$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa File: f912ae62-732c-3124-96ce-77eea87e00a5.roa (raw, json) Hash identifier: 70MGOe7AgD/Axj2oito7Cua9/pKV3+LAdZs6B1Zmsjs= Subject key identifier: 13:B5:00:F9:AD:6F:6A:A8:FF:22:DE:70:0C:63:51:05:DA:08:BE:F0 Certificate issuer: /CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Certificate serial: 010D0C9F4328584D8EF565830E43CDCA76C39B00 Authority key identifier: 38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 398125 IP address blocks: 208.71.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f5:65:83:0e:43:cd:ca:76:c3:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bc65cbb-40a8-4be8-9c35-419f9dc36d71 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=b20f2188-5da5-443f-beef-caa48a29a6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:db:fa:ba:79:f7:36:a1:a7:ea:ee:c0:12:a5: 61:9c:c3:94:d3:54:19:c1:83:53:93:14:0c:2b:04: 43:12:e3:e8:86:0d:cf:ed:4c:e7:60:26:7a:06:34: c0:42:f3:66:e7:32:ea:95:c0:83:85:92:bd:cd:cd: 8e:02:25:76:57:03:9a:35:78:34:1b:6f:9f:e4:2f: 66:ce:52:3c:dd:6f:74:9a:48:af:90:dd:28:62:c8: 96:c0:ec:fe:45:63:b9:da:c7:df:72:7d:36:50:98: f3:27:a9:39:cd:6c:34:42:17:8a:f0:79:fc:a6:02: d6:9e:2f:69:93:47:7e:12:2a:a0:2a:5e:31:d4:e7: eb:46:cc:96:16:f9:c7:e5:c6:0c:48:86:f0:68:99: 49:3c:df:0c:f3:51:d6:b5:32:9d:b3:9e:41:d0:55: a1:db:e5:06:36:c8:73:c3:4d:c9:7e:4d:c6:52:a5: e4:ab:7e:73:0b:20:71:71:94:92:92:2f:6e:2c:27: 76:7b:60:27:d0:c4:d8:88:9e:f7:a2:1e:41:c0:66: f7:9c:d9:b2:78:df:73:9e:67:76:58:e2:2f:59:a5: 6f:98:7c:f4:97:bd:fe:a1:df:14:9e:60:0b:0c:8b: e9:15:fc:61:b9:f8:4a:96:51:91:2b:c3:5a:39:de: 45:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B5:00:F9:AD:6F:6A:A8:FF:22:DE:70:0C:63:51:05:DA:08:BE:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/f912ae62-732c-3124-96ce-77eea87e00a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.crl X509v3 Authority Key Identifier: keyid:38:18:60:2C:49:E1:86:D4:E7:61:B1:69:29:31:46:3E:93:4A:3E:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3bc65cbb-40a8-4be8-9c35-419f9dc36d71.cer sbgp-ipAddrBlock: critical IPv4: 208.71.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:1a:09:a7:6c:04:bb:e7:ad:f7:b1:15:a4:4e:80:76:3f:96: af:c3:f0:fd:1e:ad:03:98:a8:c6:54:db:fc:c4:74:cc:38:b4: 48:bf:f6:d3:e6:ed:ab:7e:65:c1:3d:e2:8e:ac:62:37:1b:d6: 9a:81:76:b0:2a:1f:88:a8:2d:2f:e1:f3:56:f9:ab:2d:5b:4e: 4c:19:60:70:aa:51:65:3a:c4:82:3f:e9:a4:f2:bc:92:32:75: f3:26:e7:58:4d:44:b7:1a:3c:db:56:03:73:b4:fe:d6:33:d6: f6:b9:fc:a2:92:3d:34:22:d2:cb:93:e7:a4:1b:8c:47:7b:1d: 70:93:12:de:d2:73:7a:24:40:30:70:f2:90:db:84:7b:c7:b5: 74:d4:c1:02:d1:e6:64:02:6f:0e:91:22:0c:53:42:00:e3:90: 43:e9:df:a6:8d:1b:14:1c:3c:1b:fa:a8:13:00:87:3e:34:d9: 27:c3:7d:79:e7:7d:db:3f:27:59:1c:f1:51:50:47:77:e7:3b: 95:f6:c6:57:a5:06:13:ef:bf:8c:a5:e6:f9:52:13:ad:a6:c5: e5:f9:d9:4a:72:77:92:62:b9:f6:53:37:40:af:80:20:b7:2a: f4:e1:89:29:42:fa:91:68:23:7b:03:e1:4c:97:b7:56:2a:3f: 25:2e:e5:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9WWDDkPNynbDmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JjNjVjYmItNDBhOC00YmU4LTljMzUtNDE5ZjlkYzM2 ZDcxMB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YjIwZjIxODgtNWRhNS00NDNmLWJlZWYtY2FhNDhhMjlhNmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9v6unn3NqGn6u7AEqVhnMOU01QZwYNTkxQM KwRDEuPohg3P7UznYCZ6BjTAQvNm5zLqlcCDhZK9zc2OAiV2VwOaNXg0G2+f5C9m zlI83W90mkivkN0oYsiWwOz+RWO52sffcn02UJjzJ6k5zWw0QheK8Hn8pgLWni9p k0d+EiqgKl4x1OfrRsyWFvnH5cYMSIbwaJlJPN8M81HWtTKds55B0FWh2+UGNshz w03Jfk3GUqXkq35zCyBxcZSSki9uLCd2e2An0MTYiJ73oh5BwGb3nNmyeN9znmd2 WOIvWaVvmHz0l73+od8UnmALDIvpFfxhufhKllGRK8NaOd5F7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO1APmtb2qo/yLecAxjUQXaCL7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2 NWNiYi00MGE4LTRiZTgtOWMzNS00MTlmOWRjMzZkNzEvZjkxMmFlNjItNzMyYy0z MTI0LTk2Y2UtNzdlZWE4N2UwMGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2JjNjVjYmItNDBhOC00YmU4LTlj MzUtNDE5ZjlkYzM2ZDcxLzNiYzY1Y2JiLTQwYTgtNGJlOC05YzM1LTQxOWY5ZGMz NmQ3MS5jcmwwHwYDVR0jBBgwFoAUOBhgLEnhhtTnYbFpKTFGPpNKPqAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYmM2NWNiYi00MGE4LTRiZTgtOWMzNS00MTlm OWRjMzZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EdsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMaCadsBLvnrfexFaROgHY/lq/D8P0erQOYqMZU2/zEdMw4tEi/9tPm 7at+ZcE94o6sYjcb1pqBdrAqH4ioLS/h81b5qy1bTkwZYHCqUWU6xII/6aTyvJIy dfMm51hNRLcaPNtWA3O0/tYz1va5/KKSPTQi0suT56QbjEd7HXCTEt7Sc3okQDBw 8pDbhHvHtXTUwQLR5mQCbw6RIgxTQgDjkEPp36aNGxQcPBv6qBMAhz402SfDfXnn fds/J1kc8VFQR3fnO5X2xlelBhPvv4yl5vlSE62mxeX52Upyd5JiufZTN0CvgCC3 KvThiSlC+pFoI3sD4UyXt1YqPyUu5WU= -----END CERTIFICATE-----Generated at Mon Apr 27 11:18:34 2026 by rpki-client