$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/240927f7-61ff-38a7-b950-3608aff458b5.roa File: 240927f7-61ff-38a7-b950-3608aff458b5.roa (raw, json) Hash identifier: QpNIk8b3R7EYhWTnacmX6QZ2ZgA8TouFQeDtf5a3IM4= Subject key identifier: 86:19:2E:32:64:98:7E:4A:74:C1:8A:01:1A:0D:80:2E:CD:6F:67:C1 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F0D6CD7E9D0727435A4134900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/240927f7-61ff-38a7-b950-3608aff458b5.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d7:e9:d0:72:74:35:a4:13:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=28fb9370-37d4-47e7-9566-fb4fdc4238d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ed:ef:cb:93:1c:f4:7a:66:17:9b:c3:81:f7: f7:3a:28:8c:3d:e2:de:0f:c2:3d:8e:cc:54:58:4d: c6:3d:a8:b3:ea:39:38:48:8e:3b:c3:2b:8f:fd:d1: f5:a0:6c:18:c1:cb:74:15:29:3b:0a:f9:59:e4:bb: d7:e6:5a:ce:0c:46:25:39:b1:f1:93:90:ed:72:22: 6e:79:6f:0e:c8:f8:93:88:e8:4a:74:4f:04:73:3c: 31:38:f3:b8:8d:5b:c9:d5:ba:72:03:82:3f:38:9f: 05:49:4c:5f:03:85:75:63:f4:3f:62:71:18:12:3d: 23:1a:4b:2d:6b:06:cb:53:f6:52:61:98:1d:d0:f0: 2f:0e:60:6c:5d:ed:01:3d:49:d2:dd:57:d1:ca:73: a4:c1:dc:bb:00:69:a1:f2:58:b6:d0:37:17:78:01: 29:2d:40:a6:69:18:2d:69:93:fc:fb:5b:94:10:f2: fa:3b:ca:2b:e9:7a:d2:61:8c:24:ac:41:2a:5b:52: c0:0c:95:44:e5:0e:d8:d7:35:e7:86:58:88:15:4b: fd:99:45:e6:dc:e5:05:d3:50:31:eb:8c:f6:cb:16: 88:2b:31:b9:e3:20:e7:cd:ce:ef:35:6b:9d:22:cc: 97:9c:b5:3d:cf:2a:e3:99:4d:ba:c3:f3:2a:3d:2c: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:19:2E:32:64:98:7E:4A:74:C1:8A:01:1A:0D:80:2E:CD:6F:67:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/240927f7-61ff-38a7-b950-3608aff458b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2f:d8:f4:dc:96:5b:5e:fb:9d:0c:11:85:57:a8:46:97:cd: ff:46:ce:fb:13:98:26:b3:de:9b:ba:22:ca:a4:b7:2e:b5:3e: de:61:1b:f2:69:d2:45:50:68:07:d9:b4:c1:1f:17:54:d7:a2: 7b:f1:7e:5b:cc:ea:08:a3:66:82:a6:87:76:85:65:18:a7:b0: 22:ce:c0:45:20:b9:75:09:ba:4a:06:a8:7f:5d:ca:d1:46:57: 37:0f:12:fa:c0:a5:3d:88:d7:d2:4b:ad:79:f8:96:a1:37:8e: fe:3e:56:15:ae:a3:b8:b3:3d:18:9c:4d:08:85:f8:98:57:94: 56:19:1d:ff:6f:97:7f:85:58:f6:2b:b4:a1:89:22:03:e8:4f: f6:ef:29:dd:45:ba:88:b0:eb:1d:7d:35:6e:1a:ef:14:8a:b9: 84:94:df:6e:c9:75:df:f8:38:db:30:c5:5d:0c:9c:b0:49:57: 83:44:07:20:6c:f4:a6:65:55:96:8a:12:18:b7:d3:cc:5c:3c: b8:4f:63:cc:02:06:30:6e:4a:4c:dc:21:53:42:2e:5a:e3:05: b8:a9:8d:b1:16:ba:8c:1c:b0:12:e4:9e:c2:29:cd:5f:69:23: 2f:17:81:7a:b8:c8:ac:18:44:a6:13:58:4d:ef:05:e6:a8:18: 8c:05:68:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNfp0HJ0NaQTSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MjhmYjkzNzAtMzdkNC00N2U3LTk1NjYtZmI0ZmRjNDIzOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e3vy5Mc9HpmF5vDgff3OiiMPeLeD8I9jsxU WE3GPaiz6jk4SI47wyuP/dH1oGwYwct0FSk7CvlZ5LvX5lrODEYlObHxk5DtciJu eW8OyPiTiOhKdE8EczwxOPO4jVvJ1bpyA4I/OJ8FSUxfA4V1Y/Q/YnEYEj0jGkst awbLU/ZSYZgd0PAvDmBsXe0BPUnS3VfRynOkwdy7AGmh8li20DcXeAEpLUCmaRgt aZP8+1uUEPL6O8or6XrSYYwkrEEqW1LADJVE5Q7Y1zXnhliIFUv9mUXm3OUF01Ax 64z2yxaIKzG54yDnzc7vNWudIsyXnLU9zyrjmU26w/MqPSwIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYZLjJkmH5KdMGKARoNgC7Nb2fBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjQwOTI3ZjctNjFmZi0z OGE3LWI5NTAtMzYwOGFmZjQ1OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIv2PTcllte+50MEYVXqEaXzf9GzvsTmCaz3pu6Isqkty61Pt5hG/Jp 0kVQaAfZtMEfF1TXonvxflvM6gijZoKmh3aFZRinsCLOwEUguXUJukoGqH9dytFG VzcPEvrApT2I19JLrXn4lqE3jv4+VhWuo7izPRicTQiF+JhXlFYZHf9vl3+FWPYr tKGJIgPoT/bvKd1Fuoiw6x19NW4a7xSKuYSU327Jdd/4ONswxV0MnLBJV4NEByBs 9KZlVZaKEhi308xcPLhPY8wCBjBuSkzcIVNCLlrjBbipjbEWuowcsBLknsIpzV9p Iy8XgXq4yKwYRKYTWE3vBeaoGIwFaCs= -----END CERTIFICATE-----Generated at Fri Sep 25 22:56:46 2026 by rpki-client