$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa File: 25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa (raw, json) Hash identifier: 3akNERVpwShHuXS4ifV3upm7LoDVubmpZol+2GBnN9s= Subject key identifier: C9:C4:1E:A3:ED:10:1A:01:F5:EF:56:91:3D:C7:A7:82:B6:A0:C5:B6 Certificate issuer: /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Certificate serial: 010D0C9F4328584D3DFF9758ADA9D0F56D97C792 Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 1239 IP address blocks: 208.94.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:97:58:ad:a9:d0:f5:6d:97:c7:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=fec172bf-5098-43e6-a6d0-f45ed1b8c8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:79:0a:8a:40:14:94:46:2e:7f:02:d6:c2: be:fa:b5:56:8b:51:81:26:66:01:10:89:28:08:40: 89:c2:c8:32:4b:2a:e2:b9:dc:ee:bd:e6:84:74:ae: 75:74:89:05:67:06:f1:82:1c:65:7f:70:f4:dd:21: c0:6d:48:ab:67:82:8b:a7:77:0e:1f:bf:95:cd:ac: e7:b5:2e:b2:32:61:87:8a:df:76:a7:bb:78:25:92: 92:f8:eb:f3:e2:e8:e5:5e:8b:dc:81:d9:d9:89:95: 2f:40:b5:bb:10:31:61:88:e7:94:85:d4:6f:26:04: a4:2f:e2:c1:63:2a:67:a8:64:6b:1e:52:2c:57:92: 70:37:79:19:84:98:3e:06:4d:7d:60:2a:f1:e2:62: 08:1c:35:43:70:34:8b:52:18:bf:74:ca:a4:e3:01: e5:5e:28:0a:99:66:f7:ef:b6:a2:d9:e5:d2:a9:6f: 86:ee:07:87:7f:82:be:1e:1d:de:dc:d9:b1:be:83: aa:80:01:80:df:bd:24:a2:dd:00:0c:67:ae:29:a4: 1e:0a:06:7b:85:64:e5:12:82:c9:87:32:64:f6:b3: b6:bb:a5:65:fe:55:31:f4:1b:45:98:5b:d4:54:63: c5:b8:47:62:c9:a2:d6:dc:72:dd:44:fd:c4:32:26: ff:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:1E:A3:ED:10:1A:01:F5:EF:56:91:3D:C7:A7:82:B6:A0:C5:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/25a095b0-1a57-39b5-85ff-c7fa347fc1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl X509v3 Authority Key Identifier: keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer sbgp-ipAddrBlock: critical IPv4: 208.94.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:36:8e:c9:d0:49:a0:4d:f0:31:0a:40:8e:9f:23:6c:d5:b1: f6:49:3e:21:12:f2:15:fd:f8:a0:46:07:e0:e7:4b:00:d6:55: 96:d4:4b:11:2a:c5:df:a3:ff:a6:cf:51:3e:75:e9:79:77:73: 14:cc:55:31:f7:54:ad:63:a0:e1:3e:5d:c4:be:fd:4a:1c:41: 36:09:0c:76:a6:f4:47:ec:86:df:51:87:c7:4d:8c:61:59:c7: 78:13:3a:d4:44:c1:2b:86:df:79:66:f2:3f:fd:37:a7:41:6d: 22:5c:d7:53:26:b8:72:99:69:c2:7a:a9:3c:26:ae:fe:5c:a8: 72:26:cc:59:ed:7b:e7:b4:57:e2:0a:07:bb:ad:e0:ed:b9:c9: 3d:01:f9:6e:42:b4:1f:77:12:71:81:c1:4c:82:52:d1:c3:54: b1:b7:79:6a:94:e9:f9:f2:2c:dc:9e:9a:ca:bb:c9:e5:43:5e: b5:2e:be:d5:cb:f1:eb:79:cd:32:5c:04:3b:71:33:4d:5e:f4: 25:08:a4:e8:e2:be:1b:f9:cd:f5:6a:70:2f:87:f8:4e:66:ad: e4:2f:a6:32:4d:90:30:d0:39:b4:bc:99:4c:13:7c:68:8c:33: 70:77:86:9f:27:86:c9:d3:ab:07:a5:8b:76:f1:92:f4:3d:0a: 6b:8f:04:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5dYranQ9W2Xx5IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2NTY4NWYtMTA0Yi00MWM5LTlmZTMtNTNkN2ZlNGQx NDFlMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmVjMTcyYmYtNTA5OC00M2U2LWE2ZDAtZjQ1ZWQxYjhjOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+p5CopAFJRGLn8C1sK++rVWi1GBJmYBEIko CECJwsgySyriudzuveaEdK51dIkFZwbxghxlf3D03SHAbUirZ4KLp3cOH7+Vzazn tS6yMmGHit92p7t4JZKS+Ovz4ujlXovcgdnZiZUvQLW7EDFhiOeUhdRvJgSkL+LB YypnqGRrHlIsV5JwN3kZhJg+Bk19YCrx4mIIHDVDcDSLUhi/dMqk4wHlXigKmWb3 77ai2eXSqW+G7geHf4K+Hh3e3NmxvoOqgAGA370kot0ADGeuKaQeCgZ7hWTlEoLJ hzJk9rO2u6Vl/lUx9BtFmFvUVGPFuEdiyaLW3HLdRP3EMib/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnEHqPtEBoB9e9WkT3Hp4K2oMW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1 Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3ZmU0ZDE0MWUvMjVhMDk1YjAtMWE1Ny0z OWI1LTg1ZmYtYzdmYTM0N2ZjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2NTY4NWYtMTA0Yi00MWM5LTlm ZTMtNTNkN2ZlNGQxNDFlLzM5NjU2ODVmLTEwNGItNDFjOS05ZmUzLTUzZDdmZTRk MTQxZS5jcmwwHwYDVR0jBBgwFoAULU7sB30FdPaOk41H3eOCV9QL398wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY1Njg1Zi0xMDRiLTQxYzktOWZlMy01M2Q3 ZmU0ZDE0MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0F6MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD42jsnQSaBN8DEKQI6fI2zVsfZJPiES8hX9+KBGB+DnSwDWVZbUSxEq xd+j/6bPUT516Xl3cxTMVTH3VK1joOE+XcS+/UocQTYJDHam9Efsht9Rh8dNjGFZ x3gTOtREwSuG33lm8j/9N6dBbSJc11MmuHKZacJ6qTwmrv5cqHImzFnte+e0V+IK B7ut4O25yT0B+W5CtB93EnGBwUyCUtHDVLG3eWqU6fnyLNyemsq7yeVDXrUuvtXL 8et5zTJcBDtxM01e9CUIpOjivhv5zfVqcC+H+E5mreQvpjJNkDDQObS8mUwTfGiM M3B3hp8nhsnTqweli3bxkvQ9CmuPBIQ= -----END CERTIFICATE-----Generated at Tue Mar 24 14:25:20 2026 by rpki-client