$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa File: a875ea6f-39a1-317d-a177-865f8b0ed48a.roa (raw, json) Hash identifier: Ockcf2r4FPnGaGEeGLqoWOM1+zvIoPAzuZ5l0KbY7oc= Subject key identifier: 49:CE:7F:4C:6B:93:8E:BD:C3:A3:54:C7:C3:4B:8A:21:F9:A7:E8:5B Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F1B624F85A7039CA81C4D54E0 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 215595 IP address blocks: 140.174.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4f:85:a7:03:9c:a8:1c:4d:54:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=686d096c-f183-46c2-bab1-110ffdda39fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:f9:cb:e0:47:ed:9f:f7:f2:cb:b9:dd:0e: 8d:26:20:de:40:c5:0c:43:ea:0a:b7:95:11:c3:71: 86:27:ea:9e:cd:ac:cd:30:5d:c5:fe:13:21:49:71: 7f:a8:1e:72:45:22:e9:c1:21:9a:4e:23:39:82:98: ec:e3:61:56:10:b9:ca:02:bd:9d:ac:40:1f:69:30: b5:bc:7d:4e:c3:1d:2c:34:af:94:3f:6f:af:4e:29: bc:4b:ee:72:75:8a:d8:a6:81:46:18:5a:52:38:96: d4:04:3b:60:2c:80:b6:d2:60:3d:05:67:29:4e:0b: 69:b0:11:10:e7:25:b5:03:9d:96:b6:3a:c5:44:50: a8:18:5a:a7:5a:22:b3:cf:67:52:37:84:1a:ac:67: a8:d3:2d:e6:9c:49:a5:43:df:de:48:46:a7:d1:24: c7:17:43:23:73:ab:c6:64:a8:9b:cd:1d:54:1b:e0: 47:f4:87:d5:49:ee:f4:53:77:a2:1b:cc:28:2c:13: 85:2d:68:bc:80:a7:f5:ce:bb:b0:bb:d6:7d:cf:ea: 85:13:3e:6f:dd:86:a9:a5:27:fd:a9:e4:db:ea:9a: e3:11:98:0a:5e:13:00:8a:37:28:7a:1c:b3:2c:6b: df:c3:ee:29:14:a7:c3:0d:0f:36:90:19:37:ef:1a: 10:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CE:7F:4C:6B:93:8E:BD:C3:A3:54:C7:C3:4B:8A:21:F9:A7:E8:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/a875ea6f-39a1-317d-a177-865f8b0ed48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:11:a8:49:97:f0:e9:71:7c:ad:cd:80:79:dc:c2:1e:81:f6: b2:73:7d:d9:99:7f:6c:17:a0:51:31:c6:f3:43:cf:09:85:3d: b8:1d:e5:3b:04:4d:d7:ba:de:5b:a6:67:d0:dc:8c:b6:fb:42: bb:d6:b4:b6:90:43:f4:13:8f:cb:5f:de:a7:36:c0:d5:4e:b9: d9:d3:4a:f5:d7:4a:55:eb:69:11:70:b2:34:74:c5:7d:d9:7f: bc:f1:6d:ba:18:8c:5d:df:1f:0f:9c:a8:8d:19:d4:72:9f:98: b4:c3:60:48:f0:e4:14:f5:79:01:2f:60:7e:e2:0c:1f:15:2b: ae:41:01:d5:36:67:bc:9d:88:f0:8c:e5:47:38:d0:31:71:81: 69:22:ba:06:28:b3:a5:f3:22:56:22:c8:0f:c0:1b:a9:da:bf: fa:b8:87:b6:bc:45:8b:03:1d:40:e3:e3:bf:c1:9e:eb:ca:a5: 9d:e2:49:6e:f3:b3:89:a7:27:57:a6:2b:c5:a2:6b:c1:e9:30: b8:84:e2:ab:96:52:a1:b9:bd:7e:79:c6:b5:a2:e4:68:af:c4: 60:d5:05:78:47:b2:4b:3d:ec:14:68:4a:4b:5c:29:3b:fd:d8: d8:02:ea:43:b1:fb:04:62:cb:95:d6:cf:bb:42:16:dc:46:c3: d8:2b:b1:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYk+FpwOcqBxNVOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk Njg2ZDA5NmMtZjE4My00NmMyLWJhYjEtMTEwZmZkZGEzOWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu75y+BH7Z/38su53Q6NJiDeQMUMQ+oKt5UR w3GGJ+qezazNMF3F/hMhSXF/qB5yRSLpwSGaTiM5gpjs42FWELnKAr2drEAfaTC1 vH1Owx0sNK+UP2+vTim8S+5ydYrYpoFGGFpSOJbUBDtgLIC20mA9BWcpTgtpsBEQ 5yW1A52WtjrFRFCoGFqnWiKzz2dSN4QarGeo0y3mnEmlQ9/eSEan0STHF0Mjc6vG ZKibzR1UG+BH9IfVSe70U3eiG8woLBOFLWi8gKf1zruwu9Z9z+qFEz5v3YappSf9 qeTb6prjEZgKXhMAijcoehyzLGvfw+4pFKfDDQ82kBk37xoQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnOf0xrk469w6NUx8NLiiH5p+hbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvYTg3NWVhNmYtMzlhMS0z MTdkLWExNzctODY1ZjhiMGVkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjK6gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcRqEmX8OlxfK3NgHncwh6B9rJzfdmZf2wXoFExxvNDzwmFPbgd5TsE Tde63lumZ9DcjLb7QrvWtLaQQ/QTj8tf3qc2wNVOudnTSvXXSlXraRFwsjR0xX3Z f7zxbboYjF3fHw+cqI0Z1HKfmLTDYEjw5BT1eQEvYH7iDB8VK65BAdU2Z7ydiPCM 5Uc40DFxgWkiugYos6XzIlYiyA/AG6nav/q4h7a8RYsDHUDj47/BnuvKpZ3iSW7z s4mnJ1emK8Wia8HpMLiE4quWUqG5vX55xrWi5GivxGDVBXhHsks97BRoSktcKTv9 2NgC6kOx+wRiy5XWz7tCFtxGw9grseg= -----END CERTIFICATE-----Generated at Fri Sep 25 06:28:27 2026 by rpki-client