$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa File: a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa (raw, json) Hash identifier: NqWf7eSqvPs5REImeS0/ePtLR9Ggbt1igwFbCRo6CeM= Subject key identifier: D3:52:E8:6B:D3:87:ED:2F:BC:B1:A7:0A:91:C0:7C:AB:85:F9:A7:41 Certificate issuer: /CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc Certificate serial: 010D0C9F4328584DAAE04F1605A83E4F956FD300 Authority key identifier: FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 394711 IP address blocks: 208.94.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 02 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:4f:16:05:a8:3e:4f:95:6f:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e68f8b3-59fb-41e8-bea3-cc7286a43ecc Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=27656222-c208-4ad8-82c9-2f6e170cc80b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:20:07:43:76:74:1f:d4:04:0e:df:70:ea:f6: 20:85:47:bf:43:d6:f4:43:6f:ed:b6:5a:78:b2:4f: e4:10:16:7b:fb:4c:48:0c:75:e6:25:da:ea:78:e6: 26:9c:22:fb:93:03:e3:d1:43:ee:ff:4e:7e:2a:50: 7d:57:ab:5e:f7:b9:c4:4f:e3:84:41:1a:64:4c:e4: 6c:9a:2f:a0:85:4d:0a:c3:b4:41:2e:c9:7b:15:46: 4f:1d:e1:c4:2b:a8:1a:bd:1d:b3:d2:cf:31:de:45: 53:2a:71:06:16:d0:c3:df:e1:7a:19:70:9d:3c:40: 1d:3c:60:48:38:38:75:9a:0e:06:1e:d9:31:5c:ac: 2a:99:dc:f4:ba:a8:78:5d:70:83:5a:48:88:4e:e2: 2b:97:9f:0f:e8:a1:9e:38:17:90:24:c4:57:46:bd: d0:8c:85:a7:fb:68:66:37:88:d0:b9:89:00:59:a7: 68:a1:cb:90:61:f9:94:b8:eb:bb:76:c1:c8:93:6c: cc:f5:8c:7b:00:5e:81:26:76:e7:d5:b5:09:14:42: 87:33:76:fd:7d:45:0a:08:8f:69:5c:01:a8:46:d7: 9d:47:95:36:ed:55:56:1f:90:44:30:59:53:c6:20: 56:49:8c:9f:d9:af:ca:05:d2:2f:97:81:2e:b4:0e: 54:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:52:E8:6B:D3:87:ED:2F:BC:B1:A7:0A:91:C0:7C:AB:85:F9:A7:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/a35beaeb-d085-3fe9-9a04-c3ef32b701a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.crl X509v3 Authority Key Identifier: keyid:FE:E9:50:EE:EF:CE:D9:1E:8C:68:5E:F5:3F:97:A7:39:D3:14:BC:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9e68f8b3-59fb-41e8-bea3-cc7286a43ecc.cer sbgp-ipAddrBlock: critical IPv4: 208.94.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:db:90:a3:8c:e4:7b:b2:65:74:7d:b7:b9:44:5c:1f:93:31: e3:ca:e7:dd:96:72:e0:ab:26:6e:ce:85:cb:b1:c8:3f:c0:9b: 7c:4c:98:f1:33:13:0f:e8:2e:45:8f:e1:16:6d:d5:64:a8:43: 8c:f1:e9:28:e3:0c:d7:63:91:a0:ec:30:ab:d9:29:bd:e4:24: 8f:24:9d:03:b2:ff:a2:dc:6f:52:ca:49:93:cb:f9:d6:0c:2c: 13:2e:dd:b4:fe:36:8d:60:ad:57:51:b1:1b:a6:86:c3:99:2b: 2b:6f:f0:d0:cd:27:32:62:9e:c5:e7:5e:d4:7d:17:7f:c4:47: 1a:5d:f1:ca:cd:94:7d:b3:ac:a8:47:20:17:d0:89:11:91:f1: 2c:e4:65:08:cb:17:37:b4:a3:88:5d:fb:62:51:ce:8b:9f:33: 92:b7:2d:3e:ef:77:21:d1:9f:4e:9d:dc:e3:3f:fa:65:ce:da: 29:fc:be:d0:ee:8a:ee:6a:0c:d1:50:e8:5c:be:65:d1:8e:0b: 84:49:6e:05:21:64:ac:f8:ac:a5:32:47:79:91:55:21:a4:1c: b7:e1:24:27:4b:0d:23:3d:85:76:50:0e:0c:da:f9:0f:81:bc: bb:1b:53:ed:28:f8:83:2b:5d:e0:52:fd:cc:2e:8c:c0:cc:07: 63:fe:3d:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2q4E8WBag+T5Vv0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWU2OGY4YjMtNTlmYi00MWU4LWJlYTMtY2M3Mjg2YTQz ZWNjMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk Mjc2NTYyMjItYzIwOC00YWQ4LTgyYzktMmY2ZTE3MGNjODBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCAHQ3Z0H9QEDt9w6vYghUe/Q9b0Q2/ttlp4 sk/kEBZ7+0xIDHXmJdrqeOYmnCL7kwPj0UPu/05+KlB9V6te97nET+OEQRpkTORs mi+ghU0Kw7RBLsl7FUZPHeHEK6gavR2z0s8x3kVTKnEGFtDD3+F6GXCdPEAdPGBI ODh1mg4GHtkxXKwqmdz0uqh4XXCDWkiITuIrl58P6KGeOBeQJMRXRr3QjIWn+2hm N4jQuYkAWadoocuQYfmUuOu7dsHIk2zM9Yx7AF6BJnbn1bUJFEKHM3b9fUUKCI9p XAGoRtedR5U27VVWH5BEMFlTxiBWSYyf2a/KBdIvl4EutA5UywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNS6GvTh+0vvLGnCpHAfKuF+adBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZTY4 ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcyODZhNDNlY2MvYTM1YmVhZWItZDA4NS0z ZmU5LTlhMDQtYzNlZjMyYjcwMWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWU2OGY4YjMtNTlmYi00MWU4LWJl YTMtY2M3Mjg2YTQzZWNjLzllNjhmOGIzLTU5ZmItNDFlOC1iZWEzLWNjNzI4NmE0 M2VjYy5jcmwwHwYDVR0jBBgwFoAU/ulQ7u/O2R6MaF71P5enOdMUvDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZTY4ZjhiMy01OWZiLTQxZTgtYmVhMy1jYzcy ODZhNDNlY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbbkKOM5HuyZXR9t7lEXB+TMePK592WcuCrJm7OhcuxyD/Am3xMmPEz Ew/oLkWP4RZt1WSoQ4zx6SjjDNdjkaDsMKvZKb3kJI8knQOy/6Lcb1LKSZPL+dYM LBMu3bT+No1grVdRsRumhsOZKytv8NDNJzJinsXnXtR9F3/ERxpd8crNlH2zrKhH IBfQiRGR8SzkZQjLFze0o4hd+2JRzoufM5K3LT7vdyHRn06d3OM/+mXO2in8vtDu iu5qDNFQ6Fy+ZdGOC4RJbgUhZKz4rKUyR3mRVSGkHLfhJCdLDSM9hXZQDgza+Q+B vLsbU+0o+IMrXeBS/cwujMDMB2P+PVs= -----END CERTIFICATE-----Generated at Fri May 1 17:01:56 2026 by rpki-client