$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa File: e1a24306-5aad-3b58-aa6a-8501df64a677.roa (raw, json) Hash identifier: rPh/SlKwADUSSGlhoCqzlT5dQRg5e5l1R8cfIyRZ9lE= Subject key identifier: E6:04:7F:96:C2:14:6F:DD:65:2A:88:63:7B:3D:22:F1:8F:50:E9:42 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D7CCFE2055D158653182D5700 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 3561 IP address blocks: 208.138.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:e2:05:5d:15:86:53:18:2d:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=e7607c86-1a58-442e-838d-a02851270ce3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:2c:9f:73:61:f8:ea:a1:9b:f1:9e:26:bf:58: 59:b9:d6:85:8f:eb:b6:f4:87:8e:ea:e4:e4:51:cb: a6:79:6b:0b:86:c8:a0:62:61:92:05:aa:c8:d8:85: 25:60:32:53:58:5a:33:b5:a4:2e:8a:c6:ab:73:29: 15:f1:71:32:bc:b4:e3:f3:2f:f7:04:54:b2:6f:a3: 57:1a:7a:51:55:e9:f4:29:dd:82:06:87:a3:50:6b: ae:9a:8c:43:6b:c6:e5:7b:28:16:3a:30:69:3f:78: 6b:2f:41:c2:70:e9:5f:58:08:2c:82:e9:bb:ce:7c: d1:fc:0d:08:97:51:f6:6a:41:97:8f:40:8e:2b:28: 86:83:c1:0f:48:61:2f:c4:e7:d6:43:fe:90:66:4b: 75:22:10:ac:07:17:12:a2:5d:bd:69:11:86:10:92: 0c:bf:00:db:c5:f0:be:a2:41:c7:dd:63:7e:dd:97: e7:e5:63:62:a0:6e:e9:90:fe:00:0b:68:ca:08:63: 80:e3:8b:9a:ad:de:6f:47:12:c8:03:e0:42:bc:3a: c0:f2:c4:a1:07:3f:10:41:83:a7:11:da:31:e5:8a: b2:d6:c2:b6:13:10:ae:54:cd:8d:3b:57:5f:5a:f1: d5:a2:52:c4:e6:78:af:cb:85:52:d1:71:2d:b2:ce: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:04:7F:96:C2:14:6F:DD:65:2A:88:63:7B:3D:22:F1:8F:50:E9:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/e1a24306-5aad-3b58-aa6a-8501df64a677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.138.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:91:1e:32:21:85:91:b6:2d:ad:89:80:58:89:30:08:67:6e: 04:b0:4a:bc:de:b9:01:60:a0:82:81:0e:57:d0:06:d7:eb:f0: 86:b5:4d:ca:f0:f5:49:18:d2:5e:62:c4:87:6c:95:3b:58:28: 21:6e:07:60:b0:8a:df:12:f1:2e:0f:bf:00:dc:75:02:4f:7a: d5:ad:38:79:c4:74:cd:30:88:58:7d:6d:40:05:de:19:d8:ba: 55:2f:ea:7a:ec:e4:0a:f1:01:62:13:a6:5e:38:16:89:c8:2c: 75:05:03:78:17:81:25:dc:b0:9d:51:95:30:57:f0:f7:ba:84: 4b:2b:e9:10:cc:37:2d:fa:09:9b:25:31:11:b8:73:fe:e0:e3: e2:36:02:a3:b2:90:72:e0:90:b2:b9:da:18:be:c0:77:56:2c: 10:42:a6:a9:4c:0b:46:4b:8a:5e:91:b3:ed:67:d1:3a:50:af: fd:2c:98:d0:41:45:b7:20:26:3d:75:0f:8b:37:28:07:81:28: 58:7e:1b:4b:cf:17:80:63:41:ba:87:f1:f6:28:9a:89:a6:d0: 48:85:36:6d:12:a4:e0:af:2a:50:b7:61:e2:fd:b1:5d:90:4f: ca:da:12:07:2b:ae:a1:5d:a2:51:7d:f8:7a:47:45:40:56:de: 52:3d:91:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z+IFXRWGUxgtVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk ZTc2MDdjODYtMWE1OC00NDJlLTgzOGQtYTAyODUxMjcwY2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCyfc2H46qGb8Z4mv1hZudaFj+u29IeO6uTk UcumeWsLhsigYmGSBarI2IUlYDJTWFoztaQuisarcykV8XEyvLTj8y/3BFSyb6NX GnpRVen0Kd2CBoejUGuumoxDa8bleygWOjBpP3hrL0HCcOlfWAgsgum7znzR/A0I l1H2akGXj0COKyiGg8EPSGEvxOfWQ/6QZkt1IhCsBxcSol29aRGGEJIMvwDbxfC+ okHH3WN+3Zfn5WNioG7pkP4AC2jKCGOA44uard5vRxLIA+BCvDrA8sShBz8QQYOn Edox5Yqy1sK2ExCuVM2NO1dfWvHVolLE5nivy4VS0XEtss7F9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYEf5bCFG/dZSqIY3s9IvGPUOlCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvZTFhMjQzMDYtNWFhZC0z YjU4LWFhNmEtODUwMWRmNjRhNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0IqwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6RHjIhhZG2La2JgFiJMAhnbgSwSrzeuQFgoIKBDlfQBtfr8Ia1Tcrw 9UkY0l5ixIdslTtYKCFuB2Cwit8S8S4PvwDcdQJPetWtOHnEdM0wiFh9bUAF3hnY ulUv6nrs5ArxAWITpl44FonILHUFA3gXgSXcsJ1RlTBX8Pe6hEsr6RDMNy36CZsl MRG4c/7g4+I2AqOykHLgkLK52hi+wHdWLBBCpqlMC0ZLil6Rs+1n0TpQr/0smNBB RbcgJj11D4s3KAeBKFh+G0vPF4BjQbqH8fYomomm0EiFNm0SpOCvKlC3YeL9sV2Q T8raEgcrrqFdolF9+HpHRUBW3lI9kb8= -----END CERTIFICATE-----Generated at Fri Apr 17 19:02:03 2026 by rpki-client