$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa File: 3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json) Hash identifier: ezRLoDGsEbUzp3rh8XReol4+dzS5wbw97LyZOcgaSSU= Subject key identifier: 67:43:AB:9E:91:04:16:B5:B3:5B:45:33:EA:C5:65:6F:5E:57:6B:DB Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584D8695423B7B444BAECFF90900 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14061 IP address blocks: 192.81.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:42:3b:7b:44:4b:ae:cf:f9:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=cbf37e7d-064a-482d-9d85-87e43862c3f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c5:92:a7:a6:4d:c7:9d:3a:74:a2:4e:88:32: 6a:59:33:90:f2:06:0a:d7:35:61:59:51:c0:d8:34: 2b:08:12:ac:31:50:a7:08:24:ce:d0:53:db:78:c7: 7b:fe:27:83:94:fc:7d:13:6b:ad:de:55:98:68:65: c9:27:bd:59:99:dd:b8:ff:c4:92:13:0e:3c:22:ce: 10:be:68:bf:8e:cc:fe:cd:09:da:9a:df:49:49:50: 7a:e4:28:d8:a2:13:56:9d:eb:c2:52:37:da:5f:9c: ea:79:81:54:e6:55:55:ac:1f:1b:03:24:57:4a:3c: 72:4d:25:5a:94:67:d0:c2:4f:ec:cb:f9:8b:51:47: bf:0e:b8:98:b2:56:c9:e7:42:6e:37:9d:53:4c:e5: 18:25:3d:80:89:f5:e4:57:fc:6c:56:5a:b2:22:41: 6d:3b:48:26:f1:bd:5a:c6:a4:09:90:cf:fa:c7:95: 47:42:1c:f5:ca:ee:6b:5f:fb:02:ec:9a:89:b2:c0: 6c:2f:5b:08:f3:07:3c:35:78:9c:13:92:99:d3:21: 8f:23:85:47:a2:3a:5d:bd:20:b5:b3:c8:d4:de:06: 53:a8:09:a9:be:86:25:b6:6c:7f:37:2f:b2:1b:c1: cf:23:72:b7:17:e8:f3:e3:44:b0:4e:b8:ce:53:e7: 7f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:43:AB:9E:91:04:16:B5:B3:5B:45:33:EA:C5:65:6F:5E:57:6B:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 192.81.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3d:d6:9c:01:12:70:05:80:41:ca:5c:7c:0d:74:21:15:26: 88:fa:43:91:27:f7:cc:d6:59:e6:2e:5a:83:8b:f1:54:51:f7: 8a:f8:08:48:72:94:9b:15:ba:43:ec:d0:f2:5a:eb:49:bc:95: b8:04:35:16:dd:ac:19:e1:53:3a:93:10:47:e4:e9:d9:de:97: e3:2c:3a:7c:2a:6c:04:81:4a:dd:94:d4:48:ce:09:9c:25:b7: ba:81:07:e6:e8:6d:ef:47:0f:a5:d2:a4:4e:6d:be:ca:6b:c4: 9d:f6:09:af:b4:7c:5f:c2:7b:5b:f2:14:4e:0d:c8:56:4f:f4: 5c:c1:c6:31:4a:44:7f:31:a5:49:43:0d:5e:4a:35:3b:75:5d: 9c:93:94:5b:5c:18:62:02:f0:da:d6:9e:b6:b2:b5:6d:d1:da: 7e:59:51:e0:2a:9c:8d:98:3c:d6:19:8b:f2:44:b8:04:ab:d4: 0f:e5:a4:4d:0b:c7:7d:a0:92:9a:58:53:e7:56:86:21:b8:70: ab:f7:41:ac:b1:42:06:d9:13:3c:2b:e8:85:99:3b:71:cf:8a: 24:8f:13:cc:f6:f5:1c:1f:0f:40:27:e4:3c:63:16:b8:22:54: c0:64:7f:bd:6e:d3:ef:71:1a:38:4f:8b:6d:71:8f:8a:d8:e9: 1b:03:ad:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUI7e0RLrs/5CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk Y2JmMzdlN2QtMDY0YS00ODJkLTlkODUtODdlNDM4NjJjM2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8WSp6ZNx506dKJOiDJqWTOQ8gYK1zVhWVHA 2DQrCBKsMVCnCCTO0FPbeMd7/ieDlPx9E2ut3lWYaGXJJ71Zmd24/8SSEw48Is4Q vmi/jsz+zQnamt9JSVB65CjYohNWnevCUjfaX5zqeYFU5lVVrB8bAyRXSjxyTSVa lGfQwk/sy/mLUUe/DriYslbJ50JuN51TTOUYJT2AifXkV/xsVlqyIkFtO0gm8b1a xqQJkM/6x5VHQhz1yu5rX/sC7JqJssBsL1sI8wc8NXicE5KZ0yGPI4VHojpdvSC1 s8jU3gZTqAmpvoYltmx/Ny+yG8HPI3K3F+jz40SwTrjOU+d/iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGdDq56RBBa1s1tFM+rFZW9eV2vbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2QwYzk2NGUtYTg4Ny0z ZmRjLWFlYzAtMGI3ZWMyNDk4MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE91pwBEnAFgEHKXHwNdCEVJoj6Q5En98zWWeYuWoOL8VRR94r4CEhy lJsVukPs0PJa60m8lbgENRbdrBnhUzqTEEfk6dnel+MsOnwqbASBSt2U1EjOCZwl t7qBB+bobe9HD6XSpE5tvsprxJ32Ca+0fF/Ce1vyFE4NyFZP9FzBxjFKRH8xpUlD DV5KNTt1XZyTlFtcGGIC8NrWnraytW3R2n5ZUeAqnI2YPNYZi/JEuASr1A/lpE0L x32gkppYU+dWhiG4cKv3QayxQgbZEzwr6IWZO3HPiiSPE8z29RwfD0An5DxjFrgi VMBkf71u0+9xGjhPi21xj4rY6RsDrUw= -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:44 2026 by rpki-client