$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa File: a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa (raw, json) Hash identifier: x+xN6KLLaEbDSrmbpCBzc1vzZSEpljRpwHskVUjwoDo= Subject key identifier: 0E:B5:FD:36:E2:DB:88:8C:76:71:5E:03:BA:4E:0A:4D:DA:AC:53:B8 Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Certificate serial: 010D0C9F4328584D59EA5C3AB0EED36335AF02EE Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 399728 IP address blocks: 23.181.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5c:3a:b0:ee:d3:63:35:af:02:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=1734d28d-5d65-4fdb-a622-0ce3a85f24ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:36:97:eb:c4:72:07:db:e6:11:53:c8:7b: 3a:5b:6d:79:ca:1e:fb:3c:a7:b9:06:38:bc:81:fd: be:90:aa:38:a3:98:8c:b4:ea:e9:61:fb:36:c1:93: 64:69:8d:2b:ee:91:75:46:49:f6:e7:35:48:31:44: d7:64:bb:b2:00:c9:2b:31:96:65:44:88:7e:a8:b1: 0e:a4:ff:1d:51:3e:1c:a1:89:97:7e:39:49:16:fd: 2e:a4:4c:a7:c7:f2:ea:bd:7e:5b:0e:62:3c:37:53: 2f:3e:f1:ba:73:00:dc:6c:79:55:8b:89:81:9f:1d: 88:6e:94:a8:31:20:0e:54:f3:f2:a3:bc:20:fe:80: 82:f6:67:11:7f:6b:a6:56:15:24:36:f3:74:bc:5e: de:07:0c:cf:89:43:3a:b1:28:88:1a:d4:81:58:36: e0:72:46:64:fc:cd:d8:64:30:d7:5b:89:5f:28:aa: d0:df:b1:cf:a4:42:62:83:57:6c:11:f7:4c:12:99: ae:82:b7:76:89:97:5d:a8:51:c3:00:cb:6d:09:5d: 41:f6:e3:17:01:42:a6:e4:f8:35:72:12:bf:6d:c9: 00:2f:3b:f8:34:50:ad:bd:97:94:ab:8b:78:c0:97: 7d:8a:4e:1a:5d:72:4b:c5:a6:2b:09:b2:6b:05:dd: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B5:FD:36:E2:DB:88:8C:76:71:5E:03:BA:4E:0A:4D:DA:AC:53:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/a94c3198-dfe2-38ea-b522-4d5836d8f0f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl X509v3 Authority Key Identifier: keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer sbgp-ipAddrBlock: critical IPv4: 23.181.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:51:93:d5:57:db:b8:8c:93:7b:2b:74:98:b4:a5:4e:48:4c: c7:2d:8d:87:9c:73:7e:98:fc:ae:cb:fe:7e:5f:7e:08:7e:8c: bf:90:8d:c4:58:8d:9b:45:3e:87:52:37:6c:ff:e2:2e:49:33: ba:91:51:12:7f:34:bb:3a:2a:e9:65:74:39:94:d5:4a:d1:55: 2c:70:16:ff:d9:c7:67:9d:0e:84:98:41:62:34:53:98:af:dd: 6e:54:89:c7:7b:bd:35:0b:c4:ae:67:3d:5f:ec:eb:32:52:53: 83:be:6a:b9:f4:db:f2:25:40:94:4a:ba:29:f6:1f:7f:a1:9c: 3b:fd:f0:3c:27:16:95:3a:d5:4c:ba:92:78:1d:a3:b9:a4:64: 0a:fa:dc:b2:ee:b7:f9:40:e1:e6:b2:ad:f7:db:3a:6a:a0:21: e5:63:47:ee:0f:72:3e:c2:70:b5:a1:e9:d3:be:4e:b2:3e:d0: b1:78:13:6d:d1:92:e5:2e:08:09:49:84:d4:6a:94:95:bc:66: b9:67:03:07:70:58:04:39:4d:47:f6:0d:02:6b:95:19:fc:8c: d5:c7:28:d6:71:bf:78:f0:43:36:38:38:82:20:8a:2b:84:53: 33:41:b0:a3:31:d7:48:81:a6:c7:2c:68:5d:f8:ca:ed:12:a2: fd:cc:4a:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lw6sO7TYzWvAu4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm MDgyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MTczNGQyOGQtNWQ2NS00ZmRiLWE2MjItMGNlM2E4NWYyNGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KU2l+vEcgfb5hFTyHs6W215yh77PKe5Bji8 gf2+kKo4o5iMtOrpYfs2wZNkaY0r7pF1Rkn25zVIMUTXZLuyAMkrMZZlRIh+qLEO pP8dUT4coYmXfjlJFv0upEynx/LqvX5bDmI8N1MvPvG6cwDcbHlVi4mBnx2IbpSo MSAOVPPyo7wg/oCC9mcRf2umVhUkNvN0vF7eBwzPiUM6sSiIGtSBWDbgckZk/M3Y ZDDXW4lfKKrQ37HPpEJig1dsEfdMEpmugrd2iZddqFHDAMttCV1B9uMXAUKm5Pg1 chK/bckALzv4NFCtvZeUq4t4wJd9ik4aXXJLxaYrCbJrBd1ipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA61/Tbi24iMdnFeA7pOCk3arFO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYTk0YzMxOTgtZGZlMi0z OGVhLWI1MjItNGQ1ODM2ZDhmMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5 OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1 ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi ZTUzNWYwODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7XQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1Rk9VX27iMk3srdJi0pU5ITMctjYecc36Y/K7L/n5ffgh+jL+QjcRY jZtFPodSN2z/4i5JM7qRURJ/NLs6KulldDmU1UrRVSxwFv/Zx2edDoSYQWI0U5iv 3W5Uicd7vTULxK5nPV/s6zJSU4O+arn02/IlQJRKuin2H3+hnDv98DwnFpU61Uy6 kngdo7mkZAr63LLut/lA4eayrffbOmqgIeVjR+4Pcj7CcLWh6dO+TrI+0LF4E23R kuUuCAlJhNRqlJW8ZrlnAwdwWAQ5TUf2DQJrlRn8jNXHKNZxv3jwQzY4OIIgiiuE UzNBsKMx10iBpscsaF34yu0Sov3MSs4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:53:19 2026 by rpki-client