$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa File: b153b99a-878c-3725-84b3-ef7b5da07271.roa (raw, json) Hash identifier: 8Uh0IniShSPEGYLwUeJpBlONicfXRJT9tmzUgqVuy10= Subject key identifier: 4F:F6:1C:E6:A0:D6:3A:D0:21:3A:85:38:A1:41:04:D2:E2:BC:14:9D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584F20F7A424C9F20525ECA85E80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 140.91.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:a4:24:c9:f2:05:25:ec:a8:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=ab64f240-d0c6-4df2-9387-ab6bb1b5b3ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:09:fd:3e:23:4d:5c:92:cd:8e:03:32:5a:89: 34:22:99:e7:00:04:29:c7:be:91:1b:93:fb:5c:6a: a9:0e:35:a2:d4:92:5c:c5:4f:ec:42:a7:22:cc:a6: c0:d3:78:d0:9f:41:90:ce:5f:11:75:5d:79:1d:b7: 68:e8:ea:c0:26:15:48:72:0a:61:80:c2:11:02:b1: f5:4b:d2:b6:35:f5:a9:b3:3d:bb:a7:87:b5:10:b0: b8:62:4e:9f:f4:a6:cf:0c:be:e2:da:6b:14:58:84: a1:f6:51:87:89:eb:a0:0f:08:9f:fc:8e:8c:b0:0e: ba:d6:bf:a5:ef:81:b0:13:cc:19:2d:a1:3d:9a:66: e6:3a:06:44:d7:69:a5:40:aa:84:c9:d6:2d:4c:0e: e3:ef:40:b9:7e:d4:02:03:41:49:d2:e8:48:58:43: 27:5b:46:05:d0:3e:38:7f:db:1d:57:87:45:a0:3f: 13:62:90:84:6b:33:fa:8a:f9:aa:9f:cf:a0:04:3a: 07:d2:2b:77:72:43:7a:1c:6d:39:24:f0:e3:99:77: 96:78:71:01:ea:28:cb:32:e0:a5:2a:4e:48:5c:52: 5d:d4:f2:61:98:d9:68:50:86:64:fe:f5:38:85:03: a9:7e:9a:b4:42:48:93:22:68:39:a6:e4:ad:04:7e: 7f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F6:1C:E6:A0:D6:3A:D0:21:3A:85:38:A1:41:04:D2:E2:BC:14:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b153b99a-878c-3725-84b3-ef7b5da07271.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 140.91.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:05:3f:31:2a:2d:46:e6:55:33:cd:80:6b:5f:a7:12:8b:a7: ad:63:fd:e7:ff:75:d8:f4:82:ce:aa:74:24:43:28:9b:4e:15: bd:6a:b6:30:3c:01:fb:a7:e2:d5:62:44:9f:a9:61:a9:47:b0: 87:16:7c:ec:f8:68:31:36:f8:61:4f:4b:5e:93:ee:7f:03:ab: 6f:b4:15:96:d7:67:b9:95:ac:d1:f6:17:74:b1:83:e8:50:af: 60:34:10:ef:69:3d:fd:cf:a7:3f:da:75:01:45:59:43:6d:86: 44:a3:21:b7:3d:ce:bb:51:52:d2:c3:a7:d5:4d:7a:00:61:59: 4f:ae:9e:4a:f9:4a:1a:29:b4:72:3b:ba:57:35:b4:30:99:a8: 08:84:30:99:87:98:91:e2:57:11:6e:fd:84:61:d1:9f:c2:3d: cf:9d:e9:e7:d8:79:7d:db:d3:db:e6:2c:45:21:7b:d0:0a:4a: 61:5c:7e:bc:fa:53:bb:80:ca:53:c8:79:9e:87:f4:03:8d:99: f1:bc:3b:36:31:dd:59:72:8b:4d:4a:be:cf:44:e4:b8:ba:d2: 91:f9:b2:56:ea:17:bc:81:69:84:7a:60:9e:5a:51:08:0c:5a: 50:8f:0d:ff:b3:b9:26:22:95:e4:d5:13:de:82:b8:2b:64:11: 75:39:75:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g96QkyfIFJeyoXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk YWI2NGYyNDAtZDBjNi00ZGYyLTkzODctYWI2YmIxYjViM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgn9PiNNXJLNjgMyWok0IpnnAAQpx76RG5P7 XGqpDjWi1JJcxU/sQqcizKbA03jQn0GQzl8RdV15Hbdo6OrAJhVIcgphgMIRArH1 S9K2NfWpsz27p4e1ELC4Yk6f9KbPDL7i2msUWISh9lGHieugDwif/I6MsA661r+l 74GwE8wZLaE9mmbmOgZE12mlQKqEydYtTA7j70C5ftQCA0FJ0uhIWEMnW0YF0D44 f9sdV4dFoD8TYpCEazP6ivmqn8+gBDoH0it3ckN6HG05JPDjmXeWeHEB6ijLMuCl Kk5IXFJd1PJhmNloUIZk/vU4hQOpfpq0QkiTImg5puStBH5/xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/2HOag1jrQITqFOKFBBNLivBSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjE1M2I5OWEtODc4Yy0z NzI1LTg0YjMtZWY3YjVkYTA3MjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjFtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAFPzEqLUbmVTPNgGtfpxKLp61j/ef/ddj0gs6qdCRDKJtOFb1qtjA8 Afun4tViRJ+pYalHsIcWfOz4aDE2+GFPS16T7n8Dq2+0FZbXZ7mVrNH2F3Sxg+hQ r2A0EO9pPf3Ppz/adQFFWUNthkSjIbc9zrtRUtLDp9VNegBhWU+unkr5ShoptHI7 ulc1tDCZqAiEMJmHmJHiVxFu/YRh0Z/CPc+d6efYeX3b09vmLEUhe9AKSmFcfrz6 U7uAylPIeZ6H9AONmfG8OzYx3Vlyi01Kvs9E5Li60pH5slbqF7yBaYR6YJ5aUQgM WlCPDf+zuSYileTVE96CuCtkEXU5dZI= -----END CERTIFICATE-----Generated at Sat Sep 26 07:35:53 2026 by rpki-client