$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa File: fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa (raw, json) Hash identifier: pyFP2fTlVPPCMp1ZAnIQwZPxj93QLT1RoXL7LCy2WU4= Subject key identifier: B5:7A:E0:B4:9F:B6:F7:E1:D7:78:1A:75:7B:45:90:6F:31:B3:87:12 Certificate issuer: /CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Certificate serial: 010D0C9F4328584D8AC53A3F4A48ECCB2B83A740 Authority key identifier: AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 395157 IP address blocks: 208.88.24.0/24 maxlen: 24 208.88.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:3a:3f:4a:48:ec:cb:2b:83:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4d7105-d9bd-4ee4-b958-2e9902d5eb97 Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=246b2e47-d9e3-431e-9fc6-7f17f0ad111e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:e7:cb:c7:56:d6:29:15:8d:74:95:7d:a5: 42:da:fc:df:8e:c9:89:df:23:50:dc:fc:a3:26:60: c8:2f:e6:75:01:cd:74:82:a9:01:6f:ce:f6:cb:7b: c2:e1:20:32:5e:13:d3:44:9f:1d:49:9f:73:43:f3: 8b:63:fe:93:d3:3f:5e:46:2a:55:58:12:3f:1f:b6: 35:7a:30:60:10:34:bf:00:ed:c9:a6:15:50:a8:dd: c4:87:78:d3:ff:96:6a:02:94:f7:3b:3d:d1:28:6f: 08:54:97:3a:2e:34:cd:68:04:78:9b:f0:58:02:3b: 7d:d8:44:7c:c9:92:26:88:e1:50:e8:14:2f:52:b3: df:89:a3:1e:2c:cb:28:af:00:3e:b9:01:16:0c:b5: ae:c1:f2:81:9c:61:78:5e:08:47:7e:9b:e6:ae:5f: a3:e8:9c:4e:28:d4:f9:2c:40:67:b4:ae:00:e5:13: 64:74:b5:0c:97:9a:4b:7a:77:71:5a:b5:7d:c3:12: 3f:c7:cf:3d:ae:27:a5:80:46:3e:33:86:9e:af:fb: 3e:63:cf:4b:0c:1b:a8:e2:4c:62:7f:31:d3:ab:8c: 24:ec:77:67:1c:75:ba:d6:b8:19:7b:a3:28:cf:e5: 8b:b5:44:52:ab:8b:46:08:28:46:30:4f:77:99:0a: d5:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:E0:B4:9F:B6:F7:E1:D7:78:1A:75:7B:45:90:6F:31:B3:87:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/fa13d4bf-c6bc-30e9-ada4-250e51a107eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.crl X509v3 Authority Key Identifier: keyid:AC:F8:01:B7:30:95:23:B1:95:58:85:FF:A2:E4:EB:26:B9:9F:63:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3b4d7105-d9bd-4ee4-b958-2e9902d5eb97.cer sbgp-ipAddrBlock: critical IPv4: 208.88.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:04:d5:c0:ed:43:78:24:94:c1:ce:6a:fc:50:69:55:0a:50: 0f:57:62:56:ce:42:48:54:39:8d:9a:65:d4:19:21:6c:ca:52: 18:32:8d:bc:be:7c:b2:a4:26:20:31:4c:93:78:74:51:ac:ff: e7:79:40:7f:03:c3:18:69:ba:e3:b9:1c:3c:63:dd:df:7f:b5: 25:b0:1f:79:e7:4d:64:3e:c6:3c:d3:eb:c4:03:cd:7d:f8:9e: d0:09:3d:fa:6f:59:49:9f:c8:f8:63:88:a8:7b:c0:01:65:76: 11:7e:52:08:c3:24:c7:77:94:e5:e1:ee:4b:17:2a:39:47:2b: e6:fc:7c:8c:ac:91:18:37:08:6f:ba:47:a7:4d:35:fa:51:25: 89:0e:d6:a4:ad:77:3c:30:56:37:75:6a:b2:e1:76:b9:d2:ff: 59:31:09:95:2f:99:a7:f8:b6:31:4d:82:fd:e4:de:37:bb:57: fd:bf:31:04:87:89:d0:cb:ce:8d:a8:9b:b8:e6:17:f0:2c:4b: 51:15:3e:11:bf:e9:dc:6e:6b:41:d7:8d:59:85:3c:98:77:59: f8:a9:18:7c:c3:7e:99:b4:b3:0e:6b:da:e9:a7:45:4d:1a:a4: bd:7a:98:2e:4c:b7:ed:30:1d:c4:9e:d0:f5:3b:95:3e:6c:a9: 33:69:f1:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxTo/SkjsyyuDp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0ZDcxMDUtZDliZC00ZWU0LWI5NTgtMmU5OTAyZDVl Yjk3MB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk MjQ2YjJlNDctZDllMy00MzFlLTlmYzYtN2YxN2YwYWQxMTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHLny8dW1ikVjXSVfaVC2vzfjsmJ3yNQ3Pyj JmDIL+Z1Ac10gqkBb872y3vC4SAyXhPTRJ8dSZ9zQ/OLY/6T0z9eRipVWBI/H7Y1 ejBgEDS/AO3JphVQqN3Eh3jT/5ZqApT3Oz3RKG8IVJc6LjTNaAR4m/BYAjt92ER8 yZImiOFQ6BQvUrPfiaMeLMsorwA+uQEWDLWuwfKBnGF4XghHfpvmrl+j6JxOKNT5 LEBntK4A5RNkdLUMl5pLendxWrV9wxI/x889rielgEY+M4aer/s+Y89LDBuo4kxi fzHTq4wk7HdnHHW61rgZe6Moz+WLtURSq4tGCChGME93mQrVkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV64LSftvfh13gadXtFkG8xs4cSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRk NzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5MDJkNWViOTcvZmExM2Q0YmYtYzZiYy0z MGU5LWFkYTQtMjUwZTUxYTEwN2ViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2I0ZDcxMDUtZDliZC00ZWU0LWI5 NTgtMmU5OTAyZDVlYjk3LzNiNGQ3MTA1LWQ5YmQtNGVlNC1iOTU4LTJlOTkwMmQ1 ZWI5Ny5jcmwwHwYDVR0jBBgwFoAUrPgBtzCVI7GVWIX/ouTrJrmfYzswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYjRkNzEwNS1kOWJkLTRlZTQtYjk1OC0yZTk5 MDJkNWViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQE1cDtQ3gklMHOavxQaVUKUA9XYlbOQkhUOY2aZdQZIWzKUhgyjby+ fLKkJiAxTJN4dFGs/+d5QH8DwxhpuuO5HDxj3d9/tSWwH3nnTWQ+xjzT68QDzX34 ntAJPfpvWUmfyPhjiKh7wAFldhF+UgjDJMd3lOXh7ksXKjlHK+b8fIyskRg3CG+6 R6dNNfpRJYkO1qStdzwwVjd1arLhdrnS/1kxCZUvmaf4tjFNgv3k3je7V/2/MQSH idDLzo2om7jmF/AsS1EVPhG/6dxua0HXjVmFPJh3WfipGHzDfpm0sw5r2umnRU0a pL16mC5Mt+0wHcSe0PU7lT5sqTNp8VY= -----END CERTIFICATE-----Generated at Mon Apr 20 05:03:47 2026 by rpki-client