$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/1ea0d2e8-9f7e-3338-9fd2-b13f19ea716d.roa File: 1ea0d2e8-9f7e-3338-9fd2-b13f19ea716d.roa (raw, json) Hash identifier: DykSZ+TQSs95Us6Bi9tgK7td/kpojvT6Tk5AmRDpFeA= Subject key identifier: A7:22:02:53:8D:E8:D9:77:08:74:D0:32:53:BF:C8:C6:40:E0:59:50 Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Certificate serial: 010D0C9F4328584F7352E2C1E61E9FCBC2897800 Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/1ea0d2e8-9f7e-3338-9fd2-b13f19ea716d.roa Signing time: Sat 10 Oct 2026 01:00:13 +0000 ROA not before: Sat 10 Oct 2026 01:00:13 +0000 ROA not after: Fri 08 Jan 2027 02:00:13 +0000 asID: 22773 IP address blocks: 140.235.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:73:52:e2:c1:e6:1e:9f:cb:c2:89:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Validity Not Before: Oct 10 01:00:13 2026 GMT Not After : Jan 8 02:00:13 2027 GMT Subject: CN=f847ed8c-7b67-4d7c-978e-77a15e37a835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:99:ad:ee:e5:75:22:89:67:d4:0c:5c:34:68: f2:5a:74:ff:7f:b3:76:ee:24:62:75:e4:55:91:56: f0:59:a4:c4:66:a0:ef:b5:dd:42:ec:0b:20:44:aa: 8b:e1:b9:92:83:63:81:df:62:c8:9f:0e:54:e5:74: 7b:a0:7d:fc:d9:ec:1a:86:91:6b:39:30:47:11:46: 55:04:1b:21:9b:73:8f:70:00:d1:53:86:ef:63:fe: 92:81:bc:af:b9:e4:bd:45:13:90:8c:97:7f:70:c4: b4:29:5c:97:20:b1:6e:b9:b3:96:5b:3a:f4:ec:85: be:77:f9:cd:1f:50:90:fa:f5:cf:b1:7b:40:ff:7e: be:e5:5a:c6:0f:f6:cd:48:c5:f8:be:e7:4d:1a:4e: 12:84:bc:3f:e6:82:b7:58:48:85:f7:d8:15:bb:e5: 7f:88:c4:91:9d:30:1c:64:2e:fd:c3:a7:b8:84:ed: 0a:07:9c:6b:52:38:8d:81:cc:ea:75:cb:bf:9c:fd: dd:b6:aa:ae:c4:d0:db:bf:fa:a7:55:b9:2a:ff:52: f7:9d:58:9f:41:8d:c5:9b:7d:4d:28:19:3e:d5:f4: 6f:b6:a3:88:df:b8:0d:b0:71:2b:2e:54:44:c6:a0: 97:28:81:a6:28:5b:d7:31:03:cf:93:cd:30:16:5d: 9d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:22:02:53:8D:E8:D9:77:08:74:D0:32:53:BF:C8:C6:40:E0:59:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/1ea0d2e8-9f7e-3338-9fd2-b13f19ea716d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl X509v3 Authority Key Identifier: keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a8:2e:af:4f:1a:0e:99:b4:e2:df:f1:de:7b:dd:23:80:51: 8b:6e:d6:60:ff:99:a9:fc:bc:b7:70:1a:43:b5:3b:33:84:78: 79:a0:03:5e:2b:33:63:dd:2b:2d:bf:79:8b:04:17:49:fd:ea: b8:72:c5:4d:36:6b:0e:1f:81:79:f7:44:a4:81:35:8c:95:e4: a1:12:b3:93:ad:5d:da:52:49:4d:3b:02:05:83:b7:09:33:0c: 34:22:72:fb:25:91:06:b0:74:94:d2:34:61:3d:a6:b7:8f:81: 84:2c:ff:03:9e:6a:ef:f4:44:10:88:41:a4:76:5b:e8:c7:f4: 89:b2:18:0a:66:b9:99:8d:75:96:9d:a1:e6:fc:8c:3b:74:77: 7b:2c:32:78:bb:aa:45:cd:2b:6c:cd:14:22:1f:72:63:6a:a3: bd:d8:e8:65:11:86:38:c1:d0:dc:57:91:c2:5b:0a:c9:ba:5f: 75:e2:fb:bf:27:e4:b0:87:1a:16:03:ec:1d:57:d2:21:cb:6f: 10:f3:09:dc:94:8d:3f:21:4c:14:07:fe:9f:a6:03:19:56:65: f8:58:cc:48:5a:b9:df:0a:0e:4f:a2:53:3a:7c:5f:45:52:73: 1f:61:89:c4:82:81:59:c6:da:43:89:10:f5:e4:11:d9:67:5b: d0:ed:13:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9zUuLB5h6fy8KJeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmNjg2NTQtMDFhOS00NjUzLWI5ODEtZDAzNDlmMzll MGE1MB4XDTI2MTAxMDAxMDAxM1oXDTI3MDEwODAyMDAxM1owLzEtMCsGA1UEAxMk Zjg0N2VkOGMtN2I2Ny00ZDdjLTk3OGUtNzdhMTVlMzdhODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5mt7uV1Ioln1AxcNGjyWnT/f7N27iRideRV kVbwWaTEZqDvtd1C7AsgRKqL4bmSg2OB32LInw5U5XR7oH382ewahpFrOTBHEUZV BBshm3OPcADRU4bvY/6SgbyvueS9RROQjJd/cMS0KVyXILFuubOWWzr07IW+d/nN H1CQ+vXPsXtA/36+5VrGD/bNSMX4vudNGk4ShLw/5oK3WEiF99gVu+V/iMSRnTAc ZC79w6e4hO0KB5xrUjiNgczqdcu/nP3dtqquxNDbv/qnVbkq/1L3nVifQY3Fm31N KBk+1fRvtqOI37gNsHErLlRExqCXKIGmKFvXMQPPk80wFl2dqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKciAlON6Nl3CHTQMlO/yMZA4FlQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2 ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0OWYzOWUwYTUvMWVhMGQyZTgtOWY3ZS0z MzM4LTlmZDItYjEzZjE5ZWE3MTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWNmNjg2NTQtMDFhOS00NjUzLWI5 ODEtZDAzNDlmMzllMGE1LzljZjY4NjU0LTAxYTktNDY1My1iOTgxLWQwMzQ5ZjM5 ZTBhNS5jcmwwHwYDVR0jBBgwFoAUGCHq5dZWjPO7dqRLEibguOefkNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0 OWYzOWUwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGoLq9PGg6ZtOLf8d573SOAUYtu1mD/man8vLdwGkO1OzOEeHmgA14r M2PdKy2/eYsEF0n96rhyxU02aw4fgXn3RKSBNYyV5KESs5OtXdpSSU07AgWDtwkz DDQicvslkQawdJTSNGE9prePgYQs/wOeau/0RBCIQaR2W+jH9ImyGApmuZmNdZad oeb8jDt0d3ssMni7qkXNK2zNFCIfcmNqo73Y6GURhjjB0NxXkcJbCsm6X3Xi+78n 5LCHGhYD7B1X0iHLbxDzCdyUjT8hTBQH/p+mAxlWZfhYzEhaud8KDk+iUzp8X0VS cx9hicSCgVnG2kOJEPXkEdlnW9DtE50= -----END CERTIFICATE-----Generated at Sun Oct 11 14:39:44 2026 by rpki-client