$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa File: 6947bfe4-4b87-3709-80d2-05bdef6cf549.roa (raw, json) Hash identifier: kyFuqfPaMDhdSKGmBtP3AAhSu+gTV0Ijpc1CoQD8Zc8= Subject key identifier: 75:B8:8F:0B:5E:4D:8D:68:56:13:E0:8A:29:8B:6F:99:70:64:AB:1B Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F093CE2D7879DEF5E26AABF40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 140.91.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:e2:d7:87:9d:ef:5e:26:aa:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=46f4c39e-9d7e-4525-9936-e6388d913ec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:3c:35:46:75:f3:05:69:d3:d6:e5:8d:2b: 36:f6:00:87:11:19:68:10:91:9f:72:49:20:7e:07: c7:d9:cd:d9:30:02:36:c6:a4:f6:ef:1c:41:82:fb: 34:50:f2:65:5c:9c:05:40:ad:3f:f3:21:c5:18:4e: a6:56:2e:d0:5d:3e:80:6b:bd:45:9a:b8:98:8b:31: 4e:a1:af:cc:b7:1c:6a:9b:ce:56:49:50:bb:b9:42: 48:ed:86:31:59:f2:c5:19:bd:fd:bd:63:95:2e:14: 35:38:67:31:86:6b:5d:ed:79:e8:28:25:c1:56:3d: b5:2a:40:9d:3f:9e:4f:be:dc:e4:a0:9b:16:52:ed: 74:52:47:98:2c:cd:de:95:cd:b9:14:33:fa:c0:df: bb:51:49:50:51:97:c2:12:c5:96:19:e0:77:da:b9: c1:49:04:33:7a:25:6e:e6:41:3a:d5:ee:d8:5e:91: 55:89:7f:0c:e5:d1:1c:3a:3a:59:b4:e3:fd:94:22: c7:d6:d0:3c:e2:d4:d1:b2:b7:dd:3b:45:a7:fe:89: 8c:be:7e:99:21:5b:78:da:5c:b1:13:67:f7:d5:2a: 88:67:47:cc:9d:a4:f5:d0:28:78:ec:7a:df:4e:dc: 1d:f9:6e:65:92:69:40:4d:a0:32:cc:ba:94:c3:2e: 11:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B8:8F:0B:5E:4D:8D:68:56:13:E0:8A:29:8B:6F:99:70:64:AB:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6947bfe4-4b87-3709-80d2-05bdef6cf549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d6:70:07:c0:9e:05:9c:9a:fa:9c:5e:82:8d:d0:25:e6:b2: ac:56:90:a9:6b:df:c6:ea:15:51:a1:b9:40:0b:4c:05:dc:29: 93:ae:74:f4:db:67:86:a1:f1:88:12:e7:6d:f0:3e:02:fa:7c: 42:75:a4:73:0a:1b:3f:aa:81:80:14:0e:b5:14:7f:71:70:e9: 28:bb:fa:d3:5a:c5:46:e6:24:66:ce:8f:db:e4:a7:bb:00:ed: ce:47:66:cb:53:65:92:8c:28:3d:38:9c:0e:ae:98:ee:e0:08: 19:09:3a:5c:5a:76:92:6d:94:10:88:c1:39:71:aa:00:65:22: d9:7a:60:ea:3d:8d:65:1f:8b:14:98:91:4a:fd:7c:3d:fb:9c: 41:33:d6:a6:3f:a1:c1:ae:92:9a:e2:eb:ce:2a:34:75:f7:00: e3:1e:d7:92:90:45:01:f3:18:0c:51:af:06:2f:7a:6d:74:b0: 73:58:80:7d:21:b1:62:c3:43:69:e7:1d:cf:e8:dd:84:1c:24: 17:a7:e6:37:e8:51:13:7d:49:7e:7c:64:6f:47:3d:ae:d7:01: 2f:38:a2:22:56:26:35:a7:cd:24:e2:d2:18:7d:60:66:6a:4f: 17:a2:3a:33:9d:a4:38:5e:51:c3:b2:8f:af:2f:68:90:87:6d: 50:8f:74:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPOLXh53vXiaqv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDZmNGMzOWUtOWQ3ZS00NTI1LTk5MzYtZTYzODhkOTEzZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHA8NUZ18wVp09bljSs29gCHERloEJGfckkg fgfH2c3ZMAI2xqT27xxBgvs0UPJlXJwFQK0/8yHFGE6mVi7QXT6Aa71FmriYizFO oa/Mtxxqm85WSVC7uUJI7YYxWfLFGb39vWOVLhQ1OGcxhmtd7XnoKCXBVj21KkCd P55PvtzkoJsWUu10UkeYLM3elc25FDP6wN+7UUlQUZfCEsWWGeB32rnBSQQzeiVu 5kE61e7YXpFViX8M5dEcOjpZtOP9lCLH1tA84tTRsrfdO0Wn/omMvn6ZIVt42lyx E2f31SqIZ0fMnaT10Ch47HrfTtwd+W5lkmlATaAyzLqUwy4RzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHW4jwteTY1oVhPgiimLb5lwZKsbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNjk0N2JmZTQtNGI4Ny0z NzA5LTgwZDItMDViZGVmNmNmNTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFvaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzWcAfAngWcmvqcXoKN0CXmsqxWkKlr38bqFVGhuUALTAXcKZOudPTb Z4ah8YgS523wPgL6fEJ1pHMKGz+qgYAUDrUUf3Fw6Si7+tNaxUbmJGbOj9vkp7sA 7c5HZstTZZKMKD04nA6umO7gCBkJOlxadpJtlBCIwTlxqgBlItl6YOo9jWUfixSY kUr9fD37nEEz1qY/ocGukpri684qNHX3AOMe15KQRQHzGAxRrwYvem10sHNYgH0h sWLDQ2nnHc/o3YQcJBen5jfoURN9SX58ZG9HPa7XAS84oiJWJjWnzSTi0hh9YGZq TxeiOjOdpDheUcOyj68vaJCHbVCPdPo= -----END CERTIFICATE-----Generated at Wed Sep 23 13:59:47 2026 by rpki-client