$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40ff14df-d927-3f29-86fd-bd4fd5b432a0.roa File: 40ff14df-d927-3f29-86fd-bd4fd5b432a0.roa (raw, json) Hash identifier: yJ+RE31ralm6BYEVu2SxIej+dgBKGA9iv3vEjfGDg1c= Subject key identifier: 60:98:22:5E:85:BB:B2:7D:EF:D5:DF:BF:F6:B1:8C:25:FC:62:84:11 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F19FCE5448D73A4C2FDACBB80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40ff14df-d927-3f29-86fd-bd4fd5b432a0.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 140.248.121.2/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e5:44:8d:73:a4:c2:fd:ac:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=b3f5fffa-2265-43f1-9f52-0ceebc6a8692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f9:65:75:16:6b:d7:20:3c:4e:b6:12:b4:51: cf:63:98:93:35:8f:78:18:c7:40:b3:7c:d2:02:5b: de:fe:67:ec:c0:5d:9c:2a:f0:bb:ef:93:c3:d5:16: 3b:a4:b1:d4:72:1f:b1:60:d0:c6:5b:7a:b9:93:82: 85:08:d0:fd:38:ed:ab:87:56:91:35:f2:d5:47:98: 20:c9:76:d9:77:0b:a5:e8:21:a3:c4:36:31:86:05: c8:56:89:d5:2a:b8:ad:2b:43:45:95:38:af:d7:d8: 7f:c1:f5:8b:72:ff:8f:89:92:89:dc:cf:1f:b1:02: 69:ee:99:67:c7:18:ef:31:b8:85:10:8c:f7:00:b0: 42:53:e6:73:60:33:ca:65:f1:b1:21:31:a0:45:d6: e2:1d:8d:06:5f:16:92:87:57:0b:eb:c4:33:f1:f2: 79:23:3f:b6:e2:30:4f:a5:65:71:6a:06:9d:12:9f: f8:37:47:ad:31:a8:b7:96:3a:b0:7c:62:a5:ee:62: 28:4e:4a:d8:6b:c8:6c:e0:b6:f0:d4:b5:8b:40:a8: e7:36:2b:2f:56:74:84:fb:86:c7:df:69:30:9e:dc: 56:3e:85:73:61:f8:72:02:67:2f:98:99:e5:e5:db: f6:74:44:14:75:44:96:e0:e6:25:88:e8:0c:c2:3a: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:98:22:5E:85:BB:B2:7D:EF:D5:DF:BF:F6:B1:8C:25:FC:62:84:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/40ff14df-d927-3f29-86fd-bd4fd5b432a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.121.2/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:27:9e:b1:f6:5e:bd:57:94:50:2f:c5:68:de:a5:0a:b9:f8: 18:3c:e1:b0:b4:74:f5:6a:0b:17:40:bc:1e:4e:30:47:7f:89: 8b:e3:db:b6:84:28:dc:b3:6b:e7:eb:68:68:a3:bf:89:61:55: 17:0b:e6:c9:db:11:df:df:dd:41:fd:1c:6f:98:8b:0d:eb:a7: b6:a1:0c:84:a4:7d:68:10:44:14:3a:a0:4c:3a:e1:dc:1f:52: c4:6c:33:2d:85:d1:c0:27:54:38:9a:0a:b3:f7:a0:a4:6a:38: c3:6b:82:3b:ff:13:d8:50:85:a5:cc:45:20:f4:8b:0c:96:cd: 2a:e2:a2:69:c2:6a:bf:86:97:72:ec:29:81:02:a5:05:e3:58: c5:7b:31:77:66:7d:7c:b3:62:0b:d8:ff:d3:62:1c:22:16:90: 96:03:e0:4b:63:a0:f1:67:b2:ed:91:5c:17:07:1b:7f:c6:db: 95:be:69:59:8c:7d:8d:aa:3d:2e:0f:a2:7a:55:fc:12:0c:92: 0d:cc:07:0b:68:44:ec:e1:81:f1:c3:56:4a:0b:99:49:6f:f0: cf:1f:bb:b5:8d:ec:6c:eb:36:e4:1a:e0:62:f5:04:14:68:2d: 1a:51:27:3a:53:99:8e:e5:1f:3a:be:70:d7:ba:ea:f0:77:da: ad:8c:84:bd -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Z/OVEjXOkwv2su4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk YjNmNWZmZmEtMjI2NS00M2YxLTlmNTItMGNlZWJjNmE4NjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApflldRZr1yA8TrYStFHPY5iTNY94GMdAs3zS Alve/mfswF2cKvC775PD1RY7pLHUch+xYNDGW3q5k4KFCND9OO2rh1aRNfLVR5gg yXbZdwul6CGjxDYxhgXIVonVKritK0NFlTiv19h/wfWLcv+PiZKJ3M8fsQJp7pln xxjvMbiFEIz3ALBCU+ZzYDPKZfGxITGgRdbiHY0GXxaSh1cL68Qz8fJ5Iz+24jBP pWVxagadEp/4N0etMai3ljqwfGKl7mIoTkrYa8hs4Lbw1LWLQKjnNisvVnSE+4bH 32kwntxWPoVzYfhyAmcvmJnl5dv2dEQUdUSW4OYliOgMwjpjRQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGCYIl6Fu7J979Xfv/axjCX8YoQRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDBmZjE0ZGYtZDkyNy0z ZjI5LTg2ZmQtYmQ0ZmQ1YjQzMmEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAjPh5AjBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC5J56x9l69V5RQL8Vo3qUKufgYPOGwtHT1agsXQLweTjBHf4mL49u2 hCjcs2vn62hoo7+JYVUXC+bJ2xHf391B/RxvmIsN66e2oQyEpH1oEEQUOqBMOuHc H1LEbDMthdHAJ1Q4mgqz96CkajjDa4I7/xPYUIWlzEUg9IsMls0q4qJpwmq/hpdy 7CmBAqUF41jFezF3Zn18s2IL2P/TYhwiFpCWA+BLY6DxZ7LtkVwXBxt/xtuVvmlZ jH2Nqj0uD6J6VfwSDJINzAcLaETs4YHxw1ZKC5lJb/DPH7u1jexs6zbkGuBi9QQU aC0aUSc6U5mO5R86vnDXuurwd9qtjIS9 -----END CERTIFICATE-----Generated at Sat Sep 26 22:34:25 2026 by rpki-client