$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd5395dd-03a4-3635-acdd-79adee2f302d.roa File: dd5395dd-03a4-3635-acdd-79adee2f302d.roa (raw, json) Hash identifier: kH7YzOVcB/Kvt9xAUzl703CJwsRp+G2xHv9UF3FUqw8= Subject key identifier: 67:E7:41:11:D4:E8:C2:C3:56:97:82:7D:24:6F:5F:4F:61:72:F2:BB Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584D3DFF8B4D361F4FEFB99DA880 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd5395dd-03a4-3635-acdd-79adee2f302d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 54113 IP address blocks: 140.248.230.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:8b:4d:36:1f:4f:ef:b9:9d:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=06c2b747-8f91-44bf-ab1f-9462572ff89f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:d1:d6:be:fd:50:9f:e4:b9:ec:36:87:5f: 35:df:87:49:ac:f8:bf:5a:23:91:ae:f7:0e:84:03: eb:f5:87:7c:55:be:d9:bb:29:89:f3:a6:5e:95:be: 5f:70:0c:8d:95:47:43:92:2f:7b:aa:8e:ad:f5:7c: 1e:b5:d6:13:90:40:e8:8c:1d:10:f7:e0:4c:50:be: a5:5c:0b:4a:b9:46:32:27:d4:e5:3f:01:19:94:95: c7:06:df:59:0c:a6:7c:2a:6d:da:de:ee:0e:fd:b2: d2:1c:d8:67:f6:fa:00:64:3d:76:b7:09:b2:3b:51: 35:46:7c:31:db:18:38:4b:f9:45:79:0d:3b:bc:18: b3:55:6e:04:c3:55:f9:c8:21:4a:c0:19:ce:af:c6: c6:05:29:30:4a:a8:00:b9:00:fe:4a:65:03:ad:02: 4b:9b:87:e5:f3:00:44:4c:b1:d3:75:8b:ed:bf:6c: 8c:57:16:f0:64:96:81:f0:2d:24:6d:ce:70:e0:6e: dc:cd:19:f9:3d:33:80:c2:15:08:cd:c0:cc:fb:a8: 07:1f:55:91:19:f0:3e:a5:d7:e0:aa:66:ed:3e:88: d9:68:e0:d7:4b:8f:f7:a8:f9:24:00:15:3c:bf:d1: b9:69:af:ea:90:3d:c5:1c:ff:d5:05:19:86:5c:87: af:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E7:41:11:D4:E8:C2:C3:56:97:82:7D:24:6F:5F:4F:61:72:F2:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/dd5395dd-03a4-3635-acdd-79adee2f302d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.230.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:b5:be:92:64:3b:ae:67:99:ce:36:9b:64:af:af:1b:26:e9: 85:bf:56:03:91:9c:c8:a5:da:0f:7e:93:f9:c0:07:91:71:13: d5:59:ec:4d:d5:82:73:e8:56:67:99:8e:44:1d:86:70:7f:97: fb:d9:02:35:eb:a4:d1:af:29:4f:ce:c6:c5:2a:ce:37:ff:d1: 00:41:f2:1b:27:e2:ed:37:39:cf:ec:39:9c:0b:9f:d4:a9:58: bb:b3:cb:01:00:4a:68:55:25:c9:3e:cb:be:bd:20:0e:e1:cb: 6d:ee:2e:cb:ce:d0:c0:64:a2:f3:07:f2:fc:43:75:da:17:cb: a9:12:a3:69:65:35:83:b7:1c:80:69:c7:96:a7:22:a4:b2:eb: af:f7:90:4f:b1:68:32:20:f0:4f:24:ab:99:7a:4b:2e:44:2a: 51:29:61:b3:74:4d:37:33:56:99:34:38:bb:c7:24:16:10:9c: f1:fa:ff:15:46:cf:74:04:21:ec:50:bc:09:5d:27:05:d1:46: 43:ef:61:ed:6b:e4:5d:a5:2e:97:96:1b:a5:b7:08:57:0f:8a: be:a1:16:56:43:03:5f:d7:43:ef:c8:54:a0:22:71:09:f3:78: 16:0c:d3:b4:4a:c3:33:a6:50:4c:a2:31:77:6f:0a:09:2a:f5: f1:5b:18:13 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09/4tNNh9P77mdqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk MDZjMmI3NDctOGY5MS00NGJmLWFiMWYtOTQ2MjU3MmZmODlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/R1r79UJ/kuew2h18134dJrPi/WiORrvcO hAPr9Yd8Vb7ZuymJ86Zelb5fcAyNlUdDki97qo6t9XwetdYTkEDojB0Q9+BMUL6l XAtKuUYyJ9TlPwEZlJXHBt9ZDKZ8Km3a3u4O/bLSHNhn9voAZD12twmyO1E1Rnwx 2xg4S/lFeQ07vBizVW4Ew1X5yCFKwBnOr8bGBSkwSqgAuQD+SmUDrQJLm4fl8wBE TLHTdYvtv2yMVxbwZJaB8C0kbc5w4G7czRn5PTOAwhUIzcDM+6gHH1WRGfA+pdfg qmbtPojZaODXS4/3qPkkABU8v9G5aa/qkD3FHP/VBRmGXIev+wIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFGfnQRHU6MLDVpeCfSRvX09hcvK7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZGQ1Mzk1ZGQtMDNhNC0z NjM1LWFjZGQtNzlhZGVlMmYzMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjmgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQCDtb6SZDuuZ5nONptkr68bJumFv1YDkZzIpdoPfpP5wAeRcRPVWexN 1YJz6FZnmY5EHYZwf5f72QI166TRrylPzsbFKs43/9EAQfIbJ+LtNznP7DmcC5/U qVi7s8sBAEpoVSXJPsu+vSAO4ctt7i7LztDAZKLzB/L8Q3XaF8upEqNpZTWDtxyA aceWpyKksuuv95BPsWgyIPBPJKuZeksuRCpRKWGzdE03M1aZNDi7xyQWEJzx+v8V Rs90BCHsULwJXScF0UZD72Hta+RdpS6XlhultwhXD4q+oRZWQwNf10PvyFSgInEJ 83gWDNO0SsMzplBMojF3bwoJKvXxWxgT -----END CERTIFICATE-----Generated at Thu Mar 26 17:44:53 2026 by rpki-client