$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db31b5c2-f7f1-3a54-b877-342c9bdb371a.roa File: db31b5c2-f7f1-3a54-b877-342c9bdb371a.roa (raw, json) Hash identifier: WkZj+T+0RiOHdVAbtUnxixArYT7O5S/wDM5IwtP7nxg= Subject key identifier: 57:B9:09:21:1D:91:89:16:4F:43:05:69:2A:65:42:FA:B5:30:51:98 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D300A2856D837B0EB63CF6B6C Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db31b5c2-f7f1-3a54-b877-342c9bdb371a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 54113 IP address blocks: 140.248.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:28:56:d8:37:b0:eb:63:cf:6b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8a54a83e-d009-4488-b14f-67ed2c6a26f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:1a:57:66:a1:1f:eb:4a:c2:73:c6:8e:1b: 71:a0:43:33:5f:38:2a:e5:1c:26:50:ab:07:dc:3b: a9:37:58:b3:5d:09:04:a5:f7:a2:8e:07:c8:aa:c8: cc:9e:47:52:dd:15:15:13:c2:36:15:9a:78:80:77: e8:35:41:0f:44:da:45:69:6e:81:1c:d3:0c:a9:b7: 6c:30:c6:3e:5a:1e:b3:03:52:e6:56:27:2a:1c:ec: 08:46:f2:73:cd:0b:c2:ce:df:6c:1c:97:b6:ae:ab: 7c:5e:e3:23:7d:56:d2:3e:15:3e:d3:10:22:7f:a5: 2f:1d:5b:80:32:7a:b9:a1:c3:a1:e4:6b:14:81:fc: 31:0d:bb:e9:2b:93:0e:b8:21:4e:d5:7f:04:69:83: 17:99:f5:2e:67:e6:12:a8:6e:4c:da:d9:d9:68:21: cc:f3:00:85:4f:e8:f6:24:f2:36:ed:96:0a:3c:dd: 45:de:ea:7f:d2:de:70:1f:1f:74:49:3f:78:3b:8e: 75:5a:ec:e5:57:69:c5:db:eb:3e:c7:71:82:c3:ce: 2c:1a:d9:81:ed:8b:a8:dc:3f:5e:cf:7c:a1:ad:72: 2c:7e:6e:ff:4f:2f:5a:05:fd:e1:13:7e:21:69:8a: af:a4:44:37:26:e6:e4:14:42:a5:6d:37:be:0a:a5: 4b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B9:09:21:1D:91:89:16:4F:43:05:69:2A:65:42:FA:B5:30:51:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/db31b5c2-f7f1-3a54-b877-342c9bdb371a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6c:00:92:7a:b4:28:bb:99:61:83:29:ac:86:26:3f:09:ac: f2:22:14:ea:42:58:15:19:a6:17:8c:aa:4b:44:e2:83:44:95: 9e:21:20:f1:b2:32:71:9a:2b:53:67:50:09:dc:d5:58:a2:d7: 45:9e:e1:cc:4e:49:24:69:5e:25:f5:3e:3a:86:af:88:7e:e6: 3b:f0:23:a7:30:58:19:9a:47:48:06:a3:5c:76:d3:1f:bb:3a: 65:91:cb:29:2f:c8:9b:14:a3:fd:d6:d6:52:9d:3e:2e:6d:19: db:96:40:f3:4e:90:95:5c:c8:01:eb:5f:f4:1d:d3:a1:9b:74: 05:c5:5b:79:e1:9a:c0:37:5c:d9:d4:7b:28:89:16:75:24:35: ba:54:d6:e4:50:d2:2f:44:fc:8e:5c:bf:f5:54:4d:bc:67:ee: 19:6b:5e:0c:8b:cd:67:3c:c7:27:14:e4:22:0d:14:36:5e:f5: cb:be:f2:83:14:c4:e0:d1:bc:89:e4:55:b3:8a:fe:57:ee:02: 10:1f:9f:ec:d4:43:b4:1b:aa:e8:85:94:49:d4:4f:4c:a8:c3: ea:df:6c:78:59:06:07:92:fe:ef:a9:0b:a8:f7:5d:8b:46:81: bf:67:e6:1d:e1:66:64:37:0b:b5:e4:6b:0d:3b:32:c5:33:6a: 10:10:8f:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCihW2Dew62PPa2wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGE1NGE4M2UtZDAwOS00NDg4LWIxNGYtNjdlZDJjNmEyNmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDsaV2ahH+tKwnPGjhtxoEMzXzgq5RwmUKsH 3DupN1izXQkEpfeijgfIqsjMnkdS3RUVE8I2FZp4gHfoNUEPRNpFaW6BHNMMqbds MMY+Wh6zA1LmVicqHOwIRvJzzQvCzt9sHJe2rqt8XuMjfVbSPhU+0xAif6UvHVuA Mnq5ocOh5GsUgfwxDbvpK5MOuCFO1X8EaYMXmfUuZ+YSqG5M2tnZaCHM8wCFT+j2 JPI27ZYKPN1F3up/0t5wHx90ST94O451WuzlV2nF2+s+x3GCw84sGtmB7Yuo3D9e z3yhrXIsfm7/Ty9aBf3hE34haYqvpEQ3JubkFEKlbTe+CqVLFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFe5CSEdkYkWT0MFaSplQvq1MFGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGIzMWI1YzItZjdmMS0z YTU0LWI4NzctMzQyYzliZGIzNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlsAJJ6tCi7mWGDKayGJj8JrPIiFOpCWBUZpheMqktE4oNElZ4hIPGy MnGaK1NnUAnc1Vii10We4cxOSSRpXiX1PjqGr4h+5jvwI6cwWBmaR0gGo1x20x+7 OmWRyykvyJsUo/3W1lKdPi5tGduWQPNOkJVcyAHrX/Qd06GbdAXFW3nhmsA3XNnU eyiJFnUkNbpU1uRQ0i9E/I5cv/VUTbxn7hlrXgyLzWc8xycU5CINFDZe9cu+8oMU xODRvInkVbOK/lfuAhAfn+zUQ7QbquiFlEnUT0yow+rfbHhZBgeS/u+pC6j3XYtG gb9n5h3hZmQ3C7Xkaw07MsUzahAQj0I= -----END CERTIFICATE-----Generated at Wed Mar 18 18:02:50 2026 by rpki-client