$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa File: 89e11acf-801c-3082-ba53-a9d50b309f69.roa (raw, json) Hash identifier: StUNhDQeLMEWN/576lWw7S9UrMTDlTGL7sFQI6MP6oU= Subject key identifier: 27:DF:41:96:2D:C1:92:B8:E7:D3:41:44:DF:94:23:6F:CD:96:D5:10 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F4328584CAFBC7B2659FF8B73B9BE8D80 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa Signing time: Thu 29 Jan 2026 14:00:40 +0000 ROA not before: Thu 29 Jan 2026 14:00:40 +0000 ROA not after: Wed 29 Apr 2026 13:00:40 +0000 asID: 54113 IP address blocks: 140.248.197.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:af:bc:7b:26:59:ff:8b:73:b9:be:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: Jan 29 14:00:40 2026 GMT Not After : Apr 29 13:00:40 2026 GMT Subject: CN=feaddec8-34f0-4de3-8b61-a685fc57e6f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:a0:c0:68:8c:3f:28:c6:36:0b:99:e5:e3:ee: e1:79:93:b3:c0:7e:16:62:6a:c6:13:ef:f4:34:85: 00:8e:f3:09:d4:13:0a:82:6a:47:b6:53:84:ed:12: 1d:fd:da:22:8f:1b:73:66:20:da:dc:93:50:dd:52: a4:bc:04:ce:c0:fe:e9:4a:28:93:25:1f:ba:5d:b5: c6:f9:28:9d:f4:3f:d2:9b:3e:4a:2a:93:e0:42:29: 99:e0:f8:25:f6:0b:5f:cd:1c:71:b2:29:f0:ef:97: bb:4d:cd:05:09:fa:82:e8:ab:2a:09:3b:bc:fc:87: 77:ef:92:47:cc:64:9b:de:34:83:2e:0b:8e:bd:83: b0:7d:71:51:cf:3a:d0:3d:f6:41:86:a9:b0:9c:ba: 8b:89:9f:3d:92:08:a5:28:4f:c6:bc:be:48:df:b0: 70:3c:d2:d6:86:2c:7f:e9:de:eb:6f:c3:38:8f:ee: 90:9e:34:ee:b4:af:ef:30:5f:df:7b:6a:d8:d8:fa: 84:5f:5c:c7:9c:7d:1f:e4:ee:5d:e6:9d:4f:91:fd: 5d:c3:a2:91:f9:59:0c:9d:2f:f7:d7:98:34:6d:f8: 78:06:ac:be:45:54:6d:47:36:f4:3e:64:6c:1a:f9: 37:4b:59:eb:ae:6e:c3:da:89:8c:bf:d4:38:d2:ed: ef:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:41:96:2D:C1:92:B8:E7:D3:41:44:DF:94:23:6F:CD:96:D5:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/89e11acf-801c-3082-ba53-a9d50b309f69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.197.128/25 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cc:39:4c:c7:86:8e:59:6e:ba:b9:81:1f:14:f7:10:38:ea:67: c6:21:43:24:21:bf:28:7e:da:41:7f:c8:a1:ed:4b:5f:04:dc: 78:b3:98:07:07:ef:a5:21:f6:20:99:35:29:57:c9:fc:1c:1a: 53:ee:38:d0:6c:0f:58:2a:ab:9d:79:3d:f6:61:14:aa:b4:82: a3:53:63:d6:63:e2:1c:f4:b2:3b:f6:8c:78:4f:2b:47:04:ea: f1:34:f5:9b:fd:21:22:f3:81:58:d2:fc:8b:79:db:72:ad:76: 83:4c:21:7d:ea:f0:6a:26:2b:a5:29:8a:9d:0b:6c:4e:6c:54: 81:c7:1b:90:a1:37:c6:66:10:64:79:d1:56:52:61:fb:5a:e5: ff:14:cd:c1:df:f0:b8:d0:68:06:38:5d:6c:46:51:f0:39:18: 59:38:f1:b4:19:2a:12:37:04:e7:95:2c:24:89:68:57:df:56: d4:da:dc:6b:4d:75:00:dd:54:8f:8e:f5:bb:86:f8:e9:b1:e2: 88:44:4a:f4:4d:42:68:8f:38:31:3f:ec:45:cf:16:77:5b:d2: 58:17:ca:28:02:f0:49:39:28:19:9d:9e:d9:d6:57:fe:78:f9: ea:82:e9:75:4d:9f:6e:5b:aa:67:b7:d6:ef:38:62:43:56:58: f1:0a:f8:c6 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyvvHsmWf+Lc7m+jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk ZmVhZGRlYzgtMzRmMC00ZGUzLThiNjEtYTY4NWZjNTdlNmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKDAaIw/KMY2C5nl4+7heZOzwH4WYmrGE+/0 NIUAjvMJ1BMKgmpHtlOE7RId/doijxtzZiDa3JNQ3VKkvATOwP7pSiiTJR+6XbXG +Sid9D/Smz5KKpPgQimZ4Pgl9gtfzRxxsinw75e7Tc0FCfqC6KsqCTu8/Id375JH zGSb3jSDLguOvYOwfXFRzzrQPfZBhqmwnLqLiZ89kgilKE/GvL5I37BwPNLWhix/ 6d7rb8M4j+6QnjTutK/vMF/fe2rY2PqEX1zHnH0f5O5d5p1Pkf1dw6KR+VkMnS/3 15g0bfh4Bqy+RVRtRzb0PmRsGvk3S1nrrm7D2omMv9Q40u3vZwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFCffQZYtwZK459NBRN+UI2/NltUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvODllMTFhY2YtODAxYy0z MDgyLWJhNTMtYTlkNTBiMzA5ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUHjPjFgDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQDMOUzHho5Zbrq5gR8U9xA46mfGIUMkIb8oftpBf8ih7UtfBNx4s5gH B++lIfYgmTUpV8n8HBpT7jjQbA9YKqudeT32YRSqtIKjU2PWY+Ic9LI79ox4TytH BOrxNPWb/SEi84FY0vyLedtyrXaDTCF96vBqJiulKYqdC2xObFSBxxuQoTfGZhBk edFWUmH7WuX/FM3B3/C40GgGOF1sRlHwORhZOPG0GSoSNwTnlSwkiWhX31bU2txr TXUA3VSPjvW7hvjpseKIREr0TUJojzgxP+xFzxZ3W9JYF8ooAvBJOSgZnZ7Z1lf+ ePnqgul1TZ9uW6pnt9bvOGJDVljxCvjG -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:29 2026 by rpki-client