$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa File: d8b9bbdf-01ff-3063-80c8-033d631124aa.roa (raw, json) Hash identifier: pyP+wIZK5t+BP1HUFskiMrHcaJI/HRG+TpXAca/hWBw= Subject key identifier: 3D:90:66:32:EA:FF:56:7D:BA:62:97:79:DB:B8:98:9C:0E:79:53:CA Certificate issuer: /CN=90867e5c-2c8f-4999-a134-dc9418f84496 Certificate serial: 010D0C9F4328584F549D9FB05B7789B0F0FB4640 Authority key identifier: 7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 2648 IP address blocks: 140.208.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:9f:b0:5b:77:89:b0:f0:fb:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90867e5c-2c8f-4999-a134-dc9418f84496 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=edbed251-35e4-4823-bcf9-10ae8bd321bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8d:dd:18:fe:17:af:d5:50:94:f4:90:cf:e9: 09:f2:82:77:d6:6b:e1:8d:4f:99:d9:a5:3d:51:e0: ed:95:c9:0d:81:9b:51:69:1d:6c:9c:c7:bc:98:d4: 16:f1:96:82:21:d8:64:af:19:3a:30:cc:dc:23:12: 68:6c:2e:67:3b:06:31:88:ac:05:cb:e4:4a:8b:87: aa:ab:50:ec:ff:10:1c:5d:14:2c:ba:40:09:7d:cd: 88:f9:c2:54:ea:d9:62:db:75:f0:65:c2:fa:64:11: 63:d3:d7:09:5a:1a:2a:b8:2b:ac:dc:20:f6:e6:4e: 65:e3:21:ad:0f:2e:58:ea:a9:ab:3b:e1:54:bf:8b: d4:99:30:a3:db:8a:17:cd:9b:a1:40:7a:2d:3d:9e: a7:35:fb:d6:9b:8d:de:ac:40:26:7b:e3:f9:2e:f9: d0:09:13:41:49:9f:88:70:10:91:87:92:89:ff:ed: 7f:28:4b:a7:c8:d3:6d:0c:d4:94:84:8f:e7:99:37: 61:46:d3:c9:b0:1b:dc:54:af:a3:45:e6:1c:e1:4e: 3e:4e:93:82:cb:17:2e:5d:3d:07:93:b2:d3:7f:39: 1d:ac:b9:b1:8f:fd:46:b3:d0:bc:ce:67:da:67:16: e7:ad:d3:c4:93:ad:35:10:b6:49:46:a4:62:e9:9b: e9:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:90:66:32:EA:FF:56:7D:BA:62:97:79:DB:B8:98:9C:0E:79:53:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/d8b9bbdf-01ff-3063-80c8-033d631124aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496/90867e5c-2c8f-4999-a134-dc9418f84496.crl X509v3 Authority Key Identifier: keyid:7F:CC:4B:3E:97:1E:B5:00:F6:7A:41:32:9C:50:6F:B0:B7:61:9D:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/90867e5c-2c8f-4999-a134-dc9418f84496.cer sbgp-ipAddrBlock: critical IPv4: 140.208.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ae:7f:1f:61:bf:97:73:68:87:c2:3d:c4:3d:08:c1:54:d9: 38:9d:3e:93:62:be:0b:6f:4b:3e:14:4f:bf:05:4b:f2:08:74: 50:a2:f0:10:e5:d4:50:79:9d:b1:ca:1a:18:96:78:7d:d3:b5: bb:00:c6:72:68:76:6b:a7:7c:80:53:83:39:af:eb:a8:eb:e4: 07:62:a0:b4:be:d8:db:7c:c6:20:db:1c:3b:1a:32:92:fe:49: e1:22:8a:b8:75:76:83:15:28:c2:a1:6d:a1:85:c2:9a:27:18: 1d:83:6a:0a:a2:61:b6:38:ba:71:ab:0b:b5:cb:36:64:c7:2c: 41:e4:95:67:9c:ea:48:ac:46:3e:49:ad:f1:2f:2d:97:cc:bd: 91:a7:49:63:ac:ef:56:8d:8b:75:cf:4f:f5:85:c3:8a:aa:2e: 4d:9b:55:84:4e:64:12:44:4d:72:8f:a8:39:d2:d1:9d:e9:88: 06:87:c6:37:7c:85:70:0a:74:b1:50:41:aa:89:1f:2c:58:80: 42:60:3b:a4:59:a5:55:12:33:1b:26:aa:5d:f8:64:df:aa:b8: 9b:cb:3c:f5:7c:90:fc:72:7e:c9:b3:1b:dc:31:9f:b2:f1:ee: c3:9a:cf:9c:51:ff:37:a4:3a:4b:7b:84:32:65:28:83:af:65: 5f:96:9e:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnZ+wW3eJsPD7RkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTA4NjdlNWMtMmM4Zi00OTk5LWExMzQtZGM5NDE4Zjg0 NDk2MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk ZWRiZWQyNTEtMzVlNC00ODIzLWJjZjktMTBhZThiZDMyMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjo3dGP4Xr9VQlPSQz+kJ8oJ31mvhjU+Z2aU9 UeDtlckNgZtRaR1snMe8mNQW8ZaCIdhkrxk6MMzcIxJobC5nOwYxiKwFy+RKi4eq q1Ds/xAcXRQsukAJfc2I+cJU6tli23XwZcL6ZBFj09cJWhoquCus3CD25k5l4yGt Dy5Y6qmrO+FUv4vUmTCj24oXzZuhQHotPZ6nNfvWm43erEAme+P5LvnQCRNBSZ+I cBCRh5KJ/+1/KEunyNNtDNSUhI/nmTdhRtPJsBvcVK+jReYc4U4+TpOCyxcuXT0H k7LTfzkdrLmxj/1Gs9C8zmfaZxbnrdPEk601ELZJRqRi6ZvpRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2QZjLq/1Z9umKXedu4mJwOeVPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MDg2 N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0MThmODQ0OTYvZDhiOWJiZGYtMDFmZi0z MDYzLTgwYzgtMDMzZDYzMTEyNGFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTA4NjdlNWMtMmM4Zi00OTk5LWEx MzQtZGM5NDE4Zjg0NDk2LzkwODY3ZTVjLTJjOGYtNDk5OS1hMTM0LWRjOTQxOGY4 NDQ5Ni5jcmwwHwYDVR0jBBgwFoAUf8xLPpcetQD2ekEynFBvsLdhnSwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MDg2N2U1Yy0yYzhmLTQ5OTktYTEzNC1kYzk0 MThmODQ0OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjNCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2ufx9hv5dzaIfCPcQ9CMFU2TidPpNivgtvSz4UT78FS/IIdFCi8BDl 1FB5nbHKGhiWeH3TtbsAxnJodmunfIBTgzmv66jr5AdioLS+2Nt8xiDbHDsaMpL+ SeEiirh1doMVKMKhbaGFwponGB2DagqiYbY4unGrC7XLNmTHLEHklWec6kisRj5J rfEvLZfMvZGnSWOs71aNi3XPT/WFw4qqLk2bVYROZBJETXKPqDnS0Z3piAaHxjd8 hXAKdLFQQaqJHyxYgEJgO6RZpVUSMxsmql34ZN+quJvLPPV8kPxyfsmzG9wxn7Lx 7sOaz5xR/zekOkt7hDJlKIOvZV+Wnng= -----END CERTIFICATE-----Generated at Tue Sep 29 12:54:44 2026 by rpki-client