$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/daa04607-b151-3569-89c8-ed9bd1dd1058.roa File: daa04607-b151-3569-89c8-ed9bd1dd1058.roa (raw, json) Hash identifier: sXYqe+BNLj0CKNl7fT4FhI9q5VfZwSWndLJ+/IYl41g= Subject key identifier: 5A:3E:97:0D:D2:76:FC:F5:B5:FF:12:A2:16:65:67:80:39:33:5D:00 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584E577F4247B3B4868041CE6740 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/daa04607-b151-3569-89c8-ed9bd1dd1058.roa Signing time: Tue 30 Jun 2026 09:00:12 +0000 ROA not before: Tue 30 Jun 2026 09:00:12 +0000 ROA not after: Mon 28 Sep 2026 09:00:12 +0000 asID: 54113 IP address blocks: 140.248.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:57:7f:42:47:b3:b4:86:80:41:ce:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jun 30 09:00:12 2026 GMT Not After : Sep 28 09:00:12 2026 GMT Subject: CN=4dfc5250-bf4e-47f1-b560-013084cf6ffa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9a:17:69:43:75:35:84:51:17:95:cd:5e:5d: fe:eb:88:5f:15:ff:e7:b1:aa:44:98:5b:03:4e:24: 98:2b:f0:58:86:6a:92:fc:9f:38:6d:8d:a7:6f:ce: 22:da:61:5d:66:99:96:b2:f3:7b:2a:b9:51:cd:0a: 85:b4:ce:c1:fc:40:61:66:d2:c6:85:c7:1f:15:56: 98:15:be:be:cb:f5:0f:98:0e:51:4c:56:f7:05:0d: 07:70:67:e5:ef:a8:e4:91:fb:aa:b5:98:50:42:b3: 1c:d1:d2:40:f4:6c:cd:6e:1d:7e:78:11:5a:4e:1f: 36:64:86:51:93:df:28:2d:84:82:0a:a0:ff:e5:60: 8e:12:8e:1d:e3:04:31:77:85:68:ce:4b:2c:1e:a1: 23:36:4f:81:6d:d5:16:a5:b5:b4:c0:97:38:4e:1f: 54:82:4d:38:ff:cb:17:43:97:ff:9f:67:b5:0c:a7: ce:a8:07:37:1f:5c:71:9a:57:23:81:c1:09:26:f4: db:4f:10:d1:80:02:f8:45:94:67:d3:38:56:16:d5: 33:66:19:0b:d7:0c:96:75:9b:b7:9f:44:70:b8:6c: 82:a8:48:80:98:3f:0f:7a:1a:92:10:b6:f1:ef:2b: 7a:bc:c9:c7:11:7e:d4:f5:22:bb:a5:7c:a3:de:62: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3E:97:0D:D2:76:FC:F5:B5:FF:12:A2:16:65:67:80:39:33:5D:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/daa04607-b151-3569-89c8-ed9bd1dd1058.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:96:a1:e2:40:1b:a1:e4:dd:f1:e4:94:3b:2e:2c:08:f2:f3: a2:e4:a4:fe:60:75:74:d0:e9:73:f1:18:ed:26:ff:9c:d5:db: ea:ef:bc:d2:30:ae:c9:00:18:5f:72:ee:c0:24:5b:54:29:48: ca:05:20:13:46:81:0a:a0:10:f2:41:30:50:ca:7d:9e:bb:1c: 0f:9a:13:2f:53:1e:38:71:44:f6:bd:1b:21:71:3e:f0:54:72: a8:49:cc:df:5c:28:74:6f:af:c3:a1:45:40:d6:5b:ed:df:1e: 04:57:01:ce:08:a6:14:b8:ec:16:3b:fd:b4:43:92:03:30:7c: e5:33:cf:86:e8:93:cb:bd:8b:fb:07:2a:56:e2:d7:41:a6:e5: d0:96:ac:a2:4b:4d:a8:0e:07:e6:f4:2f:8d:b3:9b:fc:fb:37: 24:1d:e3:ed:74:05:62:7d:6c:8e:09:d6:41:11:23:c6:45:59: da:8a:ba:95:b8:7f:86:ab:45:db:63:5f:1b:15:c8:ea:8a:dc: c4:2d:03:3e:15:09:0e:5c:e3:91:f1:73:66:b7:98:31:8f:10: d2:e9:d9:6a:17:b9:46:a8:bc:e9:a1:be:db:27:48:e9:dc:b7: e9:b8:3c:d8:e2:f9:79:ed:9e:8c:99:65:b5:71:f8:25:a1:61: 15:99:9f:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5Xf0JHs7SGgEHOZ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDYzMDA5MDAxMloXDTI2MDkyODA5MDAxMlowLzEtMCsGA1UEAxMk NGRmYzUyNTAtYmY0ZS00N2YxLWI1NjAtMDEzMDg0Y2Y2ZmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6poXaUN1NYRRF5XNXl3+64hfFf/nsapEmFsD TiSYK/BYhmqS/J84bY2nb84i2mFdZpmWsvN7KrlRzQqFtM7B/EBhZtLGhccfFVaY Fb6+y/UPmA5RTFb3BQ0HcGfl76jkkfuqtZhQQrMc0dJA9GzNbh1+eBFaTh82ZIZR k98oLYSCCqD/5WCOEo4d4wQxd4VozkssHqEjNk+BbdUWpbW0wJc4Th9Ugk04/8sX Q5f/n2e1DKfOqAc3H1xxmlcjgcEJJvTbTxDRgAL4RZRn0zhWFtUzZhkL1wyWdZu3 n0RwuGyCqEiAmD8PehqSELbx7yt6vMnHEX7U9SK7pXyj3mI3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFo+lw3Sdvz1tf8SohZlZ4A5M10AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGFhMDQ2MDctYjE1MS0z NTY5LTg5YzgtZWQ5YmQxZGQxMDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPgrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSWoeJAG6Hk3fHklDsuLAjy86LkpP5gdXTQ6XPxGO0m/5zV2+rvvNIw rskAGF9y7sAkW1QpSMoFIBNGgQqgEPJBMFDKfZ67HA+aEy9THjhxRPa9GyFxPvBU cqhJzN9cKHRvr8OhRUDWW+3fHgRXAc4IphS47BY7/bRDkgMwfOUzz4bok8u9i/sH Klbi10Gm5dCWrKJLTagOB+b0L42zm/z7NyQd4+10BWJ9bI4J1kERI8ZFWdqKupW4 f4arRdtjXxsVyOqK3MQtAz4VCQ5c45Hxc2a3mDGPENLp2WoXuUaovOmhvtsnSOnc t+m4PNji+XntnoyZZbVx+CWhYRWZn3I= -----END CERTIFICATE-----Generated at Fri Jul 24 21:31:14 2026 by rpki-client