$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa File: 2d29c9cc-f352-359a-a680-78348c95a6e1.roa (raw, json) Hash identifier: CAu3sBR04u3rn9qXqvmJHEHG0Snj48pihTs/ZkMGb7w= Subject key identifier: F4:FA:66:22:48:BE:AD:8D:6A:58:65:AF:12:B6:BA:43:79:08:A1:E0 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584D8AC53A4CDC9F119B07D64A80 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 32788 IP address blocks: 208.88.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3a:4c:dc:9f:11:9b:07:d6:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=fa184414-e41f-4fdd-8e53-235b048ee6b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c1:21:57:b4:87:e6:b4:32:f7:fe:b4:b2:8d: 56:cb:46:47:41:f9:93:5c:bf:69:08:fb:0e:45:80: 97:89:66:60:cb:81:aa:71:b0:ca:28:4d:c2:5e:2c: 07:aa:b7:08:b2:1d:49:f9:d6:3f:2d:b3:2d:ee:79: b0:27:86:30:4f:8a:c0:95:ec:29:a6:f9:19:2a:c4: b6:95:52:d8:42:45:a9:80:8c:92:22:e7:c8:63:4a: 85:a9:eb:09:30:d0:80:83:54:92:87:58:13:6e:2b: 5d:62:fe:42:7d:0b:41:87:4f:ed:db:9b:68:1c:18: 3d:37:e9:2e:91:6c:3e:6e:6c:99:a1:11:20:38:13: 4f:14:c4:64:b9:7d:fb:dd:10:f6:0a:98:0f:f0:bc: 3f:08:8e:0a:bd:c6:5e:cc:9e:3c:57:f9:9b:9a:c4: 5a:ec:0e:a9:bd:f1:e7:6e:42:05:cc:7c:7d:0a:47: a7:ca:fb:e4:85:f3:c1:b6:48:fa:08:6e:94:fd:3c: 41:84:2e:33:4c:5d:d9:8b:e3:1a:28:05:44:99:77: 30:67:ad:09:95:8a:6c:52:3b:66:5d:f0:18:15:44: 27:c3:bf:34:0c:6d:33:61:74:d6:cf:b6:e5:b4:96: 95:68:29:a9:3b:87:a2:73:67:65:c8:02:95:da:e4: 7b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:FA:66:22:48:BE:AD:8D:6A:58:65:AF:12:B6:BA:43:79:08:A1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/2d29c9cc-f352-359a-a680-78348c95a6e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5c:5a:92:0c:f6:13:2f:42:03:e8:46:8a:2e:80:36:26:dd: 82:5f:bf:e8:86:a4:01:4d:66:9c:ca:0a:5a:80:78:40:8e:27: e7:96:10:ea:f4:fd:b2:0a:da:f0:71:30:3f:a1:0c:77:14:db: d9:ad:a4:e0:6b:bc:19:0d:9d:5e:7b:30:61:4b:6e:66:24:a6: 46:d4:27:1e:4c:4d:24:e9:4a:bc:9e:ec:01:15:b5:67:c6:44: f9:a7:5b:49:0f:12:3f:9d:2e:59:4e:34:88:48:00:36:ed:70: d8:41:39:ea:e4:8c:50:c6:aa:57:de:3f:dd:0a:61:79:79:13: 4e:3d:6e:e5:c8:b8:e2:15:eb:18:bc:53:d8:c2:32:f4:5f:78: 5a:a3:ee:f3:64:1d:d5:ab:20:c8:d5:d9:51:aa:76:5d:f0:45: be:86:6a:cb:b6:02:d3:95:3c:98:4e:0c:35:cd:1d:37:e6:e6: e3:ef:7b:04:da:5a:df:69:b7:9a:0c:33:18:4d:2f:87:8b:6d: 69:47:4a:9c:f6:bf:21:57:34:f3:d4:8b:f9:77:c6:20:41:7e: 18:27:cc:af:d9:82:c6:31:85:63:e5:5a:18:51:3d:cb:2e:43: 6b:12:69:e6:6f:c0:63:a7:35:69:fb:ab:2b:ae:f4:c8:eb:8a: d1:48:7e:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTpM3J8RmwfWSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk ZmExODQ0MTQtZTQxZi00ZmRkLThlNTMtMjM1YjA0OGVlNmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8EhV7SH5rQy9/60so1Wy0ZHQfmTXL9pCPsO RYCXiWZgy4GqcbDKKE3CXiwHqrcIsh1J+dY/LbMt7nmwJ4YwT4rAlewppvkZKsS2 lVLYQkWpgIySIufIY0qFqesJMNCAg1SSh1gTbitdYv5CfQtBh0/t25toHBg9N+ku kWw+bmyZoREgOBNPFMRkuX373RD2CpgP8Lw/CI4KvcZezJ48V/mbmsRa7A6pvfHn bkIFzHx9CkenyvvkhfPBtkj6CG6U/TxBhC4zTF3Zi+MaKAVEmXcwZ60JlYpsUjtm XfAYFUQnw780DG0zYXTWz7bltJaVaCmpO4eic2dlyAKV2uR7cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPT6ZiJIvq2NalhlrxK2ukN5CKHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvMmQyOWM5Y2MtZjM1Mi0z NTlhLWE2ODAtNzgzNDhjOTVhNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBcWpIM9hMvQgPoRoougDYm3YJfv+iGpAFNZpzKClqAeECOJ+eWEOr0 /bIK2vBxMD+hDHcU29mtpOBrvBkNnV57MGFLbmYkpkbUJx5MTSTpSrye7AEVtWfG RPmnW0kPEj+dLllONIhIADbtcNhBOerkjFDGqlfeP90KYXl5E049buXIuOIV6xi8 U9jCMvRfeFqj7vNkHdWrIMjV2VGqdl3wRb6Gasu2AtOVPJhODDXNHTfm5uPvewTa Wt9pt5oMMxhNL4eLbWlHSpz2vyFXNPPUi/l3xiBBfhgnzK/ZgsYxhWPlWhhRPcsu Q2sSaeZvwGOnNWn7qyuu9MjritFIfmA= -----END CERTIFICATE-----Generated at Mon Apr 20 05:06:50 2026 by rpki-client