$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa File: e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa (raw, json) Hash identifier: //eEDJoA+c5dILHNM0nhj3t65NG5kVAIY7jkKZBZWLM= Subject key identifier: 75:5A:FB:CB:F0:B7:08:B6:CE:7C:63:40:BC:02:27:D6:91:4A:2F:A6 Certificate issuer: /CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40 Certificate serial: 010D0C9F4328584FB3A6949ABCBD7883800F1500 Authority key identifier: 66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 399293 IP address blocks: 192.140.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:94:9a:bc:bd:78:83:80:0f:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76aaac1-b724-4de2-9c1a-70dce7a10e40 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=2d41305b-2916-451e-bd3e-b3e7d03a894c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d5:8a:d3:5d:33:09:f9:0a:1d:84:cc:51:85: 4d:5a:2e:c6:62:fc:19:61:3e:a8:51:2e:3c:87:6b: f8:89:2f:e5:4b:93:08:63:65:ab:41:c5:1b:05:35: b7:fb:32:0f:a2:e8:5b:3a:ac:15:b1:4c:1b:62:d9: c9:f3:28:ef:00:75:e7:c9:4a:b4:7f:50:a0:ff:29: b8:1f:d8:c4:d0:e3:c8:e9:79:92:b6:ff:f8:4c:68: 72:41:7b:1d:2e:fa:06:1b:74:ab:82:a5:1b:6d:1f: 92:77:18:a6:3c:bd:0c:12:6b:13:d3:48:af:4d:59: f5:5a:61:9c:ae:1a:3e:b2:df:cf:83:c3:d4:cb:97: 31:f5:89:a8:d3:d8:83:1c:59:d8:c6:96:cd:4b:1b: 86:23:01:e4:90:75:72:60:ff:3a:70:39:d9:d7:57: 5b:35:3d:d5:3e:0e:38:0e:4e:ed:40:b4:20:0b:75: dd:81:13:c4:77:49:92:a3:cb:97:c0:5d:0a:0b:72: 02:34:c4:7b:21:f2:47:27:a1:12:11:7b:6c:a0:24: 58:82:57:a0:26:68:bc:b9:fe:3c:a3:ed:16:d1:e8: 9f:60:93:45:f0:11:ec:98:f0:8b:f5:6d:b0:a6:63: 70:5d:ed:c4:ea:a5:c6:bf:fe:34:57:ce:e7:4d:02: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5A:FB:CB:F0:B7:08:B6:CE:7C:63:40:BC:02:27:D6:91:4A:2F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/e5f1f5f2-daa6-3375-82ed-c8378a1b9fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40/d76aaac1-b724-4de2-9c1a-70dce7a10e40.crl X509v3 Authority Key Identifier: keyid:66:DF:53:F2:91:52:03:DD:E9:82:FF:2F:EE:46:DF:89:0B:31:62:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d76aaac1-b724-4de2-9c1a-70dce7a10e40.cer sbgp-ipAddrBlock: critical IPv4: 192.140.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:43:8d:a6:f2:0f:d4:8a:ee:d0:89:2c:cc:3c:ec:99:35: d2:24:47:9a:7e:d3:50:75:bf:2f:e2:58:e6:e5:55:b3:2a:fe: 46:98:87:40:c6:08:3b:76:5e:72:2e:ea:83:b7:71:0b:35:ba: 90:f6:ba:b9:6d:81:24:ed:5b:62:c9:87:9e:32:51:62:8d:43: 3b:e6:63:6f:72:35:ca:d3:c3:a1:51:8e:5d:41:8e:f9:5c:79: 05:96:2a:62:fd:38:5d:92:97:58:e0:7b:fa:85:33:e3:d2:c3: 1e:a2:3e:a1:99:40:66:7f:bb:ed:83:17:78:eb:52:b9:46:e7: 44:7b:93:a0:95:c5:5a:c0:18:05:ce:82:cc:30:5e:6a:8f:9f: 2c:2c:e8:36:9c:af:74:80:85:88:9c:49:60:e2:d1:47:99:f7: 55:4b:e7:5e:22:1a:24:b1:94:a6:2c:82:e1:f9:5b:21:ff:2b: e5:c7:bc:59:24:83:e5:60:23:3e:43:b9:e3:54:93:29:f7:3c: 0c:a0:cc:e2:e3:20:a0:35:76:32:71:b7:03:ca:74:8a:30:2b: be:65:2e:6a:88:4d:ca:23:67:9d:11:ff:0b:a8:f5:80:28:2f: 29:cd:d8:3e:ea:48:c4:ed:34:4b:dd:56:b5:03:f2:8a:73:67: a2:6a:4f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zppSavL14g4APFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDc2YWFhYzEtYjcyNC00ZGUyLTljMWEtNzBkY2U3YTEw ZTQwMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MmQ0MTMwNWItMjkxNi00NTFlLWJkM2UtYjNlN2QwM2E4OTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtWK010zCfkKHYTMUYVNWi7GYvwZYT6oUS48 h2v4iS/lS5MIY2WrQcUbBTW3+zIPouhbOqwVsUwbYtnJ8yjvAHXnyUq0f1Cg/ym4 H9jE0OPI6XmStv/4TGhyQXsdLvoGG3SrgqUbbR+SdximPL0MEmsT00ivTVn1WmGc rho+st/Pg8PUy5cx9Ymo09iDHFnYxpbNSxuGIwHkkHVyYP86cDnZ11dbNT3VPg44 Dk7tQLQgC3XdgRPEd0mSo8uXwF0KC3ICNMR7IfJHJ6ESEXtsoCRYglegJmi8uf48 o+0W0eifYJNF8BHsmPCL9W2wpmNwXe3E6qXGv/40V87nTQJo/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVa+8vwtwi2znxjQLwCJ9aRSi+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kNzZh YWFjMS1iNzI0LTRkZTItOWMxYS03MGRjZTdhMTBlNDAvZTVmMWY1ZjItZGFhNi0z Mzc1LTgyZWQtYzgzNzhhMWI5ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDc2YWFhYzEtYjcyNC00ZGUyLTlj MWEtNzBkY2U3YTEwZTQwL2Q3NmFhYWMxLWI3MjQtNGRlMi05YzFhLTcwZGNlN2Ex MGU0MC5jcmwwHwYDVR0jBBgwFoAUZt9T8pFSA93pgv8v7kbfiQsxYgUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kNzZhYWFjMS1iNzI0LTRkZTItOWMxYS03MGRj ZTdhMTBlNDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB31Q42m8g/Uiu7QiSzMPOyZNdIkR5p+01B1vy/iWOblVbMq/kaYh0DG CDt2XnIu6oO3cQs1upD2urltgSTtW2LJh54yUWKNQzvmY29yNcrTw6FRjl1Bjvlc eQWWKmL9OF2Sl1jge/qFM+PSwx6iPqGZQGZ/u+2DF3jrUrlG50R7k6CVxVrAGAXO gswwXmqPnyws6Dacr3SAhYicSWDi0UeZ91VL514iGiSxlKYsguH5WyH/K+XHvFkk g+VgIz5DueNUkyn3PAygzOLjIKA1djJxtwPKdIowK75lLmqITcojZ50R/wuo9YAo LynN2D7qSMTtNEvdVrUD8opzZ6JqT2M= -----END CERTIFICATE-----Generated at Mon Nov 2 11:50:17 2026 by rpki-client