$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa File: 19990b9e-a7ee-3373-9416-e00b1e3c189c.roa (raw, json) Hash identifier: 2nzcSKu/DnC22p/1P9MPJyQUR8ua8Sxz1vymtNN5lWo= Subject key identifier: 22:F3:EA:3B:FB:04:48:AE:2D:3F:0C:CB:B1:F4:C3:AA:A8:F0:5D:7C Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F6292CE373123C87A1088C358 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 32346 IP address blocks: 140.235.9.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:ce:37:31:23:c8:7a:10:88:c3:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=67f29ff3-d2dd-4b4b-8b88-21f967bd152d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8a:88:d1:38:fa:d9:09:8c:a2:81:c1:77:d4: ae:09:f9:9e:f6:3c:d4:8a:d7:2a:27:4d:35:85:14: a8:43:9b:9d:f9:3a:63:82:aa:75:a8:d4:60:3e:0b: 12:23:d7:e7:f6:78:fb:b8:9d:4f:a7:d0:32:d0:fe: d5:8d:90:b0:e6:66:15:a8:d4:c5:ba:2b:14:e9:e5: 22:c5:01:28:75:bd:e5:2a:15:29:5c:f6:a8:71:9f: 73:af:ab:40:40:8f:0e:6b:1b:44:10:5b:f9:09:03: 03:9d:28:25:a0:b9:7f:d5:a7:16:4a:0a:cc:92:b5: e1:2c:c0:b9:88:e3:12:20:8e:5a:3e:ef:ed:53:f0: 40:26:07:49:47:28:b9:dc:55:f6:36:78:57:e3:f7: 58:60:f6:ed:77:67:27:27:d1:14:ac:9f:0e:c0:5d: 29:96:0d:af:f6:4b:e9:50:4a:fd:ec:9e:2d:5a:63: b6:88:a6:88:3e:36:f6:6c:b1:87:c5:12:12:33:2b: dc:b6:f1:b5:60:09:68:e4:3a:26:fe:84:a3:bb:09: b8:0d:9b:9d:50:84:0d:b9:11:c2:57:09:d2:60:84: 59:b7:e1:03:f6:e6:33:df:8e:1a:27:75:f6:1e:df: 7e:fe:43:4d:6e:1b:e0:ac:e7:76:75:61:2a:c4:1d: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F3:EA:3B:FB:04:48:AE:2D:3F:0C:CB:B1:F4:C3:AA:A8:F0:5D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/19990b9e-a7ee-3373-9416-e00b1e3c189c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:6e:d7:39:58:d7:31:62:21:01:5b:77:70:cf:94:5d:13:5c: ba:95:df:66:32:80:ce:ac:bb:85:ef:58:5e:62:bb:4e:07:8b: 59:49:71:fd:72:d5:6b:0b:a0:8e:9f:5b:ea:df:f7:8a:40:33: a2:ed:2b:ac:35:c6:7b:90:38:a0:f1:fb:e1:2c:c9:19:51:e1: 4d:81:d2:8e:ec:ab:3e:ef:81:34:c3:67:ae:c5:08:03:6e:e3: d3:f6:14:b5:c5:04:62:4d:4f:40:71:ef:dd:a4:92:28:41:35: 95:09:f0:46:5e:e2:39:76:37:93:f8:39:cc:e5:47:33:d6:93: 1d:79:5e:bf:34:6d:6e:87:e6:ca:45:66:3d:36:d3:03:ae:60: 07:2f:86:d0:35:fc:01:a5:10:35:fb:dc:e7:bb:41:ca:9a:7f: 0d:18:22:f0:ff:e2:34:e8:5d:a7:46:db:5e:4f:10:61:7a:78: 23:41:bf:4d:1b:1d:4e:f6:21:b5:51:5f:7c:e0:29:c6:f5:60: 0d:7d:10:36:e3:da:82:e7:7c:41:fa:95:73:70:1c:96:21:d6: 11:63:c5:8b:da:36:8c:03:b7:f6:5c:fb:ea:ab:1e:d7:d8:40: 9e:6e:7d:0b:92:55:58:38:08:ab:b1:f8:03:82:c5:37:1b:51: 10:fd:83:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iks43MSPIehCIw1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NjdmMjlmZjMtZDJkZC00YjRiLThiODgtMjFmOTY3YmQxNTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4qI0Tj62QmMooHBd9SuCfme9jzUitcqJ001 hRSoQ5ud+Tpjgqp1qNRgPgsSI9fn9nj7uJ1Pp9Ay0P7VjZCw5mYVqNTFuisU6eUi xQEodb3lKhUpXPaocZ9zr6tAQI8OaxtEEFv5CQMDnSgloLl/1acWSgrMkrXhLMC5 iOMSII5aPu/tU/BAJgdJRyi53FX2NnhX4/dYYPbtd2cnJ9EUrJ8OwF0plg2v9kvp UEr97J4tWmO2iKaIPjb2bLGHxRISMyvctvG1YAlo5Dom/oSjuwm4DZudUIQNuRHC VwnSYIRZt+ED9uYz344aJ3X2Ht9+/kNNbhvgrOd2dWEqxB3MGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCLz6jv7BEiuLT8My7H0w6qo8F18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMTk5OTBiOWUtYTdlZS0z MzczLTk0MTYtZTAwYjFlM2MxODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNu1zlY1zFiIQFbd3DPlF0TXLqV32YygM6su4XvWF5iu04Hi1lJcf1y 1WsLoI6fW+rf94pAM6LtK6w1xnuQOKDx++EsyRlR4U2B0o7sqz7vgTTDZ67FCANu 49P2FLXFBGJNT0Bx792kkihBNZUJ8EZe4jl2N5P4OczlRzPWkx15Xr80bW6H5spF Zj020wOuYAcvhtA1/AGlEDX73Oe7Qcqafw0YIvD/4jToXadG215PEGF6eCNBv00b HU72IbVRX3zgKcb1YA19EDbj2oLnfEH6lXNwHJYh1hFjxYvaNowDt/Zc++qrHtfY QJ5ufQuSVVg4CKux+AOCxTcbURD9g2E= -----END CERTIFICATE-----Generated at Sun Oct 18 13:29:21 2026 by rpki-client