$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8bac35b1-c3ba-3514-b0bc-e72553b6dd1f.roa File: 8bac35b1-c3ba-3514-b0bc-e72553b6dd1f.roa (raw, json) Hash identifier: 1i49f8VfaM6YK9/4RyPQKIh4mFSZU86pLTVgWMGfL08= Subject key identifier: 04:F6:50:A0:91:58:4A:56:1B:32:10:F6:B5:42:9D:B4:5B:17:75:46 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F2D87E44827D6D89EC4ED2C80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8bac35b1-c3ba-3514-b0bc-e72553b6dd1f.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 140.248.118.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:e4:48:27:d6:d8:9e:c4:ed:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=60c208f1-477e-4751-aa5e-295ce7eaf675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:62:a6:d8:e3:42:ab:bc:d8:de:00:f3:76:f6: c7:32:aa:14:bc:62:a2:0b:70:a6:66:3b:e6:c5:ee: 6c:93:18:92:e6:a3:0a:be:92:da:be:0d:a0:db:12: 29:b8:11:ed:ee:67:fc:90:f1:ee:d0:97:a6:61:3d: a2:c5:30:d2:07:22:23:7b:79:f4:6f:40:b3:6f:6b: 3a:0f:a3:65:33:47:9f:9b:8a:4c:66:38:9e:57:b6: 81:e0:3b:a3:d5:7a:77:ca:06:14:b5:5e:09:3f:70: 16:5e:ee:32:57:fd:5d:f8:d0:ed:cd:81:89:8b:e0: 4c:8c:a8:15:ae:75:64:24:4e:f3:93:dd:cf:ed:60: 84:f4:cf:b8:56:b7:88:96:58:0a:b4:2c:a0:d6:78: bc:3a:34:d1:80:55:82:7a:09:1e:61:30:54:fe:4b: 28:37:7b:23:39:98:69:a4:79:26:b6:c1:43:39:cd: f2:da:5c:e3:e5:b1:d3:48:7e:68:6a:49:85:9b:5b: b9:cb:56:87:f3:7e:2e:4f:e7:0a:db:50:af:87:c4: f6:d8:7e:1d:06:94:59:fc:15:4c:97:07:6f:6f:f0: b6:cd:5a:f3:04:86:37:85:1a:8e:07:c7:8e:90:c4: 35:b1:b1:56:23:56:5a:9d:f9:f7:fa:49:42:db:c2: 27:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F6:50:A0:91:58:4A:56:1B:32:10:F6:B5:42:9D:B4:5B:17:75:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/8bac35b1-c3ba-3514-b0bc-e72553b6dd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.118.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:d7:92:7a:6f:af:68:98:50:e9:8b:fe:ce:0b:21:2d:d0:77: 43:c7:13:cf:ff:39:50:9e:19:fe:97:ed:eb:85:7f:c0:46:56: 55:1f:ea:bb:89:97:0c:b4:e1:1d:5d:8d:a8:6f:ee:79:5d:65: 14:1d:73:6f:20:62:50:6b:20:f5:3b:12:89:37:23:91:3b:12: 6d:4d:95:ab:a7:5c:58:cd:80:8a:e2:5d:ed:fc:f9:ec:1f:ae: 7a:3e:08:b6:97:ef:5b:bb:bc:53:a6:5d:6a:f0:5c:1a:2e:ce: ed:3a:b1:2b:6c:0b:69:3e:96:2a:59:2d:2f:bf:80:48:b5:80: 97:16:f0:44:f0:04:aa:5a:de:20:96:d7:78:2e:41:73:7d:04: d9:b6:2b:7f:5e:88:19:92:2f:c2:b9:f1:d2:03:8a:9d:2d:b1: 2a:d0:e7:35:3c:34:ad:74:e6:cb:8e:5a:89:3e:77:2e:9d:17: a3:48:4d:bd:8d:37:aa:b1:2e:dc:61:0c:ec:bc:0d:77:8c:95: 41:ae:09:4a:ec:78:67:d5:46:64:ef:a9:f4:cc:d3:bd:65:e6: a4:6f:86:56:15:d3:92:c0:dc:44:58:a3:7c:01:bf:43:1a:7f: cb:fb:26:06:e7:52:96:3a:92:cb:54:92:07:7d:77:8e:dd:74: 07:f4:25:1e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8th+RIJ9bYnsTtLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk NjBjMjA4ZjEtNDc3ZS00NzUxLWFhNWUtMjk1Y2U3ZWFmNjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2Km2ONCq7zY3gDzdvbHMqoUvGKiC3CmZjvm xe5skxiS5qMKvpLavg2g2xIpuBHt7mf8kPHu0JemYT2ixTDSByIje3n0b0Czb2s6 D6NlM0efm4pMZjieV7aB4Duj1Xp3ygYUtV4JP3AWXu4yV/1d+NDtzYGJi+BMjKgV rnVkJE7zk93P7WCE9M+4VreIllgKtCyg1ni8OjTRgFWCegkeYTBU/ksoN3sjOZhp pHkmtsFDOc3y2lzj5bHTSH5oakmFm1u5y1aH834uT+cK21Cvh8T22H4dBpRZ/BVM lwdvb/C2zVrzBIY3hRqOB8eOkMQ1sbFWI1Zanfn3+klC28InrQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFAT2UKCRWEpWGzIQ9rVCnbRbF3VGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvOGJhYzM1YjEtYzNiYS0z NTE0LWIwYmMtZTcyNTUzYjZkZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPh2ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCP15J6b69omFDpi/7OCyEt0HdDxxPP/zlQnhn+l+3rhX/ARlZVH+q7 iZcMtOEdXY2ob+55XWUUHXNvIGJQayD1OxKJNyOROxJtTZWrp1xYzYCK4l3t/Pns H656Pgi2l+9bu7xTpl1q8FwaLs7tOrErbAtpPpYqWS0vv4BItYCXFvBE8ASqWt4g ltd4LkFzfQTZtit/XogZki/CufHSA4qdLbEq0Oc1PDStdObLjlqJPncunRejSE29 jTeqsS7cYQzsvA13jJVBrglK7Hhn1UZk76n0zNO9Zeakb4ZWFdOSwNxEWKN8Ab9D Gn/L+yYG51KWOpLLVJIHfXeO3XQH9CUe -----END CERTIFICATE-----Generated at Sat Sep 26 14:56:20 2026 by rpki-client