$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/ac61b5f0-3ec0-35ac-b71d-a19353c231d5.roa File: ac61b5f0-3ec0-35ac-b71d-a19353c231d5.roa (raw, json) Hash identifier: CMZMVqaQfRRjFxwh7R8ZlIT+9yjYcjK5VQDndAxQJsE= Subject key identifier: 20:0E:9D:2D:3D:6B:3C:18:84:42:2C:61:B9:7B:BC:63:B9:56:C4:83 Certificate issuer: /CN=facf4a7c-d3a7-47c4-9334-2ccfeb660384 Certificate serial: 010D0C9F4328584F8F24F08381CEB47EA2718940 Authority key identifier: D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/ac61b5f0-3ec0-35ac-b71d-a19353c231d5.roa Signing time: Tue 20 Oct 2026 00:10:28 +0000 ROA not before: Tue 20 Oct 2026 00:10:28 +0000 ROA not after: Mon 18 Jan 2027 01:10:28 +0000 asID: 403078 IP address blocks: 198.140.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:24:f0:83:81:ce:b4:7e:a2:71:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=facf4a7c-d3a7-47c4-9334-2ccfeb660384 Validity Not Before: Oct 20 00:10:28 2026 GMT Not After : Jan 18 01:10:28 2027 GMT Subject: CN=a39fe4d1-2d46-46dc-8ebb-31285b766be4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:cf:3a:f9:b1:52:25:e8:f9:ba:20:80:04: 11:7c:0d:c8:27:97:ba:20:82:0c:61:30:22:09:b9: d1:21:8c:fe:77:0c:3b:4b:ed:94:20:df:3f:e8:73: 06:15:74:f2:19:45:da:05:8c:68:31:0c:b5:c2:95: fc:6b:b6:71:98:20:b1:d2:1c:43:cb:7f:2a:a8:ad: 50:eb:03:64:d8:cd:c2:68:72:a3:73:6b:e5:a3:d8: 4f:f2:89:79:83:2a:0c:1e:85:1d:11:d7:94:34:85: 90:1f:49:ef:4c:69:90:2e:75:fd:f6:59:ca:eb:67: a8:82:ed:38:c8:ff:cf:82:c8:2e:30:1c:4c:21:cb: d9:b6:d0:fa:83:e9:24:de:36:3e:d0:b2:64:9a:58: b5:11:c9:63:e1:ca:a1:67:a2:6d:9d:16:bf:71:84: f4:72:ec:0f:f3:fd:99:87:47:b7:70:af:77:1f:15: 2b:3f:2e:98:6c:a0:2e:62:49:57:1b:61:ed:7d:39: 20:d5:ee:91:99:da:0e:d3:fa:d2:97:76:4e:96:10: b8:72:48:03:90:6b:07:44:9a:28:ff:61:5f:fe:64: b6:03:c9:a6:fc:8a:80:80:38:5b:e2:47:9b:22:30: 65:1d:33:98:81:01:5a:11:b6:15:ce:ed:b4:c5:4e: 47:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0E:9D:2D:3D:6B:3C:18:84:42:2C:61:B9:7B:BC:63:B9:56:C4:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/ac61b5f0-3ec0-35ac-b71d-a19353c231d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384/facf4a7c-d3a7-47c4-9334-2ccfeb660384.crl X509v3 Authority Key Identifier: keyid:D1:8C:35:FF:DF:D7:E3:47:FF:5E:99:3F:66:39:47:1A:21:3C:C7:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/facf4a7c-d3a7-47c4-9334-2ccfeb660384.cer sbgp-ipAddrBlock: critical IPv4: 198.140.