$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa File: 609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa (raw, json) Hash identifier: kh8HzLli2jpoc1q3hDpcGcK7UW1TFvWeU3R8BNWKIs8= Subject key identifier: 98:B4:F2:1E:D3:3F:21:83:11:C3:3C:D6:78:19:4F:8C:78:1A:15:87 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584E94EA6B285A7A6E15E8BC4780 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa Signing time: Wed 22 Jul 2026 09:00:11 +0000 ROA not before: Wed 22 Jul 2026 09:00:11 +0000 ROA not after: Tue 20 Oct 2026 09:00:11 +0000 asID: 54113 IP address blocks: 140.248.220.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:94:ea:6b:28:5a:7a:6e:15:e8:bc:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jul 22 09:00:11 2026 GMT Not After : Oct 20 09:00:11 2026 GMT Subject: CN=cc67c8c4-d222-464a-b5a3-26ad35989ef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:d1:73:ea:09:e3:c7:31:19:94:85:e0:aa: 7d:71:93:22:87:06:a2:79:13:17:5a:e6:f2:ed:30: 58:62:22:04:21:87:2c:67:d6:24:58:fe:4a:34:6b: 48:1d:12:35:b2:9d:7d:22:38:d1:df:c7:53:8a:b3: b4:81:5c:0e:80:b6:48:a2:59:28:da:b3:7c:55:f3: 19:ef:bb:73:66:40:e2:c5:a1:14:48:c5:a2:a0:22: 2f:e1:8b:69:14:32:bb:82:65:33:9d:58:ba:87:26: 52:82:53:a5:94:81:6e:4e:f1:e2:03:3d:b4:f1:4f: 1e:18:b5:bc:39:fc:ed:70:8a:cd:56:da:77:c7:9c: 5e:98:eb:b0:62:c6:23:fe:51:12:cf:92:14:8f:ff: 04:c2:11:f5:25:d8:6a:cb:0a:bd:d8:2f:ed:1e:ba: 18:66:14:bb:17:58:b0:39:24:80:86:62:3d:20:e2: 23:d3:da:82:43:bd:18:f2:b3:5b:cb:37:90:6b:39: df:b1:5d:05:d5:c4:82:d9:d4:d2:3d:15:00:5d:14: 1e:c7:d6:1d:d0:55:6e:f6:b5:8f:2a:77:cc:c4:96: d5:e0:a4:db:91:63:14:c7:8c:ae:16:3a:ba:42:fc: 72:39:a9:c9:bd:8a:88:da:bd:d3:fd:0b:3d:7e:54: f7:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:B4:F2:1E:D3:3F:21:83:11:C3:3C:D6:78:19:4F:8C:78:1A:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/609a7e87-f0cc-3067-854c-362f7e4e0b2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.220.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:61:1b:12:00:d0:32:b6:55:d9:d0:7f:17:06:09:10:6f:42: 52:2a:0d:75:d5:0d:db:5b:e7:fc:14:e5:88:f0:a0:89:41:d3: f0:02:86:c1:ce:a1:81:52:4b:44:9e:e4:07:30:b2:af:b8:57: 2f:1b:d5:85:1b:72:71:dd:db:58:50:d6:b3:4b:65:bf:7b:a5: cd:29:55:43:a3:f4:99:3a:5f:8a:95:9b:90:92:32:e4:c4:cc: e3:41:59:fa:72:13:bb:30:6d:d6:fb:00:55:2e:32:dd:e9:ba: bb:d4:73:bb:b9:b6:b4:20:fe:98:fa:a5:c4:95:fb:b9:ba:25: 35:12:87:a9:df:15:32:8d:1f:da:37:d0:de:3d:6a:7b:d3:3a: 50:60:66:e8:a2:b8:49:c1:21:3d:06:59:9c:46:4f:f1:a1:5b: ba:23:67:cc:80:44:0b:37:b6:b2:2b:4d:e1:09:d7:50:fc:fc: a3:75:78:03:99:38:6b:84:41:f4:c6:31:39:a5:7e:a7:92:4c: b2:1e:3a:20:52:ee:32:39:9b:f9:10:36:e9:ed:6a:2b:ba:d2: 09:84:c3:93:db:2c:0e:ea:0d:75:f8:87:be:45:5d:d0:8d:55: f1:6c:b2:16:e5:c5:e5:18:eb:f3:d6:8f:a5:f2:63:af:7b:06: c8:51:a5:b2 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE6U6msoWnpuFei8R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk Y2M2N2M4YzQtZDIyMi00NjRhLWI1YTMtMjZhZDM1OTg5ZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH/Rc+oJ48cxGZSF4Kp9cZMihwaieRMXWuby 7TBYYiIEIYcsZ9YkWP5KNGtIHRI1sp19IjjR38dTirO0gVwOgLZIolko2rN8VfMZ 77tzZkDixaEUSMWioCIv4YtpFDK7gmUznVi6hyZSglOllIFuTvHiAz208U8eGLW8 OfztcIrNVtp3x5xemOuwYsYj/lESz5IUj/8EwhH1Jdhqywq92C/tHroYZhS7F1iw OSSAhmI9IOIj09qCQ70Y8rNbyzeQaznfsV0F1cSC2dTSPRUAXRQex9Yd0FVu9rWP KnfMxJbV4KTbkWMUx4yuFjq6QvxyOanJvYqI2r3T/Qs9flT3XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJi08h7TPyGDEcM81ngZT4x4GhWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNjA5YTdlODctZjBjYy0z MDY3LTg1NGMtMzYyZjdlNGUwYjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEjPjcwDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQAJYRsSANAytlXZ0H8XBgkQb0JSKg111Q3bW+f8FOWI8KCJQdPwAobB zqGBUktEnuQHMLKvuFcvG9WFG3Jx3dtYUNazS2W/e6XNKVVDo/SZOl+KlZuQkjLk xMzjQVn6chO7MG3W+wBVLjLd6bq71HO7uba0IP6Y+qXElfu5uiU1Eoep3xUyjR/a N9DePWp70zpQYGboorhJwSE9BlmcRk/xoVu6I2fMgEQLN7ayK03hCddQ/PyjdXgD mThrhEH0xjE5pX6nkkyyHjogUu4yOZv5EDbp7WorutIJhMOT2ywO6g11+Ie+RV3Q jVXxbLIW5cXlGOvz1o+l8mOvewbIUaWy -----END CERTIFICATE-----Generated at Fri Jul 24 15:13:52 2026 by rpki-client