$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa File: 8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa (raw, json) Hash identifier: 1HSmIFkWQzo0e53v9JMdxfw85W0khWXu2xgskezDuHs= Subject key identifier: AA:D5:73:7E:24:47:AB:F8:1F:2F:06:BE:39:CA:AE:BC:91:98:E9:99 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E055145AF3C8AD4C5C80 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.68.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e0:55:14:5a:f3:c8:ad:4c:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=42714992-1276-4dff-b553-8bebfb86d12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:85:f1:05:a0:21:51:3e:4e:ed:35:e9:b0:b3: 71:7d:f1:c2:b4:fb:c0:59:16:9f:5b:54:4b:c7:c6: a6:80:89:9f:4f:88:c8:aa:22:ab:39:24:e8:95:d6: ea:9b:67:82:09:de:d9:d2:4b:7e:cd:9c:ba:d8:a1: 3f:25:cc:f4:9d:41:47:f9:08:16:91:26:73:5f:b0: c2:66:ba:42:ab:27:e3:b9:73:0d:e6:2a:b5:45:40: 12:4d:af:8e:36:44:d5:0d:b5:71:61:43:77:7a:a4: e4:58:54:9f:c5:da:a2:7a:73:2b:d1:ab:bf:df:63: 0b:42:ab:7d:b8:31:f6:9c:69:c9:cd:73:6b:da:d3: ba:b9:c8:d3:f1:2d:21:a0:7a:ad:de:07:29:56:d3: 4c:d5:e2:1b:ba:b6:0b:f8:42:1c:97:1f:91:6f:e7: 79:4c:eb:7d:c8:15:cb:e4:fc:c4:8a:31:55:ca:86: 6f:d0:0d:63:7a:76:70:90:89:2f:eb:21:c4:b4:3d: 67:06:f9:e8:2f:ce:83:09:34:8b:08:5d:39:b1:c1: ac:59:43:64:48:19:f3:ed:54:d7:b9:8d:10:22:67: 67:2c:7a:24:16:69:e7:b2:31:56:43:ef:68:b1:08: 66:5d:24:59:0a:b6:a0:4c:dc:7e:34:24:2b:02:d7: 88:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:D5:73:7E:24:47:AB:F8:1F:2F:06:BE:39:CA:AE:BC:91:98:E9:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8179aaf0-d9ec-3f0e-b14d-baae18adb650.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a7:40:af:f9:13:f3:5b:0b:95:20:dc:7c:fd:c5:8e:dc:ec: 4e:fb:ac:8a:aa:35:f4:3c:43:ab:7c:22:91:77:e1:fa:d8:e5: 81:74:53:c7:95:21:2b:07:2f:e5:df:c1:71:e5:d4:31:fd:ed: 51:68:12:c8:12:6f:47:fe:49:a9:58:c3:e8:10:86:19:af:a5: 26:1f:b6:e6:47:57:ac:0e:27:0a:0d:36:95:29:17:c3:87:7f: e2:0c:42:db:8e:73:5b:bd:da:7f:6c:b8:5e:ba:b6:7d:07:9d: dd:d7:9a:cf:5e:4e:15:07:55:d1:1a:26:94:cf:92:f2:03:c5: 36:2c:90:1a:7f:67:7f:2c:b5:5d:fc:bf:b8:9f:c5:49:d1:88: b7:fd:da:65:d7:03:81:02:2a:15:ba:f3:31:bf:25:53:f5:0a: 57:fd:d0:86:16:40:7c:60:a1:bb:8a:73:6f:18:e9:a1:a9:8e: fc:30:01:2e:a8:85:35:d2:32:ac:f8:47:70:ca:11:b2:fd:bd: 5b:6d:d1:e5:35:9c:7c:0e:30:a0:0c:5e:16:15:85:50:40:50: 47:a8:6f:79:2b:40:31:9a:cc:2f:a9:20:32:4d:8b:b8:df:d5: 80:d7:b7:8e:21:35:fd:1d:1d:2d:fc:1b:c4:56:ae:9b:a7:fd: ac:5e:4c:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4OBVFFrzyK1MXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NDI3MTQ5OTItMTI3Ni00ZGZmLWI1NTMtOGJlYmZiODZkMTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIXxBaAhUT5O7TXpsLNxffHCtPvAWRafW1RL x8amgImfT4jIqiKrOSToldbqm2eCCd7Z0kt+zZy62KE/Jcz0nUFH+QgWkSZzX7DC ZrpCqyfjuXMN5iq1RUASTa+ONkTVDbVxYUN3eqTkWFSfxdqienMr0au/32MLQqt9 uDH2nGnJzXNr2tO6ucjT8S0hoHqt3gcpVtNM1eIburYL+EIclx+Rb+d5TOt9yBXL 5PzEijFVyoZv0A1jenZwkIkv6yHEtD1nBvnoL86DCTSLCF05scGsWUNkSBnz7VTX uY0QImdnLHokFmnnsjFWQ+9osQhmXSRZCragTNx+NCQrAteIzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrVc34kR6v4Hy8GvjnKrryRmOmZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODE3OWFhZjAtZDllYy0z ZjBlLWIxNGQtYmFhZTE4YWRiNjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECnQK/5E/NbC5Ug3Hz9xY7c7E77rIqqNfQ8Q6t8IpF34frY5YF0U8eV ISsHL+XfwXHl1DH97VFoEsgSb0f+SalYw+gQhhmvpSYftuZHV6wOJwoNNpUpF8OH f+IMQtuOc1u92n9suF66tn0Hnd3Xms9eThUHVdEaJpTPkvIDxTYskBp/Z38stV38 v7ifxUnRiLf92mXXA4ECKhW68zG/JVP1Clf90IYWQHxgobuKc28Y6aGpjvwwAS6o hTXSMqz4R3DKEbL9vVtt0eU1nHwOMKAMXhYVhVBAUEeob3krQDGazC+pIDJNi7jf 1YDXt44hNf0dHS38G8RWrpun/axeTDw= -----END CERTIFICATE-----Generated at Wed Mar 18 20:34:14 2026 by rpki-client