$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/c87e6c92-ba23-3112-ac19-2ca262c50f9f.roa File: c87e6c92-ba23-3112-ac19-2ca262c50f9f.roa (raw, json) Hash identifier: 5dUWApqnJ3EI6y5ckRO/PpXzy+oLvflttiAquBcNBgA= Subject key identifier: E0:5E:E5:21:81:F8:6F:6F:0C:DD:2C:A0:60:9F:3B:EB:1E:48:4F:EF Certificate issuer: /CN=63c85387-a763-41a8-af51-40ad5f5da8ab Certificate serial: 010D0C9F4328584F093CE50782443855C3A60B80 Authority key identifier: 50:F2:8D:FC:47:EC:09:6A:70:C2:79:45:15:84:47:07:B9:58:A3:F2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/c87e6c92-ba23-3112-ac19-2ca262c50f9f.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 40949 IP address blocks: 192.139.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/63c85387-a763-41a8-af51-40ad5f5da8ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/63c85387-a763-41a8-af51-40ad5f5da8ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e5:07:82:44:38:55:c3:a6:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63c85387-a763-41a8-af51-40ad5f5da8ab Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=7ad872e2-7a14-405d-a09c-51fcaf71856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:45:8c:52:2f:ab:33:51:00:c7:73:fe:8c:11: 14:ea:4c:8e:38:53:bf:cf:c8:0f:82:ea:99:9c:a0: 95:6a:55:af:08:9a:6a:84:3f:40:55:e2:cf:e8:08: bf:2e:cd:c5:13:6b:bb:69:db:a8:e6:ae:a1:67:32: 90:6d:98:fa:d9:2b:d7:63:23:3f:84:78:df:78:51: e5:a2:85:68:62:78:a0:fb:42:59:24:23:c9:3f:77: bc:7a:a9:84:56:6c:e9:1e:d9:07:ce:be:eb:f2:ef: dd:3b:63:08:8b:3b:9d:3f:c9:02:e3:33:46:0f:95: a4:1a:6b:b3:4a:4b:ec:dc:d1:84:96:14:4c:b7:a0: c3:de:52:01:4d:41:d1:43:76:5f:26:95:7c:74:3a: 45:89:f7:c8:78:5a:2a:9b:58:d8:6a:8b:95:07:f8: 87:00:d5:ea:fd:b8:1a:e5:c5:89:3d:c8:bc:a0:a5: 02:35:fa:3e:8e:d5:02:1f:4b:9b:f5:42:6b:71:8c: 0f:0d:de:29:2a:dc:5f:6d:be:23:fe:56:2a:47:b2: 1a:f5:b7:80:b3:0c:f5:cc:7a:0c:53:b8:e3:f8:72: 4e:f1:d5:99:37:bb:a6:7c:c7:e5:46:87:a9:8f:a6: b7:e4:9a:0c:8c:f5:98:4e:66:81:59:ac:69:8f:dd: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:5E:E5:21:81:F8:6F:6F:0C:DD:2C:A0:60:9F:3B:EB:1E:48:4F:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/c87e6c92-ba23-3112-ac19-2ca262c50f9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab/63c85387-a763-41a8-af51-40ad5f5da8ab.crl X509v3 Authority Key Identifier: keyid:50:F2:8D:FC:47:EC:09:6A:70:C2:79:45:15:84:47:07:B9:58:A3:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/63c85387-a763-41a8-af51-40ad5f5da8ab.cer sbgp-ipAddrBlock: critical IPv4: 192.139.