$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa File: 3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa (raw, json) Hash identifier: skRTrrXTpA4GTQdLVrBeGSXaGJdgBIFJXh2uzecGawI= Subject key identifier: 39:8B:9C:C9:B4:6D:EE:61:10:32:F9:14:77:35:5C:B5:5E:48:0F:AF Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CD4078F38622BDB05686C5180 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa Signing time: Wed 11 Feb 2026 14:00:41 +0000 ROA not before: Wed 11 Feb 2026 14:00:41 +0000 ROA not after: Tue 12 May 2026 13:00:41 +0000 asID: 54113 IP address blocks: 140.248.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d4:07:8f:38:62:2b:db:05:68:6c:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Feb 11 14:00:41 2026 GMT Not After : May 12 13:00:41 2026 GMT Subject: CN=c62fca5f-5d11-4bc6-b98a-f71f6ecf7e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:16:e6:60:76:ef:4c:5f:85:da:83:d5:9e:99: dd:12:ae:4e:c1:8a:12:b3:f7:82:47:74:00:ee:75: 7f:68:9c:eb:cc:7a:12:b1:69:30:00:56:ce:0b:8e: 46:9d:e3:bc:c5:dc:67:56:12:39:c0:d6:61:60:73: c9:d8:6b:3e:da:5a:74:13:34:0f:b2:c3:da:f2:cd: 7e:79:9c:f8:c5:f4:b6:95:d4:aa:d4:b4:31:87:7b: 70:a1:83:41:7b:d7:12:c3:24:9f:7a:cd:da:b5:26: 45:98:ed:43:d1:10:25:59:0b:6d:30:20:f4:12:68: 9e:80:4b:b9:72:26:4c:9c:1b:1c:6f:2c:83:fd:59: be:75:b3:5b:0a:49:56:70:d8:d5:ba:99:54:3f:ab: e1:e3:25:43:f5:7d:03:31:ff:47:cc:f0:5a:d2:25: f9:61:dc:c5:44:29:5f:68:6e:59:e4:a9:a6:47:3b: 12:31:5e:d4:04:fc:e8:62:33:9a:ee:d7:b8:80:0b: 23:ce:a3:b7:45:51:5d:14:75:29:00:7d:00:e7:06: cf:0c:8e:e6:47:a1:89:61:c1:ca:ac:d8:78:a6:c5: 08:85:f1:e3:ed:c4:04:9a:87:32:33:67:fd:14:f6: 6f:e5:9d:04:c0:8c:b7:f1:c7:84:4e:c2:9d:c2:4e: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8B:9C:C9:B4:6D:EE:61:10:32:F9:14:77:35:5C:B5:5E:48:0F:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/3aa973e9-4914-3df2-bc74-7aadcaa6077c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:fe:df:a0:64:a0:ef:86:05:24:28:82:a4:c2:f4:f7:77:88: 46:0b:6b:1b:25:f3:26:4a:0b:4a:57:9f:85:0a:65:1b:cb:c0: 6c:22:71:13:f6:45:fd:a3:6d:85:65:21:18:a7:99:38:fe:cd: 8f:6c:47:95:89:bd:eb:fc:29:3f:8f:e9:d9:ed:15:2e:f5:3d: 83:82:25:9c:ce:25:f7:80:af:b7:c4:f0:a5:cc:f2:dc:d2:2f: 82:5d:22:5a:46:b3:e6:54:b4:f8:70:cc:f6:09:9f:39:3b:1b: 20:a3:6d:ed:35:5a:0e:1c:e8:5e:f9:95:e1:66:6f:6a:b3:70: a3:c2:ba:01:76:76:c9:ec:f4:cb:18:1e:c0:33:7e:26:6d:bf: a2:d0:ee:45:17:16:31:14:fb:5b:d9:26:f6:28:76:03:0e:00: 83:7d:e8:cc:6a:25:ed:0c:44:5d:47:91:d9:33:05:c0:a9:94: e8:33:a8:f5:fe:66:0e:c3:78:51:e1:9c:55:c1:d0:cc:82:2b: b1:18:04:19:4f:ed:de:e0:8c:7b:28:f8:80:af:b6:12:27:79: 24:2d:66:d4:96:69:07:50:81:b8:12:ec:fd:bc:08:9b:2b:fb: dc:11:ba:45:8a:26:5a:5a:11:d2:88:f5:9e:d4:34:d7:4e:b3: f1:37:cb:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzUB484YivbBWhsUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk YzYyZmNhNWYtNWQxMS00YmM2LWI5OGEtZjcxZjZlY2Y3ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhbmYHbvTF+F2oPVnpndEq5OwYoSs/eCR3QA 7nV/aJzrzHoSsWkwAFbOC45GneO8xdxnVhI5wNZhYHPJ2Gs+2lp0EzQPssPa8s1+ eZz4xfS2ldSq1LQxh3twoYNBe9cSwySfes3atSZFmO1D0RAlWQttMCD0EmiegEu5 ciZMnBscbyyD/Vm+dbNbCklWcNjVuplUP6vh4yVD9X0DMf9HzPBa0iX5YdzFRClf aG5Z5KmmRzsSMV7UBPzoYjOa7te4gAsjzqO3RVFdFHUpAH0A5wbPDI7mR6GJYcHK rNh4psUIhfHj7cQEmocyM2f9FPZv5Z0EwIy38ceETsKdwk5xBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmLnMm0be5hEDL5FHc1XLVeSA+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvM2FhOTczZTktNDkxNC0z ZGYyLWJjNzQtN2FhZGNhYTYwNzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjPg/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALH+36BkoO+GBSQogqTC9Pd3iEYLaxsl8yZKC0pXn4UKZRvLwGwicRP2 Rf2jbYVlIRinmTj+zY9sR5WJvev8KT+P6dntFS71PYOCJZzOJfeAr7fE8KXM8tzS L4JdIlpGs+ZUtPhwzPYJnzk7GyCjbe01Wg4c6F75leFmb2qzcKPCugF2dsns9MsY HsAzfiZtv6LQ7kUXFjEU+1vZJvYodgMOAIN96MxqJe0MRF1HkdkzBcCplOgzqPX+ Zg7DeFHhnFXB0MyCK7EYBBlP7d7gjHso+ICvthIneSQtZtSWaQdQgbgS7P28CJsr +9wRukWKJlpaEdKI9Z7UNNdOs/E3y8Y= -----END CERTIFICATE-----Generated at Mon Mar 2 09:47:53 2026 by rpki-client