$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1acd33c6-579b-3927-92ef-0a7e5c4329f5.roa File: 1acd33c6-579b-3927-92ef-0a7e5c4329f5.roa (raw, json) Hash identifier: 96t76r4mBQfwj/Ap1/S4t/psN9BKxVqi/oq6bT78q8Y= Subject key identifier: 48:15:95:79:30:11:A1:12:41:6A:1A:E6:64:45:95:A2:D2:94:55:23 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584EFF776BF40B4C2E6D79D709EC Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1acd33c6-579b-3927-92ef-0a7e5c4329f5.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:6b:f4:0b:4c:2e:6d:79:d7:09:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=c456fc18-7b61-4b7f-8959-1694be5210a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:38:56:07:d6:e5:98:51:41:f4:c3:1d:d2: 71:73:42:8b:ef:fc:ae:10:62:2b:24:cd:47:2f:c6: 81:27:ab:98:1e:0d:f8:9c:70:23:d1:e6:06:f3:c8: 5e:bd:77:19:c2:56:50:bb:07:0a:d6:2b:0c:53:09: e1:37:86:7d:4b:36:a3:42:00:07:94:79:d8:19:39: c1:53:04:ec:92:83:43:ea:04:d2:bd:dd:c9:a2:bb: d5:de:de:df:68:0c:c0:0c:9b:1d:dd:ce:9e:f8:9a: 9c:76:e2:ad:73:16:c2:e3:8f:11:1d:c9:b7:e5:77: 96:81:aa:eb:a3:23:f3:1f:67:bd:7d:2a:ae:dd:8e: 6d:cc:73:f8:bf:50:62:70:79:fa:b1:46:3e:61:a2: 3a:3e:9d:9a:4a:85:a5:ef:7a:ca:f2:65:b3:96:6b: a6:9d:67:a1:fe:fe:be:6c:1b:62:de:87:c8:76:30: 78:0b:48:b9:0a:b7:8a:ae:b6:9b:75:ad:f8:c0:31: 5f:dd:79:dd:86:85:4e:22:12:6c:83:74:54:29:0b: 3e:2b:07:4c:7f:b4:0e:61:7e:4e:f2:d3:e9:53:b5: 48:f1:b5:cf:a4:bf:46:51:96:4f:0a:bc:c2:ce:05: b7:55:40:c4:69:bd:df:0e:ba:3e:4d:49:5b:50:df: 69:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:15:95:79:30:11:A1:12:41:6A:1A:E6:64:45:95:A2:D2:94:55:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1acd33c6-579b-3927-92ef-0a7e5c4329f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:d9:1a:76:6c:9e:b7:39:8e:34:d1:7b:1f:86:ef:00:8c:8f: a9:c1:48:d8:65:4e:66:08:e7:f9:ba:78:8d:f2:e5:e6:b2:52: 46:d7:de:f6:81:9f:e5:67:9f:da:a8:34:d8:24:2d:9f:11:e7: 5a:ab:37:1c:19:e7:cf:42:3e:27:b9:10:dd:e0:a4:cf:60:62: ef:8e:8b:fa:90:65:d2:9f:18:63:28:8e:9d:35:cd:12:5d:be: 0d:64:2b:2a:d4:78:58:ba:ae:bc:cb:bc:2c:2c:d5:bf:46:84: e4:a2:39:f7:0b:f6:db:eb:52:7c:27:41:23:45:53:6a:0d:ef: 1b:08:61:19:ea:d9:f4:7f:4b:eb:a2:a5:ce:c3:2f:00:6e:1a: 68:fe:c1:86:47:9a:a7:0d:08:44:2c:d6:dc:8a:fc:d6:ca:01: 36:1b:bb:12:4d:5d:5a:69:6e:9a:f1:a9:9a:e2:53:74:2b:6d: 2a:5e:47:02:2c:ed:b8:10:1e:ac:16:b5:7f:e7:ea:9b:cb:d6: 28:9a:31:9a:bb:a2:90:0b:a4:33:74:18:0f:e3:79:d2:3b:fd: 49:28:65:80:60:13:fd:fa:09:3a:53:af:ca:1a:f8:7e:31:88: 6c:4d:7f:97:4d:82:ee:08:a1:3c:a3:26:72:f0:aa:da:1a:dd: ee:91:ae:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d2v0C0wubXnXCewwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk YzQ1NmZjMTgtN2I2MS00YjdmLTg5NTktMTY5NGJlNTIxMGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQY4VgfW5ZhRQfTDHdJxc0KL7/yuEGIrJM1H L8aBJ6uYHg34nHAj0eYG88hevXcZwlZQuwcK1isMUwnhN4Z9SzajQgAHlHnYGTnB UwTskoND6gTSvd3JorvV3t7faAzADJsd3c6e+JqcduKtcxbC448RHcm35XeWgarr oyPzH2e9fSqu3Y5tzHP4v1BicHn6sUY+YaI6Pp2aSoWl73rK8mWzlmumnWeh/v6+ bBti3ofIdjB4C0i5CreKrrabda34wDFf3XndhoVOIhJsg3RUKQs+KwdMf7QOYX5O 8tPpU7VI8bXPpL9GUZZPCrzCzgW3VUDEab3fDro+TUlbUN9p5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgVlXkwEaESQWoa5mRFlaLSlFUjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMWFjZDMzYzYtNTc5Yi0z OTI3LTkyZWYtMGE3ZTVjNDMyOWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrZGnZsnrc5jjTRex+G7wCMj6nBSNhlTmYI5/m6eI3y5eayUkbX3vaB n+Vnn9qoNNgkLZ8R51qrNxwZ589CPie5EN3gpM9gYu+Oi/qQZdKfGGMojp01zRJd vg1kKyrUeFi6rrzLvCws1b9GhOSiOfcL9tvrUnwnQSNFU2oN7xsIYRnq2fR/S+ui pc7DLwBuGmj+wYZHmqcNCEQs1tyK/NbKATYbuxJNXVppbprxqZriU3QrbSpeRwIs 7bgQHqwWtX/n6pvL1iiaMZq7opALpDN0GA/jedI7/UkoZYBgE/36CTpTr8oa+H4x iGxNf5dNgu4IoTyjJnLwqtoa3e6Rrkw= -----END CERTIFICATE-----Generated at Sat Sep 26 07:30:21 2026 by rpki-client