$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/af1935ca-c408-3890-9dfe-21db5de1e40f.roa File: af1935ca-c408-3890-9dfe-21db5de1e40f.roa (raw, json) Hash identifier: Eq+yIBWENoh3uqz8THs8+QUm6VlxQgf/QSBLSs0zEIg= Subject key identifier: F4:F6:05:78:22:41:73:D6:5E:30:B7:F7:25:62:C7:2D:B8:03:74:BE Certificate issuer: /CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Certificate serial: 010D0C9F4328584F4988D27AAFF3B41F24B71080 Authority key identifier: 18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/af1935ca-c408-3890-9dfe-21db5de1e40f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399955 IP address blocks: 140.235.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:d2:7a:af:f3:b4:1f:24:b7:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cf68654-01a9-4653-b981-d0349f39e0a5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0bc9986-26ee-4e52-ab8e-bcae71b6da59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:40:71:38:c1:b8:56:ef:28:2a:02:be:a8:18: f0:a1:b2:4a:bb:94:8a:e6:cc:68:34:6b:18:ae:ba: d9:82:69:4e:20:43:35:d5:35:00:66:3e:9e:64:f5: 22:6e:d8:82:1a:9d:aa:e9:1c:e8:04:6a:6c:f9:4b: 86:f8:ee:92:1f:15:dc:1b:05:36:cf:8c:a3:94:4b: 73:5e:4a:0d:39:c8:6b:36:b6:34:4a:c2:d1:4c:e1: d6:eb:55:59:db:e8:2f:18:ac:7d:78:5c:f3:bf:6a: f7:45:5b:6d:df:40:6c:e3:f4:cb:97:04:79:19:98: d0:85:8a:d8:4c:bb:c0:b0:7d:a4:51:d6:46:92:44: d3:64:bf:12:7a:23:d7:fb:64:dd:82:f9:da:07:0b: fd:cc:e0:04:e0:18:e9:6d:88:2d:48:a3:ec:3b:15: e4:eb:4c:31:a4:43:56:4b:ec:90:d8:cb:b7:99:20: b4:14:14:10:1d:a7:5f:92:8b:c3:a0:8b:bd:df:21: 25:da:c2:27:92:f8:61:97:77:e1:13:e7:fe:5a:bf: ae:3a:ff:d2:20:63:53:b4:2a:da:19:61:98:92:57: 2a:96:6c:7c:1a:74:f1:9f:08:71:e3:d0:6c:84:ef: 89:a2:c1:b6:07:eb:05:04:7b:4c:06:e8:94:3a:8e: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F6:05:78:22:41:73:D6:5E:30:B7:F7:25:62:C7:2D:B8:03:74:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/af1935ca-c408-3890-9dfe-21db5de1e40f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5/9cf68654-01a9-4653-b981-d0349f39e0a5.crl X509v3 Authority Key Identifier: keyid:18:21:EA:E5:D6:56:8C:F3:BB:76:A4:4B:12:26:E0:B8:E7:9F:90:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9cf68654-01a9-4653-b981-d0349f39e0a5.cer sbgp-ipAddrBlock: critical IPv4: 140.235.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:1b:0f:f5:ba:b1:76:91:9d:76:33:1f:bf:fa:0d:60:71:d5: 78:91:f6:3b:b9:fc:fd:cf:4a:11:6b:26:cd:71:b8:cb:0b:06: 93:1e:43:83:00:e9:52:62:82:35:4e:bb:32:4d:55:e6:48:9c: 15:cd:42:86:70:56:cd:ce:3d:9b:71:1a:31:31:8f:68:04:0d: 4a:7e:67:46:96:b0:06:dc:68:ba:17:99:82:83:43:0d:bd:1a: ea:53:b0:78:f5:eb:6d:05:d4:ff:6e:db:56:0b:1c:76:b4:08: e7:5a:dc:d3:b0:04:5a:cb:db:4b:0d:50:77:1b:b9:87:2c:87: 67:53:5e:e7:c7:c7:d3:80:15:20:1a:04:a3:f9:b5:3c:86:f8: e2:cd:c0:23:ce:5a:d8:e0:9e:21:45:24:a2:e1:63:94:ba:35: 35:60:24:d3:2d:07:87:8a:7c:4a:b0:f0:ec:0d:de:37:a5:c8: 26:86:dd:93:12:b5:91:b0:88:2b:5c:81:3d:c6:48:83:07:e4: 13:eb:00:b5:b4:3a:ed:cf:98:67:2a:d7:0b:24:50:35:c8:c0: b7:7e:a4:86:3f:f6:ce:75:a5:c0:88:b9:fa:35:78:6a:29:30: db:f7:0a:22:1d:0d:6d:97:62:2d:42:96:5f:dd:d4:bd:ce:a1: 5a:8c:58:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiNJ6r/O0HyS3EIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmNjg2NTQtMDFhOS00NjUzLWI5ODEtZDAzNDlmMzll MGE1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBiYzk5ODYtMjZlZS00ZTUyLWFiOGUtYmNhZTcxYjZkYTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkBxOMG4Vu8oKgK+qBjwobJKu5SK5sxoNGsY rrrZgmlOIEM11TUAZj6eZPUibtiCGp2q6RzoBGps+UuG+O6SHxXcGwU2z4yjlEtz XkoNOchrNrY0SsLRTOHW61VZ2+gvGKx9eFzzv2r3RVtt30Bs4/TLlwR5GZjQhYrY TLvAsH2kUdZGkkTTZL8SeiPX+2TdgvnaBwv9zOAE4BjpbYgtSKPsOxXk60wxpENW S+yQ2Mu3mSC0FBQQHadfkovDoIu93yEl2sInkvhhl3fhE+f+Wr+uOv/SIGNTtCra GWGYklcqlmx8GnTxnwhx49BshO+JosG2B+sFBHtMBuiUOo7vIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT2BXgiQXPWXjC39yVixy24A3S+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2 ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0OWYzOWUwYTUvYWYxOTM1Y2EtYzQwOC0z ODkwLTlkZmUtMjFkYjVkZTFlNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWNmNjg2NTQtMDFhOS00NjUzLWI5 ODEtZDAzNDlmMzllMGE1LzljZjY4NjU0LTAxYTktNDY1My1iOTgxLWQwMzQ5ZjM5 ZTBhNS5jcmwwHwYDVR0jBBgwFoAUGCHq5dZWjPO7dqRLEibguOefkNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85Y2Y2ODY1NC0wMWE5LTQ2NTMtYjk4MS1kMDM0 OWYzOWUwYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOssMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgbD/W6sXaRnXYzH7/6DWBx1XiR9ju5/P3PShFrJs1xuMsLBpMeQ4MA 6VJigjVOuzJNVeZInBXNQoZwVs3OPZtxGjExj2gEDUp+Z0aWsAbcaLoXmYKDQw29 GupTsHj1620F1P9u21YLHHa0COda3NOwBFrL20sNUHcbuYcsh2dTXufHx9OAFSAa BKP5tTyG+OLNwCPOWtjgniFFJKLhY5S6NTVgJNMtB4eKfEqw8OwN3jelyCaG3ZMS tZGwiCtcgT3GSIMH5BPrALW0Ou3PmGcq1wskUDXIwLd+pIY/9s51pcCIufo1eGop MNv3CiIdDW2XYi1Cll/d1L3OoVqMWBg= -----END CERTIFICATE-----Generated at Sun Oct 4 22:15:45 2026 by rpki-client