$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa File: b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa (raw, json) Hash identifier: JnCBAFveBmrY5Cil+kTyUZgZnoNtnaLXabzbXl7KM3Q= Subject key identifier: 9A:30:D1:4B:CC:E1:1E:EC:54:18:14:A3:3A:C7:40:10:A0:06:46:C9 Certificate issuer: /CN=580e739b-bb2f-4e02-9a24-4813328e39cf Certificate serial: 010D0C9F4328584D5234F793B411597899AD3500 Authority key identifier: E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa Signing time: Sat 28 Mar 2026 18:44:35 +0000 ROA not before: Sat 28 Mar 2026 18:44:35 +0000 ROA not after: Mon 25 May 2026 20:04:57 +0000 asID: 3736 IP address blocks: 204.138.71.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f7:93:b4:11:59:78:99:ad:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=580e739b-bb2f-4e02-9a24-4813328e39cf Validity Not Before: Mar 28 18:44:35 2026 GMT Not After : May 25 20:04:57 2026 GMT Subject: CN=aa6ded22-3316-433e-8a38-7fcfe3ea413e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:6e:1b:cc:ea:42:5e:bc:5c:4a:7e:57:3b:be: 7f:c8:1c:3f:6f:64:74:53:a7:2f:45:a0:0a:04:96: 71:93:7f:d7:d1:e3:5a:65:82:9f:ea:e0:8f:21:12: 3b:ac:11:69:8d:87:2b:d0:c9:ba:fd:44:86:34:c4: 96:be:2f:88:d3:54:f3:ec:ea:df:20:70:9d:67:3b: ff:cf:f5:94:3a:76:b3:a8:d4:a0:13:c7:42:aa:a5: 02:f1:fb:93:84:5c:93:c5:22:8c:b0:42:64:34:12: 8c:b0:51:af:bf:fb:84:67:22:c0:97:b3:ce:99:c8: 99:d6:2c:eb:ff:a5:fc:b4:55:9b:c1:99:c8:24:bd: a0:b6:7c:a2:b0:99:99:71:9d:70:8d:58:66:71:e8: 9e:64:34:d6:c3:60:91:b6:2c:4f:fc:47:d5:59:41: 0f:7f:a0:1f:67:cf:e0:7b:02:8b:c1:29:f6:b4:41: 28:83:0b:d1:ac:44:a8:15:3d:bf:4a:12:42:7f:be: 05:7a:45:35:d0:22:8e:9d:e6:91:fc:83:26:8e:6d: 83:ea:ff:48:3c:91:07:71:eb:e1:aa:25:28:b6:33: 80:3a:60:be:6b:4c:0f:fe:e3:24:3b:1f:3f:79:67: 26:09:79:89:f7:7e:0e:35:9c:7a:3b:19:c7:20:65: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:30:D1:4B:CC:E1:1E:EC:54:18:14:A3:3A:C7:40:10:A0:06:46:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/b8f1b0d4-5487-3c51-9f61-4e97726e3695.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf/580e739b-bb2f-4e02-9a24-4813328e39cf.crl X509v3 Authority Key Identifier: keyid:E7:79:6E:D4:0C:02:40:FD:99:B7:72:46:72:82:E5:A1:D4:89:C8:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/580e739b-bb2f-4e02-9a24-4813328e39cf.cer sbgp-ipAddrBlock: critical IPv4: 204.138.