$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa File: 350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa (raw, json) Hash identifier: LzOniAIn8h+ENKbUE+2SrhVjyD/qliIokUF1bBsuAWk= Subject key identifier: BE:56:0B:42:BA:5E:2D:F4:5E:98:A2:F1:4D:2D:D8:57:D4:CA:C3:35 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584D4D5A4D9188A670F293EBBB80 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 6639 IP address blocks: 208.157.144.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4d:91:88:a6:70:f2:93:eb:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=a9c7466f-9200-488d-920e-0af604967d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a3:39:18:fa:d9:21:3a:97:06:d4:9c:23:9a: 71:64:9f:54:24:a9:de:4c:48:30:96:ec:cd:96:e9: 77:4d:5b:b3:ed:c0:fe:81:0f:e0:6d:d8:a9:f5:e7: 64:e4:93:b8:d3:f3:11:db:e8:b6:03:c5:f1:f5:de: 71:3e:0d:59:c9:4e:e2:74:4b:4c:1f:c0:9b:70:ae: 40:d0:4f:04:95:82:92:a5:92:a8:ee:27:df:2c:3e: dc:85:c2:de:04:e6:3e:45:8a:ce:e4:4b:3b:cb:60: 5b:23:35:17:d5:be:63:4b:cf:3d:71:98:86:8f:c7: fb:af:af:d2:95:6a:61:1a:ba:11:e2:eb:f6:b4:19: 76:0c:e6:14:d3:83:bc:1a:c7:f2:5e:75:ed:ff:11: 11:97:34:dc:ab:4d:12:50:3a:54:e3:fa:91:a7:ee: b9:13:dd:6a:bd:82:70:09:68:3f:e0:1c:a3:bc:7f: 4a:39:76:ff:0a:22:a2:2e:28:e8:8e:85:63:c5:42: 76:aa:6d:cb:7f:c9:01:00:bc:46:02:9e:15:76:ae: 11:2f:bf:62:a7:9a:4c:75:70:00:a0:a2:19:2d:99: 0b:52:07:7b:c4:8f:3a:c5:bd:33:6f:b9:34:2c:17: ca:fc:95:ab:ad:25:57:ef:9a:29:6f:94:b5:ea:12: a8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:0B:42:BA:5E:2D:F4:5E:98:A2:F1:4D:2D:D8:57:D4:CA:C3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/350a9187-20e6-3859-bbf0-c5f3fa5d0c28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.157.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:14:81:41:51:0b:06:1c:0b:6c:e0:99:00:b4:46:c6:87:c6: 46:da:cc:96:b1:a1:33:11:d2:8b:7b:62:98:ee:97:88:08:7b: 53:dd:9a:4d:c8:7d:d2:30:a8:ff:c9:5d:5f:10:34:79:00:84: 85:22:02:b3:43:ce:fc:34:74:06:28:4c:6a:ff:62:8d:84:44: 5e:b0:dc:6e:45:14:f8:93:1f:4f:b1:4d:ca:79:d8:3d:7b:17: 80:e9:40:ed:35:95:e9:fe:dc:33:52:39:75:60:bf:f3:01:4c: ef:9b:95:bf:41:63:f6:8d:e0:bb:35:61:98:4d:0a:27:14:02: 61:a9:a7:80:0b:48:f5:90:26:13:58:70:7f:3e:67:71:22:c1: 08:f4:1e:6b:44:51:59:06:83:53:d7:5c:b9:7f:eb:9b:f5:62: ec:e7:f2:db:98:4d:21:b3:9f:f4:d1:bd:20:45:6c:90:c1:f8: f8:ee:0c:42:84:1a:15:3e:04:a9:f4:e4:90:02:dd:d9:e1:36: 12:53:ab:4f:bc:ac:c3:8c:3d:6d:fd:3e:6d:a5:af:05:e3:08: 86:94:26:b9:a8:a3:dd:8a:29:fd:6f:25:c3:89:0f:b1:98:32: 55:7b:35:0a:fd:08:c2:63:97:3b:5b:98:8b:6f:25:54:cf:ff: 9a:b6:c2:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk2RiKZw8pPru4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk YTljNzQ2NmYtOTIwMC00ODhkLTkyMGUtMGFmNjA0OTY3ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KM5GPrZITqXBtScI5pxZJ9UJKneTEgwluzN lul3TVuz7cD+gQ/gbdip9edk5JO40/MR2+i2A8Xx9d5xPg1ZyU7idEtMH8CbcK5A 0E8ElYKSpZKo7iffLD7chcLeBOY+RYrO5Es7y2BbIzUX1b5jS889cZiGj8f7r6/S lWphGroR4uv2tBl2DOYU04O8GsfyXnXt/xERlzTcq00SUDpU4/qRp+65E91qvYJw CWg/4ByjvH9KOXb/CiKiLijojoVjxUJ2qm3Lf8kBALxGAp4Vdq4RL79ip5pMdXAA oKIZLZkLUgd7xI86xb0zb7k0LBfK/JWrrSVX75opb5S16hKoXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5WC0K6Xi30Xpii8U0t2FfUysM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvMzUwYTkxODctMjBlNi0z ODU5LWJiZjAtYzVmM2ZhNWQwYzI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0J2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkUgUFRCwYcC2zgmQC0RsaHxkbazJaxoTMR0ot7Ypjul4gIe1Pdmk3I fdIwqP/JXV8QNHkAhIUiArNDzvw0dAYoTGr/Yo2ERF6w3G5FFPiTH0+xTcp52D17 F4DpQO01len+3DNSOXVgv/MBTO+blb9BY/aN4Ls1YZhNCicUAmGpp4ALSPWQJhNY cH8+Z3EiwQj0HmtEUVkGg1PXXLl/65v1Yuzn8tuYTSGzn/TRvSBFbJDB+PjuDEKE GhU+BKn05JAC3dnhNhJTq0+8rMOMPW39Pm2lrwXjCIaUJrmoo92KKf1vJcOJD7GY MlV7NQr9CMJjlztbmItvJVTP/5q2wtE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:16:48 2026 by rpki-client