$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dafc593b-4cba-3513-83ef-74429e4e5261.roa File: dafc593b-4cba-3513-83ef-74429e4e5261.roa (raw, json) Hash identifier: RIBZMtErfIGbUfvr5idnPUEUMZ9ANqi7JJtPm15Y9b8= Subject key identifier: 68:67:FB:81:22:D2:5A:CB:97:70:4C:F0:AB:DF:64:78:D7:90:81:36 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F19FCE521DC389AB671E82E80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dafc593b-4cba-3513-83ef-74429e4e5261.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 54113 IP address blocks: 140.248.121.0/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:e5:21:dc:38:9a:b6:71:e8:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=28250a42-4bcf-4bb9-ae2a-ab133d53514b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:44:e0:20:92:5b:b3:55:9e:20:e6:c0:13:96: 19:a6:5b:51:6c:d4:f3:3b:00:50:6e:3f:22:82:ef: 8c:71:ca:35:28:cb:31:54:2c:45:3b:a6:de:90:01: 5a:29:b1:33:85:99:b1:2d:60:82:26:49:55:d4:32: 4d:ea:1a:7e:d4:40:d3:8b:92:45:20:fd:40:e9:d6: 58:03:7e:5c:c4:62:87:9a:c6:e8:6c:0e:bc:96:37: c8:c9:00:ad:db:ed:aa:fc:30:01:9a:50:1b:c3:bb: e7:9d:2c:cd:ac:5b:73:da:c3:49:9d:04:a5:2e:72: a2:87:5f:a2:a8:14:e5:e4:e1:8f:7a:56:76:75:b2: 6c:86:e5:fe:28:0f:c8:35:18:01:fa:0e:23:c0:82: 4a:fd:47:9f:bb:d7:89:85:98:91:4a:e8:6e:2a:44: 98:f4:e3:3b:26:bd:bd:fb:f2:38:75:e6:1c:e9:ea: 59:83:1a:17:b6:71:93:4d:58:d8:70:18:63:42:57: 0b:4c:8d:e8:91:24:b9:2f:ba:a4:18:f8:40:a3:53: 04:3a:3f:78:45:1c:eb:d0:89:1a:27:32:a0:49:dd: e3:cb:68:6f:b8:ec:37:5e:f2:b4:f3:ac:2f:ee:d1: df:eb:ae:54:fa:67:2e:ce:cf:61:3a:df:34:a4:d2: 87:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:67:FB:81:22:D2:5A:CB:97:70:4C:F0:AB:DF:64:78:D7:90:81:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dafc593b-4cba-3513-83ef-74429e4e5261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.121.0/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:cd:79:83:dd:04:c1:25:2e:34:60:a6:48:9c:46:07:c5:1b: 66:90:9f:0e:96:d2:d0:f1:42:75:be:c4:1f:86:e6:2f:ba:24: 71:5b:e2:d9:49:b1:92:97:25:4c:f5:c4:5b:52:2d:45:18:e8: 1c:b2:15:51:7e:33:3b:43:2a:de:1b:74:de:c7:1d:58:85:4f: ba:bb:1d:00:14:f1:d9:58:4b:b2:fc:7c:40:4d:be:c3:2f:7a: 75:3a:c9:4c:aa:61:a7:8f:3c:e6:24:09:5d:32:ca:d8:0b:b0: b6:ff:66:76:58:19:7e:86:7f:f6:7c:7d:4d:33:32:6c:e6:c5: e7:ef:c0:5f:ab:a5:7e:70:1c:3d:0d:b2:ec:a9:53:16:58:4c: 90:ab:bb:30:5d:60:82:92:63:25:0b:b3:1a:dd:35:7f:53:af: 5d:1c:0c:2a:e0:d4:c3:7a:b4:75:f2:7e:54:d6:fc:eb:a3:c4: d4:3d:8b:8e:f6:31:69:b1:4e:ac:12:05:73:4f:2b:17:94:2f: 35:f8:b3:07:dd:41:a7:8f:14:72:6c:46:04:ef:a4:a3:ad:b1: 6d:af:10:5b:24:f9:27:3d:b5:67:a6:fb:6e:a5:de:af:8a:5c: e4:b3:90:29:67:4d:41:8c:be:aa:38:75:54:18:73:25:59:4b: a5:9c:94:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8Z/OUh3DiatnHoLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MjgyNTBhNDItNGJjZi00YmI5LWFlMmEtYWIxMzNkNTM1MTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkTgIJJbs1WeIObAE5YZpltRbNTzOwBQbj8i gu+Mcco1KMsxVCxFO6bekAFaKbEzhZmxLWCCJklV1DJN6hp+1EDTi5JFIP1A6dZY A35cxGKHmsbobA68ljfIyQCt2+2q/DABmlAbw7vnnSzNrFtz2sNJnQSlLnKih1+i qBTl5OGPelZ2dbJshuX+KA/INRgB+g4jwIJK/Uefu9eJhZiRSuhuKkSY9OM7Jr29 +/I4deYc6epZgxoXtnGTTVjYcBhjQlcLTI3okSS5L7qkGPhAo1MEOj94RRzr0Ika JzKgSd3jy2hvuOw3XvK086wv7tHf665U+mcuzs9hOt80pNKH1wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGhn+4Ei0lrLl3BM8KvfZHjXkIE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGFmYzU5M2ItNGNiYS0z NTEzLTgzZWYtNzQ0MjllNGU1MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAjPh5ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBwzXmD3QTBJS40YKZInEYHxRtmkJ8OltLQ8UJ1vsQfhuYvuiRxW+LZ SbGSlyVM9cRbUi1FGOgcshVRfjM7QyreG3Texx1YhU+6ux0AFPHZWEuy/HxATb7D L3p1OslMqmGnjzzmJAldMsrYC7C2/2Z2WBl+hn/2fH1NMzJs5sXn78Bfq6V+cBw9 DbLsqVMWWEyQq7swXWCCkmMlC7Ma3TV/U69dHAwq4NTDerR18n5U1vzro8TUPYuO 9jFpsU6sEgVzTysXlC81+LMH3UGnjxRybEYE76SjrbFtrxBbJPknPbVnpvtupd6v ilzks5ApZ01BjL6qOHVUGHMlWUulnJRO -----END CERTIFICATE-----Generated at Fri Sep 25 19:39:51 2026 by rpki-client