$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa File: 3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa (raw, json) Hash identifier: Uf0wZwA4g4J57m/+eDmtYCyU8bExwetlIz/p2UTUDW8= Subject key identifier: 87:4F:B3:18:31:7D:7D:F1:AD:BB:74:1F:60:98:FB:45:32:21:FC:A4 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584D8EF55AA4FC06153FBC3E5080 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 398125 IP address blocks: 208.71.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:5a:a4:fc:06:15:3f:bc:3e:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=9a21a82f-f9b9-4485-878c-ea1810104eca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:be:f1:e4:7e:17:74:28:8c:e7:ff:ed:1e:14: 65:32:27:a7:23:5b:c5:e4:f4:80:27:d9:4e:e1:bf: 0b:89:f9:43:b7:f6:d2:64:14:5f:41:c8:24:ef:02: a0:71:17:b3:c3:57:dc:f2:08:92:26:85:d8:bd:5f: fe:a2:ca:16:f1:80:48:15:4e:0c:84:d9:d7:77:04: 1f:ad:d4:44:50:5b:f9:c5:bb:5e:a6:76:ff:fd:4e: ff:30:0c:8f:74:3f:d8:5a:4e:26:0f:fd:fc:b5:3a: 8c:42:96:f2:1e:70:2f:89:4c:1f:47:dd:2f:a5:ce: 9b:e4:cb:cb:85:8d:b3:22:fb:4c:11:28:af:b3:6e: 4d:0f:7e:23:e5:27:7d:9e:e8:4e:b2:96:cc:22:a7: 1e:74:cf:67:e6:b7:fb:81:0b:3f:98:6a:33:21:cd: f5:59:51:ef:b1:09:05:16:4e:62:89:cf:91:45:04: 97:40:08:b5:60:b2:79:e0:52:4c:5f:01:c0:23:ee: a7:b3:29:69:32:0a:98:12:b1:4b:4f:8b:af:cd:80: 07:f7:84:f3:0f:d8:4d:02:fb:e2:39:d9:07:62:67: b9:54:11:55:41:5c:96:e1:14:cc:39:df:18:e3:47: f9:a0:7a:8c:8f:e0:85:f6:ce:db:b1:5c:d1:bb:89: 2a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4F:B3:18:31:7D:7D:F1:AD:BB:74:1F:60:98:FB:45:32:21:FC:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3a843f67-b6e2-3031-bc4e-6c8eae3d0e3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a2:83:a0:e5:7e:31:2f:e9:36:83:31:92:e9:f7:ec:99:be: f6:80:ca:2d:d6:88:89:0d:3d:03:94:1b:ac:d4:91:07:d6:a4: bb:94:f3:f1:f3:2f:ba:88:f7:d6:0e:03:da:b2:f3:f4:1c:7a: 08:9b:d5:5b:f1:24:27:33:a6:f0:7f:ae:f6:e0:20:5a:47:b6: cb:8b:66:84:81:37:fb:1f:1b:3c:88:c5:a3:9a:9c:3e:98:f6: db:07:d9:dd:b7:a2:80:69:f4:0f:82:af:3e:27:dc:49:9e:86: b8:91:a3:e8:2f:31:32:d4:2c:58:80:ed:1f:da:f0:c9:84:78: 6c:cd:a2:d7:a3:de:b0:3b:2b:2f:53:43:dd:05:02:9b:24:b1: 99:9c:43:7d:9c:58:db:b1:1e:9c:0d:f2:f0:2c:4b:cc:71:09: 14:ff:6a:c4:d2:1c:17:01:57:68:a8:45:90:2a:d8:95:75:04: 64:94:38:c7:ab:3b:ab:1d:50:f3:ab:78:ce:f8:e4:27:ff:a8: 7a:5f:6a:88:91:27:b7:5d:0d:93:47:0f:61:c4:c5:1a:e9:a5: 08:b6:28:51:1d:8f:77:d5:b8:d2:b6:5e:27:c6:9e:82:d9:f1: 3b:e5:44:43:10:cc:33:df:1c:e8:e4:14:58:85:70:d9:77:3f: 6d:02:e8:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9Vqk/AYVP7w+UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk OWEyMWE4MmYtZjliOS00NDg1LTg3OGMtZWExODEwMTA0ZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhL7x5H4XdCiM5//tHhRlMienI1vF5PSAJ9lO 4b8LiflDt/bSZBRfQcgk7wKgcRezw1fc8giSJoXYvV/+osoW8YBIFU4MhNnXdwQf rdREUFv5xbtepnb//U7/MAyPdD/YWk4mD/38tTqMQpbyHnAviUwfR90vpc6b5MvL hY2zIvtMESivs25ND34j5Sd9nuhOspbMIqcedM9n5rf7gQs/mGozIc31WVHvsQkF Fk5iic+RRQSXQAi1YLJ54FJMXwHAI+6nsylpMgqYErFLT4uvzYAH94TzD9hNAvvi OdkHYme5VBFVQVyW4RTMOd8Y40f5oHqMj+CF9s7bsVzRu4kqpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdPsxgxfX3xrbt0H2CY+0UyIfykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvM2E4NDNmNjctYjZlMi0z MDMxLWJjNGUtNmM4ZWFlM2QwZTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOig6DlfjEv6TaDMZLp9+yZvvaAyi3WiIkNPQOUG6zUkQfWpLuU8/Hz L7qI99YOA9qy8/Qcegib1VvxJCczpvB/rvbgIFpHtsuLZoSBN/sfGzyIxaOanD6Y 9tsH2d23ooBp9A+Crz4n3EmehriRo+gvMTLULFiA7R/a8MmEeGzNotej3rA7Ky9T Q90FApsksZmcQ32cWNuxHpwN8vAsS8xxCRT/asTSHBcBV2ioRZAq2JV1BGSUOMer O6sdUPOreM745Cf/qHpfaoiRJ7ddDZNHD2HExRrppQi2KFEdj3fVuNK2XifGnoLZ 8TvlREMQzDPfHOjkFFiFcNl3P20C6I8= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:19 2026 by rpki-client