$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa File: bd0074dc-349d-3242-a5ad-2066eb6f9200.roa (raw, json) Hash identifier: M4HMnE5/aNY41NBTU0xyubDxvUphdxKvz0yL8SLuAn4= Subject key identifier: 18:16:3B:7A:0B:B2:97:3F:7F:87:06:5D:C6:5D:3F:18:2A:D6:A3:D0 Certificate issuer: /CN=0c924434-62f4-44d5-b440-476f5c675f3d Certificate serial: 010D0C9F4328584D7F9A889F77D9BE48795E2200 Authority key identifier: 05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 19198 IP address blocks: 208.81.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:88:9f:77:d9:be:48:79:5e:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c924434-62f4-44d5-b440-476f5c675f3d Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=dd3e30c9-d116-4dee-b9ad-e881818586da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:bc:b2:ee:3b:a0:89:6f:9d:ea:a3:d5:7a:ad: 69:99:87:b6:ea:14:01:b6:84:93:39:57:bc:ed:c2: f3:9e:ab:50:f6:30:e4:2e:15:95:df:41:58:5c:d0: f9:79:d2:23:0e:bd:71:f5:bf:4c:49:bb:fa:59:f2: cb:1d:fa:f1:9c:07:05:76:4a:d4:4a:a0:9c:66:d5: 7e:2e:7f:f4:ba:cb:7d:f1:09:5c:4b:b1:f5:22:5c: 91:df:e2:d7:e4:0f:a0:47:51:0b:21:8b:c5:09:2b: 5a:59:45:b0:10:03:d2:4f:1d:9f:ad:bd:48:75:d8: 58:cd:d2:8d:88:f4:bc:c1:a4:a9:b8:cb:08:67:4c: 0a:6e:2e:00:7b:0c:d7:01:d4:a0:87:bb:52:b1:40: 64:66:56:a5:20:7b:da:9e:64:55:1a:56:ef:8f:bf: cd:cc:74:65:b5:f2:e2:11:c0:91:b9:df:f4:fd:89: f9:c7:91:de:89:a5:ad:b0:1b:cc:51:25:3a:4a:f1: 08:b3:6f:2a:3c:89:f8:88:4a:44:ac:30:17:59:4b: d7:de:6b:20:91:ba:89:7f:0a:22:0b:b7:5e:7d:76: 0c:8b:c0:67:36:5c:16:ba:a3:fa:93:0d:7e:6d:e5: f8:41:6f:dc:b7:bb:b2:de:ba:8a:cb:bc:e8:6c:b3: 1c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:16:3B:7A:0B:B2:97:3F:7F:87:06:5D:C6:5D:3F:18:2A:D6:A3:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/bd0074dc-349d-3242-a5ad-2066eb6f9200.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d/0c924434-62f4-44d5-b440-476f5c675f3d.crl X509v3 Authority Key Identifier: keyid:05:AE:7A:B8:A3:2A:D0:E7:FB:B6:62:A4:9E:75:39:5C:80:DC:D7:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c924434-62f4-44d5-b440-476f5c675f3d.cer sbgp-ipAddrBlock: critical IPv4: 208.81.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:26:a6:f3:c1:80:34:51:ac:74:51:0c:3f:99:fa:0b:42:5b: 3b:41:c2:b7:6f:c3:08:37:ec:60:25:7d:59:a8:1d:ba:38:90: 28:94:af:9f:8a:31:e5:0c:30:46:f0:ab:e0:97:86:54:d7:88: 28:a2:4a:d9:38:b8:bc:70:a2:b4:a9:3a:88:76:f2:7f:7d:23: 36:8f:27:25:4f:18:2b:e7:c2:94:52:82:15:ac:0e:ed:bf:f1: f8:eb:5c:ac:a6:df:d3:e4:9d:d2:07:c7:51:74:aa:70:e1:3a: 8c:e4:d0:0d:c9:11:fd:e1:f0:06:27:2b:27:85:27:39:a0:8a: 50:ec:ec:a3:89:5d:f0:2b:36:d2:d9:98:da:8b:42:9a:19:16: f3:df:1d:56:82:e9:5b:b1:b1:35:3d:1f:60:12:11:0a:52:04: ed:03:00:16:16:49:2d:5d:73:50:7b:20:e1:4d:83:06:19:5c: 6c:34:6b:d8:6e:7c:ce:93:c5:7c:b4:a7:87:4d:3c:98:73:72: 63:71:34:30:cb:91:7d:f8:d3:c6:4e:2f:ea:42:91:3c:1c:8b: 4c:6d:c5:30:fe:1e:3c:da:d8:82:18:b6:f0:b4:c7:68:c3:1c: 1b:ac:44:45:36:ec:ce:f5:74:6f:4d:ec:62:9e:cc:3d:71:d4: 4b:0c:98:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/moifd9m+SHleIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGM5MjQ0MzQtNjJmNC00NGQ1LWI0NDAtNDc2ZjVjNjc1 ZjNkMB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGQzZTMwYzktZDExNi00ZGVlLWI5YWQtZTg4MTgxODU4NmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbyy7jugiW+d6qPVeq1pmYe26hQBtoSTOVe8 7cLznqtQ9jDkLhWV30FYXND5edIjDr1x9b9MSbv6WfLLHfrxnAcFdkrUSqCcZtV+ Ln/0ust98QlcS7H1IlyR3+LX5A+gR1ELIYvFCStaWUWwEAPSTx2frb1IddhYzdKN iPS8waSpuMsIZ0wKbi4AewzXAdSgh7tSsUBkZlalIHvanmRVGlbvj7/NzHRltfLi EcCRud/0/Yn5x5HeiaWtsBvMUSU6SvEIs28qPIn4iEpErDAXWUvX3msgkbqJfwoi C7defXYMi8BnNlwWuqP6kw1+beX4QW/ct7uy3rqKy7zobLMcmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgWO3oLspc/f4cGXcZdPxgq1qPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYzky NDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZmNWM2NzVmM2QvYmQwMDc0ZGMtMzQ5ZC0z MjQyLWE1YWQtMjA2NmViNmY5MjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGM5MjQ0MzQtNjJmNC00NGQ1LWI0 NDAtNDc2ZjVjNjc1ZjNkLzBjOTI0NDM0LTYyZjQtNDRkNS1iNDQwLTQ3NmY1YzY3 NWYzZC5jcmwwHwYDVR0jBBgwFoAUBa56uKMq0Of7tmKknnU5XIDc11gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYzkyNDQzNC02MmY0LTQ0ZDUtYjQ0MC00NzZm NWM2NzVmM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUmpvPBgDRRrHRRDD+Z+gtCWztBwrdvwwg37GAlfVmoHbo4kCiUr5+K MeUMMEbwq+CXhlTXiCiiStk4uLxworSpOoh28n99IzaPJyVPGCvnwpRSghWsDu2/ 8fjrXKym39PkndIHx1F0qnDhOozk0A3JEf3h8AYnKyeFJzmgilDs7KOJXfArNtLZ mNqLQpoZFvPfHVaC6VuxsTU9H2ASEQpSBO0DABYWSS1dc1B7IOFNgwYZXGw0a9hu fM6TxXy0p4dNPJhzcmNxNDDLkX3408ZOL+pCkTwci0xtxTD+Hjza2IIYtvC0x2jD HBusREU27M71dG9N7GKezD1x1EsMmGc= -----END CERTIFICATE-----Generated at Sat Apr 18 00:27:45 2026 by rpki-client