$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa File: 1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa (raw, json) Hash identifier: Ldtr34UtOsAkRLcWzihDp3hlz9i9QJK39jrEmeNvCBo= Subject key identifier: 5B:89:5A:BB:AB:B7:33:A7:AB:3F:71:B2:3B:F4:BF:09:99:61:90:F0 Certificate issuer: /CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a Certificate serial: 010D0C9F4328584F71ED74814A720346CE2DA500 Authority key identifier: F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 140.232.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:74:81:4a:72:03:46:ce:2d:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=1c417c5c-3d78-454a-8be5-1b3a3f4a48e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:04:17:40:38:8c:7c:a8:12:60:6d:6a:ba:ad: 40:19:f6:f0:0d:b3:50:dd:df:7f:3b:16:bf:6a:c6: 88:e6:9b:6a:62:ec:1c:55:75:da:dc:f0:42:f2:16: 57:b4:ce:82:9e:60:bd:d7:87:5a:76:45:5e:42:2a: 50:0a:e5:67:a4:09:20:be:a1:2d:49:bb:28:12:2a: a7:92:e6:a5:11:ee:98:58:35:e9:b6:f0:f7:f5:80: ff:cb:42:9a:15:1a:b1:14:56:90:0e:8d:1e:08:05: 12:07:a1:d7:3c:4b:85:22:0b:82:dc:c0:a0:c6:41: ef:62:18:e4:5d:49:fd:83:49:d6:1f:67:1f:ab:1d: d2:99:31:88:fe:97:0a:68:cf:31:9d:57:88:7c:f0: 0f:0a:7b:34:52:00:5f:af:0d:24:0e:b7:c5:b8:f2: 3e:fa:d9:6e:27:4d:d2:55:a1:e6:27:4b:37:5e:bb: 34:32:81:88:d1:22:6c:e6:69:4f:e4:a8:ba:58:10: 46:ab:ed:c0:bc:66:24:72:60:32:e2:e5:48:36:eb: df:6e:52:45:9c:86:75:5c:6a:1a:f5:c8:80:3c:79: a3:e0:ef:f7:57:b5:1b:6c:43:4d:17:88:ed:22:53: 32:c7:65:dc:03:9d:13:4d:97:6e:f5:dd:51:17:64: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:89:5A:BB:AB:B7:33:A7:AB:3F:71:B2:3B:F4:BF:09:99:61:90:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1d8a10dc-4e60-3b51-82ef-4f9d9440171e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.crl X509v3 Authority Key Identifier: keyid:F9:63:99:2F:D9:38:EF:61:DA:5E:1C:07:5D:D5:10:BA:FD:12:AD:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1c7d1cf6-ca55-4d4f-a51d-735d08e3d66a.cer sbgp-ipAddrBlock: critical IPv4: 140.232.76.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:b5:f4:94:9d:a5:6c:af:e8:65:11:28:fe:f1:fe:31:2e:d9: 0e:4a:1e:7f:36:59:ff:14:f5:d1:de:1e:34:a6:f3:41:c6:c0: 43:5a:15:1a:11:88:65:77:73:51:e0:22:6a:c2:e6:55:a6:d4: 8d:57:e7:2e:31:2d:de:21:77:f2:6c:26:c7:6f:26:00:a6:be: c1:95:30:b5:bc:87:13:9e:75:94:e7:18:6a:f5:58:0e:27:e7: 42:d2:f8:2b:91:45:8f:90:a3:7a:43:78:d9:40:e8:0c:2f:03: 81:73:de:08:bc:b1:0b:42:04:9f:37:c9:72:e7:ea:00:50:0a: 3c:96:a5:74:4d:3d:74:4b:07:65:85:3f:84:5a:bf:ee:c8:80: 3b:ea:16:b9:77:49:3a:4b:2b:b0:50:3a:26:8d:1f:90:33:bd: 8c:ff:63:e9:69:17:94:f4:2e:25:c2:e4:00:b6:da:20:83:31: 48:26:7b:24:1d:23:ac:24:cd:a0:7a:4c:99:37:00:b7:b3:15: 77:52:ce:75:c1:56:82:78:80:36:4e:2d:c7:5c:73:d0:a2:c1: 64:2c:79:50:56:2f:8e:13:52:19:14:65:0e:86:e0:66:ec:62: 46:8e:c9:a7:64:c7:85:23:26:a2:b4:28:4f:6f:2d:7e:5b:91: d2:7b:7b:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7XSBSnIDRs4tpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM3ZDFjZjYtY2E1NS00ZDRmLWE1MWQtNzM1ZDA4ZTNk NjZhMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MWM0MTdjNWMtM2Q3OC00NTRhLThiZTUtMWIzYTNmNGE0OGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgQXQDiMfKgSYG1quq1AGfbwDbNQ3d9/Oxa/ asaI5ptqYuwcVXXa3PBC8hZXtM6CnmC914dadkVeQipQCuVnpAkgvqEtSbsoEiqn kualEe6YWDXptvD39YD/y0KaFRqxFFaQDo0eCAUSB6HXPEuFIguC3MCgxkHvYhjk XUn9g0nWH2cfqx3SmTGI/pcKaM8xnVeIfPAPCns0UgBfrw0kDrfFuPI++tluJ03S VaHmJ0s3Xrs0MoGI0SJs5mlP5Ki6WBBGq+3AvGYkcmAy4uVINuvfblJFnIZ1XGoa 9ciAPHmj4O/3V7UbbENNF4jtIlMyx2XcA50TTZdu9d1RF2ROBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFuJWrurtzOnqz9xsjv0vwmZYZDwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8xYzdk MWNmNi1jYTU1LTRkNGYtYTUxZC03MzVkMDhlM2Q2NmEvMWQ4YTEwZGMtNGU2MC0z YjUxLTgyZWYtNGY5ZDk0NDAxNzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMWM3ZDFjZjYtY2E1NS00ZDRmLWE1 MWQtNzM1ZDA4ZTNkNjZhLzFjN2QxY2Y2LWNhNTUtNGQ0Zi1hNTFkLTczNWQwOGUz ZDY2YS5jcmwwHwYDVR0jBBgwFoAU+WOZL9k472HaXhwHXdUQuv0SrSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8xYzdkMWNmNi1jYTU1LTRkNGYtYTUxZC03MzVk MDhlM2Q2NmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOhMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy19JSdpWyv6GURKP7x/jEu2Q5KHn82Wf8U9dHeHjSm80HGwENaFRoR iGV3c1HgImrC5lWm1I1X5y4xLd4hd/JsJsdvJgCmvsGVMLW8hxOedZTnGGr1WA4n 50LS+CuRRY+Qo3pDeNlA6AwvA4Fz3gi8sQtCBJ83yXLn6gBQCjyWpXRNPXRLB2WF P4Rav+7IgDvqFrl3STpLK7BQOiaNH5AzvYz/Y+lpF5T0LiXC5AC22iCDMUgmeyQd I6wkzaB6TJk3ALezFXdSznXBVoJ4gDZOLcdcc9CiwWQseVBWL44TUhkUZQ6G4Gbs YkaOyadkx4UjJqK0KE9vLX5bkdJ7e80= -----END CERTIFICATE-----Generated at Sun Nov 15 19:25:12 2026 by rpki-client