$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c54b8b17-e8af-3dcd-a5e2-4c60f8585005.roa File: c54b8b17-e8af-3dcd-a5e2-4c60f8585005.roa (raw, json) Hash identifier: FEMVd8tL8imPj4SthifOXfxYHEyxkH/A+AmIyUkKYtQ= Subject key identifier: 43:9E:3A:F4:76:03:61:03:A6:4B:68:80:7E:DA:68:71:A4:2E:CC:78 Certificate issuer: /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Certificate serial: 010D0C9F4328584F7A4D9329F8AF404E575F6800 Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c54b8b17-e8af-3dcd-a5e2-4c60f8585005.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 3477 IP address blocks: 140.172.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:93:29:f8:af:40:4e:57:5f:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=3c0c0e09-2740-40a6-98ad-dc2aa7f44d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f4:0c:0f:91:eb:db:8a:dc:01:7e:ab:e3:d6: 4d:e6:c4:2f:67:51:2a:04:ee:7a:22:22:52:f5:1c: c1:d8:fb:92:07:e8:f1:b8:32:46:f1:94:79:91:91: 58:32:4d:ee:3d:64:a4:db:45:22:51:01:81:86:55: fa:7c:86:d2:62:21:84:92:57:2a:93:1c:3a:02:fe: 58:d4:94:26:7f:5c:b4:5e:1a:42:7f:c1:40:46:38: 4e:f5:ad:b3:af:6e:76:ef:48:47:92:dd:b2:ef:83: c3:78:c5:fb:42:3a:f0:cf:d4:5e:f6:f0:60:3a:4c: 4c:83:d8:42:a3:58:4f:e2:8c:cb:83:d3:0c:9e:b0: 1f:46:d2:9d:1e:9b:31:b6:e0:74:80:99:58:31:c9: 34:42:8e:53:7d:a9:84:e5:42:66:2f:ea:03:a7:31: 5f:2c:1d:2b:55:de:56:f9:d5:e8:97:7e:93:92:14: 58:fa:3d:fd:26:8d:01:8e:14:55:10:2c:a5:15:e4: a4:7c:33:b2:d2:30:1d:b4:ab:c0:23:e8:21:79:8e: 08:86:b6:a0:2b:ac:77:50:fd:07:2b:75:9a:a5:9f: 03:bf:70:11:78:17:b4:80:59:03:75:2c:8f:31:2b: 5b:b4:9a:08:ef:6a:6e:04:69:77:85:81:13:d6:76: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:3A:F4:76:03:61:03:A6:4B:68:80:7E:DA:68:71:A4:2E:CC:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/c54b8b17-e8af-3dcd-a5e2-4c60f8585005.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl X509v3 Authority Key Identifier: keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer sbgp-ipAddrBlock: critical IPv4: 140.172.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:96:cc:e1:5a:05:43:f3:3e:9c:09:c3:a6:2d:fe:82:d1:c2: 00:84:36:72:56:e8:34:3d:4a:f5:4c:1d:0a:33:06:1d:f0:bf: d7:d0:8a:63:b6:17:3d:c1:23:ef:f4:28:02:ed:d0:62:ff:03: b7:a4:6c:cd:ca:a6:f8:e8:42:09:54:73:1a:49:9b:df:48:89: 99:53:5a:5d:74:19:6f:5a:dc:7a:21:ec:97:4a:5a:9e:8e:54: 81:c8:84:4e:ea:73:ae:b3:55:d6:8b:b0:c9:fe:e0:9a:4a:cc: ea:d6:f4:79:d6:ee:dd:b3:db:93:e0:46:91:92:69:33:25:c1: e5:10:b5:5d:33:94:3a:74:2a:61:0c:f9:25:7a:25:6b:35:5a: ce:88:d9:67:20:fd:75:00:9d:5c:4d:be:3b:c3:5c:c4:9b:6a: de:a1:11:50:ff:86:06:b4:54:ac:59:a4:9c:11:21:7f:e1:2e: b2:b7:34:8a:f3:31:0f:70:8e:15:e7:ab:a8:17:35:0f:3e:56: a6:a6:26:45:07:55:eb:98:de:d6:d7:ba:51:8f:2e:88:5a:f7: 0c:71:50:3c:2e:ce:64:e3:fb:6d:11:85:03:4d:6f:e3:54:17: 16:72:bb:8e:09:00:26:94:c9:c8:9f:e6:d9:35:7e:39:ca:fa: d9:a9:66:bf -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE96TZMp+K9ATldfaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5 YzIwMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2MwYzBlMDktMjc0MC00MGE2LTk4YWQtZGMyYWE3ZjQ0ZDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivQMD5Hr24rcAX6r49ZN5sQvZ1EqBO56IiJS 9RzB2PuSB+jxuDJG8ZR5kZFYMk3uPWSk20UiUQGBhlX6fIbSYiGEklcqkxw6Av5Y 1JQmf1y0XhpCf8FARjhO9a2zr25270hHkt2y74PDeMX7Qjrwz9Re9vBgOkxMg9hC o1hP4ozLg9MMnrAfRtKdHpsxtuB0gJlYMck0Qo5TfamE5UJmL+oDpzFfLB0rVd5W +dXol36TkhRY+j39Jo0BjhRVECylFeSkfDOy0jAdtKvAI+gheY4IhragK6x3UP0H K3WapZ8Dv3AReBe0gFkDdSyPMStbtJoI72puBGl3hYET1naW/QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFEOeOvR2A2EDpktogH7aaHGkLsx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvYzU0YjhiMTctZThhZi0z ZGNkLWE1ZTItNGM2MGY4NTg1MDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm YmE0YjljMjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjKwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKJbM4VoFQ/M+nAnDpi3+gtHCAIQ2clboND1K9UwdCjMGHfC/19CKY7YX PcEj7/QoAu3QYv8Dt6Rszcqm+OhCCVRzGkmb30iJmVNaXXQZb1rceiHsl0pano5U gciETupzrrNV1ouwyf7gmkrM6tb0edbu3bPbk+BGkZJpMyXB5RC1XTOUOnQqYQz5 JXolazVazojZZyD9dQCdXE2+O8NcxJtq3qERUP+GBrRUrFmknBEhf+Eusrc0ivMx D3COFeerqBc1Dz5WpqYmRQdV65je1te6UY8uiFr3DHFQPC7OZOP7bRGFA01v41QX FnK7jgkAJpTJyJ/m2TV+Ocr62almvw== -----END CERTIFICATE-----Generated at Mon Nov 2 19:10:53 2026 by rpki-client