$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa File: 539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa (raw, json) Hash identifier: onRMAymoLKovbEE9T5x1UpsUJoXVZBK4uJNrUbh8dho= Subject key identifier: FE:DA:81:29:E2:2B:A9:52:02:13:18:36:01:AD:E6:A5:EB:45:8A:66 Certificate issuer: /CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Certificate serial: 010D0C9F4328584F4973EE9C9F972314ED057E00 Authority key identifier: F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22941 IP address blocks: 168.245.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ee:9c:9f:97:23:14:ed:05:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e014cdd-4a76-4eef-86f7-6b6a836e1dbf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a3d9f1e5-1642-4e13-9a86-66c34d1ed780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:ef:75:fa:8d:2f:bc:a2:88:8f:d0:3c:76: 91:03:e7:a6:ea:58:72:f4:fe:8e:8d:b7:b5:38:06: 5d:e7:61:41:f2:49:8e:ad:29:d9:19:d1:77:f6:14: 08:a9:5e:7a:d2:75:bf:d6:4b:de:13:c4:50:18:af: 6b:c5:75:37:2a:69:1c:f6:23:8b:7b:a7:df:e2:00: 3c:ba:86:a9:1c:65:9f:dd:9a:8f:b6:eb:06:72:34: 57:a2:4a:e3:86:5b:ea:a0:83:ac:46:03:12:f4:d4: 62:c7:c2:82:32:44:3c:49:aa:50:26:bf:6e:c3:f6: 01:82:d9:cf:c7:85:a7:ad:54:36:f1:98:56:7d:8d: 63:c7:c5:f2:8b:97:1e:c5:cd:fb:8f:ba:b2:da:0a: e0:53:a9:ce:cf:76:ba:4e:ec:b2:82:65:d4:fd:2f: 8c:0c:24:b2:ae:00:67:f8:7d:8e:09:e7:0d:7d:88: 08:68:80:e9:f5:3e:75:56:54:7c:13:0e:45:22:ae: 08:61:dc:31:61:f6:f4:d3:cb:e7:46:a1:89:4d:9b: 9b:64:ef:5e:c2:b7:f5:90:35:79:28:37:3f:be:ac: 52:0a:04:e8:88:22:c1:00:ed:87:41:fb:e4:fd:a7: a7:33:2b:62:a9:cd:16:b2:bc:cb:b2:60:10:3c:03: 66:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DA:81:29:E2:2B:A9:52:02:13:18:36:01:AD:E6:A5:EB:45:8A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/539b5ee5-7dd2-3b98-b79b-e8ade83252de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.crl X509v3 Authority Key Identifier: keyid:F8:18:1F:C9:C8:20:2D:78:59:D4:B0:EF:4C:4B:A5:8D:C7:DC:93:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e014cdd-4a76-4eef-86f7-6b6a836e1dbf.cer sbgp-ipAddrBlock: critical IPv4: 168.245.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2f:14:a2:ab:9c:88:53:44:60:4a:0a:72:66:ab:77:82:f0: ae:05:80:03:69:f9:5c:9d:cd:36:4a:13:89:ac:7f:a9:0e:f2: 8f:75:e6:93:b6:12:e6:f2:f9:6b:f5:fe:38:af:d6:07:c4:42: b1:1e:e2:26:db:14:aa:6c:e2:0c:21:cb:a3:ab:88:3d:d6:30: 6f:4a:1a:20:eb:18:60:79:09:62:c9:0e:9a:37:68:de:4a:3b: 26:e4:fa:13:64:4c:68:b0:6f:ed:71:b2:a8:c0:17:89:11:2e: cd:c9:09:d9:c1:d2:22:c4:1b:5f:ae:5a:1b:37:85:56:f0:c6: 3f:64:8b:28:bd:55:e4:77:f8:18:85:7e:a3:5a:d1:0c:04:b7: f9:60:be:b2:ea:c0:0a:b6:1e:dd:22:c3:dc:12:64:99:9b:79: ba:5d:46:68:77:fa:8a:63:d2:18:0f:9c:4c:e2:c6:e4:0c:74: 52:65:03:b2:c6:78:d7:d6:5a:de:ee:0a:f1:d8:34:45:40:c1: da:d7:c0:ec:74:3e:e7:1e:e4:27:9c:eb:fb:b0:5a:2d:6c:16: 52:27:79:2f:83:0b:40:d1:cb:af:a9:41:d4:ad:2d:1a:91:7a: 1a:db:14:c1:f6:f2:2d:4b:22:66:be:6f:b4:ce:57:2a:ae:78: 07:9b:4c:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+6cn5cjFO0FfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2UwMTRjZGQtNGE3Ni00ZWVmLTg2ZjctNmI2YTgzNmUx ZGJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTNkOWYxZTUtMTY0Mi00ZTEzLTlhODYtNjZjMzRkMWVkNzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvInvdfqNL7yiiI/QPHaRA+em6lhy9P6Ojbe1 OAZd52FB8kmOrSnZGdF39hQIqV560nW/1kveE8RQGK9rxXU3Kmkc9iOLe6ff4gA8 uoapHGWf3ZqPtusGcjRXokrjhlvqoIOsRgMS9NRix8KCMkQ8SapQJr9uw/YBgtnP x4WnrVQ28ZhWfY1jx8Xyi5cexc37j7qy2grgU6nOz3a6TuyygmXU/S+MDCSyrgBn +H2OCecNfYgIaIDp9T51VlR8Ew5FIq4IYdwxYfb008vnRqGJTZubZO9ewrf1kDV5 KDc/vqxSCgToiCLBAO2HQfvk/aenMytiqc0WsrzLsmAQPANmtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7agSniK6lSAhMYNgGt5qXrRYpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAx NGNkZC00YTc2LTRlZWYtODZmNy02YjZhODM2ZTFkYmYvNTM5YjVlZTUtN2RkMi0z Yjk4LWI3OWItZThhZGU4MzI1MmRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2UwMTRjZGQtNGE3Ni00ZWVmLTg2 ZjctNmI2YTgzNmUxZGJmLzdlMDE0Y2RkLTRhNzYtNGVlZi04NmY3LTZiNmE4MzZl MWRiZi5jcmwwHwYDVR0jBBgwFoAU+BgfycggLXhZ1LDvTEuljcfck+kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZTAxNGNkZC00YTc2LTRlZWYtODZmNy02YjZh ODM2ZTFkYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqPWMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEvFKKrnIhTRGBKCnJmq3eC8K4FgANp+VydzTZKE4msf6kO8o915pO2 Euby+Wv1/jiv1gfEQrEe4ibbFKps4gwhy6OriD3WMG9KGiDrGGB5CWLJDpo3aN5K Oybk+hNkTGiwb+1xsqjAF4kRLs3JCdnB0iLEG1+uWhs3hVbwxj9kiyi9VeR3+BiF fqNa0QwEt/lgvrLqwAq2Ht0iw9wSZJmbebpdRmh3+opj0hgPnEzixuQMdFJlA7LG eNfWWt7uCvHYNEVAwdrXwOx0Puce5Cec6/uwWi1sFlIneS+DC0DRy6+pQdStLRqR ehrbFMH28i1LIma+b7TOVyqueAebTD4= -----END CERTIFICATE-----Generated at Wed Sep 30 03:59:58 2026 by rpki-client