$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/7919e5fa-b189-373f-9777-7aef35a8670d.roa File: 7919e5fa-b189-373f-9777-7aef35a8670d.roa (raw, json) Hash identifier: 5KyXKwJ1O/tgYVruiXDIp522U9kkq/feJkynhBkgfF0= Subject key identifier: 31:CF:39:22:7D:67:20:B3:6E:BA:A0:F5:D4:BB:94:52:6C:E0:EB:59 Certificate issuer: /CN=a961eafc-626d-458b-880e-038ff7feee7c Certificate serial: 010D0C9F4328584D08CC7EBF879CCD0AF33FF180 Authority key identifier: 0A:28:7A:7B:7F:59:E7:B4:03:75:50:8C:4E:A0:79:DD:45:2A:53:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/7919e5fa-b189-373f-9777-7aef35a8670d.roa Signing time: Mon 02 Mar 2026 11:40:04 +0000 ROA not before: Mon 02 Mar 2026 11:40:04 +0000 ROA not after: Sun 31 May 2026 10:40:04 +0000 asID: 398964 IP address blocks: 208.73.0.0/24 maxlen: 24 208.73.1.0/24 maxlen: 24 208.73.2.0/24 maxlen: 24 208.73.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/a961eafc-626d-458b-880e-038ff7feee7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/a961eafc-626d-458b-880e-038ff7feee7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:08:cc:7e:bf:87:9c:cd:0a:f3:3f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a961eafc-626d-458b-880e-038ff7feee7c Validity Not Before: Mar 2 11:40:04 2026 GMT Not After : May 31 10:40:04 2026 GMT Subject: CN=3caab1db-e1f4-401b-8824-0dc8a337a4b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e4:59:c0:2a:dc:e9:d5:d3:3d:99:83:86:27: 88:c9:61:48:2d:67:f5:e7:78:dd:b8:0c:4d:cf:7e: c7:9d:2c:51:10:2f:7c:a7:0b:43:b1:55:a1:1b:f5: 2e:18:51:a4:8c:f3:97:24:d9:6b:c6:04:b3:13:12: e5:bb:ef:6d:2d:11:37:a2:11:17:b4:22:36:ba:d3: f6:55:71:22:52:1e:d4:0d:4e:ec:56:4e:7b:37:0e: 28:f6:92:57:0e:24:ac:ea:2d:d8:f0:b0:4d:5b:93: 59:fd:05:38:17:fd:c2:ba:99:5c:91:fc:3f:8f:57: 91:e6:4a:5e:3a:7d:c6:b5:0d:cf:3a:e3:11:95:49: 48:08:4c:db:07:6e:bc:9f:86:1f:ec:95:da:9f:46: be:ec:92:d2:22:a0:cc:9a:49:4a:d2:18:32:e3:51: 81:40:9b:f7:1b:2c:52:db:85:a1:e2:9e:9d:46:9d: 2e:00:ee:4a:64:a2:d1:ff:d9:90:f2:14:96:b2:45: 4c:50:9e:f1:4a:78:15:39:39:ab:dd:6a:da:11:5f: ad:e4:5e:fb:2b:11:50:5d:e0:0f:3e:14:ed:19:70: de:99:10:4c:35:52:ec:9e:ee:74:61:55:56:29:47: 44:14:e9:89:c1:05:18:fb:63:50:e7:1b:ad:6d:c8: 40:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:CF:39:22:7D:67:20:B3:6E:BA:A0:F5:D4:BB:94:52:6C:E0:EB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/7919e5fa-b189-373f-9777-7aef35a8670d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c/a961eafc-626d-458b-880e-038ff7feee7c.crl X509v3 Authority Key Identifier: keyid:0A:28:7A:7B:7F:59:E7:B4:03:75:50:8C:4E:A0:79:DD:45:2A:53:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a961eafc-626d-458b-880e-038ff7feee7c.cer sbgp-ipAddrBlock: critical IPv4: 208.73.0.