$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa File: d8d9475d-3273-347c-bebb-562c1777f770.roa (raw, json) Hash identifier: PE79DhpePyKf8GYPnGo5LZG9/3nGAVJs75wrICjKcrM= Subject key identifier: AB:4B:B7:91:B7:D6:5B:29:74:C0:9C:2B:E0:8D:2B:80:4A:43:75:A9 Certificate issuer: /CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Certificate serial: 010D0C9F4328584D3DFF97908746170BAEBE5820 Authority key identifier: 87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 6939 IP address blocks: 208.65.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:97:90:87:46:17:0b:ae:be:58:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb7045d-2d5f-4c56-bfa4-e35f745a61f8 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=e06d6c12-cb45-48b3-92b4-6f32b8039f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:85:22:92:3e:ff:b2:6c:0b:50:aa:b9:f1:37: c5:d9:af:c5:b1:7f:21:7a:4d:1a:03:21:32:39:db: 34:94:73:bf:7e:32:0e:6c:1e:df:cd:6d:d3:1b:36: 19:06:b2:25:a5:16:e9:4c:99:ba:0e:9b:f9:43:b0: 63:3e:98:ce:84:a9:58:2f:c1:72:33:a0:61:25:79: 37:02:de:a8:50:2d:93:44:b3:34:b0:18:14:94:7d: ac:f5:a0:7a:c2:1f:08:ef:8b:aa:17:0d:6c:bf:1f: 30:12:49:7e:08:96:ce:c0:6c:d0:50:2a:05:cb:97: 0a:01:7e:34:d2:f2:c5:ef:2c:0c:40:67:2d:bc:bb: 71:02:ca:79:7f:3d:39:ed:84:2b:5f:66:15:bb:4a: cf:ac:40:61:80:03:bf:d6:04:5b:70:1b:3a:d3:4b: 1a:bb:38:e9:1e:76:85:81:e6:66:e4:d3:01:b2:a0: 44:f5:d3:96:bd:9c:18:67:14:86:c9:87:2c:fc:9a: af:e6:3d:8c:a6:49:db:18:46:15:d2:ca:11:71:7d: 6c:ff:c7:60:f7:0a:41:44:2a:10:a4:84:a1:2b:c2: 8d:de:b5:74:86:63:f8:9a:37:86:d5:14:71:69:53: d3:71:ae:cf:a3:cc:b2:96:12:e1:71:31:9e:3d:64: d1:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:4B:B7:91:B7:D6:5B:29:74:C0:9C:2B:E0:8D:2B:80:4A:43:75:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/d8d9475d-3273-347c-bebb-562c1777f770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.crl X509v3 Authority Key Identifier: keyid:87:08:FA:CC:1A:BD:61:90:0F:41:14:19:3A:6A:01:FD:DA:5E:6B:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cfb7045d-2d5f-4c56-bfa4-e35f745a61f8.cer sbgp-ipAddrBlock: critical IPv4: 208.65.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:01:2b:10:a4:d9:23:5e:59:2e:18:77:45:90:bc:8d:f9:6a: 86:a8:c7:6c:b4:84:25:6a:2a:f3:18:a1:a1:a0:57:a1:b5:21: 30:b3:8d:ce:49:db:ee:29:55:8c:89:40:a3:7f:58:c6:5a:cc: 74:6e:e1:4f:4f:eb:4e:1e:5e:15:e0:d7:2d:db:ee:45:3a:1f: db:9f:32:53:cf:a3:d8:93:38:0e:ac:01:f2:3b:18:aa:6d:b6: f3:f1:1a:0c:03:5b:be:d0:da:d6:0a:9c:3e:26:2e:16:0c:66: 1a:12:08:c1:1f:5f:3b:92:ea:cc:8e:77:57:89:63:91:24:04: 96:5f:59:3b:40:e3:9c:a6:0c:6f:18:09:5a:8a:33:e1:75:d5: 88:47:12:2a:78:a4:04:22:df:53:50:b0:03:a4:8b:e0:51:26: f5:a2:41:1e:26:ac:6f:d0:f5:9d:c0:a4:3d:38:4e:d0:eb:4d: ce:1f:64:ee:f1:67:f4:51:e2:5d:f8:93:b7:de:0a:6a:f1:46: b6:53:bd:10:91:09:03:6c:24:90:f9:17:eb:d6:50:23:d6:58: a6:f6:a7:05:08:dd:90:e9:4d:3e:76:6c:a1:34:3a:a7:90:d8: 28:1b:12:a3:33:8c:d8:b8:c7:72:c9:26:ff:c4:2a:48:ef:d3: 5f:69:08:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/5eQh0YXC66+WCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZiNzA0NWQtMmQ1Zi00YzU2LWJmYTQtZTM1Zjc0NWE2 MWY4MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZTA2ZDZjMTItY2I0NS00OGIzLTkyYjQtNmYzMmI4MDM5ZjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYUikj7/smwLUKq58TfF2a/FsX8hek0aAyEy Ods0lHO/fjIObB7fzW3TGzYZBrIlpRbpTJm6Dpv5Q7BjPpjOhKlYL8FyM6BhJXk3 At6oUC2TRLM0sBgUlH2s9aB6wh8I74uqFw1svx8wEkl+CJbOwGzQUCoFy5cKAX40 0vLF7ywMQGctvLtxAsp5fz057YQrX2YVu0rPrEBhgAO/1gRbcBs600sauzjpHnaF geZm5NMBsqBE9dOWvZwYZxSGyYcs/Jqv5j2MpknbGEYV0soRcX1s/8dg9wpBRCoQ pIShK8KN3rV0hmP4mjeG1RRxaVPTca7Po8yylhLhcTGePWTR8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtLt5G31lspdMCcK+CNK4BKQ3WpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3 MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVmNzQ1YTYxZjgvZDhkOTQ3NWQtMzI3My0z NDdjLWJlYmItNTYyYzE3NzdmNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2ZiNzA0NWQtMmQ1Zi00YzU2LWJm YTQtZTM1Zjc0NWE2MWY4L2NmYjcwNDVkLTJkNWYtNGM1Ni1iZmE0LWUzNWY3NDVh NjFmOC5jcmwwHwYDVR0jBBgwFoAUhwj6zBq9YZAPQRQZOmoB/dpea44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jZmI3MDQ1ZC0yZDVmLTRjNTYtYmZhNC1lMzVm NzQ1YTYxZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQBKxCk2SNeWS4Yd0WQvI35aoaox2y0hCVqKvMYoaGgV6G1ITCzjc5J 2+4pVYyJQKN/WMZazHRu4U9P604eXhXg1y3b7kU6H9ufMlPPo9iTOA6sAfI7GKpt tvPxGgwDW77Q2tYKnD4mLhYMZhoSCMEfXzuS6syOd1eJY5EkBJZfWTtA45ymDG8Y CVqKM+F11YhHEip4pAQi31NQsAOki+BRJvWiQR4mrG/Q9Z3ApD04TtDrTc4fZO7x Z/RR4l34k7feCmrxRrZTvRCRCQNsJJD5F+vWUCPWWKb2pwUI3ZDpTT52bKE0OqeQ 2CgbEqMzjNi4x3LJJv/EKkjv019pCEw= -----END CERTIFICATE-----Generated at Sun Mar 22 09:41:13 2026 by rpki-client