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:85:ee:0c:9a:ed:dd:34:75:77:b6:73:e5:52:09:8f:7b:21: a0:8d:ae:f3:cf:40:9b:29:2d:d9:38:74:21:ed:08:bc:9e:a8: f0:f6:06:5a:8c:17:59:bb:9b:c6:1b:fb:5f:34:ff:00:13:b5: da:d6:68:05:f6:66:86:39:f1:8e:b9:e4:55:9d:b4:8b:cc:e4: e3:bb:86:e0:37:3e:17:4e:3b:68:46:6d:c5:2a:ed:32:99:44: 75:a9:4b:81:e6:95:43:70:13:77:29:9c:c3:d2:72:6d:e4:ec: 75:ab:cd:01:ef:fc:c9:91:77:68:46:4a:ab:05:7b:16:56:43: c2:6b:d0:0b:45:53:4f:78:11:a1:2e:59:6d:aa:0b:cd:94:02: c4:24:53:98:7d:1f:e2:39:92:01:7b:cc:6d:1a:5c:af:a6:ae: 87:b4:f5:84:2c:6b:20:84:e7:5c:7f:d1:d7:38:6e:47:6e:b4: e4:7f:3b:f7:b3:db:ef:ed:27:8d:08:aa:cf:16:8f:ac:12:3f: 78:13:02:a7:11:cc:01:49:f8:aa:8b:b7:2a:a0:89:08:dd:8c: 2e:73:a3:1a:89:7c:d9:74:bb:ff:f4:e5:5d:2c:a6:7d:0d:44: af:97:cf:16:ee:1d:02:e8:08:59:38:b8:00:80:52:0d:34:37: 01:5d:ab:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SNPeTtBFZeJmtNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgwZTczOWItYmIyZi00ZTAyLTlhMjQtNDgxMzMyOGUz OWNmMB4XDTI2MDMyODE4NDQzNVoXDTI2MDUyNTIwMDQ1N1owLzEtMCsGA1UEAxMk YWE2ZGVkMjItMzMxNi00MzNlLThhMzgtN2ZjZmUzZWE0MTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp24bzOpCXrxcSn5XO75/yBw/b2R0U6cvRaAK BJZxk3/X0eNaZYKf6uCPIRI7rBFpjYcr0Mm6/USGNMSWvi+I01Tz7OrfIHCdZzv/ z/WUOnazqNSgE8dCqqUC8fuThFyTxSKMsEJkNBKMsFGvv/uEZyLAl7POmciZ1izr /6X8tFWbwZnIJL2gtnyisJmZcZ1wjVhmceieZDTWw2CRtixP/EfVWUEPf6AfZ8/g ewKLwSn2tEEogwvRrESoFT2/ShJCf74FekU10CKOneaR/IMmjm2D6v9IPJEHcevh qiUotjOAOmC+a0wP/uMkOx8/eWcmCXmJ934ONZx6OxnHIGW+RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJow0UvM4R7sVBgUozrHQBCgBkbJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBl NzM5Yi1iYjJmLTRlMDItOWEyNC00ODEzMzI4ZTM5Y2YvYjhmMWIwZDQtNTQ4Ny0z YzUxLTlmNjEtNGU5NzcyNmUzNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNTgwZTczOWItYmIyZi00ZTAyLTlh MjQtNDgxMzMyOGUzOWNmLzU4MGU3MzliLWJiMmYtNGUwMi05YTI0LTQ4MTMzMjhl MzljZi5jcmwwHwYDVR0jBBgwFoAU53lu1AwCQP2Zt3JGcoLlodSJyLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ODBlNzM5Yi1iYjJmLTRlMDItOWEyNC00ODEz MzI4ZTM5Y2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzIpHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGeF7gya7d00dXe2c+VSCY97IaCNrvPPQJspLdk4dCHtCLyeqPD2BlqM F1m7m8Yb+180/wATtdrWaAX2ZoY58Y655FWdtIvM5OO7huA3PhdOO2hGbcUq7TKZ RHWpS4HmlUNwE3cpnMPScm3k7HWrzQHv/MmRd2hGSqsFexZWQ8Jr0AtFU094EaEu WW2qC82UAsQkU5h9H+I5kgF7zG0aXK+mroe09YQsayCE51x/0dc4bkdutOR/O/ez 2+/tJ40Iqs8Wj6wSP3gTAqcRzAFJ+KqLtyqgiQjdjC5zoxqJfNl0u//05V0spn0N RK+XzxbuHQLoCFk4uACAUg00NwFdqzs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:55:31 2026 by rpki-client