$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa File: 4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa (raw, json) Hash identifier: YpV68ypxYav2xhZTkUGcTxAw5HrKtFEEzIiVUGvF6fA= Subject key identifier: 56:74:32:2B:0F:9D:E6:78:20:77:75:CF:16:9D:F1:BF:3D:F9:A9:EC Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584D8AC54960105D46A95CE68500 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa Signing time: Sat 18 Apr 2026 01:00:24 +0000 ROA not before: Sat 18 Apr 2026 01:00:24 +0000 ROA not after: Fri 17 Jul 2026 01:00:24 +0000 asID: 12157 IP address blocks: 208.67.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8a:c5:49:60:10:5d:46:a9:5c:e6:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Apr 18 01:00:24 2026 GMT Not After : Jul 17 01:00:24 2026 GMT Subject: CN=a4b832be-4cc1-4195-9e11-04d019efa85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:64:ec:45:8a:4e:9f:7a:9e:a3:fd:13:d0:95: 45:80:22:05:61:62:ce:eb:0c:c2:f4:96:4c:79:25: 89:9a:13:aa:3b:94:f0:6d:f9:37:53:8f:c9:8a:d5: 31:25:49:dc:a1:fa:92:7f:f3:1a:06:42:2a:0d:3c: 6a:9f:89:c1:55:79:d2:64:24:cc:d6:1c:07:11:c6: fe:d8:d9:a8:86:20:b9:a6:3f:7b:cf:87:42:82:cf: 4c:51:bd:7d:e8:8a:61:28:ce:a4:7a:f5:69:7b:12: 10:f4:69:aa:14:e2:5c:4c:d2:1f:62:b7:aa:8c:13: 4f:f2:b5:0d:5a:5c:f0:a3:0e:6b:6f:c4:5e:bc:95: 2c:a4:6e:53:85:d9:7d:c0:41:ea:d4:98:24:4c:ee: fa:d3:b7:d0:ed:2f:44:06:64:b0:86:40:b0:5f:fa: 2c:0d:47:41:b8:70:1a:d3:77:fb:50:61:76:c5:37: 81:70:de:68:6d:e9:cc:36:df:30:7b:66:ae:64:fc: b0:ab:5b:82:0a:f8:a7:44:d3:18:75:a0:05:f9:61: 52:1a:ee:3f:95:bb:5d:a8:a7:15:38:ac:d4:28:06: 3a:e1:b3:46:36:22:85:05:e9:0e:bb:ea:4b:b8:cc: 89:87:d3:05:30:98:41:25:51:44:58:69:42:bd:07: e9:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:74:32:2B:0F:9D:E6:78:20:77:75:CF:16:9D:F1:BF:3D:F9:A9:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.67.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:12:56:82:5f:18:20:7e:54:2c:13:5a:15:63:15:23:d7:50: 1f:fd:a7:0d:46:fe:be:34:f6:9b:ae:51:68:14:09:4b:da:0f: 0b:24:09:2b:8f:6d:8b:14:7e:d3:9f:b2:03:6f:46:ca:f8:20: f0:e5:5a:20:a3:c2:3f:0e:4d:58:93:fe:50:cb:fc:dd:43:c2: 7f:20:bc:fe:28:b0:5c:bc:0e:bf:38:40:6b:3c:ff:39:52:17: d0:05:4a:0e:a2:1d:0d:67:0b:72:b1:80:4d:dd:ab:af:26:d0: 69:ec:74:03:84:d9:57:d8:48:29:69:33:b0:9f:db:86:c1:4e: d0:0b:da:76:5f:81:e9:c0:da:50:d8:04:8c:1c:9a:a9:45:9d: 7b:c8:d8:f4:f1:3e:38:e7:d8:7a:54:0e:36:60:b0:96:db:3d: b2:72:e9:c5:b3:e1:e5:80:7c:20:6d:62:35:a5:c9:c6:49:fa: e5:bd:d1:8d:3c:2d:5e:6f:1d:f7:d1:58:d9:60:d6:e7:87:77: 78:03:cb:e9:31:be:4c:c9:0d:6e:ba:c9:b6:17:7a:0e:56:80: 25:55:21:92:23:48:e8:2c:64:59:8d:54:2b:c6:ca:74:51:cf: 65:a1:d5:6a:6c:0c:3d:12:de:4a:f6:eb:d4:d2:48:cd:9b:cc: ce:38:77:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2KxUlgEF1GqVzmhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDQxODAxMDAyNFoXDTI2MDcxNzAxMDAyNFowLzEtMCsGA1UEAxMk YTRiODMyYmUtNGNjMS00MTk1LTllMTEtMDRkMDE5ZWZhODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2TsRYpOn3qeo/0T0JVFgCIFYWLO6wzC9JZM eSWJmhOqO5Twbfk3U4/JitUxJUncofqSf/MaBkIqDTxqn4nBVXnSZCTM1hwHEcb+ 2NmohiC5pj97z4dCgs9MUb196IphKM6kevVpexIQ9GmqFOJcTNIfYreqjBNP8rUN Wlzwow5rb8RevJUspG5Thdl9wEHq1JgkTO7607fQ7S9EBmSwhkCwX/osDUdBuHAa 03f7UGF2xTeBcN5obenMNt8we2auZPywq1uCCvinRNMYdaAF+WFSGu4/lbtdqKcV OKzUKAY64bNGNiKFBekOu+pLuMyJh9MFMJhBJVFEWGlCvQfpRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZ0MisPneZ4IHd1zxad8b89+ansMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGM4YTA2ZjctNDJjMi0z Njk5LTljMTAtYWE2MDE1OTE4Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJESVoJfGCB+VCwTWhVjFSPXUB/9pw1G/r409puuUWgUCUvaDwskCSuP bYsUftOfsgNvRsr4IPDlWiCjwj8OTViT/lDL/N1Dwn8gvP4osFy8Dr84QGs8/zlS F9AFSg6iHQ1nC3KxgE3dq68m0GnsdAOE2VfYSClpM7Cf24bBTtAL2nZfgenA2lDY BIwcmqlFnXvI2PTxPjjn2HpUDjZgsJbbPbJy6cWz4eWAfCBtYjWlycZJ+uW90Y08 LV5vHffRWNlg1ueHd3gDy+kxvkzJDW66ybYXeg5WgCVVIZIjSOgsZFmNVCvGynRR z2Wh1WpsDD0S3kr269TSSM2bzM44d1E= -----END CERTIFICATE-----Generated at Wed Apr 22 08:32:42 2026 by rpki-client