$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa File: 6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa (raw, json) Hash identifier: OvFYpo3CFOkyrqLLyhZLqCm3SbleSeTCOpqXxtG/lvk= Subject key identifier: A3:EA:4A:69:73:24:CE:25:69:76:35:7D:56:CC:4B:0C:F5:56:66:8B Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D60E5096815A195CA55EF4680 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa Signing time: Fri 03 Apr 2026 01:00:24 +0000 ROA not before: Fri 03 Apr 2026 01:00:24 +0000 ROA not after: Thu 02 Jul 2026 01:00:24 +0000 asID: 394996 IP address blocks: 209.38.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:60:e5:09:68:15:a1:95:ca:55:ef:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 3 01:00:24 2026 GMT Not After : Jul 2 01:00:24 2026 GMT Subject: CN=3772992b-c286-4d40-a1e1-8893d8cd552d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ec:67:c8:71:f8:9e:ce:cf:a2:de:bd:77:39: 1a:97:88:74:b2:4b:be:8f:b9:17:0c:99:1d:7d:7c: fd:be:80:a5:a1:6e:85:b0:ca:82:24:f9:d1:5a:be: c5:21:77:ec:85:19:61:28:e4:02:7a:a7:be:9d:da: 0b:fa:c7:ac:96:13:f2:83:3e:85:59:13:65:50:66: 11:aa:01:cb:3a:06:e5:db:4f:9d:3f:15:b9:04:1a: d1:54:c0:76:a7:f0:c9:6b:c5:f1:18:c4:58:7a:fc: 67:5a:32:cf:36:eb:80:de:75:4e:16:fb:aa:76:fd: e7:27:4a:dd:c8:73:e6:5b:a8:6a:91:fe:14:a3:81: cf:50:29:57:61:df:62:25:bd:1b:7d:1a:7c:5e:67: 5c:54:72:01:07:67:ce:91:f2:7a:09:13:5e:31:1e: 32:b3:fa:69:4c:02:6e:5d:2e:14:0b:35:c9:5f:f9: 36:7a:88:31:b6:f6:9a:7e:0c:30:62:e9:59:de:b6: 08:e3:b4:53:0a:83:d7:07:03:b7:73:14:4d:52:ec: 05:5d:67:4e:2f:33:09:10:27:2f:9d:e5:12:f1:70: 67:e6:71:ec:2c:72:9e:8d:29:93:56:e6:29:27:be: ad:6c:c0:36:a6:54:70:07:b0:9d:c7:68:10:8c:79: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EA:4A:69:73:24:CE:25:69:76:35:7D:56:CC:4B:0C:F5:56:66:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/6c29d9ad-4af2-349c-8d9d-aa11c53aa4e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 209.38.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6f:b0:f0:40:41:aa:c8:00:a9:51:e0:de:b9:c3:79:03:03: 82:69:fa:07:fc:72:d7:67:7d:46:fd:55:ee:ec:70:b8:bb:1c: 90:88:fb:28:0f:b2:3d:9e:88:55:53:e0:73:5c:a9:bd:c5:59: 7f:2f:67:35:cb:d9:2f:32:8f:27:fb:18:91:8c:06:0f:4b:94: 5e:fc:f2:5f:60:98:61:56:45:45:eb:23:64:68:42:c5:e0:7c: 33:fb:04:7e:4d:c5:91:36:5e:75:0f:0b:9d:df:67:b2:de:33: a3:35:10:95:24:ea:77:ff:74:7b:8b:93:24:b4:70:af:f5:34: d9:9f:85:59:39:00:5e:bc:62:02:b1:56:29:2e:32:67:4c:0d: a5:ab:71:52:b9:a6:e0:66:b4:74:aa:c3:c8:fb:07:cc:12:e6: 68:c9:23:10:08:48:eb:80:32:27:bd:45:ff:36:5a:44:0c:5b: 49:63:e8:af:2b:d2:47:fd:49:b1:62:0d:c0:53:c4:18:23:93: bb:af:7d:3c:50:e0:8d:55:4f:21:94:c9:98:3e:08:22:ca:95: 17:df:04:54:6d:3b:92:cd:4b:3e:d0:d2:32:8f:da:28:2a:0f: 3c:61:a7:61:93:c1:0e:ff:f0:91:f9:e4:44:8b:3b:75:92:a6: b7:b4:c2:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1g5QloFaGVylXvRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQwMzAxMDAyNFoXDTI2MDcwMjAxMDAyNFowLzEtMCsGA1UEAxMk Mzc3Mjk5MmItYzI4Ni00ZDQwLWExZTEtODg5M2Q4Y2Q1NTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjexnyHH4ns7Pot69dzkal4h0sku+j7kXDJkd fXz9voCloW6FsMqCJPnRWr7FIXfshRlhKOQCeqe+ndoL+seslhPygz6FWRNlUGYR qgHLOgbl20+dPxW5BBrRVMB2p/DJa8XxGMRYevxnWjLPNuuA3nVOFvuqdv3nJ0rd yHPmW6hqkf4Uo4HPUClXYd9iJb0bfRp8XmdcVHIBB2fOkfJ6CRNeMR4ys/ppTAJu XS4UCzXJX/k2eogxtvaafgwwYulZ3rYI47RTCoPXBwO3cxRNUuwFXWdOLzMJECcv neUS8XBn5nHsLHKejSmTVuYpJ76tbMA2plRwB7Cdx2gQjHkzBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPqSmlzJM4laXY1fVbMSwz1VmaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNmMyOWQ5YWQtNGFmMi0z NDljLThkOWQtYWExMWM1M2FhNGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SYDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVvsPBAQarIAKlR4N65w3kDA4Jp+gf8ctdnfUb9Ve7scLi7HJCI+ygP sj2eiFVT4HNcqb3FWX8vZzXL2S8yjyf7GJGMBg9LlF788l9gmGFWRUXrI2RoQsXg fDP7BH5NxZE2XnUPC53fZ7LeM6M1EJUk6nf/dHuLkyS0cK/1NNmfhVk5AF68YgKx VikuMmdMDaWrcVK5puBmtHSqw8j7B8wS5mjJIxAISOuAMie9Rf82WkQMW0lj6K8r 0kf9SbFiDcBTxBgjk7uvfTxQ4I1VTyGUyZg+CCLKlRffBFRtO5LNSz7Q0jKP2igq Dzxhp2GTwQ7/8JH55ESLO3WSpre0wjs= -----END CERTIFICATE-----Generated at Tue Apr 7 13:30:43 2026 by rpki-client