$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/420dc7c8-4ea8-3a3e-b81d-23e3bc1755e8.roa File: 420dc7c8-4ea8-3a3e-b81d-23e3bc1755e8.roa (raw, json) Hash identifier: ap/OWCspQWvCp+UBMK2sUir4lVjKMEchMeLc1hgsUjA= Subject key identifier: 45:E1:71:92:6C:CC:A6:48:0C:8A:03:68:CA:94:1F:68:01:6A:A4:7F Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584DD0727A5F7E8B0CEDD89D3FC0 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/420dc7c8-4ea8-3a3e-b81d-23e3bc1755e8.roa Signing time: Wed 13 May 2026 00:00:22 +0000 ROA not before: Wed 13 May 2026 00:00:22 +0000 ROA not after: Tue 11 Aug 2026 00:00:22 +0000 asID: 54113 IP address blocks: 140.248.234.0/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:72:7a:5f:7e:8b:0c:ed:d8:9d:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 13 00:00:22 2026 GMT Not After : Aug 11 00:00:22 2026 GMT Subject: CN=483b21ae-6e30-49ec-9587-cfbbb8c00243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b8:af:f3:0d:07:52:be:e1:70:84:ab:12:30: 01:7f:8c:77:5f:98:e6:b1:d2:5c:45:2d:f8:6f:08: cb:31:94:8b:03:f7:7d:b3:c5:0e:38:21:31:4e:d2: ab:85:12:5f:46:a7:82:1d:40:a4:47:8d:70:4c:00: b8:69:84:0d:55:4d:f9:33:fb:26:dd:f9:1c:31:86: db:d6:93:ea:72:fa:9e:ef:a6:0d:b6:ae:53:fe:f3: 2a:df:b2:c0:d6:98:9e:6a:f5:bb:59:00:f9:68:90: 6f:01:ff:e4:f3:ea:ba:3f:41:cc:99:9e:bc:ff:53: 0b:f3:9c:40:5b:ff:f7:e1:9f:7d:9c:6b:4f:76:12: 6d:c5:d0:25:c2:e6:93:f9:76:b9:5c:80:f6:84:64: 1e:78:10:ac:b7:9b:1e:71:09:03:82:5c:1c:07:fa: 65:95:5d:b2:0d:6a:45:a4:92:24:3a:da:c5:21:56: 0f:6e:65:95:07:2b:c5:f5:ac:d2:32:41:f1:7d:91: 61:d7:01:de:b3:18:10:75:d7:88:11:86:c9:67:56: aa:0e:44:55:59:05:27:b7:95:77:99:92:e6:a7:96: 9f:0d:43:7e:99:95:07:09:03:3b:4e:25:dd:55:44: 30:56:76:e9:ff:ce:22:96:f1:04:84:ff:51:b1:67: f7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:71:92:6C:CC:A6:48:0C:8A:03:68:CA:94:1F:68:01:6A:A4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/420dc7c8-4ea8-3a3e-b81d-23e3bc1755e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.234.0/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:f4:e0:0a:0f:df:fe:5e:e4:6f:64:c4:14:bc:b4:9b:b1:cc: 83:c5:8d:9a:09:c5:7d:8a:f4:c1:a4:50:9b:25:3b:57:0f:2d: 63:51:7a:e7:24:2b:49:83:4b:1b:84:a2:c1:b4:5e:96:06:95: 35:0b:8e:6a:dc:86:f5:f5:c6:88:d2:91:52:3a:8f:43:81:6d: aa:d2:b6:d1:62:35:5a:6d:b9:f4:35:ab:33:2e:53:98:67:1d: e6:97:d0:eb:8b:96:49:fb:54:64:3a:08:05:0f:18:b5:33:6d: 04:b8:4b:e6:1b:a7:69:9b:4d:f4:d4:ae:98:7e:f6:7b:a0:59: d7:e9:d7:39:85:35:d6:e8:25:97:fd:f3:a0:ee:1b:d9:1d:13: 91:5a:59:50:e4:ba:51:3a:02:56:3e:09:94:2e:6a:db:cc:a9: 44:63:0d:1b:b2:26:de:53:4f:6f:59:df:d5:10:56:85:56:8f: f6:bc:c9:37:09:f1:a8:e4:ea:8c:c8:e7:f1:ec:7e:f2:de:98: 79:86:04:cb:92:10:c6:a5:33:0c:01:09:00:37:9a:49:94:02: a8:17:34:64:da:ed:79:19:4c:2c:04:0d:dd:0b:bc:73:06:79: 72:28:fb:25:aa:f9:44:ab:fd:76:80:e7:91:ef:6b:12:99:c2: 94:bb:60:8d -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE3QcnpffosM7didP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDUxMzAwMDAyMloXDTI2MDgxMTAwMDAyMlowLzEtMCsGA1UEAxMk NDgzYjIxYWUtNmUzMC00OWVjLTk1ODctY2ZiYmI4YzAwMjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Liv8w0HUr7hcISrEjABf4x3X5jmsdJcRS34 bwjLMZSLA/d9s8UOOCExTtKrhRJfRqeCHUCkR41wTAC4aYQNVU35M/sm3fkcMYbb 1pPqcvqe76YNtq5T/vMq37LA1pieavW7WQD5aJBvAf/k8+q6P0HMmZ68/1ML85xA W//34Z99nGtPdhJtxdAlwuaT+Xa5XID2hGQeeBCst5secQkDglwcB/pllV2yDWpF pJIkOtrFIVYPbmWVByvF9azSMkHxfZFh1wHesxgQddeIEYbJZ1aqDkRVWQUnt5V3 mZLmp5afDUN+mZUHCQM7TiXdVUQwVnbp/84ilvEEhP9RsWf3qQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEXhcZJszKZIDIoDaMqUH2gBaqR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDIwZGM3YzgtNGVhOC0z YTNlLWI4MWQtMjNlM2JjMTc1NWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjqADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAN9OAKD9/+XuRvZMQUvLSbscyDxY2aCcV9ivTBpFCbJTtXDy1jUXrn JCtJg0sbhKLBtF6WBpU1C45q3Ib19caI0pFSOo9DgW2q0rbRYjVabbn0NaszLlOY Zx3ml9Dri5ZJ+1RkOggFDxi1M20EuEvmG6dpm0301K6YfvZ7oFnX6dc5hTXW6CWX /fOg7hvZHRORWllQ5LpROgJWPgmULmrbzKlEYw0bsibeU09vWd/VEFaFVo/2vMk3 CfGo5OqMyOfx7H7y3ph5hgTLkhDGpTMMAQkAN5pJlAKoFzRk2u15GUwsBA3dC7xz BnlyKPslqvlEq/12gOeR72sSmcKUu2CN -----END CERTIFICATE-----Generated at Wed May 13 16:15:12 2026 by rpki-client