ZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybmnOIB9D/wiTjdbZMIHQxpQS3YdCuqW/CoM BgSMNcETfNuzMEbXPGQcSOLjS3WDzaTiDpViCHhzO6krpqLeh6CIFTg2Y0wvp/rj o1XnZxyCcDi4aFaL4sJAj0DA03yFsHaYVF2Hg8Eo1H9YUHO4a/0iernbNBsda5lb zNiSnANOv6JPkimjpVdG0jWjRR9ouTke9hZaf+JjlK5a9Uco7mv2Y/IuIZzzor01 w9EMAOiLjQe0XS8B4Ixm6mkj+vQjAdMP8bPAFfgRlyzPyKQTVnDYgmyUBoVrY1ZD 7neuv/SHrHcrh7rOJmoQ1bJGpcBJh6roqFTbW+X/CUB3buIT2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8IT6vlkgMLyD4tD4+PtqlvMQXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmIyZjczOTUtNDEyZC0z OTAyLTkwMjItOGZlZDVhNWFhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcgNsFHxqttrWpgguRzG9r5B5SqBbkLyNkeBXfJtgGtu4aaj3Hk0a2m VhFPCaXWoRtTlMpxUdhDsC6jFdxCBTx779UqeBzrnheDPAqzqzT3k0rbf2vdLvvi 6D0UQ545nbEVkQeBVcDkHl7TdXCR03wjfX4Kw6BpQfaaA6TFCqOobN2trjppNdQ6 k1FygnIP8SQ96jDT5S8oZSbGRleiVvxfU28Xn5Lmg6h765yx/nFLLas/LM6iSHo8 1PmCP4UwjlHlrVE9vi8LXB69qvFJ+9gsNbap7QT/xGrGxA4gyicD4FWKHE7oLs9J +VpC6puNfzZw+t2dBbBHsgowMfrLozA= -----END CERTIFICATE-----Generated at Tue Sep 22 20:44:12 2026 by rpki-client