$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/a8558c5a-3b7a-3dba-9c17-4d14167a7fff.roa File: a8558c5a-3b7a-3dba-9c17-4d14167a7fff.roa (raw, json) Hash identifier: H8iAtiyeX8kbdM6GTuZe9r2bLcD9kKrC1OHUccqyPew= Subject key identifier: A1:6B:E5:8B:33:75:C0:60:48:1A:8B:11:6E:27:2F:BE:23:C2:C6:4D Certificate issuer: /CN=d0468ae1-e635-48f2-8764-2794b700581d Certificate serial: 010D0C9F4328584DAB73F456C111C512FEB12860 Authority key identifier: F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/a8558c5a-3b7a-3dba-9c17-4d14167a7fff.roa Signing time: Wed 29 Apr 2026 17:58:26 +0000 ROA not before: Wed 29 Apr 2026 17:58:26 +0000 ROA not after: Tue 28 Jul 2026 17:58:26 +0000 asID: 18685 IP address blocks: 208.69.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:73:f4:56:c1:11:c5:12:fe:b1:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0468ae1-e635-48f2-8764-2794b700581d Validity Not Before: Apr 29 17:58:26 2026 GMT Not After : Jul 28 17:58:26 2026 GMT Subject: CN=1138c6b3-1233-43bf-abcf-317b5275cac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:79:81:64:99:92:e0:e1:fa:c2:44:0f:c5: 27:63:a0:d8:fd:74:38:35:e1:62:74:ba:8e:4d:91: 8f:18:29:09:34:a2:ec:b4:7c:e7:db:4b:a9:b5:a2: db:03:dd:6c:6e:50:5e:e7:cb:8b:2f:e7:d4:e2:ef: dd:7b:6c:23:7c:1d:79:ed:13:20:a4:a6:74:8d:21: 2a:5b:89:99:1f:91:1a:8d:c7:aa:96:bf:8a:11:66: 07:4b:63:18:0b:c8:2f:2d:ff:20:f0:f9:6c:e6:30: 4f:b3:8d:ff:ff:5d:6b:e6:1e:d6:9c:b7:39:68:b6: cc:39:f3:25:cc:d3:d1:55:97:3f:cb:1b:3e:2f:a4: 38:f6:a3:79:cb:e5:d5:ca:9d:34:a4:fe:f2:80:ac: 88:00:36:de:fc:2e:6c:47:d9:34:df:f8:d5:49:47: 9b:cd:65:68:73:18:2f:8f:89:86:dc:1f:6b:00:34: 53:fa:08:7a:44:0d:1c:e5:69:cc:d5:e1:4e:0f:f3: 06:c2:8e:08:01:e3:14:fc:5d:a9:89:99:fd:b8:ae: 6f:ba:fd:12:ee:a0:36:26:0d:6a:86:8f:b4:58:3f: 26:cc:9f:0f:a1:59:01:0e:af:7c:2d:bf:60:82:dd: d5:33:4e:32:d4:d7:90:37:c0:05:89:41:7f:39:37: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:E5:8B:33:75:C0:60:48:1A:8B:11:6E:27:2F:BE:23:C2:C6:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/a8558c5a-3b7a-3dba-9c17-4d14167a7fff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d/d0468ae1-e635-48f2-8764-2794b700581d.crl X509v3 Authority Key Identifier: keyid:F1:9D:78:F7:AD:49:5B:B8:F2:36:00:BB:B4:45:54:4F:43:26:7E:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d0468ae1-e635-48f2-8764-2794b700581d.cer sbgp-ipAddrBlock: critical IPv4: 208.69.