$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba641a9f-26cd-3be3-b8f8-d8e0c3118f71.roa File: ba641a9f-26cd-3be3-b8f8-d8e0c3118f71.roa (raw, json) Hash identifier: jvXoUTqPUUwwMvtR65i6uqVwg/b/hy+dslxitR3hC/o= Subject key identifier: 88:F8:9A:8E:4B:7B:07:CD:B7:1A:E7:A6:61:84:01:BC:5D:0B:CA:03 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D1FDED5486E0FFF50CE176700 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba641a9f-26cd-3be3-b8f8-d8e0c3118f71.roa Signing time: Tue 10 Mar 2026 18:00:37 +0000 ROA not before: Tue 10 Mar 2026 18:00:37 +0000 ROA not after: Mon 08 Jun 2026 18:00:37 +0000 asID: 54113 IP address blocks: 140.248.132.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:de:d5:48:6e:0f:ff:50:ce:17:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 10 18:00:37 2026 GMT Not After : Jun 8 18:00:37 2026 GMT Subject: CN=72c671e6-9f4d-47b3-bdfe-296d1bdb847c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f0:6f:9b:ec:79:3f:c6:74:b7:21:84:2e:7a: 5b:75:4c:46:a0:83:cb:1f:1d:f5:1e:b1:f4:e5:93: d7:06:bc:15:f7:b3:0c:3b:54:bf:73:7d:bc:90:19: a6:b6:33:59:9f:39:07:14:d9:50:9f:79:b8:6d:4a: 6d:4e:40:de:ce:09:68:2e:01:88:ca:9a:be:f4:4f: b4:a5:2e:6e:53:58:c2:d3:ef:44:f8:6a:dc:19:48: 6b:17:78:9b:e6:ed:bf:b9:42:95:e1:6d:72:5d:64: 8a:19:ad:b5:67:c1:56:47:60:db:46:fd:fe:7e:7c: b1:69:67:66:38:4f:6e:82:26:3e:d6:1c:d9:11:2a: c2:fc:30:2c:ca:b5:28:8c:9b:3a:cc:2d:3a:a5:2c: 55:7c:89:70:39:dd:e3:77:32:c7:6a:db:48:d3:ea: 12:e1:5e:c2:f8:15:42:b8:d1:25:7a:c5:a8:6e:c6: dd:68:aa:22:59:61:60:0c:79:60:33:01:dd:73:dd: da:09:29:e4:40:c3:6d:30:03:75:53:2a:94:f8:57: 20:8b:56:34:0e:2e:0f:92:34:49:bb:fd:17:39:70: 6a:1a:2b:e4:23:cd:1a:d5:22:df:32:26:9c:67:df: 84:f7:3c:ce:db:08:35:ce:72:b8:7a:e3:5f:ba:22: 0d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:9A:8E:4B:7B:07:CD:B7:1A:E7:A6:61:84:01:BC:5D:0B:CA:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/ba641a9f-26cd-3be3-b8f8-d8e0c3118f71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:1e:bd:88:28:e8:39:d2:c0:30:ef:e1:c0:63:08:ca:49:a9: 79:8f:82:48:7a:94:ed:c3:e9:98:99:44:be:36:27:d2:ca:70: ac:d5:83:52:2f:8f:8f:3f:d8:22:7b:2c:9a:40:cd:d0:e2:50: 0c:7d:cc:f2:44:70:23:fd:cd:15:54:20:80:61:6f:f6:99:92: 77:79:e5:7f:0c:56:51:36:f5:6d:8d:7b:4e:87:15:98:bb:12: 15:1a:30:43:7f:3f:1c:e2:75:89:5f:34:b1:4f:cb:c4:e3:92: 23:42:5e:73:61:15:73:1f:20:cb:99:cd:72:7a:08:49:60:91: e9:7a:39:9a:00:a4:76:7b:8e:54:86:03:a7:37:dd:58:3e:00: 7d:b7:ad:e6:68:be:ee:6d:2d:0f:65:c8:ae:f9:7e:b2:80:28: b6:b5:99:fe:62:f7:4e:da:82:45:de:b2:cb:3b:60:b6:db:5e: 2b:f7:f2:d9:56:df:f0:d2:64:9e:1a:3e:ba:6b:bc:8b:4f:48: 81:cf:bc:39:8b:b0:68:dd:26:38:a6:77:49:62:7b:f0:61:b0: e1:a1:cf:30:0c:78:05:b7:6e:79:f6:9f:b8:22:08:cd:d0:c9: 85:63:84:52:01:99:72:af:c3:93:b1:09:fb:1c:3d:3c:12:87: cb:8d:c0:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0f3tVIbg//UM4XZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDMxMDE4MDAzN1oXDTI2MDYwODE4MDAzN1owLzEtMCsGA1UEAxMk NzJjNjcxZTYtOWY0ZC00N2IzLWJkZmUtMjk2ZDFiZGI4NDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/Bvm+x5P8Z0tyGELnpbdUxGoIPLHx31HrH0 5ZPXBrwV97MMO1S/c328kBmmtjNZnzkHFNlQn3m4bUptTkDezgloLgGIypq+9E+0 pS5uU1jC0+9E+GrcGUhrF3ib5u2/uUKV4W1yXWSKGa21Z8FWR2DbRv3+fnyxaWdm OE9ugiY+1hzZESrC/DAsyrUojJs6zC06pSxVfIlwOd3jdzLHattI0+oS4V7C+BVC uNElesWobsbdaKoiWWFgDHlgMwHdc93aCSnkQMNtMAN1UyqU+Fcgi1Y0Di4PkjRJ u/0XOXBqGivkI80a1SLfMiacZ9+E9zzO2wg1znK4euNfuiINbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj4mo5LewfNtxrnpmGEAbxdC8oDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYmE2NDFhOWYtMjZjZC0z YmUzLWI4ZjgtZDhlMGMzMTE4ZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPiEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUevYgo6DnSwDDv4cBjCMpJqXmPgkh6lO3D6ZiZRL42J9LKcKzVg1Iv j48/2CJ7LJpAzdDiUAx9zPJEcCP9zRVUIIBhb/aZknd55X8MVlE29W2Ne06HFZi7 EhUaMEN/PxzidYlfNLFPy8TjkiNCXnNhFXMfIMuZzXJ6CElgkel6OZoApHZ7jlSG A6c33Vg+AH23reZovu5tLQ9lyK75frKAKLa1mf5i907agkXesss7YLbbXiv38tlW 3/DSZJ4aPrprvItPSIHPvDmLsGjdJjimd0lie/BhsOGhzzAMeAW3bnn2n7giCM3Q yYVjhFIBmXKvw5OxCfscPTwSh8uNwLc= -----END CERTIFICATE-----Generated at Wed Mar 18 17:53:52 2026 by rpki-client