$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2970ee15-a466-3660-b826-73650b2c4c91.roa File: 2970ee15-a466-3660-b826-73650b2c4c91.roa (raw, json) Hash identifier: LAeuTdkvN3TMv/mhC/XrJyzrMCEevX9HdSifKV2+MYg= Subject key identifier: CA:72:DA:3A:EB:C2:90:ED:EA:50:0C:D4:AA:BE:1C:6A:F6:B6:08:A7 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584F03A84E3829D67A642D979D80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2970ee15-a466-3660-b826-73650b2c4c91.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 140.248.120.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a8:4e:38:29:d6:7a:64:2d:97:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=152f74a0-2114-431a-b55a-9ecf69206fbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:76:12:4f:a9:e9:66:c1:4a:8c:fd:68:b1:eb: 5d:f4:cb:e9:6c:95:23:62:8f:a7:5f:23:e9:d7:e1: dd:c0:d3:58:e5:88:33:60:cc:a9:34:0e:1c:80:40: 53:11:f0:96:3a:31:76:4a:5a:50:f8:81:40:30:6d: fc:4c:92:47:8a:50:f1:8b:78:75:57:33:a1:d7:32: 7e:1a:c8:13:06:e1:08:e7:b7:3a:81:1e:f9:9c:d6: 24:d5:db:6b:d3:03:b9:26:b9:3c:ce:60:0e:f0:53: f6:7c:63:0e:07:e8:55:7f:9a:50:55:16:1e:9c:ed: 7e:9a:15:82:ab:61:13:5f:24:e5:ad:6b:73:d1:09: 93:20:3e:15:f8:b5:71:35:b7:39:63:d6:3f:14:f9: 61:fa:80:3c:28:d0:dd:08:d9:43:92:fe:11:57:f5: 87:d8:a0:58:2c:bf:e0:d0:10:e2:46:4b:fc:7a:46: a2:cc:8b:f2:67:de:a0:29:de:91:e6:75:40:00:c6: 3e:bc:e2:12:15:71:51:c6:29:ef:f8:53:47:06:73: 97:30:15:e1:ea:d3:86:e6:8f:6c:10:8b:08:25:52: f2:6a:d8:19:3b:2f:80:34:18:98:bc:f3:be:26:98: d2:71:a9:8e:c3:91:dd:d4:78:38:b4:48:13:a6:e0: ef:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:72:DA:3A:EB:C2:90:ED:EA:50:0C:D4:AA:BE:1C:6A:F6:B6:08:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/2970ee15-a466-3660-b826-73650b2c4c91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.120.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:de:2d:e3:71:0a:e4:fd:62:ed:87:9c:7d:56:b2:2e:9f:5b: ff:a1:7d:ba:58:14:0f:39:32:4b:d1:e1:20:47:42:eb:c6:c9: 58:91:a5:6b:69:1a:f6:66:e9:41:7f:77:81:ea:20:ff:ca:93: 51:d2:50:f0:64:22:7b:d4:a8:6b:22:6e:62:3c:a7:ad:8c:bb: ae:4d:8e:5a:a9:4d:6c:a4:99:90:e9:25:24:df:aa:e6:e7:37: 22:2e:cf:af:6d:60:ed:30:58:11:01:13:25:32:4e:b7:bc:7c: 20:3f:c2:d1:e3:13:6b:b5:e7:5e:18:26:dd:28:b4:72:66:51: a1:81:d2:7b:cf:c3:87:22:39:71:e5:64:0e:42:b2:a6:04:92: ac:af:5c:10:4a:f1:8e:77:d5:6b:af:0a:f8:fa:1e:3f:77:a1: 10:14:6a:51:0c:44:83:85:3e:66:06:01:ed:8d:eb:e2:e1:82: a9:8e:85:10:f2:01:87:df:28:8b:75:c8:b1:ee:80:09:98:55: 3a:14:ab:ab:ab:cc:f6:07:09:6d:fb:ea:24:22:59:22:24:67: 1d:29:72:ac:c1:f0:b4:c1:40:fc:8c:ea:be:0f:ff:36:f6:20: 39:f2:f9:1d:6b:65:e4:24:2c:71:82:e5:f3:f2:60:dc:5b:e7: 19:60:1c:19 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8DqE44KdZ6ZC2XnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk MTUyZjc0YTAtMjExNC00MzFhLWI1NWEtOWVjZjY5MjA2ZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHYST6npZsFKjP1osetd9MvpbJUjYo+nXyPp 1+HdwNNY5YgzYMypNA4cgEBTEfCWOjF2SlpQ+IFAMG38TJJHilDxi3h1VzOh1zJ+ GsgTBuEI57c6gR75nNYk1dtr0wO5Jrk8zmAO8FP2fGMOB+hVf5pQVRYenO1+mhWC q2ETXyTlrWtz0QmTID4V+LVxNbc5Y9Y/FPlh+oA8KNDdCNlDkv4RV/WH2KBYLL/g 0BDiRkv8ekaizIvyZ96gKd6R5nVAAMY+vOISFXFRxinv+FNHBnOXMBXh6tOG5o9s EIsIJVLyatgZOy+ANBiYvPO+JpjScamOw5Hd1Hg4tEgTpuDviwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFMpy2jrrwpDt6lAM1Kq+HGr2tginMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvMjk3MGVlMTUtYTQ2Ni0z NjYwLWI4MjYtNzM2NTBiMmM0YzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPh4ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAn3i3jcQrk/WLth5x9VrIun1v/oX26WBQPOTJL0eEgR0LrxslYkaVr aRr2ZulBf3eB6iD/ypNR0lDwZCJ71KhrIm5iPKetjLuuTY5aqU1spJmQ6SUk36rm 5zciLs+vbWDtMFgRARMlMk63vHwgP8LR4xNrtedeGCbdKLRyZlGhgdJ7z8OHIjlx 5WQOQrKmBJKsr1wQSvGOd9Vrrwr4+h4/d6EQFGpRDESDhT5mBgHtjevi4YKpjoUQ 8gGH3yiLdcix7oAJmFU6FKurq8z2Bwlt++okIlkiJGcdKXKswfC0wUD8jOq+D/82 9iA58vkda2XkJCxxguXz8mDcW+cZYBwZ -----END CERTIFICATE-----Generated at Mon Sep 28 10:36:19 2026 by rpki-client