$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/654b064a-ca60-316e-9e22-21535585fb9f.roa File: 654b064a-ca60-316e-9e22-21535585fb9f.roa (raw, json) Hash identifier: NyGKX9DUrh6SLHPdWb8/PClyiLUVXW8Fp+hVjJM2xMc= Subject key identifier: CB:03:F0:AE:BA:ED:41:DC:88:A8:6A:E2:DA:3E:95:C3:DF:7B:DA:CC Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F4328584F612E16193D71500B520CDF40 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/654b064a-ca60-316e-9e22-21535585fb9f.roa Signing time: Sat 03 Oct 2026 13:01:43 +0000 ROA not before: Sat 03 Oct 2026 13:01:43 +0000 ROA not after: Fri 01 Jan 2027 14:01:43 +0000 asID: 3561 IP address blocks: 141.140.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2e:16:19:3d:71:50:0b:52:0c:df:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Oct 3 13:01:43 2026 GMT Not After : Jan 1 14:01:43 2027 GMT Subject: CN=c8a990ce-2da9-496d-9854-34826bde99f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:de:d5:1c:57:23:64:47:27:73:cb:5e:c5:af: a7:b5:67:70:dd:e2:d0:77:86:00:08:f1:dc:7f:c9: 7f:46:a1:be:29:f7:25:54:dc:59:49:de:e2:50:eb: ba:49:fd:53:6b:be:46:62:57:62:61:04:ab:a4:24: eb:f1:4c:d6:4f:92:65:a6:89:c4:d6:cb:e7:e3:7e: 9d:02:86:a4:bd:88:71:23:33:8a:cc:e8:e4:d0:80: 7f:8d:a3:7d:77:95:e8:43:3a:64:fc:c1:d9:55:0f: 1d:30:81:7f:fc:30:9c:08:24:77:76:54:ed:5c:7c: 0c:80:9b:87:c0:66:42:d7:9f:10:de:22:e0:ff:3e: 4a:44:44:ab:1c:3f:d0:02:fb:89:45:f8:b2:2f:a3: 02:44:04:0b:0e:c9:d4:a6:70:b3:c5:42:de:41:a3: 9f:ab:cd:33:8f:33:ab:d2:98:af:b3:4f:bd:2e:ef: a0:ca:2b:74:2e:d1:40:4c:11:74:36:81:55:64:e2: 73:cf:3f:ca:91:9b:df:83:2f:ae:45:5f:3e:29:b6: ab:bd:d6:70:c8:2f:a4:90:d3:0f:bd:92:82:d4:96: b3:24:54:9b:5c:98:45:32:f9:6f:8f:b5:00:0c:5b: 8c:bc:62:3c:45:2f:c6:1d:7d:86:57:f6:ef:b6:0c: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:03:F0:AE:BA:ED:41:DC:88:A8:6A:E2:DA:3E:95:C3:DF:7B:DA:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/654b064a-ca60-316e-9e22-21535585fb9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 141.140.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:5c:ad:64:84:46:56:10:1f:ea:78:ef:ca:d8:2b:4b:6c:c5: 54:68:64:6e:0c:df:45:29:15:f7:04:eb:ad:e1:29:bd:81:ef: e2:be:d8:1d:0f:db:31:9a:21:88:7f:9c:9b:4d:f3:02:28:7d: e9:31:aa:e7:c8:be:3b:0e:3e:e6:a4:d4:c5:20:9a:de:e5:c2: cc:3d:3b:ef:3f:91:8b:7f:19:10:fb:4b:0c:42:db:00:4a:d6: cf:8a:e7:19:94:7a:b6:86:1f:49:84:5b:4d:87:79:08:17:4b: b7:0b:8c:e0:74:2f:62:4e:67:d4:ec:3b:d8:87:0a:a3:88:43: 67:4e:d2:fb:4d:1b:32:ec:92:15:9b:2a:c0:3a:2e:b1:5f:86: 57:5e:f1:a9:41:61:b5:51:f2:0d:2a:fa:56:07:83:14:dd:b4: 2f:e6:68:8e:0c:97:a8:07:4e:85:f9:b0:cc:88:2e:15:b7:da: 87:a6:b7:5d:d0:fa:3d:ff:1f:4c:07:1d:eb:45:24:cd:8f:5f: 02:f2:59:81:2e:15:91:d0:f9:d8:a5:46:ad:cf:4b:ca:df:fd: 2b:d3:e0:bd:85:66:c4:ea:63:78:9e:46:67:27:5f:22:7f:33: d5:a8:14:0e:f6:c2:69:b2:87:63:6b:00:57:10:92:d4:74:95: 2d:62:16:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLhYZPXFQC1IM30AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI2MTAwMzEzMDE0M1oXDTI3MDEwMTE0MDE0M1owLzEtMCsGA1UEAxMk YzhhOTkwY2UtMmRhOS00OTZkLTk4NTQtMzQ4MjZiZGU5OWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8N7VHFcjZEcnc8texa+ntWdw3eLQd4YACPHc f8l/RqG+KfclVNxZSd7iUOu6Sf1Ta75GYldiYQSrpCTr8UzWT5JlponE1svn436d AoakvYhxIzOKzOjk0IB/jaN9d5XoQzpk/MHZVQ8dMIF//DCcCCR3dlTtXHwMgJuH wGZC158Q3iLg/z5KRESrHD/QAvuJRfiyL6MCRAQLDsnUpnCzxULeQaOfq80zjzOr 0pivs0+9Lu+gyit0LtFATBF0NoFVZOJzzz/KkZvfgy+uRV8+KbarvdZwyC+kkNMP vZKC1JazJFSbXJhFMvlvj7UADFuMvGI8RS/GHX2GV/bvtgx47QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsD8K667UHciKhq4to+lcPfe9rMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNjU0YjA2NGEtY2E2MC0z MTZlLTllMjItMjE1MzU1ODVmYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpcrWSERlYQH+p478rYK0tsxVRoZG4M30UpFfcE663hKb2B7+K+2B0P 2zGaIYh/nJtN8wIofekxqufIvjsOPuak1MUgmt7lwsw9O+8/kYt/GRD7SwxC2wBK 1s+K5xmUeraGH0mEW02HeQgXS7cLjOB0L2JOZ9TsO9iHCqOIQ2dO0vtNGzLskhWb KsA6LrFfhlde8alBYbVR8g0q+lYHgxTdtC/maI4Ml6gHToX5sMyILhW32oemt13Q +j3/H0wHHetFJM2PXwLyWYEuFZHQ+dilRq3PS8rf/SvT4L2FZsTqY3ieRmcnXyJ/ M9WoFA72wmmyh2NrAFcQktR0lS1iFiQ= -----END CERTIFICATE-----Generated at Sun Oct 11 22:21:27 2026 by rpki-client