$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d81f2399-daf6-3e96-bac4-e334023dffbe.roa File: d81f2399-daf6-3e96-bac4-e334023dffbe.roa (raw, json) Hash identifier: 1o2KeZrjFyAvHR0tvCq+AATLOikK+Ot8n5+kTpSJ2jg= Subject key identifier: 85:EE:DB:E0:38:FC:5E:89:4B:C1:AB:08:2C:97:8D:14:EB:E6:53:B9 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F4334FBAB7FD6D33084ECA480 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d81f2399-daf6-3e96-bac4-e334023dffbe.roa Signing time: Tue 22 Sep 2026 19:21:22 +0000 ROA not before: Tue 22 Sep 2026 19:21:22 +0000 ROA not after: Mon 21 Dec 2026 20:21:22 +0000 asID: 209554 IP address blocks: 140.235.8.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:34:fb:ab:7f:d6:d3:30:84:ec:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Sep 22 19:21:22 2026 GMT Not After : Dec 21 20:21:22 2026 GMT Subject: CN=d89e0826-d2e9-4448-afdf-1efb549eb1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:66:44:4d:df:32:ae:2f:af:41:cb:74:b3:a6: 00:99:03:5b:8c:fe:21:75:2c:fa:14:21:72:86:d7: e4:c9:8e:0c:89:0c:7f:88:95:6b:7f:91:f5:fc:bd: d8:dd:85:97:8a:8e:c0:02:45:7c:01:37:f4:b6:94: 99:1b:ce:59:85:de:20:1a:f9:d4:e1:00:47:10:9a: fd:97:89:36:e6:ec:64:79:63:57:06:af:a2:3a:0e: 37:10:94:ee:dd:6b:67:c3:0d:31:de:a1:5b:29:d4: 77:ea:0e:38:c2:c7:05:6c:f8:d6:ef:f5:7e:f2:16: 8f:e6:ec:ee:08:c9:26:cf:d8:60:04:05:1f:35:5b: 1e:18:17:b5:40:4b:f4:3c:ad:10:36:4a:90:c7:c0: 3d:d6:1a:fd:ed:cd:08:08:7e:cc:8e:83:31:40:44: 0c:9a:1e:6f:aa:6c:f8:20:d6:d2:4f:ef:af:f0:51: 1a:3d:08:43:93:3b:f7:08:4c:20:49:cf:ba:a1:d3: 1c:1c:b7:20:97:0d:93:57:87:2c:d8:8d:1f:7d:66: d1:bd:44:de:2b:8d:b1:29:69:33:79:e8:42:c5:33: 24:39:cb:10:07:3e:87:a0:7a:83:57:1f:00:15:9c: ea:ac:44:37:e0:8e:26:24:4b:ad:4a:39:f7:1a:f8: 46:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:EE:DB:E0:38:FC:5E:89:4B:C1:AB:08:2C:97:8D:14:EB:E6:53:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/d81f2399-daf6-3e96-bac4-e334023dffbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c4:b5:ef:e8:75:46:a7:95:ff:dc:25:00:22:33:a7:c6:42: 9a:d5:0b:64:f5:db:72:f0:e8:cf:ac:cb:d3:ef:b5:a9:ec:36: 49:fb:a5:c1:ad:de:dd:e9:d4:08:c2:aa:d0:24:13:83:f6:77: c6:b8:d3:07:10:08:de:53:10:83:52:f4:68:b8:9e:ce:b1:f1: fe:3a:5e:b0:72:97:22:2c:c1:85:55:bf:42:81:dc:61:7f:2f: 41:60:9f:66:53:2d:41:f6:bf:91:79:60:f6:64:fc:66:6e:99: 42:eb:78:3b:9b:12:0e:73:0b:0f:6a:16:4c:0a:e5:79:40:26: 35:ff:23:82:d7:9f:6c:e9:13:e4:13:a3:c5:ac:8c:ed:5f:28: 13:e1:29:81:1c:6f:f7:e7:5d:70:31:e9:7c:5d:01:fd:d0:1d: b3:07:30:f5:54:95:ae:ad:cd:b5:09:3f:2d:6c:ae:35:ff:90: 0d:29:f8:56:88:70:98:ca:5a:f8:1b:65:47:81:66:f0:01:67: 9d:90:cb:22:ed:ba:39:bc:25:8f:4b:42:d8:57:6a:14:df:06: 87:b6:d0:c5:3b:32:e3:c8:28:fc:b3:36:50:07:f4:2c:9b:d8: 96:fc:cc:e3:2d:1b:3d:63:61:73:9a:17:fb:16:a3:32:5f:21: a7:27:37:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9DNPurf9bTMITspIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDkyMjE5MjEyMloXDTI2MTIyMTIwMjEyMlowLzEtMCsGA1UEAxMk ZDg5ZTA4MjYtZDJlOS00NDQ4LWFmZGYtMWVmYjU0OWViMWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGZETd8yri+vQct0s6YAmQNbjP4hdSz6FCFy htfkyY4MiQx/iJVrf5H1/L3Y3YWXio7AAkV8ATf0tpSZG85Zhd4gGvnU4QBHEJr9 l4k25uxkeWNXBq+iOg43EJTu3Wtnww0x3qFbKdR36g44wscFbPjW7/V+8haP5uzu CMkmz9hgBAUfNVseGBe1QEv0PK0QNkqQx8A91hr97c0ICH7MjoMxQEQMmh5vqmz4 INbST++v8FEaPQhDkzv3CEwgSc+6odMcHLcglw2TV4cs2I0ffWbRvUTeK42xKWkz eehCxTMkOcsQBz6HoHqDVx8AFZzqrEQ34I4mJEutSjn3GvhGbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXu2+A4/F6JS8GrCCyXjRTr5lO5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvZDgxZjIzOTktZGFmNi0z ZTk2LWJhYzQtZTMzNDAyM2RmZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnEte/odUanlf/cJQAiM6fGQprVC2T123Lw6M+sy9PvtansNkn7pcGt 3t3p1AjCqtAkE4P2d8a40wcQCN5TEINS9Gi4ns6x8f46XrBylyIswYVVv0KB3GF/ L0Fgn2ZTLUH2v5F5YPZk/GZumULreDubEg5zCw9qFkwK5XlAJjX/I4LXn2zpE+QT o8WsjO1fKBPhKYEcb/fnXXAx6XxdAf3QHbMHMPVUla6tzbUJPy1srjX/kA0p+FaI cJjKWvgbZUeBZvABZ52QyyLtujm8JY9LQthXahTfBoe20MU7MuPIKPyzNlAH9Cyb 2Jb8zOMtGz1jYXOaF/sWozJfIacnN1k= -----END CERTIFICATE-----Generated at Thu Sep 24 01:04:08 2026 by rpki-client