$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/852fdc84-033e-3d35-8385-10ae33d7f322.roa File: 852fdc84-033e-3d35-8385-10ae33d7f322.roa (raw, json) Hash identifier: u9HRXYkgHzYprjrULChWOXiW0b4X4pRAPyzj+SPw3uQ= Subject key identifier: 3D:D6:5E:0A:30:F2:DB:80:1A:7A:7C:57:EB:7F:DD:25:B5:97:97:8B Certificate issuer: /CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de Certificate serial: 010D0C9F4328584D55BCB9D853704D2BA9D7C380 Authority key identifier: A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/852fdc84-033e-3d35-8385-10ae33d7f322.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 15176 IP address blocks: 208.70.80.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 16 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:bc:b9:d8:53:70:4d:2b:a9:d7:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=3de4429a-9282-4291-bcbc-a09cd42c6c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:61:f8:66:80:a2:82:86:df:34:0e:8e:e5: cd:a8:97:29:37:41:1f:1e:bd:87:49:17:1e:ce:1a: 20:04:84:a2:2a:21:75:f0:af:1d:39:27:4f:2b:ac: 07:e4:cd:1b:9c:f6:2f:0e:35:5c:fa:8f:c5:2a:45: 09:7c:24:28:5d:b0:99:ad:46:8f:41:df:ef:d2:bf: f4:c5:7e:dc:6c:ab:55:aa:bd:53:19:fb:21:6b:35: 31:e5:ad:e6:72:d2:e9:83:33:f5:ae:e4:a1:6d:fa: 62:33:87:cb:20:18:bc:f6:c7:1c:f4:3c:32:47:0b: d1:3e:4c:f2:ed:f8:a9:2b:c9:25:5c:74:58:23:02: d3:f7:2a:38:fa:69:42:1d:84:61:bf:c3:e4:08:1e: 54:21:e0:48:88:86:2e:8b:54:11:92:ed:5d:98:7f: 6c:b8:15:4a:d7:2e:1d:57:f2:b3:55:f0:f3:e7:59: 6a:dd:d0:1a:91:e2:a0:c5:12:d2:85:4e:76:69:73: 4d:f1:e0:91:38:5f:61:28:70:8d:1c:27:79:75:1a: 72:24:e1:dd:be:87:ca:31:cb:04:a2:a0:0c:74:a3: fb:8c:5a:ee:b5:67:85:89:94:44:44:70:0f:77:ac: d5:ff:62:59:7d:21:de:d4:d7:ee:19:fa:17:56:96: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D6:5E:0A:30:F2:DB:80:1A:7A:7C:57:EB:7F:DD:25:B5:97:97:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/852fdc84-033e-3d35-8385-10ae33d7f322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.crl X509v3 Authority Key Identifier: keyid:A6:A6:0C:CE:DC:3F:02:49:BC:02:AC:F3:6C:C5:D3:09:E6:26:8B:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/41c69ce0-9bcb-49ce-8582-dc6ce7fdf1de.cer sbgp-ipAddrBlock: critical IPv4: 208.70.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:17:b5:07:e5:98:49:03:fd:f2:2b:e0:95:d0:75:db:41:b1: d8:8c:f6:6e:6a:09:41:8c:24:b5:ec:2f:93:82:1f:e3:40:52: de:55:a1:1c:4c:0c:cd:24:ef:39:aa:10:d2:28:05:36:4b:2a: f2:e6:d7:9d:7d:a8:f2:2b:c5:50:10:67:75:40:6d:bf:3c:5d: 72:f3:65:4b:89:88:dd:10:c1:46:38:76:da:80:0c:18:c9:f3: eb:2f:58:01:e6:f7:7b:dd:68:bf:7e:d2:3b:6b:5e:ca:34:d1: 68:8a:29:4b:ed:ce:af:5b:a3:9b:cd:72:b0:f0:dd:9f:67:a3: d2:ca:a7:73:df:e1:d5:3a:62:ea:e9:6b:ef:72:1e:7c:3e:30: ff:d4:f4:80:24:a5:28:45:10:29:0d:32:06:bd:85:f3:1c:ae: 6f:31:7a:f6:0f:73:d1:55:6d:2c:9f:11:65:9e:55:d5:f0:fc: cd:00:cd:97:35:4e:ba:14:51:db:2c:74:11:75:8f:3b:f3:60: 1e:7e:63:dc:13:8e:4c:67:a0:f1:e4:81:14:93:6e:eb:31:3d: fa:d0:90:47:a6:d9:97:9c:fa:00:09:e3:19:d5:a7:db:98:cf: 52:64:47:6e:b7:23:d6:cc:7e:c9:28:0f:cd:81:96:71:3c:76: 6c:cb:f0:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvLnYU3BNK6nXw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFjNjljZTAtOWJjYi00OWNlLTg1ODItZGM2Y2U3ZmRm MWRlMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk M2RlNDQyOWEtOTI4Mi00MjkxLWJjYmMtYTA5Y2Q0MmM2YzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Fh+GaAooKG3zQOjuXNqJcpN0EfHr2HSRce zhogBISiKiF18K8dOSdPK6wH5M0bnPYvDjVc+o/FKkUJfCQoXbCZrUaPQd/v0r/0 xX7cbKtVqr1TGfshazUx5a3mctLpgzP1ruShbfpiM4fLIBi89scc9DwyRwvRPkzy 7fipK8klXHRYIwLT9yo4+mlCHYRhv8PkCB5UIeBIiIYui1QRku1dmH9suBVK1y4d V/KzVfDz51lq3dAakeKgxRLShU52aXNN8eCROF9hKHCNHCd5dRpyJOHdvofKMcsE oqAMdKP7jFrutWeFiZRERHAPd6zV/2JZfSHe1NfuGfoXVpYp3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3WXgow8tuAGnp8V+t/3SW1l5eLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80MWM2 OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZjZTdmZGYxZGUvODUyZmRjODQtMDMzZS0z ZDM1LTgzODUtMTBhZTMzZDdmMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDFjNjljZTAtOWJjYi00OWNlLTg1 ODItZGM2Y2U3ZmRmMWRlLzQxYzY5Y2UwLTliY2ItNDljZS04NTgyLWRjNmNlN2Zk ZjFkZS5jcmwwHwYDVR0jBBgwFoAUpqYMztw/Akm8AqzzbMXTCeYmi9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80MWM2OWNlMC05YmNiLTQ5Y2UtODU4Mi1kYzZj ZTdmZGYxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUXtQflmEkD/fIr4JXQddtBsdiM9m5qCUGMJLXsL5OCH+NAUt5VoRxM DM0k7zmqENIoBTZLKvLm1519qPIrxVAQZ3VAbb88XXLzZUuJiN0QwUY4dtqADBjJ 8+svWAHm93vdaL9+0jtrXso00WiKKUvtzq9bo5vNcrDw3Z9no9LKp3Pf4dU6Yurp a+9yHnw+MP/U9IAkpShFECkNMga9hfMcrm8xevYPc9FVbSyfEWWeVdXw/M0AzZc1 TroUUdssdBF1jzvzYB5+Y9wTjkxnoPHkgRSTbusxPfrQkEem2Zec+gAJ4xnVp9uY z1JkR263I9bMfskoD82BlnE8dmzL8OY= -----END CERTIFICATE-----Generated at Wed Apr 15 15:58:17 2026 by rpki-client