$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa File: c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa (raw, json) Hash identifier: tLf09sXhpH1+kse/416oCK03+O+YiQkLy4lxvexHnU4= Subject key identifier: B4:A6:BF:B9:9D:60:92:53:B9:44:3E:26:05:33:AC:64:86:27:D4:68 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D7A05535884EC68AF13B4A980 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 14524 IP address blocks: 208.156.66.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:53:58:84:ec:68:af:13:b4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=34ff6fe2-e709-40ad-9801-698304fa922c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:c0:69:22:0d:85:2f:f4:17:29:f4:fc:9b: 68:2d:37:e7:86:41:18:71:bd:75:a4:c3:4f:23:98: 8d:f2:56:36:ab:6d:47:32:68:0a:2a:f8:b2:1c:8e: b1:e1:d7:95:5d:3f:dc:59:88:fe:e1:88:c7:04:0d: a7:d0:f9:91:93:e7:a3:46:a6:0f:35:60:64:af:37: 04:36:67:e7:21:ac:fe:db:cd:b6:90:5a:a6:0c:26: 4a:06:29:67:aa:ec:be:0a:5d:07:d2:b6:a6:fe:ee: fc:14:0a:e3:8e:5f:21:9d:c0:c8:53:da:bc:a5:c8: b1:44:1d:d3:bb:3a:3f:5c:01:44:ec:e1:30:4d:da: 44:c5:a2:af:8d:e7:18:07:f9:48:78:66:da:22:71: ae:74:69:13:83:8c:86:69:0b:62:15:88:df:dd:70: c5:16:af:7a:34:0a:a3:78:92:ac:8e:1b:4b:21:2b: 40:b7:d9:00:96:7b:14:c9:91:98:84:87:52:3f:e5: aa:c8:c3:27:15:a0:a3:43:a5:cc:5a:88:90:d0:9f: 67:d2:93:be:bb:e0:97:aa:32:c3:22:2c:a6:83:43: 02:0f:59:8e:c6:85:f1:15:71:b2:3c:12:7e:4d:df: e4:01:f3:66:e4:39:f4:00:97:46:4b:75:db:b6:36: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A6:BF:B9:9D:60:92:53:B9:44:3E:26:05:33:AC:64:86:27:D4:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c0f6a990-051a-3f6a-a434-bceef7e6d26c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.156.66.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:4f:90:a2:92:ac:28:1f:48:cd:5b:d0:d7:9e:df:f6:cd:d9: e4:0f:69:cb:6a:3d:62:45:14:de:0d:d0:c2:40:bf:40:59:1e: d6:e1:5d:0d:04:4c:aa:dc:1e:45:95:56:54:22:a8:05:c3:85: cf:fd:60:d8:c9:0a:9d:c2:42:b7:ff:35:3f:8e:b2:7f:a2:19: 97:c2:da:34:27:2e:cd:ed:05:2a:f3:8b:24:7e:b4:0d:5a:83: d1:8d:5d:d7:11:dd:c2:d1:34:3d:a3:e2:d5:f0:03:9d:9b:5e: 87:bb:7e:17:fb:3d:aa:1e:29:14:d2:3a:53:c0:d5:5c:0b:42: 57:92:81:60:b4:8b:ed:c1:68:4c:03:c3:5c:32:ae:02:3b:1e: 0d:80:b8:5b:52:3d:fb:87:6f:5b:c1:4e:9f:cd:6a:47:8c:e1: 47:3b:5d:17:9c:6c:d5:cc:d0:32:ba:66:c1:49:77:5c:f2:f9: 24:89:e8:12:e7:67:99:d1:65:b6:fc:3e:e3:24:c7:c2:a1:31: 56:ec:1d:0f:b9:1e:e4:17:b3:c3:cf:86:06:c2:7a:ec:d4:bb: 8a:0e:c8:79:bd:ed:3b:a0:8c:9e:98:23:6c:71:ff:87:60:00: 21:bb:dc:81:59:c8:cb:d0:70:58:f1:ef:1f:39:6f:82:2b:8a: 2c:30:5e:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BVNYhOxorxO0qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk MzRmZjZmZTItZTcwOS00MGFkLTk4MDEtNjk4MzA0ZmE5MjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJfAaSINhS/0Fyn0/JtoLTfnhkEYcb11pMNP I5iN8lY2q21HMmgKKviyHI6x4deVXT/cWYj+4YjHBA2n0PmRk+ejRqYPNWBkrzcE NmfnIaz+2822kFqmDCZKBilnquy+Cl0H0ram/u78FArjjl8hncDIU9q8pcixRB3T uzo/XAFE7OEwTdpExaKvjecYB/lIeGbaInGudGkTg4yGaQtiFYjf3XDFFq96NAqj eJKsjhtLIStAt9kAlnsUyZGYhIdSP+WqyMMnFaCjQ6XMWoiQ0J9n0pO+u+CXqjLD Iiymg0MCD1mOxoXxFXGyPBJ+Td/kAfNm5Dn0AJdGS3XbtjbOVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSmv7mdYJJTuUQ+JgUzrGSGJ9RoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvYzBmNmE5OTAtMDUxYS0z ZjZhLWE0MzQtYmNlZWY3ZTZkMjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0JxCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9PkKKSrCgfSM1b0Nee3/bN2eQPactqPWJFFN4N0MJAv0BZHtbhXQ0E TKrcHkWVVlQiqAXDhc/9YNjJCp3CQrf/NT+Osn+iGZfC2jQnLs3tBSrziyR+tA1a g9GNXdcR3cLRND2j4tXwA52bXoe7fhf7PaoeKRTSOlPA1VwLQleSgWC0i+3BaEwD w1wyrgI7Hg2AuFtSPfuHb1vBTp/NakeM4Uc7XRecbNXM0DK6ZsFJd1zy+SSJ6BLn Z5nRZbb8PuMkx8KhMVbsHQ+5HuQXs8PPhgbCeuzUu4oOyHm97TugjJ6YI2xx/4dg ACG73IFZyMvQcFjx7x85b4IriiwwXgA= -----END CERTIFICATE-----Generated at Wed Apr 15 11:38:38 2026 by rpki-client