$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec0b937e-15c0-3d95-8807-b65c87939426.roa File: ec0b937e-15c0-3d95-8807-b65c87939426.roa (raw, json) Hash identifier: p2NjnP/EAdz5VtypHnx+bLOjv89qyzmtIpeAzGdjRgs= Subject key identifier: 4A:45:28:AA:90:09:57:D0:43:C5:7F:42:73:42:95:81:A9:86:BF:EE Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CF9A60644D2BE021780C0 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec0b937e-15c0-3d95-8807-b65c87939426.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f9:a6:06:44:d2:be:02:17:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=7eb4c659-47fa-43ae-9ef4-206d269a8a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:57:af:9d:58:2c:d8:fb:20:d1:77:5c:f4: 53:af:eb:1a:af:62:ce:d3:e1:4b:f4:d1:1d:dd:ee: 30:f8:a2:21:25:cf:c5:bc:db:e4:a4:f9:20:d9:91: 72:49:f2:33:6f:5f:44:b2:2f:28:03:90:cd:06:41: 04:50:cb:d6:cf:8d:c0:60:cc:a2:47:07:aa:96:73: de:32:3e:a7:7c:60:15:d0:6c:12:59:44:18:66:66: 7f:31:43:4d:d2:3c:3e:ca:ca:47:7a:f9:4a:31:1c: 48:6b:65:0a:4d:05:e8:b0:cc:a1:b0:6c:86:63:55: 09:d7:12:75:57:19:74:07:40:23:dc:cf:b4:d1:0f: ec:4f:c4:42:17:85:16:84:df:92:37:41:f9:90:72: 2d:9d:e7:71:e0:dc:c6:13:34:e2:ea:6a:4a:ff:3c: 21:1f:aa:9f:42:d5:2c:36:ea:76:61:64:3e:cf:72: 8b:29:0d:47:7f:50:82:b8:1c:e7:b1:47:a1:dd:cc: b4:06:f4:71:41:bb:47:85:7e:54:44:16:c3:f0:0f: ee:e6:51:34:69:a8:33:c7:68:b9:98:cc:00:5a:ac: 3e:63:db:ac:66:24:c4:98:59:8f:a6:bd:6a:70:5c: 13:9e:cc:e9:47:00:74:30:48:c8:1d:e0:fa:bb:03: 87:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:45:28:AA:90:09:57:D0:43:C5:7F:42:73:42:95:81:A9:86:BF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec0b937e-15c0-3d95-8807-b65c87939426.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:16:0c:01:cd:02:c4:a1:67:7c:f4:a2:5a:e9:4a:7c:9f:0c: 44:d0:29:64:22:74:37:11:ab:c2:93:a7:b1:e0:73:67:2f:b6: 8e:68:96:2f:0b:ca:25:5e:65:0e:c0:e2:36:92:ae:5c:33:2a: a3:85:3e:ad:f0:f8:1b:0e:b9:ad:ca:3a:23:be:c3:75:c1:01: 81:73:62:c4:6d:bb:7b:5d:a4:9c:98:0f:10:4b:f0:8b:07:c6: 4d:13:0c:3d:30:26:7b:bd:87:47:5d:4d:65:af:88:d2:d7:c4: b7:eb:07:d4:92:2c:6d:26:e2:c4:19:b5:f7:56:34:98:2a:32: 1b:d9:b4:dd:ac:d6:40:08:65:4c:8d:0e:e0:bb:db:be:3d:58: 2d:fa:0c:54:8d:14:5d:09:5e:4b:8c:3d:64:44:98:88:ca:61: be:85:6f:e8:c9:4c:8f:b8:d3:93:69:a8:db:ed:74:fd:56:ce: 14:a9:63:02:7c:6c:19:5d:70:8e:80:64:7e:0c:74:02:41:aa: b4:4c:dc:db:18:b6:eb:31:ef:2f:e4:5b:75:c7:67:d7:12:1a: 2b:c7:11:d7:b4:87:99:e1:ea:54:99:f4:ec:ce:44:d8:17:a0: 15:87:3f:00:bb:2c:02:1c:2e:4e:16:8e:ff:9f:30:6c:1e:d9: 59:49:2f:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPmmBkTSvgIXgMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk N2ViNGM2NTktNDdmYS00M2FlLTllZjQtMjA2ZDI2OWE4YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApARXr51YLNj7INF3XPRTr+sar2LO0+FL9NEd 3e4w+KIhJc/FvNvkpPkg2ZFySfIzb19Esi8oA5DNBkEEUMvWz43AYMyiRweqlnPe Mj6nfGAV0GwSWUQYZmZ/MUNN0jw+yspHevlKMRxIa2UKTQXosMyhsGyGY1UJ1xJ1 Vxl0B0Aj3M+00Q/sT8RCF4UWhN+SN0H5kHItnedx4NzGEzTi6mpK/zwhH6qfQtUs Nup2YWQ+z3KLKQ1Hf1CCuBznsUeh3cy0BvRxQbtHhX5URBbD8A/u5lE0aagzx2i5 mMwAWqw+Y9usZiTEmFmPpr1qcFwTnszpRwB0MEjIHeD6uwOHdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpFKKqQCVfQQ8V/QnNClYGphr/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZWMwYjkzN2UtMTVjMC0z ZDk1LTg4MDctYjY1Yzg3OTM5NDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4WDAHNAsShZ3z0olrpSnyfDETQKWQidDcRq8KTp7Hgc2cvto5oli8L yiVeZQ7A4jaSrlwzKqOFPq3w+BsOua3KOiO+w3XBAYFzYsRtu3tdpJyYDxBL8IsH xk0TDD0wJnu9h0ddTWWviNLXxLfrB9SSLG0m4sQZtfdWNJgqMhvZtN2s1kAIZUyN DuC72749WC36DFSNFF0JXkuMPWREmIjKYb6Fb+jJTI+405NpqNvtdP1WzhSpYwJ8 bBldcI6AZH4MdAJBqrRM3NsYtusx7y/kW3XHZ9cSGivHEde0h5nh6lSZ9OzORNgX oBWHPwC7LAIcLk4Wjv+fMGwe2VlJLxs= -----END CERTIFICATE-----Generated at Mon Sep 21 15:00:12 2026 by rpki-client