$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa File: 868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa (raw, json) Hash identifier: VV5ylqsmrISXoyQvg5RynRvxuuKgB4Xmc7/fUVXhNa0= Subject key identifier: E5:C7:58:90:F5:8C:CC:17:6F:D9:A0:4E:CA:34:DB:10:01:F8:70:64 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584D8AC53D3A95B9DB64666EBF80 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 16671 IP address blocks: 208.88.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3d:3a:95:b9:db:64:66:6e:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=99e61c0d-43f2-4aba-ba41-ca85a1ab5d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:3e:88:03:3f:60:2b:a8:30:e0:0d:2e:b5: f4:82:89:aa:f0:3f:69:09:21:7d:40:b3:68:ba:2c: 60:5b:bb:e1:83:0c:6d:26:62:d5:84:b6:c3:f5:61: 8f:5e:7f:15:83:a6:3f:a4:85:4e:71:f3:3e:1b:0c: ca:17:ed:15:1e:d6:1d:ed:cf:df:59:78:60:02:54: be:cd:0b:de:70:23:36:ef:a4:dd:91:9d:61:b3:2a: 94:fa:be:c4:93:ae:f6:46:82:e1:0a:ec:92:7a:96: e8:27:f2:dc:9b:dd:6c:40:ca:75:ce:02:f7:e3:89: c7:d0:70:c2:f1:cd:f6:ad:29:82:8a:cc:1d:ec:df: d4:00:d1:cf:b8:d3:63:d6:49:df:6c:ab:fe:74:dc: ca:0d:24:8f:89:79:96:60:c2:ac:fe:a7:08:32:17: 84:62:ab:d5:7e:56:41:9e:c7:61:ae:36:b3:3d:38: 05:48:98:f0:3a:ec:5b:c0:e7:fe:4d:41:65:56:25: 6b:81:a0:2a:0e:d9:fd:64:ba:df:ba:65:70:a7:21: b2:cc:24:20:ac:fd:dd:62:d0:93:b5:32:0b:00:3a: d3:5f:e0:2f:07:6f:fc:1e:c1:1f:cd:d6:79:1b:9f: 05:d4:4d:e0:75:2f:ab:f7:a4:c2:73:84:be:24:77: ca:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C7:58:90:F5:8C:CC:17:6F:D9:A0:4E:CA:34:DB:10:01:F8:70:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/868aa547-cc93-322f-9fd8-8d459f0a8a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1b:6a:b5:c3:7b:2c:43:c9:71:47:07:f6:71:eb:97:6c:7b: 7c:eb:dc:6f:9d:f9:68:6e:53:3e:9d:1d:c4:fe:db:ab:ed:9b: f9:24:c6:08:cb:ca:cc:74:2d:e3:32:21:52:ae:d6:95:ad:2a: b1:25:84:10:51:a6:2c:1b:9f:40:dc:21:5b:2f:a8:e3:e5:6e: cd:17:4c:9f:ca:e3:95:c4:e0:4e:78:68:b6:21:23:7f:47:46: 08:d2:ce:fe:a6:a2:01:05:e5:ac:e7:c7:10:61:4b:41:24:80: cf:11:9f:5f:4a:68:0a:11:37:f6:4f:7d:fc:63:65:9e:19:ca: 87:dc:6f:21:07:1f:6c:c7:bd:ca:9a:75:a5:12:80:39:92:20: 9c:76:88:36:00:2a:95:94:bd:03:d3:3a:55:2d:58:fa:41:ae: b4:3a:e7:7a:5b:fb:c9:b8:aa:37:2f:f5:78:f0:10:88:5e:c3: 6f:75:df:13:b5:3e:cc:d9:6e:25:2a:64:f3:f5:6b:ef:8f:21: a5:40:90:d0:15:c4:af:ab:e5:5d:65:93:60:bf:9e:2f:2f:b5: 42:2e:b7:64:33:4c:a4:1f:39:90:dc:e0:54:19:6b:2c:8a:1f: 02:da:a9:6d:73:98:45:96:ac:fa:6c:b8:1f:36:b3:08:8a:66: df:5c:38:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxT06lbnbZGZuv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk OTllNjFjMGQtNDNmMi00YWJhLWJhNDEtY2E4NWExYWI1ZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgQ+iAM/YCuoMOANLrX0gomq8D9pCSF9QLNo uixgW7vhgwxtJmLVhLbD9WGPXn8Vg6Y/pIVOcfM+GwzKF+0VHtYd7c/fWXhgAlS+ zQvecCM276TdkZ1hsyqU+r7Ek672RoLhCuySepboJ/Lcm91sQMp1zgL344nH0HDC 8c32rSmCiswd7N/UANHPuNNj1knfbKv+dNzKDSSPiXmWYMKs/qcIMheEYqvVflZB nsdhrjazPTgFSJjwOuxbwOf+TUFlViVrgaAqDtn9ZLrfumVwpyGyzCQgrP3dYtCT tTILADrTX+AvB2/8HsEfzdZ5G58F1E3gdS+r96TCc4S+JHfK0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXHWJD1jMwXb9mgTso02xAB+HBkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvODY4YWE1NDctY2M5My0z MjJmLTlmZDgtOGQ0NTlmMGE4YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FgfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUbarXDeyxDyXFHB/Zx65dse3zr3G+d+WhuUz6dHcT+26vtm/kkxgjL ysx0LeMyIVKu1pWtKrElhBBRpiwbn0DcIVsvqOPlbs0XTJ/K45XE4E54aLYhI39H RgjSzv6mogEF5aznxxBhS0EkgM8Rn19KaAoRN/ZPffxjZZ4ZyofcbyEHH2zHvcqa daUSgDmSIJx2iDYAKpWUvQPTOlUtWPpBrrQ653pb+8m4qjcv9XjwEIhew2913xO1 PszZbiUqZPP1a++PIaVAkNAVxK+r5V1lk2C/ni8vtUIut2QzTKQfOZDc4FQZayyK HwLaqW1zmEWWrPpsuB82swiKZt9cOFk= -----END CERTIFICATE-----Generated at Mon Apr 20 05:02:07 2026 by rpki-client