$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abbb520b-2000-3df3-9a39-9840a67112e9.roa File: abbb520b-2000-3df3-9a39-9840a67112e9.roa (raw, json) Hash identifier: wtTzByFLfOapMtrBVbFhBTC6j5JPgm0IrBzVrgknQ3s= Subject key identifier: B0:F8:F9:53:1B:44:17:E7:46:6A:DC:EE:CC:9B:7F:B2:72:1A:F3:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D5EFE3BF4D0CBB07BCB06A180 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abbb520b-2000-3df3-9a39-9840a67112e9.roa Signing time: Thu 02 Apr 2026 08:39:49 +0000 ROA not before: Thu 02 Apr 2026 08:39:49 +0000 ROA not after: Wed 01 Jul 2026 08:39:49 +0000 asID: 396982 IP address blocks: 8.228.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:fe:3b:f4:d0:cb:b0:7b:cb:06:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 2 08:39:49 2026 GMT Not After : Jul 1 08:39:49 2026 GMT Subject: CN=88368e36-e3b9-456a-9a3f-b665fb4e9fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:0b:74:28:09:a7:91:06:0b:d5:be:f1:20:95: 3e:e8:12:35:86:04:0a:a4:28:00:2b:19:84:99:a2: 1d:ba:07:87:bd:3d:6b:9c:b7:1e:33:41:ec:8b:d0: 76:8f:1a:51:bb:01:ef:32:bc:ca:86:64:55:0c:da: 77:06:7c:95:09:0e:bb:28:dc:05:31:46:f1:e2:ed: a0:64:b2:10:04:2f:17:b7:84:11:60:c8:c9:d1:3f: e4:6b:7d:1e:d0:00:7e:5c:49:aa:0a:d4:c3:00:d6: eb:7c:c4:3c:1b:89:b7:9a:61:51:63:d3:fe:df:0e: af:d4:df:3f:c4:11:cf:10:77:6f:47:a9:36:a7:ef: 6b:1b:f3:9d:23:42:44:a5:1d:36:29:2a:a2:77:5a: 85:2c:ae:39:d4:09:82:ec:a5:b7:f7:68:bf:63:82: 69:43:e2:4a:51:15:30:a2:6e:d5:74:4e:7a:c7:f5: a6:84:c2:3c:c7:d1:e2:0c:40:3b:c4:a8:dd:59:ec: ba:d4:6b:48:47:3b:52:92:82:98:ff:19:83:d6:5c: a2:b0:1a:b9:3f:db:14:ba:4c:6b:d8:39:fd:93:5d: 7b:a7:be:e9:32:50:8f:d7:fa:c8:e3:e9:a7:61:18: 34:1e:90:a9:d4:1d:f4:97:c5:31:61:d9:22:55:d1: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F8:F9:53:1B:44:17:E7:46:6A:DC:EE:CC:9B:7F:B2:72:1A:F3:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/abbb520b-2000-3df3-9a39-9840a67112e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 8.228.240.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:3a:81:5c:08:f4:61:8e:d6:de:74:56:52:3b:c9:bb:6e:2a: e6:47:32:f8:4b:74:c1:45:9c:49:04:4f:3b:f8:1a:8c:6c:56: 57:c6:fe:b0:58:9c:6b:63:00:c2:9b:19:53:af:dc:22:15:ed: 55:45:f2:90:bd:ba:8a:ec:2f:6a:9b:9b:e0:32:61:9e:54:6c: cc:56:3b:64:55:fd:d8:15:28:f8:01:bd:3f:0c:30:7c:2d:0f: 4c:80:d8:20:b7:db:ed:0d:2b:0e:e9:5e:82:53:fc:47:4c:30: 20:f9:dc:1b:7b:34:65:0a:35:ee:2b:1e:3c:de:15:1b:a4:14: 34:05:9e:2c:a5:58:b5:a0:6a:81:35:2b:e6:64:c6:b3:16:de: 28:c1:5b:99:16:19:91:80:18:41:ee:b4:d1:65:73:dd:73:59: 24:b7:dc:f1:bd:87:56:cb:5c:81:7e:d9:cc:ff:66:c5:52:60: 8e:0c:f0:7f:6c:f1:5c:d8:8e:f7:cd:f1:1d:cf:32:6c:13:26: 92:8b:3e:29:ca:bf:25:cb:81:fd:f4:03:43:69:bd:e2:a2:14: 1c:35:00:08:b5:ae:e1:7b:f0:8e:36:07:78:93:08:d4:91:cb: 43:90:86:ac:51:3b:1f:30:77:f6:0e:fe:fc:0c:13:3f:ed:f9: c1:72:27:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1e/jv00Muwe8sGoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDQwMjA4Mzk0OVoXDTI2MDcwMTA4Mzk0OVowLzEtMCsGA1UEAxMk ODgzNjhlMzYtZTNiOS00NTZhLTlhM2YtYjY2NWZiNGU5ZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQt0KAmnkQYL1b7xIJU+6BI1hgQKpCgAKxmE maIdugeHvT1rnLceM0Hsi9B2jxpRuwHvMrzKhmRVDNp3BnyVCQ67KNwFMUbx4u2g ZLIQBC8Xt4QRYMjJ0T/ka30e0AB+XEmqCtTDANbrfMQ8G4m3mmFRY9P+3w6v1N8/ xBHPEHdvR6k2p+9rG/OdI0JEpR02KSqid1qFLK451AmC7KW392i/Y4JpQ+JKURUw om7VdE56x/WmhMI8x9HiDEA7xKjdWey61GtIRztSkoKY/xmD1lyisBq5P9sUukxr 2Dn9k117p77pMlCP1/rI4+mnYRg0HpCp1B30l8UxYdkiVdEY7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLD4+VMbRBfnRmrc7sybf7JyGvNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWJiYjUyMGItMjAwMC0z ZGYzLTlhMzktOTg0MGE2NzExMmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDCOTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ6gVwI9GGO1t50VlI7ybtuKuZHMvhLdMFFnEkETzv4GoxsVlfG/rBY nGtjAMKbGVOv3CIV7VVF8pC9uorsL2qbm+AyYZ5UbMxWO2RV/dgVKPgBvT8MMHwt D0yA2CC32+0NKw7pXoJT/EdMMCD53Bt7NGUKNe4rHjzeFRukFDQFniylWLWgaoE1 K+ZkxrMW3ijBW5kWGZGAGEHutNFlc91zWSS33PG9h1bLXIF+2cz/ZsVSYI4M8H9s 8VzYjvfN8R3PMmwTJpKLPinKvyXLgf30A0NpveKiFBw1AAi1ruF78I42B3iTCNSR y0OQhqxROx8wd/YO/vwMEz/t+cFyJy4= -----END CERTIFICATE-----Generated at Wed Apr 8 18:57:18 2026 by rpki-client