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e0:f9:61:91:f0:96:f7:e5:54:55:5d:71:fd:1c:9e:ff:48: 4c:28:85:4a:01:25:34:ae:85:cc:0a:1f:e6:43:4e:f4:eb:e6: c5:99:d5:5c:c6:d1:e4:45:41:5e:33:c9:67:90:d6:0b:c0:29: 33:40:54:23:f4:6f:5f:ec:32:62:82:a3:58:51:0a:73:f0:9b: b2:85:c6:71:1d:46:ab:a9:41:f2:7c:66:6e:d3:43:4a:b1:dd: a3:f0:29:75:0f:56:c4:2e:8d:f2:bb:4f:bc:3c:03:86:d9:ad: 5e:a7:26:ee:58:3f:16:a9:0d:ae:ab:26:07:f8:36:74:fd:35: 1d:c8:ad:a0:dc:2f:27:06:13:d6:be:8e:24:a3:6e:97:47:1d: 38:bd:cb:0a:69:a6:a5:c4:8e:b8:89:d2:ee:22:96:cd:7a:ec: b0:b5:f5:04:4d:20:ef:0b:f4:43:20:54:7c:24:c3:f8:25:76: 7e:47:1d:73:9b:a8:c5:01:de:68:b7:3f:2e:5a:0f:97:bd:a4: 80:fb:ca:39:14:bf:04:51:19:75:fb:08:ea:38:1f:e2:e8:60: c7:30:da:8d:b1:2f:24:db:a1:df:92:21:d7:15:70:37:fd:c3: 6c:f8:5e:be:9c:cc:65:49:a1:78:53:36:e2:1b:67:33:50:ac: da:85:77:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0IzH6/h5zNCvM/8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk2MWVhZmMtNjI2ZC00NThiLTg4MGUtMDM4ZmY3ZmVl ZTdjMB4XDTI2MDMwMjExNDAwNFoXDTI2MDUzMTEwNDAwNFowLzEtMCsGA1UEAxMk M2NhYWIxZGItZTFmNC00MDFiLTg4MjQtMGRjOGEzMzdhNGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiORZwCrc6dXTPZmDhieIyWFILWf153jduAxN z37HnSxREC98pwtDsVWhG/UuGFGkjPOXJNlrxgSzExLlu+9tLRE3ohEXtCI2utP2 VXEiUh7UDU7sVk57Nw4o9pJXDiSs6i3Y8LBNW5NZ/QU4F/3Cuplckfw/j1eR5kpe On3GtQ3POuMRlUlICEzbB268n4Yf7JXan0a+7JLSIqDMmklK0hgy41GBQJv3GyxS 24Wh4p6dRp0uAO5KZKLR/9mQ8hSWskVMUJ7xSngVOTmr3WraEV+t5F77KxFQXeAP PhTtGXDemRBMNVLsnu50YVVWKUdEFOmJwQUY+2NQ5xutbchAowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHPOSJ9ZyCzbrqg9dS7lFJs4OtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOTYx ZWFmYy02MjZkLTQ1OGItODgwZS0wMzhmZjdmZWVlN2MvNzkxOWU1ZmEtYjE4OS0z NzNmLTk3NzctN2FlZjM1YTg2NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTk2MWVhZmMtNjI2ZC00NThiLTg4 MGUtMDM4ZmY3ZmVlZTdjL2E5NjFlYWZjLTYyNmQtNDU4Yi04ODBlLTAzOGZmN2Zl ZWU3Yy5jcmwwHwYDVR0jBBgwFoAUCih6e39Z57QDdVCMTqB53UUqU6gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hOTYxZWFmYy02MjZkLTQ1OGItODgwZS0wMzhm ZjdmZWVlN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHg+WGR8Jb35VRVXXH9HJ7/SEwohUoBJTSuhcwKH+ZDTvTr5sWZ1VzG 0eRFQV4zyWeQ1gvAKTNAVCP0b1/sMmKCo1hRCnPwm7KFxnEdRqupQfJ8Zm7TQ0qx 3aPwKXUPVsQujfK7T7w8A4bZrV6nJu5YPxapDa6rJgf4NnT9NR3IraDcLycGE9a+ jiSjbpdHHTi9ywpppqXEjriJ0u4ils167LC19QRNIO8L9EMgVHwkw/gldn5HHXOb qMUB3mi3Py5aD5e9pID7yjkUvwRRGXX7COo4H+LoYMcw2o2xLyTbod+SIdcVcDf9 w2z4Xr6czGVJoXhTNuIbZzNQrNqFd9U= -----END CERTIFICATE-----Generated at Tue Mar 3 12:24:39 2026 by rpki-client