$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa File: bac3beef-e8a6-39b1-9473-0951235b352a.roa (raw, json) Hash identifier: AAhQVs5Aj8lIeUw1ViIICtuuoMimNFZ/Tt35r9bMPdA= Subject key identifier: 9B:63:94:2D:DE:42:A4:35:3C:84:4F:A7:81:97:1B:1A:13:61:51:4A Certificate issuer: /CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Certificate serial: 010D0C9F4328584D91C017DF5F24C19C952DF840 Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 396494 IP address blocks: 208.58.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:17:df:5f:24:c1:9c:95:2d:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=58b1ab72-cfa2-4cbe-8c33-459cf6edd0eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4a:53:fb:f2:2e:df:95:12:d7:2f:83:a4:de: 7b:79:6d:7a:0d:5f:4d:22:fe:27:4d:07:f2:3a:83: c7:d8:3d:a5:a3:ba:f8:ee:90:c0:a3:dd:e9:d1:85: 12:8e:a4:b5:0a:0c:72:46:d0:ba:ad:49:60:f5:24: ae:a0:bb:84:c5:3e:62:d6:d0:c7:7e:1f:d9:29:8c: c7:16:2f:84:6a:3b:a0:fd:34:4c:a5:1e:c7:cd:0d: b7:41:84:67:b8:ed:57:7b:a7:52:03:f2:e8:86:dc: 0d:f9:7d:cd:74:84:02:02:b1:33:10:56:9c:e3:2c: a4:5c:5c:fc:7c:af:bb:ac:e2:73:6c:de:65:6a:cd: 55:85:0a:07:31:4b:0c:93:a0:e6:f0:9a:1b:1b:26: fc:21:7f:e6:74:2a:d5:ac:95:c9:f3:f5:a6:59:93: 83:11:8d:2d:81:64:43:cf:68:d6:5c:de:66:c8:59: 92:86:a5:81:d9:cc:52:a2:3c:b2:96:94:1c:99:2a: 05:81:ed:bf:c2:18:e6:ed:6a:1b:b7:55:39:5f:8e: ff:6c:8c:9f:db:f8:04:dd:34:72:3d:aa:95:42:46: d7:cb:d5:c0:bd:6d:60:2a:88:3e:c7:86:d8:8a:b8: ab:17:ab:eb:47:a1:c1:39:ca:17:49:3a:6a:b9:16: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:63:94:2D:DE:42:A4:35:3C:84:4F:A7:81:97:1B:1A:13:61:51:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/bac3beef-e8a6-39b1-9473-0951235b352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl X509v3 Authority Key Identifier: keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer sbgp-ipAddrBlock: critical IPv4: 208.58.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:e8:da:18:59:1b:22:95:c2:ca:cb:fd:42:a4:76:90:a0:70: aa:f6:b9:89:f4:7f:ad:59:c6:9c:50:82:67:3f:28:76:74:16: 6e:35:68:de:5e:ce:fe:86:cb:fa:90:de:dd:42:c4:0f:3d:40: 3e:e9:84:44:38:c6:82:1c:22:34:24:03:7e:72:a1:72:1c:ac: 01:16:6d:5b:7b:de:99:66:c9:04:4f:17:32:b7:da:6a:b6:0e: 8c:0d:33:f6:6b:d0:c3:25:1e:f8:f8:12:9f:46:d9:64:aa:7d: cf:59:d9:26:f7:b4:8f:38:67:62:23:65:79:37:62:02:40:db: d3:03:28:06:64:81:95:d3:60:b2:e0:c1:ab:74:f0:f1:69:91: 5d:92:13:f3:98:fb:d4:8c:61:3c:1e:7f:e0:20:e4:c5:d8:55: a3:07:46:02:cc:c8:3c:72:98:73:02:44:5b:ce:90:47:31:03: 26:00:e2:e7:23:57:14:02:30:e3:c5:61:e7:5a:cf:ed:54:ad: 6b:78:a7:e6:4d:01:fe:ab:f1:a4:b4:b1:19:b5:d2:4a:68:4e: 5c:ef:41:b4:e9:2e:5e:41:6f:86:8b:c0:ec:54:e6:5b:7f:83: 37:38:11:4e:61:1e:04:9d:02:5c:e4:fa:c1:45:c3:fb:5a:81: 75:13:14:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBffXyTBnJUt+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI4NDcyNWUtM2UzZi00OGE1LTliMzktMzdiMDE0ZGQ2 ODczMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NThiMWFiNzItY2ZhMi00Y2JlLThjMzMtNDU5Y2Y2ZWRkMGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkpT+/Iu35US1y+DpN57eW16DV9NIv4nTQfy OoPH2D2lo7r47pDAo93p0YUSjqS1CgxyRtC6rUlg9SSuoLuExT5i1tDHfh/ZKYzH Fi+Eajug/TRMpR7HzQ23QYRnuO1Xe6dSA/LohtwN+X3NdIQCArEzEFac4yykXFz8 fK+7rOJzbN5las1VhQoHMUsMk6Dm8JobGyb8IX/mdCrVrJXJ8/WmWZODEY0tgWRD z2jWXN5myFmShqWB2cxSojyylpQcmSoFge2/whjm7Wobt1U5X47/bIyf2/gE3TRy PaqVQkbXy9XAvW1gKog+x4bYirirF6vrR6HBOcoXSTpquRbp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtjlC3eQqQ1PIRPp4GXGxoTYVFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0 NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2IwMTRkZDY4NzMvYmFjM2JlZWYtZThhNi0z OWIxLTk0NzMtMDk1MTIzNWIzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTI4NDcyNWUtM2UzZi00OGE1LTli MzktMzdiMDE0ZGQ2ODczLzEyODQ3MjVlLTNlM2YtNDhhNS05YjM5LTM3YjAxNGRk Njg3My5jcmwwHwYDVR0jBBgwFoAULRkMtFBZoGI8l4ZoUbkg45sy3fgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xMjg0NzI1ZS0zZTNmLTQ4YTUtOWIzOS0zN2Iw MTRkZDY4NzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DpOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKno2hhZGyKVwsrL/UKkdpCgcKr2uYn0f61ZxpxQgmc/KHZ0Fm41aN5e zv6Gy/qQ3t1CxA89QD7phEQ4xoIcIjQkA35yoXIcrAEWbVt73plmyQRPFzK32mq2 DowNM/Zr0MMlHvj4Ep9G2WSqfc9Z2Sb3tI84Z2IjZXk3YgJA29MDKAZkgZXTYLLg wat08PFpkV2SE/OY+9SMYTwef+Ag5MXYVaMHRgLMyDxymHMCRFvOkEcxAyYA4ucj VxQCMOPFYedaz+1UrWt4p+ZNAf6r8aS0sRm10kpoTlzvQbTpLl5Bb4aLwOxU5lt/ gzc4EU5hHgSdAlzk+sFFw/tagXUTFPo= -----END CERTIFICATE-----Generated at Tue Apr 28 00:06:02 2026 by rpki-client