$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa File: 27fb50ad-2b05-3265-be7c-7d3d367f8588.roa (raw, json) Hash identifier: nnprbiI2FJ/RQNcxOlN2h4w2F4bIgIhtrPOZd/DMjbw= Subject key identifier: 54:F9:55:5D:2E:63:FC:A2:3D:2B:11:2B:19:44:20:C5:E0:29:B5:F3 Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D869542172B760AC854A31500 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 208.68.36.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:42:17:2b:76:0a:c8:54:a3:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=6da1e248-ddf7-4089-a1f5-c747cb3cfa80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:4c:56:71:99:a8:6f:65:83:fd:0f:9f:29: bd:30:81:e3:a9:9c:23:34:35:c6:34:5c:f6:81:9d: e5:70:83:05:0c:21:93:e1:6f:30:3c:2d:af:6a:2c: a6:83:bf:8c:98:02:22:c5:a8:bb:7e:b4:8d:92:51: 16:b1:07:2d:ff:74:9f:48:57:62:83:d7:c4:87:e4: 09:76:5d:10:cc:f8:d4:b9:95:5c:8a:be:0d:dc:b9: 50:bc:4e:dc:1e:70:42:d1:d8:33:26:80:5a:83:da: 02:6f:f5:9b:37:24:85:cf:a7:9d:c5:6f:09:91:b4: da:c1:ea:4a:b0:8a:9e:64:d0:4c:5d:8c:69:f3:9a: 24:7e:78:29:07:06:f0:ba:80:68:01:da:17:98:c1: 05:b2:53:9f:dd:19:a1:bc:e4:c0:b6:45:da:55:92: 47:a0:29:5d:3e:47:28:e9:b9:a0:bc:b4:8e:da:a4: 9e:03:7e:32:b6:1b:d4:dd:95:2f:24:0c:b8:25:58: 2c:d8:ca:40:da:cb:a3:0f:25:5f:e5:12:af:09:fd: 01:f1:43:7b:bc:09:c4:49:5d:b7:e5:a2:10:c9:cf: ae:8a:05:50:42:50:45:72:30:0f:c0:e3:6f:30:b0: 47:1b:17:e7:61:ed:1e:5a:7d:75:03:3d:3a:c0:13: 7c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F9:55:5D:2E:63:FC:A2:3D:2B:11:2B:19:44:20:C5:E0:29:B5:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/27fb50ad-2b05-3265-be7c-7d3d367f8588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 208.68.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f5:5d:a1:5f:8c:0a:d3:e1:c2:6d:c2:a3:6f:5a:d8:6e:d2: 5e:48:84:3e:7e:ef:17:b6:62:72:a9:fd:6a:d3:17:28:02:dd: 9a:51:fe:1c:af:14:91:0e:30:10:aa:2d:46:2c:ae:de:8e:c5: f5:0b:aa:a8:2f:6c:87:52:e2:0f:52:01:53:8e:aa:fd:d2:5a: c2:99:5f:5f:6a:4f:6d:7e:3b:12:59:47:5d:f0:fc:84:ea:0a: 34:e1:0c:f5:da:40:d7:40:c1:c7:5f:70:70:5e:0f:1b:fd:a4: cd:33:91:70:03:41:5a:9c:03:77:96:ca:53:b1:51:0b:8f:9c: 1b:68:e4:18:8e:07:31:bc:f1:83:24:b6:28:39:76:37:7e:92: 19:df:97:7b:f3:65:82:44:0e:c2:c3:a1:07:89:de:3d:f1:c2: 6f:cc:22:1a:d0:35:b7:59:aa:ff:cd:8f:aa:20:b7:e7:4f:c2: c1:4d:16:61:4a:7c:cf:6d:6f:55:b8:a0:82:67:7e:07:a1:7a: f0:5d:07:2b:24:cd:0e:59:fe:bd:a0:c4:73:c9:e7:a8:e8:4c: 0f:79:c0:d8:b2:36:19:57:9b:25:58:85:a4:88:23:0c:d6:11: 25:9f:c5:09:2e:5f:ba:08:78:b2:f3:40:1b:53:c0:a5:d3:fe: 57:de:38:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUIXK3YKyFSjFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk NmRhMWUyNDgtZGRmNy00MDg5LWExZjUtYzc0N2NiM2NmYTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51MVnGZqG9lg/0Pnym9MIHjqZwjNDXGNFz2 gZ3lcIMFDCGT4W8wPC2vaiymg7+MmAIixai7frSNklEWsQct/3SfSFdig9fEh+QJ dl0QzPjUuZVcir4N3LlQvE7cHnBC0dgzJoBag9oCb/WbNySFz6edxW8JkbTawepK sIqeZNBMXYxp85okfngpBwbwuoBoAdoXmMEFslOf3RmhvOTAtkXaVZJHoCldPkco 6bmgvLSO2qSeA34ythvU3ZUvJAy4JVgs2MpA2sujDyVf5RKvCf0B8UN7vAnESV23 5aIQyc+uigVQQlBFcjAPwONvMLBHGxfnYe0eWn11Az06wBN8KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFT5VV0uY/yiPSsRKxlEIMXgKbXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMjdmYjUwYWQtMmIwNS0z MjY1LWJlN2MtN2QzZDM2N2Y4NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH1XaFfjArT4cJtwqNvWthu0l5IhD5+7xe2YnKp/WrTFygC3ZpR/hyv FJEOMBCqLUYsrt6OxfULqqgvbIdS4g9SAVOOqv3SWsKZX19qT21+OxJZR13w/ITq CjThDPXaQNdAwcdfcHBeDxv9pM0zkXADQVqcA3eWylOxUQuPnBto5BiOBzG88YMk tig5djd+khnfl3vzZYJEDsLDoQeJ3j3xwm/MIhrQNbdZqv/Nj6ogt+dPwsFNFmFK fM9tb1W4oIJnfgehevBdByskzQ5Z/r2gxHPJ56joTA95wNiyNhlXmyVYhaSIIwzW ESWfxQkuX7oIeLLzQBtTwKXT/lfeOHA= -----END CERTIFICATE-----Generated at Fri Apr 17 12:48:39 2026 by rpki-client