$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/7f517987-9e17-3e5b-85f3-9aabd7948406.roa File: 7f517987-9e17-3e5b-85f3-9aabd7948406.roa (raw, json) Hash identifier: tftNr938VZjJmgkGcZWCrOozEt2noGNl4akvoWTqI64= Subject key identifier: 89:4B:F4:A8:E2:24:66:B0:F9:FD:FD:D8:55:73:87:8A:1E:DB:00:7B Certificate issuer: /CN=d61142c5-6dad-41b6-88e5-f1a6061a1e0d Certificate serial: 010D0C9F4328584D8BF32C528EBC4ED2EB523170 Authority key identifier: EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/7f517987-9e17-3e5b-85f3-9aabd7948406.roa Signing time: Sat 18 Apr 2026 11:08:54 +0000 ROA not before: Sat 18 Apr 2026 11:08:54 +0000 ROA not after: Fri 17 Jul 2026 11:08:54 +0000 asID: 8075 IP address blocks: 208.85.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8b:f3:2c:52:8e:bc:4e:d2:eb:52:31:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d61142c5-6dad-41b6-88e5-f1a6061a1e0d Validity Not Before: Apr 18 11:08:54 2026 GMT Not After : Jul 17 11:08:54 2026 GMT Subject: CN=1c9c88c3-4803-403e-b47e-f3a09ee84bf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:fa:88:32:f2:0a:6c:d9:64:6b:5b:1b:db: 97:da:f1:d5:a9:3f:f4:6d:b9:b1:0e:2a:06:ec:59: 7e:de:fe:5c:43:e5:86:f6:bc:df:44:c6:75:51:3f: 69:0f:1c:e3:62:e6:62:58:cc:db:c2:28:8c:fe:4f: fb:7d:d2:ad:e3:89:d3:fd:07:40:1d:70:10:52:84: df:9e:33:5b:64:e3:2c:4a:37:56:26:66:f5:fd:71: 11:25:48:44:7c:e3:05:36:9f:4e:0e:f6:11:3d:1c: eb:23:cc:73:fd:65:83:dd:f6:5b:34:a3:6f:8c:c0: d7:4c:1a:64:84:c3:9a:8d:19:a0:1d:2c:b4:f9:90: ae:1d:68:d7:e6:26:8b:42:f3:d0:0b:56:8c:46:a5: 64:eb:7d:19:b7:20:ce:c4:c8:d5:41:f6:2f:78:78: da:f4:26:2d:44:bc:57:6f:23:ae:e6:63:69:7d:d5: 39:2a:19:7e:3c:ab:56:a9:5d:e6:d7:b7:1c:4e:83: 70:85:ef:b8:ba:ec:a7:86:90:89:8c:95:81:ae:98: 97:f2:24:a4:e1:3c:c5:a8:35:ba:63:42:d6:f8:01: 50:4d:95:48:cb:58:1e:09:77:06:3b:46:f7:89:dd: 63:c5:0b:81:11:1d:3b:89:07:86:a0:e4:b5:fa:fd: 0b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:4B:F4:A8:E2:24:66:B0:F9:FD:FD:D8:55:73:87:8A:1E:DB:00:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/7f517987-9e17-3e5b-85f3-9aabd7948406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.crl X509v3 Authority Key Identifier: keyid:EF:E1:E5:CE:B5:3F:64:3C:C8:F0:A9:50:AF:3F:C9:08:BD:C5:8E:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d61142c5-6dad-41b6-88e5-f1a6061a1e0d.cer sbgp-ipAddrBlock: critical IPv4: 208.85.