$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa File: 9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa (raw, json) Hash identifier: Yf8rGPabLMiWJdU2M0emdDmMzjHQG4UEhP2eWC57VWY= Subject key identifier: 3C:32:59:10:A1:C1:A1:69:15:F8:C5:58:D3:9C:72:9D:5E:0C:67:B7 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584ED4325BA24F3EED254A134C40 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 49304 IP address blocks: 140.235.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:32:5b:a2:4f:3e:ed:25:4a:13:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=711a9f78-428c-4431-8e46-6779c8b5a1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:a0:e4:58:58:eb:a5:8f:7f:3b:03:88:35: 4e:4b:b0:62:19:d5:91:8e:1d:3c:3c:aa:7b:24:83: 61:73:7c:97:2d:b7:e9:74:be:34:43:7d:e3:00:d2: 04:21:1e:7a:be:82:75:9a:4f:53:ea:cc:45:87:2a: 3d:49:54:e8:00:8f:b2:af:ae:62:b8:0f:41:3d:8b: e4:e8:07:e8:20:52:cf:ef:9e:64:d0:0b:a9:67:04: b8:aa:fe:98:a9:2f:56:53:cd:89:9f:dc:e6:c0:c2: 52:4c:94:28:22:e0:32:7e:66:f0:50:64:23:91:ee: 8e:97:07:8b:62:2e:6a:26:6b:15:2e:2e:46:5a:f9: 36:24:a1:9b:ee:cc:ce:1a:b2:66:bc:c9:ac:cf:f0: a4:d3:23:da:f9:d4:1c:15:55:d1:c3:6e:a9:b1:da: 8a:51:04:a9:ab:0d:b2:b8:d4:c9:cc:c2:30:30:ce: fa:a5:73:c7:cd:74:f3:53:7b:8b:65:9c:ad:47:eb: 53:e8:20:97:04:fa:67:91:53:8b:ed:41:98:af:20: dd:7f:13:1b:32:f9:da:9f:2c:8d:4b:0b:45:b1:14: 12:30:23:6b:e9:b6:dd:24:4e:d2:bb:97:cb:4c:30: 27:35:12:7f:a7:f2:a2:0e:ff:9b:55:20:5d:6d:87: 1f:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:32:59:10:A1:C1:A1:69:15:F8:C5:58:D3:9C:72:9D:5E:0C:67:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a3:ef:3e:97:5b:8c:8c:42:cd:48:96:85:25:a8:e5:21:71: 55:63:a5:c4:db:64:19:a8:ff:2a:14:0f:38:65:cf:09:3e:b8: 41:a0:b7:28:d3:9f:53:c9:4d:2c:4c:0e:aa:1a:7f:7e:f2:dc: 4c:f3:fb:67:d1:ed:f4:5f:8a:0e:28:d8:50:7b:e6:65:20:1c: d7:9e:2a:11:2b:5e:2a:61:d0:ec:78:a2:5c:e4:e7:96:5d:1b: d0:01:87:49:52:7d:c5:75:48:d0:93:b9:fa:fa:93:97:64:60: 8e:76:fd:05:3c:6e:bc:c1:26:c8:1e:06:fa:65:c6:de:22:57: 82:ee:8f:62:7d:67:f3:64:7c:60:03:14:29:82:fb:fd:b9:26: 00:fc:5e:d7:2c:ba:3a:bb:b0:f5:90:74:dc:b1:48:3f:97:19: ea:17:e6:32:05:65:73:ec:70:28:36:94:2e:6e:4c:eb:2e:af: bf:d0:33:d6:89:94:80:ac:08:d3:14:2c:f2:5c:3f:d9:77:39: 5f:d9:26:96:26:c9:50:c3:19:e9:42:2a:b6:a9:11:2a:18:32: 3e:9c:b7:c1:7e:25:c3:1e:09:d5:2e:2e:e8:32:8a:1c:5c:7f: 5d:0f:48:71:35:52:26:51:4b:8d:aa:78:38:e1:ad:7b:37:15: a9:0f:18:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMluiTz7tJUoTTEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk NzExYTlmNzgtNDI4Yy00NDMxLThlNDYtNjc3OWM4YjVhMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXGg5FhY66WPfzsDiDVOS7BiGdWRjh08PKp7 JINhc3yXLbfpdL40Q33jANIEIR56voJ1mk9T6sxFhyo9SVToAI+yr65iuA9BPYvk 6AfoIFLP755k0AupZwS4qv6YqS9WU82Jn9zmwMJSTJQoIuAyfmbwUGQjke6OlweL Yi5qJmsVLi5GWvk2JKGb7szOGrJmvMmsz/Ck0yPa+dQcFVXRw26psdqKUQSpqw2y uNTJzMIwMM76pXPHzXTzU3uLZZytR+tT6CCXBPpnkVOL7UGYryDdfxMbMvnanyyN SwtFsRQSMCNr6bbdJE7Su5fLTDAnNRJ/p/KiDv+bVSBdbYcfMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwyWRChwaFpFfjFWNOccp1eDGe3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvOWM3YzQxZjAtYTZhOC0z NmUzLWI5ZTktZDAxYWFkOGU1YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2j7z6XW4yMQs1IloUlqOUhcVVjpcTbZBmo/yoUDzhlzwk+uEGgtyjT n1PJTSxMDqoaf37y3Ezz+2fR7fRfig4o2FB75mUgHNeeKhErXiph0Ox4olzk55Zd G9ABh0lSfcV1SNCTufr6k5dkYI52/QU8brzBJsgeBvplxt4iV4Luj2J9Z/NkfGAD FCmC+/25JgD8Xtcsujq7sPWQdNyxSD+XGeoX5jIFZXPscCg2lC5uTOsur7/QM9aJ lICsCNMULPJcP9l3OV/ZJpYmyVDDGelCKrapESoYMj6ct8F+JcMeCdUuLugyihxc f10PSHE1UiZRS42qeDjhrXs3FakPGP8= -----END CERTIFICATE-----Generated at Fri Sep 11 01:14:21 2026 by rpki-client