$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa File: 8695139a-e96a-3566-9130-2d8de4f804d0.roa (raw, json) Hash identifier: dOo8S+MSmxqkj5yDe/pOY05JNvyjaSedmzsj7WmOzFk= Subject key identifier: 8C:8A:A1:E7:47:41:EE:CD:4C:40:6E:84:EE:F0:64:32:5C:8F:8B:36 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584F49766BE9B4CC8672C5574D40 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 62759 IP address blocks: 140.174.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:6b:e9:b4:cc:86:72:c5:57:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=aab816bb-1d03-4ab2-aa63-341709743a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:16:10:4e:d7:f5:fe:46:3b:dd:f7:6b:cd:21: d6:43:7e:69:b1:3f:35:bb:7c:5d:ac:7e:c1:a1:1a: 3d:04:aa:39:f6:75:43:80:b1:f2:d6:06:db:d7:47: 7d:a8:f7:06:26:97:28:e7:a0:e2:70:41:a1:b3:64: a4:6b:ce:72:ef:2e:60:4a:10:3a:12:1f:c0:b0:da: f0:cd:1c:ab:4d:46:c1:c2:04:e1:d2:a2:0d:4b:7e: 1e:3b:0f:07:dd:ca:88:49:6c:cb:b7:46:4b:ed:fb: 3d:cf:a5:53:cf:71:7f:33:57:7d:bd:40:b6:07:96: c9:15:b1:ae:22:9e:3f:f3:06:1e:96:e6:9b:8f:f3: 82:7e:31:d9:34:ff:bb:17:a8:42:44:70:4e:39:89: 7b:2c:f0:b7:c5:24:b3:4c:8b:9d:2b:cd:37:98:df: 12:2b:3a:57:f5:ee:2b:4e:1d:1e:84:f0:f1:b1:23: 5c:03:66:8e:6e:5d:00:6f:75:01:3f:a1:71:7e:d0: 43:57:f6:e1:c0:84:57:56:b5:61:64:23:38:f1:c0: b2:1d:af:d3:bd:fe:6a:b2:e6:46:c7:6b:cd:3d:bc: 82:29:1a:3a:d9:f8:88:5f:c4:5b:96:95:b1:3b:68: c2:fc:8e:51:b7:5e:9a:47:0c:1f:1f:83:40:b4:f7: 24:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8A:A1:E7:47:41:EE:CD:4C:40:6E:84:EE:F0:64:32:5C:8F:8B:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/8695139a-e96a-3566-9130-2d8de4f804d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 140.174.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:45:6e:cb:d7:c9:26:62:3c:68:70:78:a2:b2:ef:36:c7:6b: 1c:e0:38:58:c6:50:b4:2a:e5:05:8c:cb:11:16:13:6f:46:ad: a6:5e:d5:ae:53:19:b0:44:7f:25:cf:d0:1d:8e:62:f2:6f:11: be:d7:ac:ab:79:31:3f:f4:0a:1e:0c:3c:d6:b6:4b:b2:38:74: 64:ea:1c:6c:90:27:76:a2:74:aa:0d:b3:37:e1:00:67:c1:35: 9b:cd:d7:e2:49:1a:7e:07:4f:ea:ad:a3:6a:1e:24:55:07:48: 89:3b:22:0c:6c:2e:81:fb:c7:d6:80:87:a5:93:08:94:4f:b2: f9:54:71:04:20:10:b9:7d:53:49:e3:97:7e:ef:1e:df:00:02: c2:7d:9c:5d:d9:08:6f:60:69:ca:86:c8:8a:98:f7:86:9b:f1: 2b:b5:0b:c8:cf:61:52:64:c6:b5:2d:7f:3d:07:99:d3:1e:d1: c5:4c:dd:67:64:92:a9:4a:70:5f:eb:53:da:13:97:67:3a:93: db:79:36:c9:b0:90:eb:2c:9e:b4:0f:43:f6:06:d7:98:2a:3e: c1:52:4e:1f:65:45:79:41:f7:3d:b9:f2:3c:f5:93:1f:fa:02: 7c:5e:db:a7:40:71:84:8f:81:c1:cc:3a:4f:24:af:a2:49:21: 7c:46:c8:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmvptMyGcsVXTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWFiODE2YmItMWQwMy00YWIyLWFhNjMtMzQxNzA5NzQzYTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRYQTtf1/kY73fdrzSHWQ35psT81u3xdrH7B oRo9BKo59nVDgLHy1gbb10d9qPcGJpco56DicEGhs2Ska85y7y5gShA6Eh/AsNrw zRyrTUbBwgTh0qINS34eOw8H3cqISWzLt0ZL7fs9z6VTz3F/M1d9vUC2B5bJFbGu Ip4/8wYeluabj/OCfjHZNP+7F6hCRHBOOYl7LPC3xSSzTIudK803mN8SKzpX9e4r Th0ehPDxsSNcA2aObl0Ab3UBP6FxftBDV/bhwIRXVrVhZCM48cCyHa/Tvf5qsuZG x2vNPbyCKRo62fiIX8RblpWxO2jC/I5Rt16aRwwfH4NAtPckxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyKoedHQe7NTEBuhO7wZDJcj4s2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvODY5NTEzOWEtZTk2YS0z NTY2LTkxMzAtMmQ4ZGU0ZjgwNGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEjK7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFFbsvXySZiPGhweKKy7zbHaxzgOFjGULQq5QWMyxEWE29GraZe1a5T GbBEfyXP0B2OYvJvEb7XrKt5MT/0Ch4MPNa2S7I4dGTqHGyQJ3aidKoNszfhAGfB NZvN1+JJGn4HT+qto2oeJFUHSIk7IgxsLoH7x9aAh6WTCJRPsvlUcQQgELl9U0nj l37vHt8AAsJ9nF3ZCG9gacqGyIqY94ab8Su1C8jPYVJkxrUtfz0HmdMe0cVM3Wdk kqlKcF/rU9oTl2c6k9t5NsmwkOssnrQPQ/YG15gqPsFSTh9lRXlB9z258jz1kx/6 Anxe26dAcYSPgcHMOk8kr6JJIXxGyP0= -----END CERTIFICATE-----Generated at Sat Oct 31 02:41:33 2026 by rpki-client