$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f8945841-c72c-3802-946a-27ff77b52f8d.roa File: f8945841-c72c-3802-946a-27ff77b52f8d.roa (raw, json) Hash identifier: oGa+0idAxynZ+Oih2G7Ys5KdYAEUPSVvILQfJU7wnU4= Subject key identifier: 67:22:45:88:3E:46:DF:D7:68:78:8F:D5:D5:7A:42:E2:68:4C:AC:3F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D9EE4BB7BECEDF75FC9200600 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f8945841-c72c-3802-946a-27ff77b52f8d.roa Signing time: Sat 25 Apr 2026 06:00:10 +0000 ROA not before: Sat 25 Apr 2026 06:00:10 +0000 ROA not after: Fri 24 Jul 2026 06:00:10 +0000 asID: 54113 IP address blocks: 140.248.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:e4:bb:7b:ec:ed:f7:5f:c9:20:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Apr 25 06:00:10 2026 GMT Not After : Jul 24 06:00:10 2026 GMT Subject: CN=4ac7deb0-ebd4-4a44-aaae-8ee243a762bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:13:3d:d7:a8:22:d5:9a:d2:cb:d8:da:32: 59:bf:46:5c:60:72:bf:b3:21:6a:8d:c9:6d:9c:19: b8:08:4d:2a:93:16:da:b7:af:32:ad:ba:67:9e:2d: f0:fa:13:38:4c:4c:37:f5:f9:27:1e:21:7a:59:7d: 7d:c4:a2:5f:90:38:c4:5a:2b:45:3b:9e:8d:af:97: e3:a0:38:a0:3e:c1:65:43:62:8d:9c:90:0c:1e:e0: fe:d6:d0:6e:1a:af:35:8c:e8:13:a0:02:b8:9a:18: 2b:00:74:23:8f:f6:d7:bc:b4:66:1f:a1:97:3b:67: 87:d0:d3:82:71:ac:63:b1:e7:2e:fa:52:7e:59:8d: 0d:3c:6f:98:96:66:e0:cf:a6:55:87:47:85:de:5c: ea:dd:43:ca:7c:17:81:d1:19:df:af:f9:a6:37:70: 9b:c2:0f:a2:cd:44:6a:4c:e7:2f:0f:20:8c:88:e3: 64:6b:ad:24:65:18:85:30:ed:88:24:60:bc:02:fc: d1:5a:84:1e:83:5f:1c:84:57:de:d9:f6:0c:f5:b4: 07:48:24:5e:11:93:d0:ad:e8:60:46:dd:b6:9f:b4: cc:23:ff:8f:0c:78:9f:2b:38:73:72:cd:f0:dd:c0: 4c:7c:f8:1c:0b:b9:18:88:6f:84:d2:d5:ba:ef:59: 00:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:45:88:3E:46:DF:D7:68:78:8F:D5:D5:7A:42:E2:68:4C:AC:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/f8945841-c72c-3802-946a-27ff77b52f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:9b:21:d7:c1:6f:0a:34:66:bf:4d:ce:db:77:7d:9f:af:91: 0c:ee:1c:dc:d7:25:e1:db:04:7c:5e:5f:47:7c:c0:74:0a:6a: 11:bf:70:df:88:82:65:a2:2a:24:3d:6c:bf:a5:9c:2a:f9:27: c1:23:6a:fc:06:a7:04:dc:97:83:a0:ba:4e:2d:8a:21:37:14: 04:09:22:16:fc:c4:56:09:a2:72:ef:3a:2a:54:8d:98:b8:33: ad:a7:5b:cc:fa:32:bf:b0:10:24:79:e2:09:be:26:41:2b:fc: 33:a2:57:68:b1:8e:d3:05:58:30:df:b7:6b:cd:c1:8a:92:63: 41:34:59:13:85:b8:8d:c7:9e:8c:e0:f0:6d:95:62:f4:7e:51: da:7b:f2:03:50:f2:40:78:04:ba:4b:e5:47:8f:d1:b4:01:29: 4d:0e:0a:52:c0:16:34:66:77:2f:79:14:f6:cb:1d:5c:4d:cb: 8f:68:23:cd:36:ae:f1:7b:dd:b2:11:74:fc:18:b2:d7:0b:2d: 88:dd:78:f4:5d:ec:7b:87:2a:a3:e8:14:45:5f:0b:2c:37:f0: d0:2a:cf:88:b3:17:ae:b1:ad:da:6f:d1:aa:90:7f:e9:0c:12: 7a:8c:1b:54:0b:c3:e3:8e:82:18:fe:53:18:a1:94:13:14:3c: 54:07:2b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2e5Lt77O33X8kgBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDQyNTA2MDAxMFoXDTI2MDcyNDA2MDAxMFowLzEtMCsGA1UEAxMk NGFjN2RlYjAtZWJkNC00YTQ0LWFhYWUtOGVlMjQzYTc2MmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1sTPdeoItWa0svY2jJZv0ZcYHK/syFqjclt nBm4CE0qkxbat68yrbpnni3w+hM4TEw39fknHiF6WX19xKJfkDjEWitFO56Nr5fj oDigPsFlQ2KNnJAMHuD+1tBuGq81jOgToAK4mhgrAHQjj/bXvLRmH6GXO2eH0NOC caxjsecu+lJ+WY0NPG+Ylmbgz6ZVh0eF3lzq3UPKfBeB0Rnfr/mmN3Cbwg+izURq TOcvDyCMiONka60kZRiFMO2IJGC8AvzRWoQeg18chFfe2fYM9bQHSCReEZPQrehg Rt22n7TMI/+PDHifKzhzcs3w3cBMfPgcC7kYiG+E0tW671kAvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGciRYg+Rt/XaHiP1dV6QuJoTKw/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZjg5NDU4NDEtYzcyYy0z ODAyLTk0NmEtMjdmZjc3YjUyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjPiUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGbIdfBbwo0Zr9Nztt3fZ+vkQzuHNzXJeHbBHxeX0d8wHQKahG/cN+I gmWiKiQ9bL+lnCr5J8EjavwGpwTcl4Oguk4tiiE3FAQJIhb8xFYJonLvOipUjZi4 M62nW8z6Mr+wECR54gm+JkEr/DOiV2ixjtMFWDDft2vNwYqSY0E0WROFuI3Hnozg 8G2VYvR+Udp78gNQ8kB4BLpL5UeP0bQBKU0OClLAFjRmdy95FPbLHVxNy49oI802 rvF73bIRdPwYstcLLYjdePRd7HuHKqPoFEVfCyw38NAqz4izF66xrdpv0aqQf+kM EnqMG1QLw+OOghj+UxihlBMUPFQHKyk= -----END CERTIFICATE-----Generated at Sun May 3 17:49:50 2026 by rpki-client