$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa File: 2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa (raw, json) Hash identifier: GKYSkNvlYQumb3DkP4XOvVasNRuKcdP1ec/YFEMOCOg= Subject key identifier: 77:AF:25:77:96:19:68:E8:4E:B9:C3:91:C5:53:2D:25:1B:49:8B:25 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F00DCC96692CF807948AD1500 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 3320 IP address blocks: 141.140.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:c9:66:92:cf:80:79:48:ad:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=a7ee3705-dc0f-4f76-93a9-11f54106a7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:0f:31:9c:96:ab:7b:11:3f:38:9e:2c:4c:36: b7:3f:78:b2:69:11:ab:ca:83:c5:f7:a6:db:8c:fd: 91:fa:79:8f:83:4e:9a:f4:c1:d9:f6:ac:81:13:46: 3d:6f:ab:f2:7d:9e:9f:8a:cc:82:c6:d6:f4:14:f7: 41:c7:f3:83:bf:53:10:8f:ad:6e:d9:5f:3e:29:8f: 20:df:d2:49:09:47:f7:99:70:f5:2d:60:af:f0:f0: 7a:81:91:41:34:cd:24:82:a5:d7:56:f9:59:95:ea: b5:44:b5:e2:1d:de:d6:f9:45:83:8a:d7:fa:ce:c1: 09:62:5c:f6:17:19:22:68:1a:7a:43:2d:ab:09:0b: 54:21:81:4b:e3:33:65:9e:22:ee:68:ca:77:4d:1a: 38:b4:9c:94:60:02:14:9a:b5:00:a5:f4:6a:d0:e6: 04:7c:d9:d3:a4:1f:16:ac:c0:c8:5e:fb:1f:1f:ff: 6d:d5:62:f5:16:dd:65:e5:e5:fa:ff:42:c6:f3:80: 73:78:29:98:61:07:40:9a:c6:b7:b9:f6:29:0e:54: a4:87:84:44:37:c1:8d:95:39:e9:53:e7:82:0f:49: a6:09:1d:ad:36:36:47:a3:2c:e5:5b:1b:8f:89:a6: ac:bd:2b:1a:bf:93:6b:2c:63:47:03:d7:4b:28:ed: b1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AF:25:77:96:19:68:E8:4E:B9:C3:91:C5:53:2D:25:1B:49:8B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/2c6cdb0a-57a8-324b-aa01-dd9461a74ba0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:52:62:8c:e8:34:bc:78:87:32:28:36:14:b8:59:28:2a:30: bd:c6:e1:b9:2b:cc:66:aa:9f:38:02:6a:64:69:ac:03:b6:6f: 7e:99:c4:14:54:31:56:7a:02:2c:67:13:fc:af:45:07:fe:2f: 47:54:cf:75:0a:77:17:c5:86:e6:83:8d:58:90:c3:83:cb:8a: fd:ba:bf:27:61:65:61:48:6f:ce:81:c8:a3:67:92:be:7a:42: 9c:4a:22:4c:9c:5d:90:6e:ca:30:00:62:f5:fb:87:b1:36:49: eb:a4:75:d0:06:02:fd:4a:ee:e3:af:5b:2d:62:3b:d4:7d:30: 60:56:b8:91:13:1c:aa:50:f3:c9:26:30:d1:3d:6c:64:f7:16: 24:f4:a3:0b:64:94:c3:71:6d:f5:50:f1:7b:49:df:46:50:34: 74:f8:f4:7f:fb:17:61:c8:e7:60:99:ed:37:fa:d0:9f:1b:ac: 4a:82:5b:d3:dc:d1:71:70:27:69:c4:c8:bf:63:8f:ff:22:17: cc:3d:41:5d:43:0a:d9:34:60:5f:3c:40:a1:5f:54:85:a9:f7: 1e:f5:83:9c:38:7e:bf:ca:a1:2f:df:46:44:09:76:65:42:f2: 2f:b8:b0:c3:23:a8:37:35:10:0a:c9:1e:4c:c2:92:3c:60:d4: fd:b4:b2:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8A3Mlmks+AeUitFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk YTdlZTM3MDUtZGMwZi00Zjc2LTkzYTktMTFmNTQxMDZhN2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQ8xnJarexE/OJ4sTDa3P3iyaRGryoPF96bb jP2R+nmPg06a9MHZ9qyBE0Y9b6vyfZ6fisyCxtb0FPdBx/ODv1MQj61u2V8+KY8g 39JJCUf3mXD1LWCv8PB6gZFBNM0kgqXXVvlZleq1RLXiHd7W+UWDitf6zsEJYlz2 FxkiaBp6Qy2rCQtUIYFL4zNlniLuaMp3TRo4tJyUYAIUmrUApfRq0OYEfNnTpB8W rMDIXvsfH/9t1WL1Ft1l5eX6/0LG84BzeCmYYQdAmsa3ufYpDlSkh4REN8GNlTnp U+eCD0mmCR2tNjZHoyzlWxuPiaasvSsav5NrLGNHA9dLKO2xOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHevJXeWGWjoTrnDkcVTLSUbSYslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMmM2Y2RiMGEtNTdhOC0z MjRiLWFhMDEtZGQ5NDYxYTc0YmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVSYozoNLx4hzIoNhS4WSgqML3G4bkrzGaqnzgCamRprAO2b36ZxBRU MVZ6AixnE/yvRQf+L0dUz3UKdxfFhuaDjViQw4PLiv26vydhZWFIb86ByKNnkr56 QpxKIkycXZBuyjAAYvX7h7E2SeukddAGAv1K7uOvWy1iO9R9MGBWuJETHKpQ88km MNE9bGT3FiT0owtklMNxbfVQ8XtJ30ZQNHT49H/7F2HI52CZ7Tf60J8brEqCW9Pc 0XFwJ2nEyL9jj/8iF8w9QV1DCtk0YF88QKFfVIWp9x71g5w4fr/KoS/fRkQJdmVC 8i+4sMMjqDc1EArJHkzCkjxg1P20slo= -----END CERTIFICATE-----Generated at Tue Sep 22 23:24:10 2026 by rpki-client