$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03e6a030-1021-3a5f-a848-29aa521df8d3.roa File: 03e6a030-1021-3a5f-a848-29aa521df8d3.roa (raw, json) Hash identifier: wtVcUh+KGfV4fmusVEdOyrwCTUwngsf08Q2pOTO2ymU= Subject key identifier: 99:3F:7D:35:CB:6E:CC:F3:97:3F:A4:2B:A5:DC:69:AB:EA:F7:15:AA Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F448FA55DAD8957079F14EF00 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03e6a030-1021-3a5f-a848-29aa521df8d3.roa Signing time: Wed 23 Sep 2026 06:59:51 +0000 ROA not before: Wed 23 Sep 2026 06:59:51 +0000 ROA not after: Tue 22 Dec 2026 07:59:51 +0000 asID: 209554 IP address blocks: 140.235.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:44:8f:a5:5d:ad:89:57:07:9f:14:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Sep 23 06:59:51 2026 GMT Not After : Dec 22 07:59:51 2026 GMT Subject: CN=d92ab000-09b4-4165-a444-a0617e5422e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:54:b1:c6:55:67:e3:55:d3:77:38:85:56: 29:37:21:f8:83:ed:a9:03:a7:24:02:d7:30:10:2e: 3f:98:11:41:4e:78:9e:28:d2:89:89:78:22:2c:b7: c1:75:01:6a:8b:74:c5:fa:b3:54:e6:f7:09:bf:8e: ca:51:7a:31:ff:8c:03:e8:7f:27:ed:f8:06:6f:ec: d8:6a:85:da:69:ae:75:5a:33:d1:c1:db:97:da:7d: ef:c4:8d:89:00:06:bf:f7:38:d8:a1:df:55:9c:6a: 94:e4:6b:5f:04:f2:44:aa:b5:1a:07:48:3b:16:d6: 8c:fd:e1:3f:98:72:55:29:d9:39:93:f6:36:ca:9a: 4c:fe:8d:11:3e:0f:41:4d:54:6a:50:e8:9c:b3:88: 88:ff:55:74:cc:dd:5a:1b:1e:e5:34:28:cd:02:3e: fb:46:e3:f8:2d:03:e8:79:96:03:b4:4d:f3:09:36: 4b:2a:d5:01:88:a5:9a:5a:19:1c:49:54:3c:3c:c6: 6b:c7:44:54:df:2d:5b:27:b6:d0:ba:36:be:de:fd: df:c3:76:d5:e3:a5:15:da:01:4d:f4:2a:43:1c:b9: ba:ca:3e:b2:1e:d9:e1:52:1e:3d:04:2b:53:22:bf: 42:4c:6a:66:2e:fa:a4:40:41:29:ed:43:d1:29:a8: a4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:3F:7D:35:CB:6E:CC:F3:97:3F:A4:2B:A5:DC:69:AB:EA:F7:15:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/03e6a030-1021-3a5f-a848-29aa521df8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:7c:55:aa:d6:2c:51:61:38:51:59:d3:4e:ec:b3:92:c1:b7: e2:7c:8c:ad:37:3f:bb:bc:18:59:56:c1:f3:b1:ee:19:95:06: 99:c6:25:51:17:b8:a0:d6:95:46:28:81:4a:8a:ed:fb:0f:b8: f2:69:0c:29:8a:89:4d:0c:4b:c8:38:c3:6b:a3:41:61:4c:b5: f9:d5:65:3a:64:6d:b5:db:75:62:8e:20:1e:d1:d1:08:25:9d: 41:c2:a7:d7:a7:1a:67:1a:d6:83:e0:d5:96:71:a3:c3:15:ec: d0:7a:1f:21:6f:11:a5:d5:97:1b:6c:09:66:12:db:f2:4d:52: 06:6a:c3:7a:b2:76:86:48:4f:1e:f2:b2:d5:25:2c:b9:a1:99: 8e:5f:81:82:5e:f0:56:19:29:c6:5a:6d:a7:cc:6e:a1:8f:7b: ca:b3:b4:f6:df:85:10:2f:6f:30:48:a4:a4:b2:fd:de:f5:64: df:56:3a:4c:6b:e4:d5:1e:7e:a6:32:23:18:cd:13:81:72:2f: 6b:9c:e7:5a:0b:15:81:5b:0c:45:85:32:75:0d:52:ee:5f:30: 9a:f0:8c:ac:c1:60:2b:4a:d5:e9:5c:89:a9:23:76:72:0d:a0: 14:25:f4:98:76:6f:4d:19:ec:bc:a6:30:fb:51:ce:f1:fd:cb: 6b:ea:22:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ej6VdrYlXB58U7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDkyMzA2NTk1MVoXDTI2MTIyMjA3NTk1MVowLzEtMCsGA1UEAxMk ZDkyYWIwMDAtMDliNC00MTY1LWE0NDQtYTA2MTdlNTQyMmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRRUscZVZ+NV03c4hVYpNyH4g+2pA6ckAtcw EC4/mBFBTnieKNKJiXgiLLfBdQFqi3TF+rNU5vcJv47KUXox/4wD6H8n7fgGb+zY aoXaaa51WjPRwduX2n3vxI2JAAa/9zjYod9VnGqU5GtfBPJEqrUaB0g7FtaM/eE/ mHJVKdk5k/Y2yppM/o0RPg9BTVRqUOics4iI/1V0zN1aGx7lNCjNAj77RuP4LQPo eZYDtE3zCTZLKtUBiKWaWhkcSVQ8PMZrx0RU3y1bJ7bQuja+3v3fw3bV46UV2gFN 9CpDHLm6yj6yHtnhUh49BCtTIr9CTGpmLvqkQEEp7UPRKaik7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJk/fTXLbszzlz+kK6Xcaavq9xWqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMDNlNmEwMzAtMTAyMS0z YTVmLWE4NDgtMjlhYTUyMWRmOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF18VarWLFFhOFFZ007ss5LBt+J8jK03P7u8GFlWwfOx7hmVBpnGJVEX uKDWlUYogUqK7fsPuPJpDCmKiU0MS8g4w2ujQWFMtfnVZTpkbbXbdWKOIB7R0Qgl nUHCp9enGmca1oPg1ZZxo8MV7NB6HyFvEaXVlxtsCWYS2/JNUgZqw3qydoZITx7y stUlLLmhmY5fgYJe8FYZKcZabafMbqGPe8qztPbfhRAvbzBIpKSy/d71ZN9WOkxr 5NUefqYyIxjNE4FyL2uc51oLFYFbDEWFMnUNUu5fMJrwjKzBYCtK1elciakjdnIN oBQl9Jh2b00Z7LymMPtRzvH9y2vqIqw= -----END CERTIFICATE-----Generated at Thu Sep 24 21:47:59 2026 by rpki-client