$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa File: 25dcf021-d643-33d2-b7c8-9a3520f1b453.roa (raw, json) Hash identifier: 5Qb0B8zgC12No+BnxHmuqnRLeWnZN3oUvnLGPHZYznU= Subject key identifier: BE:32:59:51:CC:4B:63:66:B3:94:4F:19:8A:00:60:69:DB:BA:03:38 Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584F549DABEE3BD5B3B2E6EB9540 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 40623 IP address blocks: 140.208.0.0/18 maxlen: 18 140.208.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ab:ee:3b:d5:b3:b2:e6:eb:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=2a73423a-b96c-4e69-8cc9-3418ba699eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:97:2f:93:fc:c2:de:f3:32:93:a7:6d:38:85: 08:3d:a4:12:53:64:3f:fb:d9:c2:d7:6c:39:91:e6: 3e:87:5b:f2:a8:ba:15:67:0c:f6:c7:14:31:8a:25: ca:66:d3:44:6b:42:d8:55:b8:94:5b:eb:47:75:65: 92:ab:a6:44:49:8b:8c:77:75:bf:7f:a0:63:c0:87: c6:bd:77:18:55:4c:a9:b5:96:b3:23:9d:a6:e1:72: d7:fe:2e:46:31:99:f9:69:26:d9:1d:b3:43:a4:d2: bc:85:5e:39:b6:85:b9:29:71:90:98:a8:50:19:d8: 0a:b5:b4:6b:94:e9:93:f8:30:a0:c9:25:9a:0c:f1: ef:a3:7b:ae:80:d8:f6:8b:34:cc:62:f7:07:57:81: 91:0e:4b:79:10:04:b1:64:75:58:d1:fe:df:f6:ad: 0c:88:9b:9d:b2:fc:5b:4a:2c:c6:bd:17:59:6e:c8: fa:36:85:74:25:b5:ee:89:c2:7f:a4:18:e8:a6:98: 86:64:3f:93:c2:3f:98:ef:6e:8e:ca:ec:41:ba:3d: a9:40:3a:87:51:b8:ea:76:bc:22:d5:5c:18:c3:45: 55:a7:49:af:60:d3:e6:14:23:39:94:38:20:b3:14: 67:76:35:0f:1e:e0:c0:56:25:e3:fa:ab:db:4b:d9: 53:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:32:59:51:CC:4B:63:66:B3:94:4F:19:8A:00:60:69:DB:BA:03:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/25dcf021-d643-33d2-b7c8-9a3520f1b453.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.0.0/18 140.208.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:45:59:3b:eb:50:d8:5e:3f:61:ff:41:09:7f:8b:f6:22:d9: 94:27:76:7d:4d:ec:47:70:2d:dd:0c:fc:b7:f3:4a:cc:e4:95: d9:9b:01:b9:99:eb:82:e2:8d:ae:49:dc:3b:c3:11:a3:d0:db: d6:a3:4a:fa:29:22:65:20:f3:33:b1:97:58:9a:c4:b8:dc:ce: 9e:ec:01:5d:bb:94:ba:d2:b9:f0:00:1d:ae:34:3a:80:e4:38: fa:40:20:7b:88:49:fc:29:a9:36:ce:65:a3:57:1d:7e:a6:d8: fc:d7:04:25:e6:2e:b1:07:54:f8:b3:d1:c7:ba:b0:2b:7f:b0: 9a:eb:a2:70:77:7e:2b:f2:91:0f:bf:23:08:67:0b:4c:1f:32: 3a:33:77:f7:36:04:f3:32:cf:0f:41:4c:24:68:84:68:b3:b5: 50:3c:2d:0d:bf:4b:46:7d:20:1e:92:c5:8f:66:95:00:be:7a: 27:8c:e2:7e:c1:72:23:36:ca:ce:36:9e:21:96:d4:7e:c2:9e: 21:16:b7:1e:f4:5a:03:08:e1:eb:ec:c2:cc:4d:72:25:c0:58: 84:c0:d4:a1:a9:fb:7e:56:37:49:53:5d:8b:4d:71:a6:da:88: 29:9d:9c:14:2c:38:92:6f:70:f8:0c:1c:8f:1d:04:be:b2:3e: a4:55:e0:3a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9UnavuO9WzsubrlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MmE3MzQyM2EtYjk2Yy00ZTY5LThjYzktMzQxOGJhNjk5ZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5cvk/zC3vMyk6dtOIUIPaQSU2Q/+9nC12w5 keY+h1vyqLoVZwz2xxQxiiXKZtNEa0LYVbiUW+tHdWWSq6ZESYuMd3W/f6BjwIfG vXcYVUyptZazI52m4XLX/i5GMZn5aSbZHbNDpNK8hV45toW5KXGQmKhQGdgKtbRr lOmT+DCgySWaDPHvo3uugNj2izTMYvcHV4GRDkt5EASxZHVY0f7f9q0MiJudsvxb SizGvRdZbsj6NoV0JbXuicJ/pBjoppiGZD+Twj+Y726OyuxBuj2pQDqHUbjqdrwi 1VwYw0VVp0mvYNPmFCM5lDggsxRndjUPHuDAViXj+qvbS9lTiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFL4yWVHMS2Nms5RPGYoAYGnbugM4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvMjVkY2YwMjEtZDY0My0z M2QyLWI3YzgtOWEzNTIwZjFiNDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGjNAAAwQE jNCQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIBFWTvrUNheP2H/QQl/i/Yi2ZQndn1N7EdwLd0M/LfzSszk ldmbAbmZ64Lija5J3DvDEaPQ29ajSvopImUg8zOxl1iaxLjczp7sAV27lLrSufAA Ha40OoDkOPpAIHuISfwpqTbOZaNXHX6m2PzXBCXmLrEHVPiz0ce6sCt/sJrronB3 fivykQ+/IwhnC0wfMjozd/c2BPMyzw9BTCRohGiztVA8LQ2/S0Z9IB6SxY9mlQC+ eieM4n7BciM2ys42niGW1H7CniEWtx70WgMI4evswsxNciXAWITA1KGp+35WN0lT XYtNcabaiCmdnBQsOJJvcPgMHI8dBL6yPqRV4Do= -----END CERTIFICATE-----Generated at Tue Sep 29 19:28:19 2026 by rpki-client