$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa File: 40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa (raw, json) Hash identifier: GWsi/EfsKM4Q6zcyZYlG81BFNhIbkzMTBZzq1t/HDQk= Subject key identifier: 2D:3B:95:11:9E:6C:67:A8:B1:3D:D9:EA:00:EB:16:18:B4:53:E9:F6 Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Certificate serial: 010D0C9F4328584EF87CCB0C2B21331EDD5B7E20 Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 1239 IP address blocks: 141.140.64.0/24 maxlen: 24 141.140.67.0/24 maxlen: 24 141.140.70.0/24 maxlen: 24 141.140.73.0/24 maxlen: 24 141.140.76.0/24 maxlen: 24 141.140.79.0/24 maxlen: 24 141.140.82.0/24 maxlen: 24 141.140.85.0/24 maxlen: 24 141.140.88.0/24 maxlen: 24 141.140.91.0/24 maxlen: 24 141.140.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:cb:0c:2b:21:33:1e:dd:5b:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=aadd6de7-e366-4b85-90d3-e91ceed0e568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:45:33:f3:81:80:bf:fd:81:20:ed:92:ca:fb: 79:a5:af:9d:a4:d7:19:a3:06:85:d4:01:9d:95:a5: dd:30:b7:dc:1a:fc:f0:ac:d4:38:ae:79:d7:68:47: 11:11:d7:52:0f:fd:fa:46:bf:2b:bf:90:96:a1:44: 80:b1:8e:58:60:3d:ac:eb:93:6b:cb:4b:96:5d:a1: 8f:31:17:bd:0c:96:4d:07:25:ae:88:8d:1b:33:58: ab:d4:62:97:ae:99:7f:c4:3d:74:0c:4f:d0:9b:95: 61:57:ee:fb:32:31:e6:05:25:97:0f:d9:b5:1c:c1: 35:e2:6c:3e:1c:cf:df:f6:9f:75:46:a2:db:19:1d: d2:33:65:76:a7:37:c0:71:2e:dc:0b:bb:10:53:bf: 75:02:53:5a:75:1e:1f:82:d6:22:7c:5e:d5:7d:d3: 31:91:c3:f5:e7:f9:cd:5e:ce:eb:e1:a8:b8:81:58: fb:43:2c:b0:e2:95:5d:1b:9b:7a:21:75:67:cb:67: cd:60:6e:2f:59:b9:a1:f0:44:e4:71:64:ae:ec:ed: e3:85:80:05:ff:85:c3:02:bd:a4:79:ee:cd:10:1f: 25:9c:12:28:ff:77:32:f1:28:ed:e4:9e:11:57:f8: a1:1d:99:09:5f:cc:b4:16:a8:10:e4:1c:46:a5:e1: 8b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3B:95:11:9E:6C:67:A8:B1:3D:D9:EA:00:EB:16:18:B4:53:E9:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/40649f8d-a2c1-32f8-9f91-e76ab12ef234.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl X509v3 Authority Key Identifier: keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer sbgp-ipAddrBlock: critical IPv4: 141.140.64.0/24 141.140.67.0/24 141.140.70.0/24 141.140.73.0/24 141.140.76.0/24 141.140.79.0/24 141.140.82.0/24 141.140.85.0/24 141.140.88.0/24 141.140.91.0/24 141.140.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:e2:bf:c7:84:94:0d:59:77:d6:2b:4c:d4:4c:8d:51:ae:66: 40:4f:c0:3b:10:75:78:9f:da:af:d2:5e:2d:db:9e:0d:4f:5e: 92:a0:32:af:6c:99:fd:75:0d:98:56:94:ff:69:58:3b:24:de: df:ad:3e:cc:88:39:76:df:f9:75:51:63:07:81:f4:71:ce:91: 95:a5:d5:34:2a:cd:10:ba:f5:4a:c4:78:b5:ba:0b:83:9e:2a: b1:96:1b:34:bc:48:84:4b:20:f3:0e:07:ca:09:14:e8:cf:54: a6:b7:ec:d7:20:bf:f0:63:26:9e:78:59:7e:5b:75:bf:81:d7: b5:35:48:c9:da:d3:4f:83:78:4c:37:5d:b9:bc:b3:1b:8f:59: fe:85:dd:49:c4:d8:d5:0a:8c:80:6a:6a:17:39:43:c2:03:b9: a3:86:23:03:06:8f:3d:49:81:50:93:ee:38:3f:7b:af:a1:d9: 13:3d:7a:58:95:c6:e4:19:7b:aa:0f:3d:a4:bd:35:c8:55:8b: 87:66:9f:f0:60:2a:46:80:cc:ef:71:ec:85:a0:78:12:e9:41: 4b:21:e1:80:6c:02:76:9a:92:77:e6:fb:b6:dc:4f:0a:97:2d: 92:67:f9:81:72:b5:29:53:9f:ba:07:f3:02:67:da:30:12:80: 5b:09:93:82 -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE74fMsMKyEzHt1bfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3 ZDNkMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YWFkZDZkZTctZTM2Ni00Yjg1LTkwZDMtZTkxY2VlZDBlNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEUz84GAv/2BIO2Syvt5pa+dpNcZowaF1AGd laXdMLfcGvzwrNQ4rnnXaEcREddSD/36Rr8rv5CWoUSAsY5YYD2s65Nry0uWXaGP MRe9DJZNByWuiI0bM1ir1GKXrpl/xD10DE/Qm5VhV+77MjHmBSWXD9m1HME14mw+ HM/f9p91RqLbGR3SM2V2pzfAcS7cC7sQU791AlNadR4fgtYifF7VfdMxkcP15/nN Xs7r4ai4gVj7Qyyw4pVdG5t6IXVny2fNYG4vWbmh8ETkcWSu7O3jhYAF/4XDAr2k ee7NEB8lnBIo/3cy8Sjt5J4RV/ihHZkJX8y0FqgQ5BxGpeGLtwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFC07lRGebGeosT3Z6gDrFhi0U+n2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5 OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvNDA2NDlmOGQtYTJjMS0z MmY4LTlmOTEtZTc2YWIxMmVmMjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4 NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5 NGI0MzdkM2QuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAjYxAAwQA jYxDAwQAjYxGAwQAjYxJAwQAjYxMAwQAjYxPAwQAjYxSAwQAjYxVAwQAjYxYAwQA jYxbAwQAjYxeMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAGjiv8eElA1Zd9YrTNRMjVGuZkBPwDsQdXif2q/S Xi3bng1PXpKgMq9smf11DZhWlP9pWDsk3t+tPsyIOXbf+XVRYweB9HHOkZWl1TQq zRC69UrEeLW6C4OeKrGWGzS8SIRLIPMOB8oJFOjPVKa37Ncgv/BjJp54WX5bdb+B 17U1SMna00+DeEw3Xbm8sxuPWf6F3UnE2NUKjIBqahc5Q8IDuaOGIwMGjz1JgVCT 7jg/e6+h2RM9eliVxuQZe6oPPaS9NchVi4dmn/BgKkaAzO9x7IWgeBLpQUsh4YBs Anaaknfm+7bcTwqXLZJn+YFytSlTn7oH8wJn2jASgFsJk4I= -----END CERTIFICATE-----Generated at Tue Sep 1 04:51:45 2026 by rpki-client