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:23:52:ad:14:f3:0b:be:04:58:c3:41:27:c7:1b:c6:c6:1a: e4:f8:ef:3e:3e:48:f4:83:c8:b4:c5:86:54:5f:1f:81:47:1c: f1:89:0e:0e:13:cd:96:46:2a:c2:19:69:d6:2b:35:2a:12:77: 41:b2:59:74:a5:22:ce:86:a3:a3:28:79:84:49:d8:cd:96:c7: d1:78:b7:d2:8a:11:d7:e5:28:f9:fc:73:30:92:77:d2:17:d9: 4e:70:6b:de:36:cc:cc:71:1d:05:c1:21:6c:5b:03:db:c6:f6: 13:8a:b1:61:b2:ec:07:08:33:48:cc:53:02:ff:ac:9e:fd:68: 82:38:5e:69:1a:bc:e0:c5:80:a1:2a:ad:c6:9e:3f:be:6c:f1: 35:78:23:49:50:5a:a2:5f:fe:e2:89:93:69:b1:22:1f:39:fa: b2:b7:69:5d:dc:93:ce:7a:1e:1e:e9:27:e6:31:89:7a:37:05: da:00:ea:4d:2f:a1:14:55:e9:00:69:e4:aa:71:cc:28:21:db: 65:60:a5:b8:a5:87:e7:eb:31:da:09:24:26:29:3b:7f:9e:25: d8:b1:52:a3:d4:a6:79:eb:45:a4:be:c8:d6:1d:91:e5:7d:99: 45:a7:09:06:25:80:63:3f:f3:a2:38:30:f4:50:79:b7:a5:80: 0a:0d:cd:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rc/RWwRHFEv6xKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDA0NjhhZTEtZTYzNS00OGYyLTg3NjQtMjc5NGI3MDA1 ODFkMB4XDTI2MDQyOTE3NTgyNloXDTI2MDcyODE3NTgyNlowLzEtMCsGA1UEAxMk MTEzOGM2YjMtMTIzMy00M2JmLWFiY2YtMzE3YjUyNzVjYWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov15gWSZkuDh+sJED8UnY6DY/XQ4NeFidLqO TZGPGCkJNKLstHzn20uptaLbA91sblBe58uLL+fU4u/de2wjfB157RMgpKZ0jSEq W4mZH5Eajceqlr+KEWYHS2MYC8gvLf8g8Pls5jBPs43//11r5h7WnLc5aLbMOfMl zNPRVZc/yxs+L6Q49qN5y+XVyp00pP7ygKyIADbe/C5sR9k03/jVSUebzWVocxgv j4mG3B9rADRT+gh6RA0c5WnM1eFOD/MGwo4IAeMU/F2piZn9uK5vuv0S7qA2Jg1q ho+0WD8mzJ8PoVkBDq98Lb9ggt3VM04y1NeQN8AFiUF/OTdAnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFr5YszdcBgSBqLEW4nL74jwsZNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kMDQ2 OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0YjcwMDU4MWQvYTg1NThjNWEtM2I3YS0z ZGJhLTljMTctNGQxNDE2N2E3ZmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDA0NjhhZTEtZTYzNS00OGYyLTg3 NjQtMjc5NGI3MDA1ODFkL2QwNDY4YWUxLWU2MzUtNDhmMi04NzY0LTI3OTRiNzAw NTgxZC5jcmwwHwYDVR0jBBgwFoAU8Z14961JW7jyNgC7tEVUT0MmftMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kMDQ2OGFlMS1lNjM1LTQ4ZjItODc2NC0yNzk0 YjcwMDU4MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EWWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUjUq0U8wu+BFjDQSfHG8bGGuT47z4+SPSDyLTFhlRfH4FHHPGJDg4T zZZGKsIZadYrNSoSd0GyWXSlIs6Go6MoeYRJ2M2Wx9F4t9KKEdflKPn8czCSd9IX 2U5wa942zMxxHQXBIWxbA9vG9hOKsWGy7AcIM0jMUwL/rJ79aII4XmkavODFgKEq rcaeP75s8TV4I0lQWqJf/uKJk2mxIh85+rK3aV3ck856Hh7pJ+YxiXo3BdoA6k0v oRRV6QBp5KpxzCgh22Vgpbilh+frMdoJJCYpO3+eJdixUqPUpnnrRaS+yNYdkeV9 mUWnCQYlgGM/86I4MPRQebelgAoNzVQ= -----END CERTIFICATE-----Generated at Thu Apr 30 12:42:19 2026 by rpki-client