$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1dcaa861-bdf4-30c0-9906-9579601a85f1.roa File: 1dcaa861-bdf4-30c0-9906-9579601a85f1.roa (raw, json) Hash identifier: DibbLhVk4/6v2VEAtU2JLemNiK9W/uQJqA4FeKwOwt0= Subject key identifier: D8:EE:DD:69:29:13:21:07:B0:EA:58:AB:F3:3C:95:1D:1F:57:64:53 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F49883136F86A81F58244A680 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1dcaa861-bdf4-30c0-9906-9579601a85f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 140.248.104.176/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:31:36:f8:6a:81:f5:82:44:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c986ef9c-4e7b-4d82-8a71-ba02d1a8dcde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6d:1e:47:1e:ba:98:e0:39:94:1b:ce:22:ac: ca:44:0b:22:73:ee:7a:d1:71:e2:2d:66:c3:4e:46: 42:c1:b7:ed:4c:c5:27:83:a0:b4:20:72:19:2c:3e: 65:44:ea:51:01:67:24:64:96:0e:57:f9:5d:83:43: 70:ce:18:7e:f8:bc:e2:7a:e3:d1:69:d7:f4:4c:93: 01:75:62:de:2a:db:68:a9:fc:f7:30:7e:76:72:35: 55:04:1e:99:68:16:20:ee:f8:3d:85:b3:b9:cb:e1: 78:b1:75:c8:36:de:62:92:9c:bd:3d:40:49:c1:b1: 66:da:6d:c4:6d:c3:6d:5a:61:9b:3e:2f:0a:86:a1: f1:3b:8c:ce:95:de:82:26:90:72:2c:ef:a8:20:10: 5a:08:af:f5:cc:2c:2a:e7:37:eb:7b:fe:24:97:00: f9:4b:96:28:ef:5d:5b:ba:cf:ed:52:71:96:e3:a7: 13:c1:6d:1b:a5:3d:a1:43:e1:e5:f2:e6:4a:b6:62: 6f:f7:6b:59:6d:b4:1b:63:7a:72:64:5a:7d:0e:5e: 87:94:08:2d:01:d6:cf:9e:4f:71:b7:ca:1e:04:61: 83:40:65:28:81:5d:0f:00:23:3d:8b:b7:e8:be:db: 14:62:38:f5:df:e0:40:eb:b4:c3:86:d8:ee:09:c5: c0:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:EE:DD:69:29:13:21:07:B0:EA:58:AB:F3:3C:95:1D:1F:57:64:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/1dcaa861-bdf4-30c0-9906-9579601a85f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.104.176/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:b6:02:bb:4e:0e:96:24:97:8f:08:bc:39:8d:cd:92:f6:90: 7f:07:a9:52:ce:3f:26:54:b9:93:ef:7b:00:b6:7d:00:10:d2: 34:e2:16:26:d9:ea:85:04:da:f3:d3:80:ca:9c:19:5c:84:3d: 59:30:79:39:7b:99:b4:97:18:26:29:0b:3b:ae:dd:c8:78:e7: b3:03:25:7c:e2:51:a2:c3:ed:a8:13:b5:ef:43:70:41:91:55: 19:81:1e:01:69:c0:9f:eb:a3:e9:92:ef:5e:01:07:1d:93:bb: c3:03:84:39:a2:47:be:32:86:95:12:8f:c4:bc:f8:f0:91:36: ae:36:22:e8:59:6b:79:9f:6c:f4:24:5c:55:0e:1c:5d:fd:0a: 73:61:45:6d:48:cc:e8:70:d9:f8:78:91:b8:d7:66:4a:7d:00: 20:69:12:c9:f4:f7:b5:5d:9c:0b:a7:7a:f7:9a:37:3e:bd:e7: 33:ed:51:af:1a:5c:a8:7b:97:e7:48:c3:6d:f9:f4:fd:91:ef: 4a:0d:fc:25:d7:a2:18:b2:d0:b6:f4:cf:2d:17:5c:71:5e:3e: 8f:44:25:2b:c1:51:0e:8a:86:5c:ab:43:ba:ba:24:1d:e9:1c: d0:3b:91:b6:97:38:66:fc:b4:5c:8f:5e:95:7f:7d:08:41:83: 43:05:8c:bf -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JiDE2+GqB9YJEpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzk4NmVmOWMtNGU3Yi00ZDgyLThhNzEtYmEwMmQxYThkY2RlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiG0eRx66mOA5lBvOIqzKRAsic+560XHiLWbD TkZCwbftTMUng6C0IHIZLD5lROpRAWckZJYOV/ldg0Nwzhh++LzieuPRadf0TJMB dWLeKttoqfz3MH52cjVVBB6ZaBYg7vg9hbO5y+F4sXXINt5ikpy9PUBJwbFm2m3E bcNtWmGbPi8KhqHxO4zOld6CJpByLO+oIBBaCK/1zCwq5zfre/4klwD5S5Yo711b us/tUnGW46cTwW0bpT2hQ+Hl8uZKtmJv92tZbbQbY3pyZFp9Dl6HlAgtAdbPnk9x t8oeBGGDQGUogV0PACM9i7fovtsUYjj13+BA67TDhtjuCcXAYQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFNju3WkpEyEHsOpYq/M8lR0fV2RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMWRjYWE4NjEtYmRmNC0z MGMwLTk5MDYtOTU3OTYwMWE4NWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPhosDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC8tgK7Tg6WJJePCLw5jc2S9pB/B6lSzj8mVLmT73sAtn0AENI04hYm 2eqFBNrz04DKnBlchD1ZMHk5e5m0lxgmKQs7rt3IeOezAyV84lGiw+2oE7XvQ3BB kVUZgR4BacCf66Ppku9eAQcdk7vDA4Q5oke+MoaVEo/EvPjwkTauNiLoWWt5n2z0 JFxVDhxd/QpzYUVtSMzocNn4eJG412ZKfQAgaRLJ9Pe1XZwLp3r3mjc+vecz7VGv Glyoe5fnSMNt+fT9ke9KDfwl16IYstC29M8tF1xxXj6PRCUrwVEOioZcq0O6uiQd 6RzQO5G2lzhm/LRcj16Vf30IQYNDBYy/ -----END CERTIFICATE-----Generated at Mon Sep 28 12:29:16 2026 by rpki-client