$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf6edf59-5e0d-3a99-a87a-81e306a8e5be.roa File: cf6edf59-5e0d-3a99-a87a-81e306a8e5be.roa (raw, json) Hash identifier: WwVjvw6dBJ/EnsmvEXyMMlXkOWfmQONV2eChLGp8QH4= Subject key identifier: 43:A5:FE:7D:6E:D1:EC:A2:5E:CC:3C:BC:67:0E:1E:F6:48:5D:60:4F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D0D4280D0445FED19DE38DB40 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf6edf59-5e0d-3a99-a87a-81e306a8e5be.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 54113 IP address blocks: 140.248.219.128/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:80:d0:44:5f:ed:19:de:38:db:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=3b3f1626-07a4-4a2e-b305-6ab9cee85e8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3c:8f:d1:65:4f:5a:5a:0f:8f:b4:b8:e2:47: 59:55:88:2e:54:32:31:e6:5c:5b:18:8e:85:d5:ec: 81:e4:7c:c0:ba:be:2e:ed:80:9a:38:e9:c7:85:10: 6c:13:14:2b:1c:81:22:56:04:88:79:63:da:b4:c9: b4:39:1d:c3:81:8f:9a:f8:f7:db:ad:63:eb:f3:2e: 7b:c5:17:9f:36:4f:d4:15:01:e9:a3:16:5c:3a:d7: 6e:62:e7:d8:f8:35:3b:e0:d2:dc:8d:4d:d7:b1:6d: ae:b6:b4:e6:c7:0d:6e:d9:81:f7:fd:1e:29:69:6d: be:da:4b:94:ff:b5:db:ef:04:d8:0f:e9:7e:eb:1f: 49:59:52:26:eb:c9:16:f0:51:7a:82:77:e1:93:bc: ae:33:fe:80:d4:6b:9e:58:b3:34:39:a7:8a:84:31: 3a:90:9a:32:18:e1:f4:2e:8e:9b:d6:29:62:2a:db: bd:70:dd:13:e0:15:74:64:21:8f:d1:a1:db:74:c0: 18:4c:58:3f:4f:1f:25:99:b2:32:03:4d:b5:14:e2: db:f6:8b:c7:e8:c1:30:5a:45:8e:cf:2f:f4:ac:71: e8:49:20:1c:7e:e3:2e:2c:ea:f6:e4:c6:fd:1c:fb: 2f:ca:5b:41:4e:58:36:af:c1:11:46:92:9f:82:8d: d5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A5:FE:7D:6E:D1:EC:A2:5E:CC:3C:BC:67:0E:1E:F6:48:5D:60:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/cf6edf59-5e0d-3a99-a87a-81e306a8e5be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.219.128/26 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9f:63:c5:41:b9:df:a1:9d:df:7f:b0:9c:54:0f:a7:36:d5: 81:9a:c6:a7:2e:b6:bf:03:7e:1c:7d:f4:29:3b:7c:57:5d:5b: e6:0b:4d:09:02:2b:1e:eb:22:03:4a:df:56:7e:8f:48:f9:91: 36:a7:b6:21:47:92:a3:07:53:c2:7d:a8:1e:ac:11:39:27:38: 2c:15:a4:52:65:e5:e3:88:b8:95:b8:25:a9:ab:eb:1c:18:a1: e4:b0:7c:ee:da:60:f2:77:1a:71:0e:a7:c8:3c:de:58:51:fb: cc:da:1d:cc:07:8b:dd:68:87:e9:ac:60:88:05:23:fd:da:42: ec:64:9c:7a:85:d2:68:79:ee:ab:60:1d:18:a1:e1:96:23:69: 60:cc:1e:32:3f:cf:43:3d:9b:95:33:cf:a9:4c:29:c0:c5:81: 79:4c:41:b8:c7:a5:ae:15:27:9e:92:13:c0:6c:d5:65:ca:a1: 52:57:d2:ef:34:47:48:7b:d5:d0:22:c9:9f:6c:64:2c:81:e3: 53:2d:ed:f8:d8:38:29:79:6b:5b:79:df:4b:d4:56:aa:49:71: b0:a1:a8:37:43:ab:11:df:f9:1c:b2:a4:fd:35:ae:80:b9:99: e1:81:3d:a3:4b:d1:17:5e:1e:0e:0d:f7:20:44:2a:ac:6e:b0: 91:26:be:cd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0NQoDQRF/tGd4420AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk M2IzZjE2MjYtMDdhNC00YTJlLWIzMDUtNmFiOWNlZTg1ZThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTyP0WVPWloPj7S44kdZVYguVDIx5lxbGI6F 1eyB5HzAur4u7YCaOOnHhRBsExQrHIEiVgSIeWPatMm0OR3DgY+a+PfbrWPr8y57 xRefNk/UFQHpoxZcOtduYufY+DU74NLcjU3XsW2utrTmxw1u2YH3/R4paW2+2kuU /7Xb7wTYD+l+6x9JWVIm68kW8FF6gnfhk7yuM/6A1GueWLM0OaeKhDE6kJoyGOH0 Lo6b1iliKtu9cN0T4BV0ZCGP0aHbdMAYTFg/Tx8lmbIyA021FOLb9ovH6MEwWkWO zy/0rHHoSSAcfuMuLOr25Mb9HPsvyltBTlg2r8ERRpKfgo3VwQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEOl/n1u0eyiXsw8vGcOHvZIXWBPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvY2Y2ZWRmNTktNWUwZC0z YTk5LWE4N2EtODFlMzA2YThlNWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUGjPjbgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQASn2PFQbnfoZ3ff7CcVA+nNtWBmsanLra/A34cffQpO3xXXVvmC00J Aise6yIDSt9Wfo9I+ZE2p7YhR5KjB1PCfagerBE5JzgsFaRSZeXjiLiVuCWpq+sc GKHksHzu2mDydxpxDqfIPN5YUfvM2h3MB4vdaIfprGCIBSP92kLsZJx6hdJoee6r YB0YoeGWI2lgzB4yP89DPZuVM8+pTCnAxYF5TEG4x6WuFSeekhPAbNVlyqFSV9Lv NEdIe9XQIsmfbGQsgeNTLe342DgpeWtbed9L1FaqSXGwoag3Q6sR3/kcsqT9Na6A uZnhgT2jS9EXXh4ODfcgRCqsbrCRJr7N -----END CERTIFICATE-----Generated at Wed Mar 18 17:55:43 2026 by rpki-client