$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f8359fb3-35f2-3258-ba75-1b7da9f81334.roa File: f8359fb3-35f2-3258-ba75-1b7da9f81334.roa (raw, json) Hash identifier: 00nULzMx4bQbl4yXHpt1WZ2KvFwl78/UgOby8l7WLo4= Subject key identifier: 68:70:F2:AC:F1:E5:AC:17:69:AE:6D:DD:89:3B:2A:BF:6F:5F:0D:99 Certificate issuer: /CN=5e808969-feb0-49b4-9189-5a46fde472b7 Certificate serial: 010D0C9F4328584D24E0FE4F976F3DD48726F8C0 Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f8359fb3-35f2-3258-ba75-1b7da9f81334.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 36040 IP address blocks: 208.117.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:fe:4f:97:6f:3d:d4:87:26:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=9def16b7-1653-4b06-a5a5-2e2d4c4289e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:be:e1:0e:32:c7:65:d5:86:f0:9d:4b:f6:01: 24:62:b6:b9:06:d4:e9:26:37:c4:35:01:45:69:a5: 80:6c:ff:fe:fd:0c:59:fc:ec:74:c2:2a:25:d0:a6: 52:8c:6d:97:9b:fa:08:00:59:ff:58:be:69:b2:16: 40:25:57:b2:da:62:4d:e2:01:18:48:51:87:2f:c5: 61:f8:87:7e:e9:cb:39:80:a6:57:b2:29:d0:9b:59: c5:9a:cd:5c:3f:3e:3e:08:85:6d:0d:1e:51:24:36: 14:3a:99:9f:4a:71:7c:66:dd:c9:5b:92:97:e1:c3: 5b:70:df:ed:b8:cd:88:c7:9c:fa:14:3f:75:b3:d1: 81:0d:0a:ca:25:83:c2:d5:76:e7:60:d8:c9:4b:20: 7f:ee:2a:d7:62:41:ba:8b:c4:c4:cf:1e:7e:d1:32: 8e:21:ce:30:43:69:95:0f:85:8e:f4:ff:80:61:30: aa:59:02:18:43:00:88:54:77:15:69:9a:40:65:45: 86:26:50:b6:0c:0d:11:6f:01:cb:5f:c0:38:66:2f: 18:79:d0:df:5a:3b:b5:c0:b8:6e:e3:c4:59:11:4e: d3:29:92:62:ff:96:14:7a:07:14:26:23:b3:38:7e: 96:67:c6:4e:34:08:c0:cb:ea:81:ba:59:3e:30:56: b4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:70:F2:AC:F1:E5:AC:17:69:AE:6D:DD:89:3B:2A:BF:6F:5F:0D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/f8359fb3-35f2-3258-ba75-1b7da9f81334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl X509v3 Authority Key Identifier: keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer sbgp-ipAddrBlock: critical IPv4: 208.117.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:1e:27:69:39:ff:86:56:01:65:7b:e8:34:f3:57:ff:dd:c3: 55:e4:18:1a:dd:09:f7:64:24:ca:2c:ac:b8:7f:97:f4:f8:03: 22:d0:33:8b:a3:63:af:d2:92:5c:3f:95:ab:ce:c3:a0:f4:24: 4e:ee:c3:5f:eb:4f:0e:6f:e1:b7:56:bc:c6:56:c8:1b:1d:a4: 61:60:25:00:55:67:5f:8d:00:86:c7:0f:0c:52:90:3e:41:e9: 85:8d:2b:aa:87:f5:f6:2c:41:d5:10:c6:9a:40:ba:34:92:a0: 4f:11:88:18:14:b6:5b:20:3e:6f:80:ec:8a:cc:89:45:1c:f7: 74:28:9a:0d:73:a0:a0:c3:58:c2:7d:22:b3:0c:e6:a4:57:d1: ef:09:95:14:eb:28:aa:0f:bf:a2:90:21:97:e4:f3:59:c9:53: 35:89:ea:f2:e0:d0:45:53:80:12:70:ac:d9:eb:2e:fd:43:37: 77:58:9e:05:6f:6b:63:59:93:2a:43:d3:7c:27:56:5a:a1:cc: 06:a5:f8:48:91:04:63:80:8f:2a:6f:0f:7d:31:8d:99:42:1d: 66:89:3e:fd:f2:55:a1:bd:25:7c:32:7d:c2:d4:ff:b0:38:b0: ad:6a:2f:6e:47:93:d0:21:18:a1:de:a2:f6:e2:84:36:e3:1f: ab:3d:84:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4P5Pl2891Icm+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3 MmI3MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk OWRlZjE2YjctMTY1My00YjA2LWE1YTUtMmUyZDRjNDI4OWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr7hDjLHZdWG8J1L9gEkYra5BtTpJjfENQFF aaWAbP/+/QxZ/Ox0wiol0KZSjG2Xm/oIAFn/WL5pshZAJVey2mJN4gEYSFGHL8Vh +Id+6cs5gKZXsinQm1nFms1cPz4+CIVtDR5RJDYUOpmfSnF8Zt3JW5KX4cNbcN/t uM2Ix5z6FD91s9GBDQrKJYPC1XbnYNjJSyB/7irXYkG6i8TEzx5+0TKOIc4wQ2mV D4WO9P+AYTCqWQIYQwCIVHcVaZpAZUWGJlC2DA0RbwHLX8A4Zi8YedDfWju1wLhu 48RZEU7TKZJi/5YUegcUJiOzOH6WZ8ZONAjAy+qBulk+MFa0tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGhw8qzx5awXaa5t3Yk7Kr9vXw2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvZjgzNTlmYjMtMzVmMi0z MjU4LWJhNzUtMWI3ZGE5ZjgxMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0 NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2 ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0HXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABceJ2k5/4ZWAWV76DTzV//dw1XkGBrdCfdkJMosrLh/l/T4AyLQM4uj Y6/Sklw/lavOw6D0JE7uw1/rTw5v4bdWvMZWyBsdpGFgJQBVZ1+NAIbHDwxSkD5B 6YWNK6qH9fYsQdUQxppAujSSoE8RiBgUtlsgPm+A7IrMiUUc93Qomg1zoKDDWMJ9 IrMM5qRX0e8JlRTrKKoPv6KQIZfk81nJUzWJ6vLg0EVTgBJwrNnrLv1DN3dYngVv a2NZkypD03wnVlqhzAal+EiRBGOAjypvD30xjZlCHWaJPv3yVaG9JXwyfcLU/7A4 sK1qL25Hk9AhGKHeovbihDbjH6s9hJE= -----END CERTIFICATE-----Generated at Thu Mar 19 02:00:02 2026 by rpki-client