$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa File: 62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa (raw, json) Hash identifier: PAh2CpOUo26FZgFZ4LHca6wmF0nNVzLt5OlCGSYzVWs= Subject key identifier: F1:BC:3F:21:F1:E6:1C:5A:74:83:C0:5A:6B:A3:04:69:9A:1A:16:66 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584EC20C7E46FED147D1C643EA80 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 6589 IP address blocks: 140.235.157.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7e:46:fe:d1:47:d1:c6:43:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=a093eeb4-126d-4a3b-acea-03d4cc5cf21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:de:68:f1:7c:3d:1d:7f:bd:d4:c5:43:de:7d: ad:c4:8c:f5:26:6c:89:e1:45:25:7d:bf:e8:21:5a: be:b2:ad:dc:c4:f0:93:88:41:af:1c:41:68:73:19: e5:1b:9e:36:00:1b:7e:3d:2d:d7:2a:b8:7b:a6:61: d2:4d:e2:0d:b0:d6:dc:5e:ec:2d:c7:56:e0:66:29: 3c:77:c0:07:22:7f:64:fb:46:5f:27:52:1b:06:64: 5a:6c:c8:48:ef:ef:1c:9f:86:d6:bb:f5:4b:90:94: 5b:f9:54:76:0a:aa:8e:fc:18:db:b3:8c:39:79:4b: 6b:f2:69:05:d2:d2:8b:97:dc:89:35:f9:0d:61:10: 01:a9:8c:d5:4e:e9:aa:42:8c:55:66:20:ce:21:b4: 1a:b1:41:83:19:16:bd:2c:dc:2c:a1:4e:24:6d:ca: b6:0d:ac:15:d3:d7:c5:13:0e:48:f3:58:a7:e2:7b: 87:b8:8a:25:25:dd:3b:4f:b1:b2:e5:53:5d:49:f2: ca:5c:84:87:8e:32:53:e3:9d:9a:e2:eb:ac:a1:37: f8:81:d4:e4:86:ba:c8:4b:49:8e:c6:9b:03:f9:d2: e0:2d:52:20:eb:8a:c6:6b:47:8b:a2:c9:e6:ac:48: 99:fe:ab:4e:aa:a2:54:1c:49:d1:54:74:44:07:67: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:BC:3F:21:F1:E6:1C:5A:74:83:C0:5A:6B:A3:04:69:9A:1A:16:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/62ecfafa-a6a1-351f-a6a9-75cdd61b1e0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 140.235.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:18:2b:1a:6e:ed:ae:35:45:27:b4:90:1b:4b:72:14:33:84: 67:1a:11:61:df:44:3e:3f:7a:2a:61:63:b0:e7:dc:a1:09:31: 95:cb:c7:c8:86:15:59:b5:8c:8c:a4:87:d7:12:8d:b8:34:88: 2f:41:e9:16:0a:5e:64:a3:6d:b8:af:6a:f6:83:4c:d8:1f:b5: 54:6d:a4:95:53:6e:5d:6d:43:05:82:d2:f0:88:3e:16:f7:e6: bb:76:d4:f8:c0:c3:c7:2b:bb:84:6f:9e:ea:d2:3a:14:90:53: ea:4d:6f:83:b6:38:62:a3:2d:dd:dd:8e:87:20:1a:fe:b0:f2: a4:7f:bb:a8:e9:e2:52:16:c1:5d:e9:f6:2b:58:84:4d:61:19: ff:73:c9:5f:79:91:9c:29:60:3d:93:2b:94:a0:3a:8e:59:0e: c8:0c:7a:4e:f4:95:5d:b7:bd:83:fd:9a:fa:10:a5:7e:78:4a: 39:b2:b6:6b:b6:3b:2d:0e:ae:ed:51:b6:91:d3:83:79:1f:c6: 04:cd:7b:54:32:a0:b9:ee:2f:a0:36:72:45:40:93:50:63:8b: a9:a6:46:bf:46:48:16:fd:d7:68:50:80:ca:39:8b:48:7e:3d: cc:e0:41:fb:e0:29:35:82:92:f3:5e:ce:6b:fe:b6:90:a2:42: e4:f8:7f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDH5G/tFH0cZD6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YTA5M2VlYjQtMTI2ZC00YTNiLWFjZWEtMDNkNGNjNWNmMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwt5o8Xw9HX+91MVD3n2txIz1JmyJ4UUlfb/o IVq+sq3cxPCTiEGvHEFocxnlG542ABt+PS3XKrh7pmHSTeINsNbcXuwtx1bgZik8 d8AHIn9k+0ZfJ1IbBmRabMhI7+8cn4bWu/VLkJRb+VR2CqqO/Bjbs4w5eUtr8mkF 0tKLl9yJNfkNYRABqYzVTumqQoxVZiDOIbQasUGDGRa9LNwsoU4kbcq2DawV09fF Ew5I81in4nuHuIolJd07T7Gy5VNdSfLKXISHjjJT452a4uusoTf4gdTkhrrIS0mO xpsD+dLgLVIg64rGa0eLosnmrEiZ/qtOqqJUHEnRVHREB2c5gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPG8PyHx5hxadIPAWmujBGmaGhZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvNjJlY2ZhZmEtYTZhMS0z NTFmLWE2YTktNzVjZGQ2MWIxZTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOudMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0YKxpu7a41RSe0kBtLchQzhGcaEWHfRD4/eiphY7Dn3KEJMZXLx8iG FVm1jIykh9cSjbg0iC9B6RYKXmSjbbivavaDTNgftVRtpJVTbl1tQwWC0vCIPhb3 5rt21PjAw8cru4RvnurSOhSQU+pNb4O2OGKjLd3djocgGv6w8qR/u6jp4lIWwV3p 9itYhE1hGf9zyV95kZwpYD2TK5SgOo5ZDsgMek70lV23vYP9mvoQpX54Sjmytmu2 Oy0Oru1RtpHTg3kfxgTNe1QyoLnuL6A2ckVAk1Bji6mmRr9GSBb912hQgMo5i0h+ PczgQfvgKTWCkvNezmv+tpCiQuT4fwE= -----END CERTIFICATE-----Generated at Thu Sep 10 19:57:37 2026 by rpki-client