$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa File: 974b8952-186c-379e-b0c2-e4fb964cf09d.roa (raw, json) Hash identifier: bpOxSFeDzvC4RNv2xM54CnOYb2yOHPsA9FKjl78R5is= Subject key identifier: 6B:27:D4:02:1A:F2:64:FF:46:CE:76:2F:7C:E4:7F:95:B9:B8:5E:20 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584D3E001F63FB4126ED82E84540 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 21928 IP address blocks: 208.54.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1f:63:fb:41:26:ed:82:e8:45:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=99e93a22-6122-4e69-ad53-a88d8e97a377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:41:04:24:c4:f0:7d:89:21:95:de:9a:57: 59:8a:64:a8:aa:a7:ff:24:db:91:4f:6b:a5:e4:79: f2:29:73:d4:9c:9f:43:e8:9b:07:49:01:05:6c:93: 7d:da:a2:38:1a:9d:3c:e3:b5:52:e1:c0:1c:91:59: 1a:85:e0:fc:e2:ed:99:ac:7f:eb:bd:c3:b6:8c:71: c1:ba:bd:4b:ba:9c:01:59:5a:78:3b:04:30:a0:d4: 09:22:7c:ca:53:64:24:b4:73:7c:00:28:c2:3f:2a: d0:d7:2e:29:fe:32:7a:9a:ed:be:5d:31:2b:a4:74: 9e:47:35:8b:e8:78:d3:26:fb:2f:00:96:53:f3:20: 11:e5:d0:2f:aa:cb:3c:09:e4:3b:6e:94:ad:59:ad: 19:dc:2b:f1:a6:5e:0a:42:f3:d3:32:75:cf:f0:81: 2c:b1:dc:05:07:cd:c2:78:66:90:93:bc:07:b6:40: ea:b6:63:82:24:c1:7c:98:3b:70:a0:0e:c3:cb:eb: 56:3c:a4:90:0b:f6:8f:84:6f:31:9a:0f:9c:19:c1: c8:0c:c3:1a:f0:11:52:98:8e:76:c3:d9:f3:81:0e: c9:4e:49:ff:2c:b3:74:94:4d:9d:12:da:f3:58:f4: d8:1d:42:4b:45:16:88:2a:ca:64:fb:46:2e:72:ee: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:27:D4:02:1A:F2:64:FF:46:CE:76:2F:7C:E4:7F:95:B9:B8:5E:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/974b8952-186c-379e-b0c2-e4fb964cf09d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:61:2e:14:7f:6b:55:d2:6d:f4:15:fd:7a:59:d2:80:d5:7f: 96:01:9e:0c:52:5c:d9:65:f6:6c:80:32:3d:1c:75:f5:59:e4: a4:9f:f9:41:e2:c2:ab:c8:43:5f:d7:ee:6c:c5:22:a4:28:eb: cf:a6:ae:1c:a6:e1:3d:a3:03:ed:52:76:07:44:d7:ff:f9:f9: 7c:71:42:cf:66:76:1c:c3:31:8a:76:80:b8:63:9b:61:dd:55: da:e8:2f:11:77:d4:7f:58:59:7c:6c:1d:9a:87:3a:5b:df:a0: 63:cf:d3:0b:a7:3d:33:d6:54:66:12:d4:5b:6d:50:29:4a:92: ac:d9:04:df:5d:55:d1:4e:99:90:90:a4:c0:c2:17:22:cd:5d: 94:50:f7:32:3b:9d:f7:aa:b9:09:63:05:1c:30:b9:9d:b7:41: 37:ae:fa:94:0a:bf:a9:23:78:de:cb:74:03:2c:41:47:9f:c5: 61:d4:32:03:3b:cf:81:e5:3c:0c:4e:af:af:02:0a:7f:7e:92: 95:16:52:04:98:63:be:89:c7:92:32:5d:0d:f4:3c:b3:fb:be: cd:4e:27:3e:18:30:de:c1:63:35:89:cd:20:cd:37:bd:a3:bd: 6f:d7:1c:ba:ad:a1:cb:37:62:40:5e:65:0a:17:94:ae:e7:9c: a0:ff:ca:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AB9j+0Em7YLoRUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTllOTNhMjItNjEyMi00ZTY5LWFkNTMtYTg4ZDhlOTdhMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3hBBCTE8H2JIZXemldZimSoqqf/JNuRT2ul 5HnyKXPUnJ9D6JsHSQEFbJN92qI4Gp0847VS4cAckVkaheD84u2ZrH/rvcO2jHHB ur1LupwBWVp4OwQwoNQJInzKU2QktHN8ACjCPyrQ1y4p/jJ6mu2+XTErpHSeRzWL 6HjTJvsvAJZT8yAR5dAvqss8CeQ7bpStWa0Z3Cvxpl4KQvPTMnXP8IEssdwFB83C eGaQk7wHtkDqtmOCJMF8mDtwoA7Dy+tWPKSQC/aPhG8xmg+cGcHIDMMa8BFSmI52 w9nzgQ7JTkn/LLN0lE2dEtrzWPTYHUJLRRaIKspk+0Yucu4YpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsn1AIa8mT/Rs52L3zkf5W5uF4gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvOTc0Yjg5NTItMTg2Yy0z NzllLWIwYzItZTRmYjk2NGNmMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJhLhR/a1XSbfQV/XpZ0oDVf5YBngxSXNll9myAMj0cdfVZ5KSf+UHi wqvIQ1/X7mzFIqQo68+mrhym4T2jA+1SdgdE1//5+XxxQs9mdhzDMYp2gLhjm2Hd VdroLxF31H9YWXxsHZqHOlvfoGPP0wunPTPWVGYS1FttUClKkqzZBN9dVdFOmZCQ pMDCFyLNXZRQ9zI7nfequQljBRwwuZ23QTeu+pQKv6kjeN7LdAMsQUefxWHUMgM7 z4HlPAxOr68CCn9+kpUWUgSYY76Jx5IyXQ30PLP7vs1OJz4YMN7BYzWJzSDNN72j vW/XHLqtocs3YkBeZQoXlK7nnKD/ypo= -----END CERTIFICATE-----Generated at Sat Mar 21 17:54:02 2026 by rpki-client