$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a580bf71-0a2d-3257-9ce8-320bc261282c.roa File: a580bf71-0a2d-3257-9ce8-320bc261282c.roa (raw, json) Hash identifier: 8E0ZERZqvRjRpA9fRYcR3CoCy0x+beMU/IDMc5ca/0w= Subject key identifier: AF:38:3E:D9:9F:46:46:ED:19:57:58:66:63:A0:18:C4:AB:C6:E2:DF Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584D67DFFCC5F1A034AF47C19D80 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a580bf71-0a2d-3257-9ce8-320bc261282c.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 208.122.51.0/24 maxlen: 24 208.122.52.0/22 maxlen: 24 208.122.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:fc:c5:f1:a0:34:af:47:c1:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=f6f825d8-9c9e-42a7-a32d-222cb15536ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:cd:9e:0f:af:3e:1a:7f:b2:06:32:35:24: 47:d8:dc:f6:24:0b:e2:fa:a7:1c:5c:fe:91:0b:c0: 8e:39:81:0f:0e:58:22:8d:32:c1:9f:65:92:96:8e: 90:63:cf:3c:f4:c4:b9:e5:be:42:d6:0b:46:52:94: 5a:56:6a:f8:97:3b:e3:36:4e:cc:fc:34:c6:82:c2: 9b:9d:1c:22:82:f9:20:09:ab:f5:87:c1:21:cc:7c: 7d:69:3f:8d:b8:60:2b:bc:93:80:84:96:80:a1:bd: d4:02:29:57:82:3c:76:a3:7b:6c:a0:be:e4:70:7e: 97:65:a5:b3:e5:ea:19:a4:53:7c:77:53:5a:1f:eb: 54:9f:6f:d4:59:1d:df:bc:0f:c5:cf:a0:90:0e:b6: 80:1b:8a:e3:17:ed:04:73:90:d7:22:79:dd:05:73: 20:59:47:60:51:f5:b6:ee:1c:6f:ac:da:45:dd:18: 6f:45:d2:33:66:a7:c7:9e:f2:e9:9e:9e:6a:cd:09: 35:63:2e:49:06:9c:9d:21:e1:59:5d:72:3d:60:81: 7c:5e:7f:78:47:50:9b:f1:0c:d5:f3:f2:28:4f:45: c1:c1:c0:9f:39:e0:98:fd:d2:69:1a:d1:0b:b1:95: a4:1d:d5:f1:39:61:a9:fd:e8:cd:d6:8f:2f:b4:99: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:38:3E:D9:9F:46:46:ED:19:57:58:66:63:A0:18:C4:AB:C6:E2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a580bf71-0a2d-3257-9ce8-320bc261282c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: 208.122.51.0-208.122.59.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c6:b5:90:0e:a2:8d:53:85:b9:d5:02:20:1d:e4:7e:a2:31: dd:fd:40:7a:9a:a2:b0:19:19:8a:bc:4b:76:32:d6:f8:bb:6c: 1c:d8:de:7f:37:85:2a:38:46:0d:15:b5:96:33:87:ba:82:9a: 1a:bf:74:af:b8:71:3b:8c:2c:44:b5:72:d4:aa:74:d8:6e:a9: ae:63:fb:12:31:99:0e:b9:1f:1a:f2:9d:fd:57:e0:a4:5e:c8: 6d:24:9e:f4:5c:87:c7:44:d6:7a:e7:02:a2:27:8c:ec:b9:fb: 3e:bc:f9:20:44:ff:3b:b2:e1:05:44:d5:ba:ea:c1:41:f7:cf: 2a:31:66:de:1d:ca:ec:41:82:05:aa:dd:f4:e9:6a:b8:89:f0: 0c:f4:0a:03:44:1f:b7:1b:5d:5f:4a:ac:76:d1:79:2d:cd:25: 4b:b0:e2:51:0c:b9:db:45:76:03:c4:c6:2a:5b:21:2c:41:37: 59:57:63:34:12:eb:21:0d:f5:0e:c1:eb:fa:cb:09:4c:7c:00: 8a:8f:24:a3:c8:7f:59:b4:52:ee:8c:c4:58:87:37:7c:88:05: 39:85:1a:d5:0d:fa:9b:9b:02:89:0b:fe:82:80:3a:05:7e:eb: 98:09:88:0d:10:0a:d9:03:1f:67:ca:9d:f6:c1:49:38:5d:a4: b0:49:7d:f5 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1n3/zF8aA0r0fBnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZjZmODI1ZDgtOWM5ZS00MmE3LWEzMmQtMjIyY2IxNTUzNmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0PNng+vPhp/sgYyNSRH2Nz2JAvi+qccXP6R C8COOYEPDlgijTLBn2WSlo6QY8889MS55b5C1gtGUpRaVmr4lzvjNk7M/DTGgsKb nRwigvkgCav1h8EhzHx9aT+NuGArvJOAhJaAob3UAilXgjx2o3tsoL7kcH6XZaWz 5eoZpFN8d1NaH+tUn2/UWR3fvA/Fz6CQDraAG4rjF+0Ec5DXInndBXMgWUdgUfW2 7hxvrNpF3RhvRdIzZqfHnvLpnp5qzQk1Yy5JBpydIeFZXXI9YIF8Xn94R1Cb8QzV 8/IoT0XBwcCfOeCY/dJpGtELsZWkHdXxOWGp/ejN1o8vtJnZdwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFK84PtmfRkbtGVdYZmOgGMSrxuLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvYTU4MGJmNzEtMGEyZC0z MjU3LTljZTgtMzIwYmMyNjEyODJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQejMD BALQejgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAZca1kA6ijVOFudUCIB3kfqIx3f1AepqisBkZirxLdjLW +LtsHNjefzeFKjhGDRW1ljOHuoKaGr90r7hxO4wsRLVy1Kp02G6prmP7EjGZDrkf GvKd/VfgpF7IbSSe9FyHx0TWeucCoieM7Ln7Prz5IET/O7LhBUTVuurBQffPKjFm 3h3K7EGCBard9OlquInwDPQKA0QftxtdX0qsdtF5Lc0lS7DiUQy520V2A8TGKlsh LEE3WVdjNBLrIQ31DsHr+ssJTHwAio8ko8h/WbRS7ozEWIc3fIgFOYUa1Q36m5sC iQv+goA6BX7rmAmIDRAK2QMfZ8qd9sFJOF2ksEl99Q== -----END CERTIFICATE-----Generated at Tue Apr 7 10:33:17 2026 by rpki-client