$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa File: 3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa (raw, json) Hash identifier: tLdmQwYEFcnTwHzPuXzb2uIEEzyfDw5wRqSLBAilrfA= Subject key identifier: B3:B8:62:58:78:CA:D6:A0:5B:FE:EC:16:1B:41:58:BE:02:F1:F3:C2 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5A0F258965614A219C480 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 140.248.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:a0:f2:58:96:56:14:a2:19:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=3b1bb6b4-d4ef-4fc7-9de3-fa6742dff650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:f4:46:97:35:fd:24:32:08:15:79:88:b6:84: f7:c3:56:5e:7d:36:16:31:b9:04:65:c6:04:55:02: b7:3c:29:bb:96:3c:5e:59:bc:60:27:53:bf:c3:1c: 7b:fd:74:72:cd:c6:94:bf:0f:c4:d8:44:ab:cb:ab: 20:09:a5:3b:f4:40:c8:4d:55:c4:25:d1:d1:22:7d: da:a4:4b:0f:3b:f2:4d:d4:a1:85:a7:8c:d8:96:da: 76:11:d2:a6:39:97:af:e5:23:4a:87:53:25:e0:17: 68:eb:3d:0d:e5:82:0d:84:c4:72:96:0b:83:e3:95: 9e:29:64:06:5e:61:f8:db:93:14:83:1d:b2:06:c3: 7e:53:dc:76:26:7f:42:74:21:6a:33:1c:ac:7c:f3: 0f:8e:4e:3c:a1:17:0a:51:43:bb:b3:1e:d8:0c:36: 68:20:6e:8b:4c:e0:09:5a:d5:8e:4d:85:3e:b4:8f: fe:b5:d8:cc:92:e0:42:78:9f:26:95:d6:21:01:6b: 17:b6:4a:6f:0e:65:03:42:19:ca:52:3c:ca:f3:bf: 70:32:30:66:3b:3f:2b:b8:8d:ff:17:81:92:c9:64: 1c:34:ce:36:67:66:84:2d:5f:49:57:cf:0b:7a:ee: e4:a6:75:0d:5f:de:c4:5f:21:0b:1c:41:98:4e:33: 5d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B8:62:58:78:CA:D6:A0:5B:FE:EC:16:1B:41:58:BE:02:F1:F3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3402f4b9-f4b1-3c7a-ac7c-2f47a1fc418a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fb:c5:8a:73:d6:a4:fb:a5:d7:c4:bb:57:85:8d:51:1b:46: 51:39:95:78:dc:01:a7:63:52:77:04:4b:4f:15:48:08:5c:b2: e3:51:c3:37:4c:7a:32:05:37:d6:52:7e:94:1e:65:a2:0a:ce: c0:93:0a:df:6e:b9:b3:ed:36:96:1f:08:ee:ec:96:57:18:07: 5f:a7:ba:03:b1:68:c7:fe:0e:b8:38:63:f6:c3:ec:24:c3:e8: 67:b4:05:e0:ca:de:79:69:ac:62:b8:fa:bb:5e:fa:60:5f:a6: 15:ff:b5:d1:84:4d:aa:76:ae:f5:0d:18:4a:ec:ef:86:7b:3c: d7:92:34:19:3c:c2:61:80:f8:45:54:5c:89:7c:b9:9d:ca:bd: 94:82:0b:c3:c0:8d:15:fb:50:a9:b6:17:c1:cd:bc:32:be:d3: 81:65:d7:ed:f8:7b:a9:cc:52:7b:e4:0a:f9:f3:c2:3c:ee:86: 1b:76:53:af:fd:5f:e0:57:b6:bb:cf:a9:9b:2c:c3:0a:c1:48: c2:28:6e:af:96:ab:0a:d9:3b:32:a8:27:17:ec:10:bd:70:0d: 53:73:6b:88:1e:46:aa:ed:1c:6b:72:10:80:45:0d:f7:24:e8: 7f:b7:fc:43:49:09:30:6e:c7:ee:92:b2:83:c9:ca:f3:78:6b: 14:d8:d6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE20paDyWJZWFKIZxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk M2IxYmI2YjQtZDRlZi00ZmM3LTlkZTMtZmE2NzQyZGZmNjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPRGlzX9JDIIFXmItoT3w1ZefTYWMbkEZcYE VQK3PCm7ljxeWbxgJ1O/wxx7/XRyzcaUvw/E2ESry6sgCaU79EDITVXEJdHRIn3a pEsPO/JN1KGFp4zYltp2EdKmOZev5SNKh1Ml4Bdo6z0N5YINhMRylguD45WeKWQG XmH425MUgx2yBsN+U9x2Jn9CdCFqMxysfPMPjk48oRcKUUO7sx7YDDZoIG6LTOAJ WtWOTYU+tI/+tdjMkuBCeJ8mldYhAWsXtkpvDmUDQhnKUjzK879wMjBmOz8ruI3/ F4GSyWQcNM42Z2aELV9JV88Leu7kpnUNX97EXyELHEGYTjNdTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO4Ylh4ytagW/7sFhtBWL4C8fPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMzQwMmY0YjktZjRiMS0z YzdhLWFjN2MtMmY0N2ExZmM0MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPhOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI77xYpz1qT7pdfEu1eFjVEbRlE5lXjcAadjUncES08VSAhcsuNRwzdM ejIFN9ZSfpQeZaIKzsCTCt9uubPtNpYfCO7sllcYB1+nugOxaMf+Drg4Y/bD7CTD 6Ge0BeDK3nlprGK4+rte+mBfphX/tdGETap2rvUNGErs74Z7PNeSNBk8wmGA+EVU XIl8uZ3KvZSCC8PAjRX7UKm2F8HNvDK+04Fl1+34e6nMUnvkCvnzwjzuhht2U6/9 X+BXtrvPqZsswwrBSMIobq+WqwrZOzKoJxfsEL1wDVNza4geRqrtHGtyEIBFDfck 6H+3/ENJCTBux+6SsoPJyvN4axTY1rM= -----END CERTIFICATE-----Generated at Sun May 3 17:55:36 2026 by rpki-client