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:21:74:84:ff:fe:86:9a:58:48:42:89:29:59:2b:41:0b:5d: bc:07:cd:62:10:91:62:67:d8:73:23:d1:14:ad:64:7e:f1:b2: 8c:26:50:35:2b:75:ff:dc:67:ea:d0:8f:a6:c9:b8:f4:51:25: 4e:12:d8:da:67:86:39:9d:8b:ec:3d:ef:51:85:a3:80:36:13: 2c:6e:7f:3a:4f:60:cb:75:5e:08:a1:9a:5e:d6:d0:25:6c:2e: f1:60:97:5d:8c:e1:4e:98:96:1a:d5:6a:6e:1c:34:a7:b9:0b: be:b2:8f:4e:84:c0:6f:b5:54:78:f8:06:01:89:c4:23:86:85: 3e:65:fd:57:9c:54:ad:d3:6d:98:96:33:e8:0c:27:7b:ab:1a: 4c:d9:75:05:94:41:12:00:25:a7:91:26:03:b5:de:5d:8f:02: f6:ab:d6:a6:06:2d:56:7b:c2:0e:50:c4:b6:dd:ef:b7:80:07: a7:35:2a:af:1a:57:73:bb:bf:eb:b6:6e:48:d1:49:bd:74:1a: 05:fa:c7:b3:e6:3b:76:4d:cb:1e:be:15:b1:6a:e4:a0:26:c9: e0:16:14:50:5d:5a:b7:0c:b3:bd:c6:89:46:87:5f:0c:d7:ea: 6b:15:76:8f:53:4d:a8:8c:10:57:bc:97:dc:e1:bb:48:d2:3a: 8e:51:16:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2L8yxSjrxO0utSMXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDYxMTQyYzUtNmRhZC00MWI2LTg4ZTUtZjFhNjA2MWEx ZTBkMB4XDTI2MDQxODExMDg1NFoXDTI2MDcxNzExMDg1NFowLzEtMCsGA1UEAxMk MWM5Yzg4YzMtNDgwMy00MDNlLWI0N2UtZjNhMDllZTg0YmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3f6iDLyCmzZZGtbG9uX2vHVqT/0bbmxDioG 7Fl+3v5cQ+WG9rzfRMZ1UT9pDxzjYuZiWMzbwiiM/k/7fdKt44nT/QdAHXAQUoTf njNbZOMsSjdWJmb1/XERJUhEfOMFNp9ODvYRPRzrI8xz/WWD3fZbNKNvjMDXTBpk hMOajRmgHSy0+ZCuHWjX5iaLQvPQC1aMRqVk630ZtyDOxMjVQfYveHja9CYtRLxX byOu5mNpfdU5Khl+PKtWqV3m17ccToNwhe+4uuynhpCJjJWBrpiX8iSk4TzFqDW6 Y0LW+AFQTZVIy1geCXcGO0b3id1jxQuBER07iQeGoOS1+v0L+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlL9KjiJGaw+f392FVzh4oe2wB7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kNjEx NDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2MDYxYTFlMGQvN2Y1MTc5ODctOWUxNy0z ZTViLTg1ZjMtOWFhYmQ3OTQ4NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDYxMTQyYzUtNmRhZC00MWI2LTg4 ZTUtZjFhNjA2MWExZTBkL2Q2MTE0MmM1LTZkYWQtNDFiNi04OGU1LWYxYTYwNjFh MWUwZC5jcmwwHwYDVR0jBBgwFoAU7+HlzrU/ZDzI8KlQrz/JCL3FjkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kNjExNDJjNS02ZGFkLTQxYjYtODhlNS1mMWE2 MDYxYTFlMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FWjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFghdIT//oaaWEhCiSlZK0ELXbwHzWIQkWJn2HMj0RStZH7xsowmUDUr df/cZ+rQj6bJuPRRJU4S2Npnhjmdi+w971GFo4A2EyxufzpPYMt1Xgihml7W0CVs LvFgl12M4U6YlhrVam4cNKe5C76yj06EwG+1VHj4BgGJxCOGhT5l/VecVK3TbZiW M+gMJ3urGkzZdQWUQRIAJaeRJgO13l2PAvar1qYGLVZ7wg5QxLbd77eAB6c1Kq8a V3O7v+u2bkjRSb10GgX6x7PmO3ZNyx6+FbFq5KAmyeAWFFBdWrcMs73GiUaHXwzX 6msVdo9TTaiMEFe8l9zhu0jSOo5RFl8= -----END CERTIFICATE-----Generated at Sat Apr 18 23:28:05 2026 by rpki-client