$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa File: 9a864864-8b89-3c24-892f-a08a1af18543.roa (raw, json) Hash identifier: cAR3LuBv2Axes1DYtqPM2I+lVZr7jT6R07FD5H/gRSM= Subject key identifier: 74:C4:5B:F5:B2:7A:A7:1D:74:AF:EF:40:7C:F1:2B:DB:06:75:80:E7 Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Certificate serial: 010D0C9F4328584D24E0E0DE3E1B8C6120EA3500 Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 15169 IP address blocks: 208.68.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:e0:de:3e:1b:8c:61:20:ea:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=4a5c4a79-da98-45a3-a22e-ce5de8343f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:df:51:6e:2c:4a:24:9d:a3:58:77:3c:82:9d: b8:03:f0:85:28:08:5a:30:f0:80:9a:32:28:e5:64: a0:61:cb:5f:d0:47:c0:fc:0d:dc:4f:ba:e9:ab:d2: ab:3e:3e:84:08:d6:06:ae:f1:39:75:30:87:3d:04: eb:5f:91:e8:a8:72:18:74:21:0a:07:b4:95:76:26: 25:8c:34:d5:dc:cd:aa:f1:7f:b4:86:da:13:f7:f8: f4:45:26:39:58:0e:ce:70:bb:ee:36:4c:10:9c:9b: c2:81:0c:14:38:bc:e1:89:22:1f:c2:e2:30:a3:bc: eb:0b:fa:35:39:60:ab:ec:4d:e7:8a:24:f1:3c:af: b0:e8:74:cd:61:1e:b7:f3:9b:2f:2f:bc:3b:f8:67: c2:77:c1:b8:fd:3e:63:ff:94:a5:36:14:d4:10:cc: 3e:3c:8e:04:91:f1:7b:61:11:c0:fa:39:54:8a:e8: 0e:70:c6:93:1f:06:07:3e:eb:18:cc:1a:76:e8:53: bf:9c:32:8b:80:cc:23:4d:65:b5:31:8c:3d:e2:8d: ad:f1:dc:f1:17:f1:66:47:e8:54:c0:cb:09:f1:5b: b8:ca:15:53:f2:f1:c2:83:d4:99:fa:ca:ff:a4:d9: ca:dc:17:3b:1e:62:a9:75:76:27:92:23:05:fc:a5: f3:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C4:5B:F5:B2:7A:A7:1D:74:AF:EF:40:7C:F1:2B:DB:06:75:80:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a864864-8b89-3c24-892f-a08a1af18543.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl X509v3 Authority Key Identifier: keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer sbgp-ipAddrBlock: critical IPv4: 208.68.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:9c:c5:2f:70:21:7a:48:50:57:06:10:6f:0b:2d:d5:04:da: b0:54:c9:ab:ae:fa:b9:ff:2a:d2:64:41:6b:65:86:69:45:dc: 94:8f:34:ea:8e:04:c6:9e:15:7e:f3:e0:6c:1f:82:cc:d5:e5: 7c:f0:ee:3c:69:ce:f6:b8:eb:37:7f:f6:5a:12:0d:01:90:e4: 41:04:e1:34:a7:0e:67:69:db:c0:6c:f1:7a:a9:e8:6e:44:15: a6:6c:99:91:18:77:82:bb:a3:a2:a9:3d:79:a7:77:0f:68:8e: e2:74:ac:15:08:c3:80:3b:fa:9d:67:7f:56:0b:b3:f5:d5:0c: 43:16:b1:1c:d0:c6:d8:91:ce:86:93:71:f5:15:99:74:7f:57: 8d:66:91:e8:53:7f:c3:c2:e8:54:a8:8a:e4:fe:de:63:c3:e0: c6:64:11:fd:96:18:d9:07:e7:40:02:0a:b4:a2:e8:d4:bd:32: 39:59:fe:5d:11:00:c7:7c:fa:17:72:a2:ca:84:e2:84:7a:bf: c2:f0:29:3b:51:65:bb:83:d0:4f:f2:3f:6a:38:45:16:80:29: c2:9f:d6:e8:e1:f6:1d:11:24:b5:73:50:4c:3a:cd:6c:2c:bd: 61:9a:7f:33:fa:1a:1f:f1:d5:ec:f8:53:8e:f4:9d:b3:43:64: 26:b4:81:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4ODePhuMYSDqNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5 NGY5MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NGE1YzRhNzktZGE5OC00NWEzLWEyMmUtY2U1ZGU4MzQzZjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N9RbixKJJ2jWHc8gp24A/CFKAhaMPCAmjIo 5WSgYctf0EfA/A3cT7rpq9KrPj6ECNYGrvE5dTCHPQTrX5HoqHIYdCEKB7SVdiYl jDTV3M2q8X+0htoT9/j0RSY5WA7OcLvuNkwQnJvCgQwUOLzhiSIfwuIwo7zrC/o1 OWCr7E3niiTxPK+w6HTNYR6385svL7w7+GfCd8G4/T5j/5SlNhTUEMw+PI4EkfF7 YRHA+jlUiugOcMaTHwYHPusYzBp26FO/nDKLgMwjTWW1MYw94o2t8dzxF/FmR+hU wMsJ8Vu4yhVT8vHCg9SZ+sr/pNnK3Bc7HmKpdXYnkiMF/KXzQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTEW/WyeqcddK/vQHzxK9sGdYDnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOWE4NjQ4NjQtOGI4OS0z YzI0LTg5MmYtYTA4YTFhZjE4NTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5 OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ERsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6cxS9wIXpIUFcGEG8LLdUE2rBUyauu+rn/KtJkQWtlhmlF3JSPNOqO BMaeFX7z4GwfgszV5Xzw7jxpzva46zd/9loSDQGQ5EEE4TSnDmdp28Bs8Xqp6G5E FaZsmZEYd4K7o6KpPXmndw9ojuJ0rBUIw4A7+p1nf1YLs/XVDEMWsRzQxtiRzoaT cfUVmXR/V41mkehTf8PC6FSoiuT+3mPD4MZkEf2WGNkH50ACCrSi6NS9MjlZ/l0R AMd8+hdyosqE4oR6v8LwKTtRZbuD0E/yP2o4RRaAKcKf1ujh9h0RJLVzUEw6zWws vWGafzP6Gh/x1ez4U470nbNDZCa0gZc= -----END CERTIFICATE-----Generated at Wed Mar 18 20:33:17 2026 by rpki-client