$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa File: 60ee8622-9109-33d6-910b-dbcc8263baa3.roa (raw, json) Hash identifier: GZAsEnH4DwaR+CYj2sBzC8RglsbxktiLdX/B+qPxoio= Subject key identifier: D5:D4:29:25:88:A8:E3:8D:99:50:E4:9D:6A:50:C5:F2:A7:C2:56:A7 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0EA7B0FDC0867174AA09FD00 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 396112 IP address blocks: 208.40.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b0:fd:c0:86:71:74:aa:09:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=0d21a84e-8f6c-4f16-a3b0-9e99c1a3e413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:52:11:6a:d0:e3:44:0b:4d:8f:3f:7f:93:0f: 24:cb:3a:f2:0f:22:3b:71:a7:f1:01:04:da:c7:ca: 2f:d0:c2:fc:53:6a:bd:a2:c5:f1:c4:db:da:50:fd: 28:d5:6b:63:ca:2a:9d:d4:b0:6e:90:47:76:06:8d: a6:33:09:0c:bc:16:57:4e:ff:a3:62:f4:03:18:17: ce:4d:f2:65:24:26:0f:a8:02:20:b0:81:1d:ec:63: a8:6f:1a:e2:ca:1d:ad:ed:2a:e0:75:b4:94:8f:6a: 02:15:0e:82:fc:ee:f1:e2:e2:1c:dc:b1:88:f0:13: 08:ae:c6:4a:88:20:c2:e5:91:98:94:69:ba:a0:46: 0a:bb:fc:7c:9b:cd:6a:fb:10:e0:73:97:22:6d:22: 12:61:91:34:df:3a:89:e4:5b:e5:cb:cc:73:19:90: 68:0b:5a:18:1e:58:ab:82:c8:48:14:a6:c1:5b:4f: c0:9b:1a:8b:ef:63:43:45:c4:93:1e:37:4b:a8:aa: 37:d0:c0:1f:b1:a5:2a:68:a5:b8:c1:cf:1d:80:8e: 96:47:4b:cd:dd:a4:d2:14:76:77:3c:08:e7:5d:17: cf:13:75:9a:f1:1d:99:43:80:8a:20:7e:2c:d4:c3: 3f:06:76:05:c0:e3:77:8b:28:0c:30:3a:ee:24:23: 18:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D4:29:25:88:A8:E3:8D:99:50:E4:9D:6A:50:C5:F2:A7:C2:56:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/60ee8622-9109-33d6-910b-dbcc8263baa3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 208.40.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4e:f2:c7:11:9d:64:06:e6:84:5d:0b:f8:ff:64:b5:98:fa: a8:ec:ce:83:50:93:73:7f:ab:f6:c5:0f:f6:7c:00:e0:e3:5e: aa:ac:ff:7b:52:c5:e6:a6:68:d0:bf:89:33:f1:b4:6b:ad:6c: 11:10:6c:34:7c:2b:be:3e:cd:3b:fd:5f:dc:b2:9f:c5:fd:fa: 88:16:41:f3:9f:12:6e:9f:93:be:02:ce:3c:6e:2e:9c:5a:8c: f2:0f:cc:a1:42:5b:d9:55:cb:d5:0a:4f:19:9b:71:4e:25:39: 69:f3:a0:c5:0d:41:97:17:74:b4:be:cb:6d:e0:3c:db:99:25: c7:1e:39:80:f3:8c:04:2d:18:d5:fb:ab:4a:e8:c1:22:cd:67: 3d:35:33:37:be:05:e0:aa:fa:2f:8c:16:73:b4:c5:c2:9a:e7: 1b:92:35:cd:0d:07:f4:27:a3:b4:b4:d2:f5:e1:7a:eb:72:ab: d2:f2:9d:f8:2f:4f:45:34:94:6a:77:ac:f8:17:e3:c0:58:ec: d0:9a:28:08:74:a9:84:57:2e:32:55:e1:44:07:aa:7d:91:6b: 64:5d:5c:85:00:1a:a5:f2:46:02:db:25:12:aa:ff:ec:f3:84: 51:e1:4d:25:8d:c6:33:28:ec:cd:27:d6:48:88:4b:f9:dc:31: 67:38:d8:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op7D9wIZxdKoJ/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk MGQyMWE4NGUtOGY2Yy00ZjE2LWEzYjAtOWU5OWMxYTNlNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlIRatDjRAtNjz9/kw8kyzryDyI7cafxAQTa x8ov0ML8U2q9osXxxNvaUP0o1Wtjyiqd1LBukEd2Bo2mMwkMvBZXTv+jYvQDGBfO TfJlJCYPqAIgsIEd7GOobxriyh2t7SrgdbSUj2oCFQ6C/O7x4uIc3LGI8BMIrsZK iCDC5ZGYlGm6oEYKu/x8m81q+xDgc5cibSISYZE03zqJ5Fvly8xzGZBoC1oYHlir gshIFKbBW0/AmxqL72NDRcSTHjdLqKo30MAfsaUqaKW4wc8dgI6WR0vN3aTSFHZ3 PAjnXRfPE3Wa8R2ZQ4CKIH4s1MM/BnYFwON3iygMMDruJCMYiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXUKSWIqOONmVDknWpQxfKnwlanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvNjBlZTg2MjItOTEwOS0z M2Q2LTkxMGItZGJjYzgyNjNiYWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Cj0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNO8scRnWQG5oRdC/j/ZLWY+qjszoNQk3N/q/bFD/Z8AODjXqqs/3tS xeamaNC/iTPxtGutbBEQbDR8K74+zTv9X9yyn8X9+ogWQfOfEm6fk74CzjxuLpxa jPIPzKFCW9lVy9UKTxmbcU4lOWnzoMUNQZcXdLS+y23gPNuZJcceOYDzjAQtGNX7 q0rowSLNZz01Mze+BeCq+i+MFnO0xcKa5xuSNc0NB/Qno7S00vXheutyq9Lynfgv T0U0lGp3rPgX48BY7NCaKAh0qYRXLjJV4UQHqn2Ra2RdXIUAGqXyRgLbJRKq/+zz hFHhTSWNxjMo7M0n1kiIS/ncMWc42Ms= -----END CERTIFICATE-----Generated at Fri Mar 13 13:15:43 2026 by rpki-client