$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa File: 9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa (raw, json) Hash identifier: z6L3fnaUU1qsGji0IoQe4F9FAOjHlRrG9sqkdYEzWow= Subject key identifier: 1C:8C:6E:41:57:48:E2:95:8F:E6:00:EE:74:12:4C:C7:1C:BC:5A:64 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F778361CBAE4DD1168A8D78E0 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 49304 IP address blocks: 140.235.8.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:61:cb:ae:4d:d1:16:8a:8d:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=57b03894-a489-4405-a6a0-02883b175508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:4a:ed:e7:01:b5:78:06:a3:31:db:1a:2b:71: 82:4d:49:29:ce:5b:f1:22:bb:96:24:16:23:c5:7e: f7:b5:9d:c2:5e:25:74:b7:5e:42:5a:ea:77:e2:f9: 32:ee:fe:e2:1c:b6:86:0c:ae:14:f8:25:ec:0d:06: ee:b1:38:82:b1:54:7c:33:47:3a:4d:15:6c:31:4a: 17:d1:3c:1f:8b:b0:35:48:e4:ab:b7:82:8f:2e:ad: af:26:0e:a5:3a:10:15:47:ab:4e:cc:8c:76:4e:d5: b7:6c:1e:40:b5:23:98:07:19:b5:23:c3:05:7c:05: 37:48:88:04:ea:3c:d5:f6:07:b8:8c:16:39:b4:7b: 13:db:50:5b:87:2d:bc:ec:f6:f0:82:30:4f:db:39: 8a:65:cb:b0:27:ef:db:fe:50:9b:f9:a1:b8:75:af: 19:f4:18:32:48:cc:ed:13:97:19:4d:c3:dd:8d:cc: a6:5c:23:a7:16:18:95:fb:4a:d6:52:8a:a0:52:0a: 0f:7a:a1:23:8f:1d:f5:bc:db:19:9f:4b:d2:31:dd: 56:19:4e:07:4f:4f:2f:49:77:44:83:c1:41:21:18: 3b:a7:45:d7:17:ce:bd:8b:44:c3:51:3d:7f:13:9b: 6e:b5:dc:84:e4:b6:be:af:2e:e5:25:70:b3:4f:fc: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8C:6E:41:57:48:E2:95:8F:E6:00:EE:74:12:4C:C7:1C:BC:5A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/9c7c41f0-a6a8-36e3-b9e9-d01aad8e5a54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 140.235.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:ff:79:3d:a5:0b:bb:3c:30:d5:cd:87:a1:79:3c:38:8e:e6: e2:2d:b4:42:25:86:20:42:eb:ee:af:1e:0b:57:fe:27:ac:12: ea:54:be:56:db:91:f8:76:04:6a:43:cc:2e:5b:2c:4d:d9:aa: 46:50:0b:ae:6c:98:50:68:43:15:d8:fc:f0:a4:7e:f8:f3:67: 44:b7:b3:83:12:53:b9:db:7f:f7:61:2e:06:97:06:d8:f5:7e: 3c:89:98:ea:f5:7e:46:79:c1:47:be:99:e5:b2:15:b7:22:a0: a3:f8:2e:26:54:94:1d:56:b2:03:7d:09:82:ff:52:29:cc:e9: 2b:cf:02:4d:b3:9b:b4:99:30:28:7d:12:99:ef:14:81:67:d0: eb:f0:a3:6f:de:52:f2:9e:f9:4c:cd:2a:3c:24:bd:e6:d3:ad: 26:9e:4f:51:e3:46:cd:e0:f0:ab:ad:90:b4:a2:8c:54:12:60: 95:3d:34:9d:c6:35:1e:9c:4c:ae:c3:35:1a:1c:ec:17:36:1c: 6d:f1:52:09:59:f4:d8:d8:82:e8:fb:e8:e1:f3:a4:62:d2:05: f6:43:79:87:70:75:79:19:cb:75:57:68:de:f5:0b:d3:7f:30: b0:ba:d5:c5:3d:f1:89:23:68:c2:11:55:be:0a:f4:18:06:25: 73:69:32:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2HLrk3RFoqNeOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk NTdiMDM4OTQtYTQ4OS00NDA1LWE2YTAtMDI4ODNiMTc1NTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkrt5wG1eAajMdsaK3GCTUkpzlvxIruWJBYj xX73tZ3CXiV0t15CWup34vky7v7iHLaGDK4U+CXsDQbusTiCsVR8M0c6TRVsMUoX 0Twfi7A1SOSrt4KPLq2vJg6lOhAVR6tOzIx2TtW3bB5AtSOYBxm1I8MFfAU3SIgE 6jzV9ge4jBY5tHsT21Bbhy287PbwgjBP2zmKZcuwJ+/b/lCb+aG4da8Z9BgySMzt E5cZTcPdjcymXCOnFhiV+0rWUoqgUgoPeqEjjx31vNsZn0vSMd1WGU4HT08vSXdE g8FBIRg7p0XXF869i0TDUT1/E5tutdyE5La+ry7lJXCzT/wFowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByMbkFXSOKVj+YA7nQSTMccvFpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvOWM3YzQxZjAtYTZhOC0z NmUzLWI5ZTktZDAxYWFkOGU1YTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACP/eT2lC7s8MNXNh6F5PDiO5uIttEIlhiBC6+6vHgtX/iesEupUvlbb kfh2BGpDzC5bLE3ZqkZQC65smFBoQxXY/PCkfvjzZ0S3s4MSU7nbf/dhLgaXBtj1 fjyJmOr1fkZ5wUe+meWyFbcioKP4LiZUlB1WsgN9CYL/UinM6SvPAk2zm7SZMCh9 EpnvFIFn0Ovwo2/eUvKe+UzNKjwkvebTrSaeT1HjRs3g8KutkLSijFQSYJU9NJ3G NR6cTK7DNRoc7Bc2HG3xUglZ9NjYguj76OHzpGLSBfZDeYdwdXkZy3VXaN71C9N/ MLC61cU98YkjaMIRVb4K9BgGJXNpMtE= -----END CERTIFICATE-----Generated at Tue Oct 27 16:37:44 2026 by rpki-client