$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa File: b471a838-37ef-33b5-8d06-1deacc3e9618.roa (raw, json) Hash identifier: KzANW0DWNHit76UPooD5wGkWIf42BkllKOKjWWDButI= Subject key identifier: E3:73:E6:FA:AB:AC:D1:EA:0F:4A:07:81:83:3F:B1:59:CF:07:A2:D6 Certificate issuer: /CN=927d18e8-718f-412b-a0b2-a97decff6f3f Certificate serial: 010D0C9F4328584EF2E75B9E9EFF1FAB22F2D280 Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 1239 IP address blocks: 140.228.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:5b:9e:9e:ff:1f:ab:22:f2:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=023a7500-27d8-4ffa-83b8-5787b4155a32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4f:78:a2:b4:a4:8c:af:21:6c:bd:80:61:77: 04:61:66:8c:0b:67:10:f1:c7:af:1e:b4:3a:e6:5e: 7a:9b:0d:90:27:62:69:4d:c4:4f:05:c6:81:8b:7e: 36:ae:73:0f:a7:61:29:b5:58:66:f5:b0:ca:b8:ed: 08:b1:99:7e:36:03:df:23:b4:36:2a:a6:5d:ab:fe: d7:6e:41:8f:5c:bf:8b:4d:ea:bd:da:67:ba:c7:5b: 76:67:89:04:7d:52:18:b3:0d:bb:8e:2f:81:48:37: 32:61:ef:28:d6:51:d4:9e:ef:54:42:29:75:b6:26: d7:37:db:1e:4f:36:ee:d6:12:71:e6:61:54:3f:de: 2f:1f:ab:cd:f6:2e:21:63:33:fc:38:99:96:eb:01: 6d:f1:2e:b7:30:8c:c1:20:c2:e3:60:35:2a:42:67: 6e:6d:a7:18:f1:eb:a0:0f:52:60:70:7a:14:db:7c: d9:60:9e:a0:20:e0:4f:bd:68:16:5a:86:2e:ed:ff: c7:fd:75:51:f8:c1:bd:29:e8:b2:1b:53:d4:75:c9: 2d:a2:39:16:88:4e:d9:a1:5a:64:66:87:32:03:c0: 74:c1:5d:0d:26:91:86:05:ce:d4:17:7f:7d:41:24: d0:d3:0b:d7:c6:75:f0:d7:b4:73:6e:d8:7e:4c:85: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:73:E6:FA:AB:AC:D1:EA:0F:4A:07:81:83:3F:B1:59:CF:07:A2:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/b471a838-37ef-33b5-8d06-1deacc3e9618.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl X509v3 Authority Key Identifier: keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer sbgp-ipAddrBlock: critical IPv4: 140.228.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:17:49:1c:80:f7:80:68:97:7b:29:3e:cb:01:e3:b2:d3:73: 30:43:6c:a1:e6:92:52:e4:6e:3e:e4:f4:41:65:5a:30:42:e9: eb:e6:bb:c3:68:cd:57:74:0b:d8:37:8f:ee:ea:b0:9d:30:22: ae:38:12:c1:76:37:70:31:2d:26:a3:a9:12:2f:8e:e9:05:68: 4a:a1:67:a9:4e:fb:61:bf:45:60:df:e6:2f:8a:c8:1a:19:e8: 54:00:7e:47:30:24:7c:8d:3f:73:e7:b1:1c:cb:7d:00:ee:6c: 4b:3e:a2:c2:b0:ae:00:ce:d7:a6:3a:a1:d8:02:51:45:ec:55: 63:11:44:af:db:de:92:c6:0c:e3:66:c5:9c:6a:cb:fc:b9:a8: 3d:50:c4:53:00:0e:08:d7:1c:71:8f:f8:92:70:0e:12:93:20: 5d:8c:c6:68:82:0c:73:04:05:56:7b:1b:12:c2:56:16:67:b2: 0d:19:85:80:e1:e7:cd:31:f4:0b:31:d0:a4:65:31:5a:5a:49: 5b:19:b7:6a:e7:5d:04:20:f2:5b:3a:bb:fe:a9:bf:1d:2a:24: 13:37:84:ad:2c:5a:70:87:0d:8f:5b:50:ff:fa:19:51:ec:b8: 9d:dd:7d:58:b3:0d:45:c1:3b:7f:a6:ca:5c:e3:7a:34:21:fa: 54:20:36:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y51uenv8fqyLy0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2 ZjNmMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk MDIzYTc1MDAtMjdkOC00ZmZhLTgzYjgtNTc4N2I0MTU1YTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3094orSkjK8hbL2AYXcEYWaMC2cQ8cevHrQ6 5l56mw2QJ2JpTcRPBcaBi342rnMPp2EptVhm9bDKuO0IsZl+NgPfI7Q2KqZdq/7X bkGPXL+LTeq92me6x1t2Z4kEfVIYsw27ji+BSDcyYe8o1lHUnu9UQil1tibXN9se Tzbu1hJx5mFUP94vH6vN9i4hYzP8OJmW6wFt8S63MIzBIMLjYDUqQmdubacY8eug D1JgcHoU23zZYJ6gIOBPvWgWWoYu7f/H/XVR+MG9KeiyG1PUdcktojkWiE7ZoVpk ZocyA8B0wV0NJpGGBc7UF399QSTQ0wvXxnXw17Rzbth+TIUL/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONz5vqrrNHqD0oHgYM/sVnPB6LWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvYjQ3MWE4MzgtMzdlZi0z M2I1LThkMDYtMWRlYWNjM2U5NjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcXSRyA94Bol3spPssB47LTczBDbKHmklLkbj7k9EFlWjBC6evmu8No zVd0C9g3j+7qsJ0wIq44EsF2N3AxLSajqRIvjukFaEqhZ6lO+2G/RWDf5i+KyBoZ 6FQAfkcwJHyNP3PnsRzLfQDubEs+osKwrgDO16Y6odgCUUXsVWMRRK/b3pLGDONm xZxqy/y5qD1QxFMADgjXHHGP+JJwDhKTIF2MxmiCDHMEBVZ7GxLCVhZnsg0ZhYDh 580x9Asx0KRlMVpaSVsZt2rnXQQg8ls6u/6pvx0qJBM3hK0sWnCHDY9bUP/6GVHs uJ3dfVizDUXBO3+mylzjejQh+lQgNg0= -----END CERTIFICATE-----Generated at Mon Aug 31 10:51:41 2026 by rpki-client