$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa File: c922d974-e0c4-3be6-b33b-d85df1c5a977.roa (raw, json) Hash identifier: c+EXwavdL8r5YrYEOiTMpZXYCpyZCptgA0rEQcYIdcw= Subject key identifier: 74:2B:C8:90:2E:28:DC:E1:8F:87:0F:D0:64:10:AF:30:C7:D4:FC:E8 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584E75DB7604DF785FED6CC55880 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa Signing time: Sat 11 Jul 2026 06:00:17 +0000 ROA not before: Sat 11 Jul 2026 06:00:17 +0000 ROA not after: Fri 09 Oct 2026 06:00:17 +0000 asID: 54113 IP address blocks: 140.248.120.8/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:75:db:76:04:df:78:5f:ed:6c:c5:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jul 11 06:00:17 2026 GMT Not After : Oct 9 06:00:17 2026 GMT Subject: CN=362ae997-26dc-4029-aec6-56ae48e077bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:1d:72:6d:18:b3:0e:83:07:84:6f:d7:82: cc:b9:3f:fa:2c:16:ae:be:39:a1:4a:ed:7e:5a:6e: f9:69:5c:24:26:ef:33:d5:ad:b6:b4:76:9e:5c:f7: 4e:f0:ab:ad:e5:52:4f:04:23:68:59:71:5b:72:c1: 24:92:5e:dd:19:e0:b8:72:d5:48:c9:91:0a:46:71: 3e:9d:e6:5c:5c:9f:da:b8:d2:49:a3:16:ab:c5:b1: f0:19:d1:75:df:6d:61:07:82:45:56:ea:2f:29:f7: 70:4d:8d:e9:57:e9:d4:3c:36:ae:0e:3b:de:a8:4f: 7c:0d:51:b5:ea:fe:59:3a:68:9b:f6:b7:8f:04:ac: f5:cc:2a:77:f1:7e:20:07:57:cc:6f:14:dc:dd:ee: 5d:16:c9:0b:05:4c:45:26:48:36:ae:e2:6c:55:57: e9:87:32:ae:40:f6:6b:07:ee:9c:45:99:6c:7f:0c: 1f:30:64:f6:e0:13:0c:34:7e:99:c7:46:e6:f0:8d: ac:1e:d3:21:87:e7:03:e8:06:a9:06:ab:8e:b4:1a: 51:61:c5:26:40:7f:a8:5e:2f:c3:1b:5a:da:3e:c3: 8d:df:96:92:b9:56:b5:bd:2e:1c:b8:1a:73:4a:1d: b7:b3:45:30:f4:af:fd:e5:ce:c5:53:56:98:28:5f: 7f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2B:C8:90:2E:28:DC:E1:8F:87:0F:D0:64:10:AF:30:C7:D4:FC:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/c922d974-e0c4-3be6-b33b-d85df1c5a977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.120.8/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ce:da:8a:fa:08:24:82:48:2b:1a:8d:7a:6d:11:fd:9d:29: d4:3c:8b:8f:3f:52:03:9e:df:3f:a7:3c:6a:33:4e:6d:e2:ac: 1f:11:93:73:db:cb:42:8b:c4:65:28:ad:d2:11:ec:30:11:98: ec:2e:0e:f4:54:a6:22:e0:21:2a:55:a3:9f:52:4d:b6:65:23: a5:d7:56:06:75:09:46:35:63:38:06:f8:8d:25:b1:20:b3:94: 8d:b5:e7:f9:6f:09:52:0e:b9:c7:56:99:22:ce:6b:e1:d4:88: 85:67:5b:b6:95:d3:dc:1e:d6:e5:03:80:c9:25:65:c5:da:ec: ea:c6:06:f1:05:9f:fa:3f:c2:07:c5:19:85:2b:d1:c2:ed:b0: e9:4f:aa:16:e3:55:0f:1b:5d:c1:8b:71:c7:ad:14:71:06:23: 82:05:20:a1:0c:82:26:60:c0:85:b1:65:4f:e8:30:e1:bf:31: 49:ab:49:91:25:7d:45:2d:06:db:11:1f:0b:d1:5f:b1:e4:ad: 46:b4:fc:d1:79:33:13:ed:ca:6b:f5:36:5c:65:fe:4f:d0:63: 37:a5:09:44:5d:54:34:6b:6b:63:f0:a2:a4:63:f7:ba:59:61: 3b:a6:6e:cd:0e:b7:8e:5f:8d:2d:cb:74:58:08:0d:a3:29:61: 49:91:10:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE5123YE33hf7WzFWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDcxMTA2MDAxN1oXDTI2MTAwOTA2MDAxN1owLzEtMCsGA1UEAxMk MzYyYWU5OTctMjZkYy00MDI5LWFlYzYtNTZhZTQ4ZTA3N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgIdcm0Ysw6DB4Rv14LMuT/6LBauvjmhSu1+ Wm75aVwkJu8z1a22tHaeXPdO8Kut5VJPBCNoWXFbcsEkkl7dGeC4ctVIyZEKRnE+ neZcXJ/auNJJoxarxbHwGdF1321hB4JFVuovKfdwTY3pV+nUPDauDjveqE98DVG1 6v5ZOmib9rePBKz1zCp38X4gB1fMbxTc3e5dFskLBUxFJkg2ruJsVVfphzKuQPZr B+6cRZlsfwwfMGT24BMMNH6Zx0bm8I2sHtMhh+cD6AapBquOtBpRYcUmQH+oXi/D G1raPsON35aSuVa1vS4cuBpzSh23s0Uw9K/95c7FU1aYKF9/XQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFHQryJAuKNzhj4cP0GQQrzDH1PzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvYzkyMmQ5NzQtZTBjNC0z YmU2LWIzM2ItZDg1ZGYxYzVhOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUAjPh4CDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3ztqK+ggkgkgrGo16bRH9nSnUPIuPP1IDnt8/pzxqM05t4qwfEZNz 28tCi8RlKK3SEewwEZjsLg70VKYi4CEqVaOfUk22ZSOl11YGdQlGNWM4BviNJbEg s5SNtef5bwlSDrnHVpkizmvh1IiFZ1u2ldPcHtblA4DJJWXF2uzqxgbxBZ/6P8IH xRmFK9HC7bDpT6oW41UPG13Bi3HHrRRxBiOCBSChDIImYMCFsWVP6DDhvzFJq0mR JX1FLQbbER8L0V+x5K1GtPzReTMT7cpr9TZcZf5P0GM3pQlEXVQ0a2tj8KKkY/e6 WWE7pm7NDreOX40ty3RYCA2jKWFJkRCB -----END CERTIFICATE-----Generated at Fri Jul 24 09:37:56 2026 by rpki-client