$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa File: 609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa (raw, json) Hash identifier: O3GJcQJglk8C7sSmpC0W4Zw2iDlUxHcnFnvbtyxXWhQ= Subject key identifier: 72:29:9D:C7:1D:29:7D:71:0D:E0:2D:AC:08:DD:61:8B:99:06:0F:DE Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DB4A5964622F62E1D91A38100 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa Signing time: Sun 03 May 2026 01:00:23 +0000 ROA not before: Sun 03 May 2026 01:00:23 +0000 ROA not after: Sat 01 Aug 2026 01:00:23 +0000 asID: 54113 IP address blocks: 140.248.220.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b4:a5:96:46:22:f6:2e:1d:91:a3:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 3 01:00:23 2026 GMT Not After : Aug 1 01:00:23 2026 GMT Subject: CN=201d49d0-3b75-4b37-9d4f-ec9ee7440e5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2a:b1:6f:f8:86:c9:42:51:ac:79:70:6a:31: 93:80:5f:9a:8c:15:38:b2:97:ca:c0:f7:84:a6:e3: 9a:26:77:fb:04:45:81:9f:7f:36:ce:e7:72:ec:b1: f0:c2:08:21:7c:b1:69:3f:7b:6c:68:d9:05:ae:ab: e7:e1:3a:f3:b4:cf:7c:c9:b6:6c:69:99:30:26:e7: 65:ee:f3:b8:7f:58:95:1a:b3:c0:4b:74:b8:e7:c5: 1d:46:e6:b4:a5:49:2f:98:89:64:3f:30:6e:e0:21: 8e:63:5d:1a:a8:c5:f5:89:c1:44:d4:61:e4:26:77: 69:ed:84:a5:cd:01:f5:04:4f:ab:c9:0a:50:13:d2: 1f:c3:e0:19:62:d2:6e:56:be:0f:a9:63:95:7f:0b: 31:d6:80:bb:1f:13:41:94:81:f5:f4:75:50:cf:6d: 05:3d:3f:04:c5:6f:fd:36:84:4d:fe:50:b3:7b:47: f8:22:94:14:f9:f7:65:2b:77:79:76:95:66:69:d6: a5:ce:88:e2:17:8f:4a:67:a3:f5:11:60:c1:c4:73: 89:b5:c4:24:52:6f:96:e8:56:5e:c4:7c:0e:bf:43: e5:32:40:83:03:c9:c7:34:a3:07:08:c4:0a:8f:d9: 4d:29:04:ee:bf:f5:47:04:78:06:62:d5:40:b6:a2: 1f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:29:9D:C7:1D:29:7D:71:0D:E0:2D:AC:08:DD:61:8B:99:06:0F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.220.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:1f:14:a6:c6:7e:38:25:43:16:38:34:a5:82:61:0f:69:eb: 27:6e:91:8f:5f:cf:9a:01:1f:a7:6d:bd:dc:07:af:6e:28:0c: a5:58:70:6c:f7:03:98:72:f9:28:26:7f:5f:6e:13:da:70:bc: 7d:47:7f:f6:e0:d9:6a:4a:6a:4d:53:3a:27:66:d5:45:9b:1e: 09:31:de:0a:b2:ef:ab:a1:09:4e:26:5b:78:c1:db:15:c2:25: e8:c3:a5:0a:86:65:17:e9:c5:68:b0:f0:d1:1b:f7:2f:be:2c: be:5a:bd:56:96:6e:da:6e:44:64:53:96:19:08:fe:1f:d1:ae: b3:ad:d6:8a:d6:d7:8d:9a:4f:f6:d1:a2:3c:5d:6f:39:23:78: db:d2:f1:56:93:26:df:3d:52:dd:eb:1f:a3:2d:65:8e:0d:29: 7f:99:d0:7d:40:c1:7d:d3:63:2a:1e:bc:57:e0:36:24:41:1d: a7:64:60:55:89:47:e3:9e:90:9b:b1:6e:cd:15:72:c1:ee:c7: 9a:f5:a7:c6:aa:63:6f:0a:f4:86:96:b2:a1:5d:90:36:6e:bb: b0:ed:b7:a7:5d:1a:e8:d6:28:46:35:12:62:f0:6f:38:19:69: eb:7d:5f:ba:d9:e1:6a:dc:11:c3:b7:a0:71:6a:31:d8:64:25: 1a:c0:e6:a8 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE20pZZGIvYuHZGjgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk MjAxZDQ5ZDAtM2I3NS00YjM3LTlkNGYtZWM5ZWU3NDQwZTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yqxb/iGyUJRrHlwajGTgF+ajBU4spfKwPeE puOaJnf7BEWBn382zudy7LHwwgghfLFpP3tsaNkFrqvn4TrztM98ybZsaZkwJudl 7vO4f1iVGrPAS3S458UdRua0pUkvmIlkPzBu4CGOY10aqMX1icFE1GHkJndp7YSl zQH1BE+ryQpQE9Ifw+AZYtJuVr4PqWOVfwsx1oC7HxNBlIH19HVQz20FPT8ExW/9 NoRN/lCze0f4IpQU+fdlK3d5dpVmadalzojiF49KZ6P1EWDBxHOJtcQkUm+W6FZe xHwOv0PlMkCDA8nHNKMHCMQKj9lNKQTuv/VHBHgGYtVAtqIf6QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHIpnccdKX1xDeAtrAjdYYuZBg/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjA5YTdlODctZjBjYy0z MDY3LTg1NGMtMzYyZjdlNGUwYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAHHxSmxn44JUMWODSlgmEPaesnbpGPX8+aAR+nbb3cB69uKAylWHBs 9wOYcvkoJn9fbhPacLx9R3/24NlqSmpNUzonZtVFmx4JMd4Ksu+roQlOJlt4wdsV wiXow6UKhmUX6cVosPDRG/cvviy+Wr1Wlm7abkRkU5YZCP4f0a6zrdaK1teNmk/2 0aI8XW85I3jb0vFWkybfPVLd6x+jLWWODSl/mdB9QMF902MqHrxX4DYkQR2nZGBV iUfjnpCbsW7NFXLB7sea9afGqmNvCvSGlrKhXZA2bruw7benXRro1ihGNRJi8G84 GWnrfV+62eFq3BHDt6BxajHYZCUawOao -----END CERTIFICATE-----Generated at Sun May 3 17:54:24 2026 by rpki-client