$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa File: 4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa (raw, json) Hash identifier: aTV9eFvvn6Uf+mOHTLH1oRYcxj+HWnJVUFZgKp4q0Tc= Subject key identifier: 28:26:A8:09:5A:50:4D:AE:EF:81:84:BB:6B:D6:4F:77:F2:90:D2:0D Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584D24E0E2DE833EE1F05C5A4FC0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36040 IP address blocks: 208.117.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e2:de:83:3e:e1:f0:5c:5a:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=32b3809f-b47f-405d-ab20-09c086d8dd83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:e1:bd:d3:37:90:0a:8e:81:e6:1d:aa:43: 66:1b:69:cb:18:7b:24:f2:20:61:97:2f:46:b6:e8: 32:37:79:9f:5b:e7:5f:a7:c0:c4:cb:d6:98:02:9d: df:62:d3:c6:6e:0a:fd:db:51:0f:08:f9:a5:ff:c4: 54:8b:00:38:d6:f7:be:3f:f3:e3:a8:bc:f0:7c:78: 50:53:8a:1d:01:c2:bb:f8:fe:c2:ee:35:df:98:46: 04:e4:79:c1:6b:c0:41:50:e1:36:4c:d7:cb:99:96: b7:52:d6:b8:b2:a4:3a:39:03:c4:09:6a:4d:ce:d1: 61:a9:e2:1b:09:51:d7:27:08:d9:c6:65:e4:e5:40: d9:71:6c:5d:31:e0:73:8b:b7:95:bb:58:cd:33:90: 58:0b:4e:91:61:93:f3:3f:d8:da:91:cb:e2:6e:b6: 4d:30:04:90:ee:80:eb:b4:02:7f:97:f2:8d:02:9c: f1:9e:dc:a9:41:59:09:11:15:f9:82:da:38:35:4e: 6f:b5:cc:70:4c:28:14:aa:ea:9d:20:35:a5:26:24: 77:79:07:fa:c0:0d:97:b4:91:39:a9:7a:1b:4c:87: 2c:d3:f3:6c:f1:e4:82:b0:0b:64:c3:67:81:61:b9: 4b:72:89:d9:f7:cb:18:fe:6e:d7:62:c8:21:f3:1c: 03:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:26:A8:09:5A:50:4D:AE:EF:81:84:BB:6B:D6:4F:77:F2:90:D2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4cd21688-0ab7-3bc1-a551-9a0ae3b20b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:6b:1c:c5:fd:b4:3d:de:20:c9:23:be:ae:07:54:3b:99:05: a6:24:4e:3d:3e:71:bd:65:3a:2b:8f:91:c1:6b:7c:1f:3c:2d: 6a:a9:07:7c:3f:39:0f:78:ca:7b:be:38:1b:18:09:9d:0a:0d: aa:44:32:7a:d1:3e:b6:d4:8f:be:1f:82:8f:6b:0b:14:e2:f0: 56:85:3b:f1:47:66:c6:4e:e1:8a:89:28:b4:53:c7:0e:70:6a: ca:6f:1d:3e:ab:0b:f8:e9:90:be:97:27:3b:ab:21:c6:a3:5b: 77:0f:c8:3d:1e:d0:16:6f:fe:49:3b:03:bd:75:95:4c:f2:ae: ae:cf:22:11:32:88:46:b6:65:c9:c7:b4:f5:29:52:71:7e:fa: 51:5a:38:a4:09:99:2c:ca:94:67:0a:70:1e:bb:d3:f7:1e:92: e2:69:be:f2:9f:f1:54:04:31:9a:68:ac:41:82:65:4c:c9:d6: 78:96:7b:54:ed:9d:63:31:11:7c:a8:b9:81:70:5f:a2:c2:65: 31:5d:52:e4:ce:15:8c:b7:07:e4:3d:31:68:85:81:d9:fa:50: 34:98:80:77:25:de:68:b2:e5:ec:a5:74:d5:50:4d:28:01:ff: 84:5e:1d:9d:af:07:f8:24:76:30:36:9d:5f:1b:73:97:28:f1: b7:8b:42:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OLegz7h8FxaT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk MzJiMzgwOWYtYjQ3Zi00MDVkLWFiMjAtMDljMDg2ZDhkZDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsPhvdM3kAqOgeYdqkNmG2nLGHsk8iBhly9G tugyN3mfW+dfp8DEy9aYAp3fYtPGbgr921EPCPml/8RUiwA41ve+P/PjqLzwfHhQ U4odAcK7+P7C7jXfmEYE5HnBa8BBUOE2TNfLmZa3Uta4sqQ6OQPECWpNztFhqeIb CVHXJwjZxmXk5UDZcWxdMeBzi7eVu1jNM5BYC06RYZPzP9jakcvibrZNMASQ7oDr tAJ/l/KNApzxntypQVkJERX5gto4NU5vtcxwTCgUquqdIDWlJiR3eQf6wA2XtJE5 qXobTIcs0/Ns8eSCsAtkw2eBYblLconZ98sY/m7XYsgh8xwDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgmqAlaUE2u74GEu2vWT3fykNINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvNGNkMjE2ODgtMGFiNy0z YmMxLWE1NTEtOWEwYWUzYjIwYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HX8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNrHMX9tD3eIMkjvq4HVDuZBaYkTj0+cb1lOiuPkcFrfB88LWqpB3w/ OQ94ynu+OBsYCZ0KDapEMnrRPrbUj74fgo9rCxTi8FaFO/FHZsZO4YqJKLRTxw5w aspvHT6rC/jpkL6XJzurIcajW3cPyD0e0BZv/kk7A711lUzyrq7PIhEyiEa2ZcnH tPUpUnF++lFaOKQJmSzKlGcKcB670/cekuJpvvKf8VQEMZporEGCZUzJ1niWe1Tt nWMxEXyouYFwX6LCZTFdUuTOFYy3B+Q9MWiFgdn6UDSYgHcl3miy5eyldNVQTSgB /4ReHZ2vB/gkdjA2nV8bc5co8beLQt4= -----END CERTIFICATE-----Generated at Thu Mar 19 01:57:26 2026 by rpki-client