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:48:06:13:67:da:38:16:c4:7f:82:56:8c:41:a4:f6:cd:de: e1:60:9f:07:06:53:b8:2c:bd:39:b7:80:3d:3c:8c:15:e2:d1: cc:3b:9d:2d:c1:07:65:90:22:96:fa:4b:f8:3a:2b:4c:50:f4: 80:ab:85:62:63:48:c3:a6:92:35:5a:91:03:a1:e6:5c:78:6f: bd:0d:8c:42:07:db:40:d8:db:99:e8:4d:41:6e:30:e1:e7:7d: 2c:46:f3:37:af:e0:b1:d3:22:8c:b0:22:f4:ef:0f:40:0f:50: 80:aa:f1:46:72:6d:d4:c4:a9:22:11:1d:f4:83:28:c8:50:42: 44:4d:4d:7f:64:25:ef:00:dd:b7:89:b9:d0:c4:da:34:2f:66: b9:31:7a:38:fb:38:bd:9a:ee:81:17:ef:5b:ca:b2:ca:79:3d: 67:45:f5:36:ff:71:43:a2:73:49:72:de:49:45:69:d1:73:59: c2:ca:50:f6:5b:0d:4a:81:92:f0:e7:5e:65:ba:08:0b:eb:bd: e6:6c:0d:5f:c0:5b:5b:32:0f:44:a4:41:cc:0f:0e:a0:f9:09: 1c:13:39:e9:da:b9:f3:75:90:4e:16:0c:49:04:19:05:16:8f: 8c:f1:6e:39:9b:ee:bf:b8:fd:e6:6c:05:fe:52:e3:61:d3:38: fa:21:bd:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOUHgkQ4VcOmC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjNjODUzODctYTc2My00MWE4LWFmNTEtNDBhZDVmNWRh OGFiMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk N2FkODcyZTItN2ExNC00MDVkLWEwOWMtNTFmY2FmNzE4NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0WMUi+rM1EAx3P+jBEU6kyOOFO/z8gPguqZ nKCValWvCJpqhD9AVeLP6Ai/Ls3FE2u7aduo5q6hZzKQbZj62SvXYyM/hHjfeFHl ooVoYnig+0JZJCPJP3e8eqmEVmzpHtkHzr7r8u/dO2MIizudP8kC4zNGD5WkGmuz Skvs3NGElhRMt6DD3lIBTUHRQ3ZfJpV8dDpFiffIeFoqm1jYaouVB/iHANXq/bga 5cWJPci8oKUCNfo+jtUCH0ub9UJrcYwPDd4pKtxfbb4j/lYqR7Ia9beAswz1zHoM U7jj+HJO8dWZN7umfMflRoepj6a35JoMjPWYTmaBWaxpj90z8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBe5SGB+G9vDN0soGCfO+seSE/vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82M2M4 NTM4Ny1hNzYzLTQxYTgtYWY1MS00MGFkNWY1ZGE4YWIvYzg3ZTZjOTItYmEyMy0z MTEyLWFjMTktMmNhMjYyYzUwZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjNjODUzODctYTc2My00MWE4LWFm NTEtNDBhZDVmNWRhOGFiLzYzYzg1Mzg3LWE3NjMtNDFhOC1hZjUxLTQwYWQ1ZjVk YThhYi5jcmwwHwYDVR0jBBgwFoAUUPKN/EfsCWpwwnlFFYRHB7lYo/IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82M2M4NTM4Ny1hNzYzLTQxYTgtYWY1MS00MGFk NWY1ZGE4YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5IBhNn2jgWxH+CVoxBpPbN3uFgnwcGU7gsvTm3gD08jBXi0cw7nS3B B2WQIpb6S/g6K0xQ9ICrhWJjSMOmkjVakQOh5lx4b70NjEIH20DY25noTUFuMOHn fSxG8zev4LHTIoywIvTvD0APUICq8UZybdTEqSIRHfSDKMhQQkRNTX9kJe8A3beJ udDE2jQvZrkxejj7OL2a7oEX71vKssp5PWdF9Tb/cUOic0ly3klFadFzWcLKUPZb DUqBkvDnXmW6CAvrveZsDV/AW1syD0SkQcwPDqD5CRwTOenaufN1kE4WDEkEGQUW j4zxbjmb7r+4/eZsBf5S42HTOPohvUo= -----END CERTIFICATE-----Generated at Tue Sep 29 15:58:30 2026 by rpki-client