$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa File: bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa (raw, json) Hash identifier: w0do7W0n484ZgzUEnVrOq4Jx2vMzuxBHXx8PoNYNgl4= Subject key identifier: B6:4B:96:50:01:74:BB:7A:33:BD:1C:05:21:EA:5E:1C:19:2D:81:D9 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584D95F00BFD2D121270F1C7FB60 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 399575 IP address blocks: 216.205.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:0b:fd:2d:12:12:70:f1:c7:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=573db9cc-5aee-453b-9bfe-c4060a58c5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:d8:a6:5d:94:36:88:10:d9:44:f2:27:b7:03: 5c:67:57:6a:80:c3:65:f8:d6:d1:34:f8:08:08:b2: c1:b5:b3:6e:12:67:e7:37:5a:c6:0c:57:c3:90:7d: 09:83:66:30:4f:62:8f:79:b3:a9:62:ea:5e:9a:c5: f0:7e:a6:fb:ae:56:47:32:95:e5:cc:45:74:3c:1b: 9d:72:08:8d:35:04:2f:36:2b:4f:2c:06:bd:8e:80: a6:ef:db:75:ba:7b:59:55:67:36:9a:be:fe:89:79: f1:ec:5e:35:09:74:f6:4d:a5:37:74:fa:02:6c:8f: c0:a6:59:58:fd:bb:6a:45:70:35:6a:96:c5:56:c7: 73:e4:19:3a:ff:3b:43:b3:99:8e:ac:d2:d3:82:c8: 87:a5:8e:e1:92:b2:49:b2:08:a6:58:2a:3b:bd:92: d3:58:78:15:2b:a0:a9:25:dc:43:db:38:31:0a:61: ca:fa:8e:6c:20:00:fa:e3:e8:ac:1b:91:95:b8:d8: 15:5e:c4:76:a3:54:95:73:7c:16:6c:60:10:66:f0: 93:b6:54:b5:2b:50:9e:bc:5c:2c:d5:28:1e:18:06: cf:3b:f4:a5:80:b3:2e:5a:16:72:cd:ec:7d:ac:88: e2:e1:a0:94:ca:9b:70:b9:aa:da:e9:55:04:72:ac: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:96:50:01:74:BB:7A:33:BD:1C:05:21:EA:5E:1C:19:2D:81:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/bdd306a0-ef22-39ec-83a3-45642cb70b0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 216.205.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:12:27:a6:39:f2:51:aa:49:08:da:6e:38:31:12:8f:e8:11: 3a:2c:65:47:4e:b6:f9:76:23:26:20:86:bc:cc:f9:65:9d:d1: fe:1d:98:84:65:35:ac:86:46:ec:37:6f:94:06:ec:f8:7b:03: cc:9f:2c:de:f4:c7:16:66:89:f1:d4:8c:fb:a3:c1:27:d7:99: 3e:3f:90:d7:2f:39:d3:ea:74:cb:8b:0e:25:0a:5c:e5:3a:5e: 74:08:c5:eb:bb:e2:02:e3:c0:e1:ec:97:35:28:ea:a9:61:21: 69:a6:6f:05:97:9b:5b:3c:ec:c8:1b:41:24:e2:d0:db:15:76: 0d:eb:87:22:b1:68:64:51:0a:90:19:6e:a4:f0:a5:31:4c:bd: d6:f3:84:bf:ee:a9:21:0e:43:75:70:3a:d8:ef:13:a6:d7:95: 51:a4:99:71:a1:95:ec:8b:47:cc:ea:f1:f0:c5:bd:bc:5d:a8: 98:10:9b:11:6c:16:1d:66:37:a8:1a:1f:0e:38:00:e2:fb:c0: b7:8b:3a:f2:4b:03:43:c8:31:18:34:29:f0:28:0e:ed:01:7a: a5:52:c5:88:b6:da:93:c9:0c:68:f0:67:1a:42:bc:fd:4e:5e: 58:c6:17:26:3c:40:43:91:75:85:25:f0:ac:a0:60:30:a4:d0: 0e:8a:ca:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8Av9LRIScPHH+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NTczZGI5Y2MtNWFlZS00NTNiLTliZmUtYzQwNjBhNThjNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdimXZQ2iBDZRPIntwNcZ1dqgMNl+NbRNPgI CLLBtbNuEmfnN1rGDFfDkH0Jg2YwT2KPebOpYupemsXwfqb7rlZHMpXlzEV0PBud cgiNNQQvNitPLAa9joCm79t1untZVWc2mr7+iXnx7F41CXT2TaU3dPoCbI/ApllY /btqRXA1apbFVsdz5Bk6/ztDs5mOrNLTgsiHpY7hkrJJsgimWCo7vZLTWHgVK6Cp JdxD2zgxCmHK+o5sIAD64+isG5GVuNgVXsR2o1SVc3wWbGAQZvCTtlS1K1CevFws 1SgeGAbPO/SlgLMuWhZyzex9rIji4aCUyptwuara6VUEcqylVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZLllABdLt6M70cBSHqXhwZLYHZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvYmRkMzA2YTAtZWYyMi0z OWVjLTgzYTMtNDU2NDJjYjcwYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2M1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0SJ6Y58lGqSQjabjgxEo/oETosZUdOtvl2IyYghrzM+WWd0f4dmIRl NayGRuw3b5QG7Ph7A8yfLN70xxZmifHUjPujwSfXmT4/kNcvOdPqdMuLDiUKXOU6 XnQIxeu74gLjwOHslzUo6qlhIWmmbwWXm1s87MgbQSTi0NsVdg3rhyKxaGRRCpAZ bqTwpTFMvdbzhL/uqSEOQ3VwOtjvE6bXlVGkmXGhleyLR8zq8fDFvbxdqJgQmxFs Fh1mN6gaHw44AOL7wLeLOvJLA0PIMRg0KfAoDu0BeqVSxYi22pPJDGjwZxpCvP1O XljGFyY8QEORdYUl8KygYDCk0A6Kys8= -----END CERTIFICATE-----Generated at Wed Apr 29 15:30:53 2026 by rpki-client