$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa File: 528a072d-fb5e-3209-b0b6-eff453de4aaf.roa (raw, json) Hash identifier: NRqphIDOAhh/UYDT8/rW8adZAqPHeXIkyR8Cp8qmEWQ= Subject key identifier: 2B:54:66:EE:EA:8E:8A:BF:65:B4:FF:20:69:AE:9B:9C:4D:F1:7F:F2 Certificate issuer: /CN=f4f85718-cda0-442f-9727-709a536e1e27 Certificate serial: 010D0C9F4328584D4D5A4DA48428F3F6F132C180 Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 6639 IP address blocks: 208.168.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4d:a4:84:28:f3:f6:f1:32:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=fd644817-ab36-458e-9137-d3fd6718c345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:df:c0:27:0a:f5:0b:09:da:f5:83:5a:36: 67:d1:0e:3b:a3:cc:90:d2:70:90:30:88:57:90:f4: 6f:b3:4a:ca:e8:15:20:22:c8:e3:e9:68:71:19:8f: 2e:3e:61:43:8c:63:11:d3:69:4b:7b:77:aa:a1:4a: 9b:a3:ea:52:83:5f:ac:e0:50:fa:0c:70:99:ed:65: 5f:7b:79:a0:54:42:16:5b:69:f8:dc:03:04:07:22: 49:dd:89:69:36:70:d0:26:b6:bd:61:13:09:ac:ae: b6:af:34:de:a3:ac:66:4d:b3:dd:99:af:8d:57:03: 6c:ee:bc:74:2f:2d:ac:b5:4d:a0:a2:80:98:46:b3: 71:87:4e:2c:96:54:c5:c5:bf:71:2f:c3:c2:38:d3: a8:64:68:f9:63:b1:60:b6:25:28:62:f5:ec:4d:e2: 0e:a4:82:2d:43:3c:f2:7c:94:bb:8b:ac:4d:97:bf: 10:0c:18:13:c9:21:8e:9f:90:bf:b4:85:72:97:56: 2d:0d:46:98:12:df:8b:fd:17:5f:33:18:12:39:b2: a0:92:fa:2f:ab:53:43:20:38:82:93:9a:b1:24:0a: c1:ab:ce:8d:09:06:22:bc:4c:b1:d2:e3:d3:66:d3: df:3d:d5:ce:ae:c1:2c:12:17:9a:52:e4:47:5c:56: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:54:66:EE:EA:8E:8A:BF:65:B4:FF:20:69:AE:9B:9C:4D:F1:7F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/528a072d-fb5e-3209-b0b6-eff453de4aaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl X509v3 Authority Key Identifier: keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer sbgp-ipAddrBlock: critical IPv4: 208.168.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:92:bf:56:5b:5a:88:21:b3:0b:06:b8:27:0e:ab:d9:5d:86: a8:69:42:2c:08:65:7e:4e:99:e2:9f:c9:83:0e:7e:e4:b4:f3: f9:07:27:a9:1f:c8:b8:eb:ee:51:a6:1d:39:b0:45:29:14:3c: f1:d5:2a:28:8f:bc:1e:6d:97:d4:43:f7:d3:e1:67:6d:77:5e: 17:33:76:1e:45:d6:fa:a1:27:6f:86:a3:20:35:95:eb:1d:bd: ae:02:a1:f2:7d:44:b4:ae:fd:6e:68:48:36:0e:cf:35:05:9b: 5b:5d:3e:a5:6d:67:a3:2e:8e:22:ed:fc:e1:63:f4:c7:82:4e: 0c:f1:52:7f:06:90:41:ca:7b:74:ef:58:60:f5:60:2a:c8:5c: df:44:07:73:5b:af:95:54:ff:9c:42:ef:3a:81:4c:90:c3:7d: 8f:ac:4a:b0:70:c4:95:04:fe:f0:b4:cf:a8:db:57:0e:99:c2: 8b:54:c5:ed:b9:9c:8a:c5:e4:62:08:84:c1:9c:4e:cc:97:20: 4c:cd:40:aa:1c:62:c5:6f:9f:e4:1c:1c:2b:a7:f0:72:9e:0a: 06:c7:e4:62:67:ba:f7:59:1c:2e:13:35:99:59:6d:b1:66:5c: ef:fb:a5:31:69:b8:45:0e:6e:39:4b:b2:df:f3:be:58:46:c2: ad:01:35:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk2khCjz9vEywYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx ZTI3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZmQ2NDQ4MTctYWIzNi00NThlLTkxMzctZDNmZDY3MThjMzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6rfwCcK9QsJ2vWDWjZn0Q47o8yQ0nCQMIhX kPRvs0rK6BUgIsjj6WhxGY8uPmFDjGMR02lLe3eqoUqbo+pSg1+s4FD6DHCZ7WVf e3mgVEIWW2n43AMEByJJ3YlpNnDQJra9YRMJrK62rzTeo6xmTbPdma+NVwNs7rx0 Ly2stU2gooCYRrNxh04sllTFxb9xL8PCONOoZGj5Y7FgtiUoYvXsTeIOpIItQzzy fJS7i6xNl78QDBgTySGOn5C/tIVyl1YtDUaYEt+L/RdfMxgSObKgkvovq1NDIDiC k5qxJArBq86NCQYivEyx0uPTZtPfPdXOrsEsEheaUuRHXFZQRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtUZu7qjoq/ZbT/IGmum5xN8X/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4 NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvNTI4YTA3MmQtZmI1ZS0z MjA5LWIwYjYtZWZmNDUzZGU0YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3 MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0KjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiSv1ZbWoghswsGuCcOq9ldhqhpQiwIZX5OmeKfyYMOfuS08/kHJ6kf yLjr7lGmHTmwRSkUPPHVKiiPvB5tl9RD99PhZ213Xhczdh5F1vqhJ2+GoyA1lesd va4CofJ9RLSu/W5oSDYOzzUFm1tdPqVtZ6MujiLt/OFj9MeCTgzxUn8GkEHKe3Tv WGD1YCrIXN9EB3Nbr5VU/5xC7zqBTJDDfY+sSrBwxJUE/vC0z6jbVw6ZwotUxe25 nIrF5GIIhMGcTsyXIEzNQKocYsVvn+QcHCun8HKeCgbH5GJnuvdZHC4TNZlZbbFm XO/7pTFpuEUObjlLst/zvlhGwq0BNX0= -----END CERTIFICATE-----Generated at Fri Apr 17 10:44:49 2026 by rpki-client