$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa File: 3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa (raw, json) Hash identifier: YQqRyyuRtK2LSMxegib0Cg26TOOE8Rl6yYK5b5TPxOA= Subject key identifier: 27:3F:FE:03:97:7D:CD:0E:45:E2:F0:42:A2:5C:B2:AE:CE:EB:D9:ED Certificate issuer: /CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Certificate serial: 010D0C9F4328584F498C1EC9F1DC4A8D09394620 Authority key identifier: 95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 5065 IP address blocks: 165.140.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:1e:c9:f1:dc:4a:8d:09:39:46:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91625b8e-8d13-496f-b542-d170ffd5f3fa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a713c69-e014-46c1-baf7-0b8559738acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:dd:08:d7:5e:97:22:eb:38:a6:b2:c7:9d:c0: 7d:14:9d:11:1e:7b:84:a0:e5:b3:43:82:f4:d5:4d: 1e:94:06:3b:e5:5a:df:8b:10:61:e3:e6:96:fa:02: 2d:16:ee:dc:1d:e8:ee:e1:42:f6:b6:27:1e:59:77: 62:c9:49:c0:c8:20:a2:f9:cf:fc:6a:22:f4:78:54: 9e:66:10:cf:b4:bf:77:4a:83:65:18:ef:45:f3:5b: 72:9c:f4:47:91:d3:89:c2:87:9f:5c:a1:83:95:01: 70:db:2a:d0:ec:73:01:cf:c2:1c:ef:c7:40:16:6f: 06:5e:20:b3:ef:e9:d4:e3:a2:41:35:24:67:9d:72: 18:e7:75:46:eb:54:2f:2c:b2:b5:7a:77:81:74:a9: 63:11:37:76:34:f3:34:c4:58:63:ca:ee:94:5a:d3: a2:18:4c:96:fa:06:94:06:2b:00:60:5b:5b:af:ec: b3:6b:7b:11:72:4d:b5:4e:ec:07:5a:50:06:8d:fc: 08:cf:1b:2a:fe:64:f5:d4:00:6b:45:ac:fe:28:90: 40:f3:56:7d:9d:14:94:58:69:a3:ca:cd:30:88:bf: 4a:da:f9:49:0a:12:8f:25:5b:2e:e7:c3:f9:42:ae: 80:41:4c:d8:a6:d0:40:bc:e0:cd:08:3a:3d:5f:b9: c3:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3F:FE:03:97:7D:CD:0E:45:E2:F0:42:A2:5C:B2:AE:CE:EB:D9:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/3c8de3f1-efb5-3d06-828f-08fd5a84b5e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa/91625b8e-8d13-496f-b542-d170ffd5f3fa.crl X509v3 Authority Key Identifier: keyid:95:FB:5D:E7:EF:B4:C2:B8:11:C6:9D:03:8B:30:45:BC:DE:09:10:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/91625b8e-8d13-496f-b542-d170ffd5f3fa.cer sbgp-ipAddrBlock: critical IPv4: 165.140.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a3:24:ae:67:a4:f9:47:88:33:ee:06:f4:59:b9:2f:c8:36: 3a:25:59:a7:c2:63:17:26:f7:f7:38:c3:da:d5:9d:69:8a:19: 9a:b2:a8:7a:5f:30:3e:ae:59:17:d9:9f:98:c1:83:67:04:5e: 5f:ba:c1:65:3a:71:a3:33:5f:4d:70:a2:3b:6a:14:31:6a:60: 17:3b:47:ea:41:aa:10:d6:37:86:c8:93:cb:5c:1d:44:a1:08: e4:81:ca:cc:9a:b6:24:4d:3c:37:5c:ff:d6:6f:ad:d8:1e:73: f9:bb:df:e4:fa:d7:36:2a:29:cf:94:92:97:f9:9f:92:d5:c1: db:50:91:43:08:d1:4d:e5:ac:70:8f:6f:12:d2:4a:77:a5:f0: 65:29:2a:18:02:04:c0:6b:cf:0d:ff:04:7c:2e:1c:ae:0e:e1: f0:88:5f:c1:c2:a8:96:6e:22:45:9d:b7:8a:d1:cc:31:a0:5f: 8c:c8:4c:a3:8d:c3:ff:b9:7f:2b:36:d8:ba:a2:23:a4:2b:ff: a1:79:0a:8e:82:78:24:20:d8:65:83:01:2d:dc:32:30:d0:66: 18:c2:f4:52:f2:a4:e2:df:b7:fa:d2:09:eb:e1:41:c9:e8:72: de:9b:42:c0:2f:c1:77:da:3d:5d:05:b7:40:5f:13:f1:70:60: b3:fb:d4:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjB7J8dxKjQk5RiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE2MjViOGUtOGQxMy00OTZmLWI1NDItZDE3MGZmZDVm M2ZhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE3MTNjNjktZTAxNC00NmMxLWJhZjctMGI4NTU5NzM4YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh90I116XIus4prLHncB9FJ0RHnuEoOWzQ4L0 1U0elAY75VrfixBh4+aW+gItFu7cHeju4UL2ticeWXdiyUnAyCCi+c/8aiL0eFSe ZhDPtL93SoNlGO9F81tynPRHkdOJwoefXKGDlQFw2yrQ7HMBz8Ic78dAFm8GXiCz 7+nU46JBNSRnnXIY53VG61QvLLK1eneBdKljETd2NPM0xFhjyu6UWtOiGEyW+gaU BisAYFtbr+yza3sRck21TuwHWlAGjfwIzxsq/mT11ABrRaz+KJBA81Z9nRSUWGmj ys0wiL9K2vlJChKPJVsu58P5Qq6AQUzYptBAvODNCDo9X7nDFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCc//gOXfc0OReLwQqJcsq7O69ntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy85MTYy NWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcwZmZkNWYzZmEvM2M4ZGUzZjEtZWZiNS0z ZDA2LTgyOGYtMDhmZDVhODRiNWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOTE2MjViOGUtOGQxMy00OTZmLWI1 NDItZDE3MGZmZDVmM2ZhLzkxNjI1YjhlLThkMTMtNDk2Zi1iNTQyLWQxNzBmZmQ1 ZjNmYS5jcmwwHwYDVR0jBBgwFoAUlftd5++0wrgRxp0DizBFvN4JEKswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy85MTYyNWI4ZS04ZDEzLTQ5NmYtYjU0Mi1kMTcw ZmZkNWYzZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApYzAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2jJK5npPlHiDPuBvRZuS/INjolWafCYxcm9/c4w9rVnWmKGZqyqHpf MD6uWRfZn5jBg2cEXl+6wWU6caMzX01wojtqFDFqYBc7R+pBqhDWN4bIk8tcHUSh COSBysyatiRNPDdc/9Zvrdgec/m73+T61zYqKc+Ukpf5n5LVwdtQkUMI0U3lrHCP bxLSSnel8GUpKhgCBMBrzw3/BHwuHK4O4fCIX8HCqJZuIkWdt4rRzDGgX4zITKON w/+5fys22LqiI6Qr/6F5Co6CeCQg2GWDAS3cMjDQZhjC9FLypOLft/rSCevhQcno ct6bQsAvwXfaPV0Ft0BfE/FwYLP71Bk= -----END CERTIFICATE-----Generated at Fri Sep 25 16:15:54 2026 by rpki-client