$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa File: 2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa (raw, json) Hash identifier: EMGFoXjWdcrJXTVQyxfYXipPdwGobzwJqoscu4ZOzQI= Subject key identifier: CB:62:49:32:8E:80:77:B2:A9:8D:65:50:BA:77:B5:82:99:4C:C5:13 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F4328584F498BD7A362EC27116356EA00 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 130.41.138.0/23 maxlen: 23 130.41.140.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:d7:a3:62:ec:27:11:63:56:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=53aaf4cc-21eb-4461-bf53-abceac10f5b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b1:d8:b5:1e:8e:46:94:d6:82:da:b6:f8:b9: 92:04:c8:e8:b3:2d:ba:df:58:48:72:0c:0a:83:97: 50:02:eb:ca:75:c5:fe:0f:f7:c2:51:5a:97:20:ed: cb:b7:65:a0:7f:ef:6b:d8:ff:4a:9d:60:cb:de:6c: 59:ac:61:dc:c6:97:fc:5e:8a:fd:4f:f1:83:f2:57: a1:b8:ae:dc:a6:fb:c3:39:7d:9b:93:08:ed:20:d1: 52:4d:b3:9c:2c:63:17:fa:bf:29:d2:64:7c:df:0d: e8:8c:c6:36:0c:ec:ce:29:fd:83:96:2e:d7:ba:11: 44:f5:78:b8:06:ef:cf:1a:f9:fd:a0:ea:3e:37:cd: b2:ff:89:ab:f6:1e:03:7f:06:ae:a5:67:83:3f:93: a6:da:0e:df:1e:b8:08:9e:00:ea:02:28:0f:44:72: c5:bb:44:1a:64:62:72:80:98:26:76:df:d1:a2:05: 72:34:60:31:78:69:ef:1d:5d:51:71:e1:74:9e:13: 60:0e:f7:47:df:75:1a:2f:98:60:01:3e:00:ff:ef: 84:d2:b9:49:0f:9f:10:7b:d8:4f:40:fc:c1:05:90: df:c9:9a:34:48:cd:e0:ca:3b:6d:fc:1f:11:45:34: 5d:ca:30:d2:8b:5e:52:e6:10:51:36:8b:b4:88:c2: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:62:49:32:8E:80:77:B2:A9:8D:65:50:BA:77:B5:82:99:4C:C5:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 130.41.138.0-130.41.143.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:c0:e1:bf:da:dc:e6:e6:d3:be:60:b3:69:20:bc:b9:7a:9e: a9:ea:7a:fa:d2:95:57:7d:e1:6d:e9:ad:0a:86:6d:4a:a4:88: cf:c1:09:b1:83:55:cf:d2:79:ad:2c:df:b0:51:7a:32:fb:eb: ef:e8:f6:fe:1a:ef:14:d3:19:96:df:aa:2a:ed:d1:82:47:e3: 17:be:44:4a:74:97:97:96:73:f1:84:70:7a:ad:fd:78:bc:4e: 93:b9:61:8c:9b:8e:49:bd:e4:51:ab:18:25:75:4d:fc:34:fa: fa:9f:e7:04:da:ec:12:b1:46:f5:d6:0a:f9:a1:c7:ea:04:9a: c3:df:09:16:72:5a:5b:a3:58:7a:cf:55:93:0f:e1:71:85:23: d7:c7:ea:ef:8a:0a:b5:cb:d6:58:75:a3:2c:9d:d0:c7:32:fa: f4:e0:d8:0a:5e:db:1a:c6:08:e4:cb:4f:f7:0f:24:71:c8:f8: e4:f2:aa:41:74:40:72:77:c8:7b:a1:bc:d9:8e:6e:19:e1:b8: 85:53:4a:62:ba:da:f3:fd:aa:bc:e5:db:28:8b:27:a3:3c:2d: a2:67:0a:37:1b:90:8b:6a:33:bf:9c:76:29:ee:fe:e2:97:7a: f2:c8:b1:94:b6:2d:bf:cf:ea:b2:a7:eb:53:8c:4f:24:ed:8d: d2:22:2e:e2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9Ji9ejYuwnEWNW6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTNhYWY0Y2MtMjFlYi00NDYxLWJmNTMtYWJjZWFjMTBmNWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7HYtR6ORpTWgtq2+LmSBMjosy2631hIcgwK g5dQAuvKdcX+D/fCUVqXIO3Lt2Wgf+9r2P9KnWDL3mxZrGHcxpf8Xor9T/GD8leh uK7cpvvDOX2bkwjtINFSTbOcLGMX+r8p0mR83w3ojMY2DOzOKf2Dli7XuhFE9Xi4 Bu/PGvn9oOo+N82y/4mr9h4DfwaupWeDP5Om2g7fHrgIngDqAigPRHLFu0QaZGJy gJgmdt/RogVyNGAxeGnvHV1RceF0nhNgDvdH33UaL5hgAT4A/++E0rlJD58Qe9hP QPzBBZDfyZo0SM3gyjtt/B8RRTRdyjDSi15S5hBRNou0iMJQBQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFMtiSTKOgHeyqY1lULp3tYKZTMUTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMmMzZjIzNTYtNDUwNi0z NGExLThkZTgtZWJhYmRmMzZjYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGCKYoD BASCKYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAhcDhv9rc5ubTvmCzaSC8uXqeqep6+tKVV33hbemtCoZt SqSIz8EJsYNVz9J5rSzfsFF6Mvvr7+j2/hrvFNMZlt+qKu3RgkfjF75ESnSXl5Zz 8YRweq39eLxOk7lhjJuOSb3kUasYJXVN/DT6+p/nBNrsErFG9dYK+aHH6gSaw98J FnJaW6NYes9Vkw/hcYUj18fq74oKtcvWWHWjLJ3QxzL69ODYCl7bGsYI5MtP9w8k ccj45PKqQXRAcnfIe6G82Y5uGeG4hVNKYrra8/2qvOXbKIsnozwtomcKNxuQi2oz v5x2Ke7+4pd68sixlLYtv8/qsqfrU4xPJO2N0iIu4g== -----END CERTIFICATE-----Generated at Sun Sep 27 03:00:02 2026 by rpki-client