$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa File: 4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa (raw, json) Hash identifier: vUs1BjE7CtJC97TX9p+OhBcIoPTS0c2vtRvhX+45kQU= Subject key identifier: C6:0A:0E:9A:A5:CA:17:F1:24:E1:87:BC:34:D9:10:BA:8C:86:D6:A5 Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F4328584D55BA3CCB2225B4B4E330A640 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 25649 IP address blocks: 208.86.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3c:cb:22:25:b4:b4:e3:30:a6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=cecbcca0-a0f8-446b-944d-582ea4418ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:91:1f:32:26:a6:22:a5:49:a2:b9:f3:ec: 8f:07:83:a1:bd:fd:7d:a0:8b:c7:89:57:75:49:bb: 4c:fd:30:e3:9e:98:96:fe:a5:aa:f0:bf:f0:12:f5: 69:d9:d7:bd:02:a7:c3:f3:20:08:3e:dc:67:d2:2c: 04:55:06:74:2a:dc:57:4f:bc:21:8f:cc:be:b6:40: dd:28:1a:0d:7b:28:29:c8:48:54:4a:c4:1d:ea:b5: cb:2b:fc:33:af:b7:02:1a:06:f1:29:9d:28:e5:bc: 79:49:2c:95:9b:47:ce:e7:bf:7d:dc:c6:ff:04:df: 5d:62:7d:54:de:aa:28:4e:b1:fa:aa:24:62:df:17: 2c:77:42:00:04:95:e2:3c:fa:b7:9b:45:2f:2a:fd: 5e:61:e9:ec:6a:c0:20:92:d3:9e:81:cb:26:84:ef: 92:49:64:65:45:eb:fe:fc:6f:4b:9f:09:e5:a4:cf: cc:d9:f2:0e:31:0d:25:95:63:5c:f1:3e:79:3b:7b: 68:0a:e1:7e:7d:39:85:3e:92:73:ba:a6:79:67:78: 73:17:97:89:77:2b:74:44:6f:70:7d:bd:6b:f7:eb: 00:a7:a5:d6:df:2a:55:07:fb:fa:1e:ee:59:ac:48: 73:50:49:61:8c:9b:7a:5c:f4:61:b5:e6:5e:06:40: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:0A:0E:9A:A5:CA:17:F1:24:E1:87:BC:34:D9:10:BA:8C:86:D6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/4dfb2ea7-2c14-31ad-98da-0ae7640e2d8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 208.86.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:05:30:b3:d8:3d:6b:fb:09:5b:42:3a:3f:64:31:35:b1:ec: 9b:10:19:7a:ca:ed:ac:1c:05:d6:be:4a:69:3d:8a:b5:51:4d: 8b:e0:7c:3e:2d:82:cf:86:1a:e9:10:69:c0:3d:22:11:91:99: 96:42:10:86:7a:45:4f:42:fd:35:61:e6:1a:cc:60:5d:84:97: 90:a1:6d:4a:8d:71:90:57:78:de:2b:e3:29:fa:28:67:25:13: a2:94:d6:31:90:05:ad:4d:a9:36:e4:b8:fb:28:bc:51:be:6a: 04:31:b7:19:2d:28:d0:f3:64:91:9a:80:4e:5e:7d:48:db:c1: e5:ab:e9:e0:b4:d0:f6:ab:88:c0:71:4c:b8:e8:f5:09:c9:e8: 9e:f1:e9:b7:f1:54:e7:b9:07:e2:0e:dc:c2:9e:4a:7d:cf:9a: f2:db:fd:31:04:36:5d:14:4f:ee:09:11:9c:a4:92:f5:ea:44: 1b:66:38:4b:be:9f:31:82:9d:60:a5:07:ae:96:50:bf:ae:5c: 90:bc:2e:90:31:f1:85:24:15:5f:7a:e8:f3:b9:ab:96:aa:42: 1a:ec:c4:71:3a:4c:6b:63:db:be:da:ed:73:1d:43:d0:4e:16: a5:09:07:8a:df:47:ac:ed:6e:29:89:65:86:c6:ed:3c:91:58: d7:73:12:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VujzLIiW0tOMwpkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk Y2VjYmNjYTAtYTBmOC00NDZiLTk0NGQtNTgyZWE0NDE4ZWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SSRHzImpiKlSaK58+yPB4Ohvf19oIvHiVd1 SbtM/TDjnpiW/qWq8L/wEvVp2de9AqfD8yAIPtxn0iwEVQZ0KtxXT7whj8y+tkDd KBoNeygpyEhUSsQd6rXLK/wzr7cCGgbxKZ0o5bx5SSyVm0fO57993Mb/BN9dYn1U 3qooTrH6qiRi3xcsd0IABJXiPPq3m0UvKv1eYensasAgktOegcsmhO+SSWRlRev+ /G9LnwnlpM/M2fIOMQ0llWNc8T55O3toCuF+fTmFPpJzuqZ5Z3hzF5eJdyt0RG9w fb1r9+sAp6XW3ypVB/v6Hu5ZrEhzUElhjJt6XPRhteZeBkAeRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYKDpqlyhfxJOGHvDTZELqMhtalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvNGRmYjJlYTctMmMxNC0z MWFkLTk4ZGEtMGFlNzY0MGUyZDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FYsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYFMLPYPWv7CVtCOj9kMTWx7JsQGXrK7awcBda+Smk9irVRTYvgfD4t gs+GGukQacA9IhGRmZZCEIZ6RU9C/TVh5hrMYF2El5ChbUqNcZBXeN4r4yn6KGcl E6KU1jGQBa1NqTbkuPsovFG+agQxtxktKNDzZJGagE5efUjbweWr6eC00PariMBx TLjo9QnJ6J7x6bfxVOe5B+IO3MKeSn3PmvLb/TEENl0UT+4JEZykkvXqRBtmOEu+ nzGCnWClB66WUL+uXJC8LpAx8YUkFV966PO5q5aqQhrsxHE6TGtj277a7XMdQ9BO FqUJB4rfR6ztbimJZYbG7TyRWNdzEi4= -----END CERTIFICATE-----Generated at Thu Apr 9 03:40:07 2026 by rpki-client