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:37:71:bf:58:40:53:93:e1:fc:13:5e:21:35:90:19:f2:30: 57:71:78:96:15:4a:e7:c0:84:03:b2:1e:47:5d:f6:95:f4:2b: 89:68:4c:71:71:4d:10:0b:84:2c:74:73:7d:7c:cb:3d:88:f2: 55:c2:67:19:15:4c:46:8b:a6:f9:9e:d4:a5:f3:21:fb:81:52: 91:62:54:eb:35:ea:91:58:44:75:40:dd:5d:62:6b:2d:3f:84: ce:f3:1f:e2:04:c6:72:f0:09:d9:c4:83:08:c0:32:31:fb:a2: 7b:1a:ce:76:2a:56:b4:94:81:48:33:12:9d:7f:ab:8d:f3:9a: 14:b1:a6:9a:5c:b2:ef:41:88:50:81:b7:c6:22:55:63:19:4e: 20:38:ca:5e:3c:b6:71:4d:55:10:99:9d:8d:d2:a7:29:88:2a: 84:c0:be:c5:36:bb:40:ab:ef:5f:9f:d7:b9:a4:45:f3:f2:c2: a1:d2:14:c5:27:37:ba:bd:03:96:0a:31:fc:7d:12:a4:cc:c1: da:04:e4:38:f1:2a:bc:88:b7:c5:fe:75:7f:42:3e:3d:54:31: ab:69:16:b3:ff:a7:b5:67:45:db:23:a0:89:98:11:2f:26:88: 80:eb:0e:2d:07:05:ab:9c:0e:6f:12:09:7a:1c:0b:cc:e7:78: 75:c8:25:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+PJPCDgc60fqJxiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFjZjRhN2MtZDNhNy00N2M0LTkzMzQtMmNjZmViNjYw Mzg0MB4XDTI2MTAyMDAwMTAyOFoXDTI3MDExODAxMTAyOFowLzEtMCsGA1UEAxMk YTM5ZmU0ZDEtMmQ0Ni00NmRjLThlYmItMzEyODViNzY2YmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPXPOvmxUiXo+boggAQRfA3IJ5e6IIIMYTAi CbnRIYz+dww7S+2UIN8/6HMGFXTyGUXaBYxoMQy1wpX8a7ZxmCCx0hxDy38qqK1Q 6wNk2M3CaHKjc2vlo9hP8ol5gyoMHoUdEdeUNIWQH0nvTGmQLnX99lnK62eogu04 yP/PgsguMBxMIcvZttD6g+kk3jY+0LJkmli1Eclj4cqhZ6JtnRa/cYT0cuwP8/2Z h0e3cK93HxUrPy6YbKAuYklXG2HtfTkg1e6RmdoO0/rSl3ZOlhC4ckgDkGsHRJoo /2Ff/mS2A8mm/IqAgDhb4kebIjBlHTOYgQFaEbYVzu20xU5HkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAOnS09azwYhEIsYbl7vGO5VsSDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9mYWNm NGE3Yy1kM2E3LTQ3YzQtOTMzNC0yY2NmZWI2NjAzODQvYWM2MWI1ZjAtM2VjMC0z NWFjLWI3MWQtYTE5MzUzYzIzMWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZmFjZjRhN2MtZDNhNy00N2M0LTkz MzQtMmNjZmViNjYwMzg0L2ZhY2Y0YTdjLWQzYTctNDdjNC05MzM0LTJjY2ZlYjY2 MDM4NC5jcmwwHwYDVR0jBBgwFoAU0Yw1/9/X40f/Xpk/ZjlHGiE8x+cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9mYWNmNGE3Yy1kM2E3LTQ3YzQtOTMzNC0yY2Nm ZWI2NjAzODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoyMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY3cb9YQFOT4fwTXiE1kBnyMFdxeJYVSufAhAOyHkdd9pX0K4loTHFx TRALhCx0c318yz2I8lXCZxkVTEaLpvme1KXzIfuBUpFiVOs16pFYRHVA3V1iay0/ hM7zH+IExnLwCdnEgwjAMjH7onsaznYqVrSUgUgzEp1/q43zmhSxpppcsu9BiFCB t8YiVWMZTiA4yl48tnFNVRCZnY3SpymIKoTAvsU2u0Cr71+f17mkRfPywqHSFMUn N7q9A5YKMfx9EqTMwdoE5DjxKryIt8X+dX9CPj1UMatpFrP/p7VnRdsjoImYES8m iIDrDi0HBaucDm8SCXocC8zneHXIJdk= -----END CERTIFICATE-----Generated at Mon Nov 2 14:28:26 2026 by rpki-client