$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8d058cc-7885-3263-9c72-8d1347de10f0.roa File: e8d058cc-7885-3263-9c72-8d1347de10f0.roa (raw, json) Hash identifier: 92XrHrUZvkgp5wu1yMIeLq6pwi3/n3rnC3Nf6T8vRZE= Subject key identifier: 90:39:5E:74:93:36:A4:85:94:7E:1F:F6:8A:BA:E8:B2:DB:A6:F8:5C Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CE4EB68F1A312C510A500 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8d058cc-7885-3263-9c72-8d1347de10f0.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.238.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:e4:eb:68:f1:a3:12:c5:10:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=e4ec2920-f9ef-4d6f-9119-7bf04d5acadd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f5:51:5c:f0:07:78:5e:4c:99:32:16:e2:5e: 81:5e:47:85:aa:31:7c:37:df:d4:e1:fc:7a:2d:88: d4:f8:85:96:79:81:f8:a4:aa:10:72:bb:c9:55:80: 7c:1c:bb:a3:e4:72:d3:a2:f7:1c:1e:fb:a8:e7:3c: c2:07:b1:38:01:2b:3f:ef:cf:ab:52:4c:7f:72:2b: 7e:c3:f2:b8:18:50:45:a5:2e:1a:da:fe:56:ca:ac: 1a:10:02:54:a3:94:f9:3b:19:21:8a:05:93:33:01: 92:de:bc:11:fe:9a:90:3e:65:b1:ce:8f:dd:6c:90: 9c:76:4d:d6:52:29:81:9e:79:6f:7e:73:68:f5:a4: 82:30:f6:e6:f3:d2:da:a4:22:9a:aa:c5:51:50:73: 4d:96:26:7e:eb:65:f4:dc:8a:1b:6a:77:50:fd:6a: 2c:e8:be:a9:41:79:73:b4:aa:62:4a:be:ad:9e:8f: b4:49:48:1b:4f:17:37:0a:3d:9f:03:1a:5c:19:7b: 89:fe:20:f2:1b:3d:7c:1a:6f:5c:ca:d9:49:ab:be: fd:f9:7d:5f:61:2f:aa:cc:e9:9b:fe:86:2b:3e:d6: db:63:0b:c3:4c:69:e7:16:f6:65:fb:30:3e:21:b4: 95:2d:f1:3e:57:86:bf:01:e3:1f:a6:04:03:7c:cb: d2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:39:5E:74:93:36:A4:85:94:7E:1F:F6:8A:BA:E8:B2:DB:A6:F8:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e8d058cc-7885-3263-9c72-8d1347de10f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.238.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:5e:1b:b5:c6:87:2d:1d:df:df:f1:7e:3c:2e:83:3b:a3:96: 83:43:55:a4:1c:bd:ba:31:aa:b3:df:f9:73:a4:b8:29:d1:09: 83:bc:02:29:07:3c:bf:44:9e:8d:0a:64:cb:b9:eb:3c:2e:2e: 84:76:ee:43:f9:1c:14:5b:a3:e9:90:c3:21:e5:d6:77:66:56: b3:5f:eb:ec:5b:fb:5c:2d:7c:a7:84:7b:a1:50:94:a1:fd:47: b0:d3:ea:ad:63:da:f3:3d:4b:00:df:e9:a2:c4:f6:17:fc:5d: cf:11:6c:20:63:df:f2:a9:91:bf:95:6b:45:c9:29:81:5b:e2: ff:d1:b4:25:39:a2:42:63:1a:00:8f:73:74:0b:1a:2a:e6:06: 75:f3:18:06:24:fc:1f:15:d2:f6:d2:0e:6a:43:f1:b0:73:45: 00:bb:97:97:9a:e5:eb:26:22:de:8a:38:2c:e0:b0:3a:c7:15: df:fb:aa:af:06:93:4b:ef:ef:01:09:ea:a0:fe:74:d7:23:50: 46:a0:8f:0d:42:0c:b6:3e:5e:0f:f5:93:58:ab:21:d5:a6:2a: 36:98:f0:2d:07:df:75:ea:52:12:2c:32:2b:ba:97:40:e0:d7: ac:d8:7d:16:ff:d8:aa:b6:db:8a:0a:7e:0c:04:f1:67:3a:f9: af:52:64:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbOTraPGjEsUQpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTRlYzI5MjAtZjllZi00ZDZmLTkxMTktN2JmMDRkNWFjYWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvVRXPAHeF5MmTIW4l6BXkeFqjF8N9/U4fx6 LYjU+IWWeYH4pKoQcrvJVYB8HLuj5HLTovccHvuo5zzCB7E4ASs/78+rUkx/cit+ w/K4GFBFpS4a2v5WyqwaEAJUo5T5OxkhigWTMwGS3rwR/pqQPmWxzo/dbJCcdk3W UimBnnlvfnNo9aSCMPbm89LapCKaqsVRUHNNliZ+62X03IobandQ/Wos6L6pQXlz tKpiSr6tno+0SUgbTxc3Cj2fAxpcGXuJ/iDyGz18Gm9cytlJq779+X1fYS+qzOmb /oYrPtbbYwvDTGnnFvZl+zA+IbSVLfE+V4a/AeMfpgQDfMvSXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJA5XnSTNqSFlH4f9oq66LLbpvhcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZThkMDU4Y2MtNzg4NS0z MjYzLTljNzItOGQxMzQ3ZGUxMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjO7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVeG7XGhy0d39/xfjwugzujloNDVaQcvboxqrPf+XOkuCnRCYO8AikH PL9Eno0KZMu56zwuLoR27kP5HBRbo+mQwyHl1ndmVrNf6+xb+1wtfKeEe6FQlKH9 R7DT6q1j2vM9SwDf6aLE9hf8Xc8RbCBj3/Kpkb+Va0XJKYFb4v/RtCU5okJjGgCP c3QLGirmBnXzGAYk/B8V0vbSDmpD8bBzRQC7l5ea5esmIt6KOCzgsDrHFd/7qq8G k0vv7wEJ6qD+dNcjUEagjw1CDLY+Xg/1k1irIdWmKjaY8C0H33XqUhIsMiu6l0Dg 16zYfRb/2Kq224oKfgwE8Wc6+a9SZMM= -----END CERTIFICATE-----Generated at Mon Sep 21 23:58:01 2026 by rpki-client