$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa File: 363970c4-35aa-3380-88dd-203981f8b04a.roa (raw, json) Hash identifier: 4mgQSTlVr8gi1GysMKNQ/Cn3zGXGAQXZe83DtxFqqxg= Subject key identifier: 59:43:C0:B6:30:E5:FD:F5:AB:72:69:21:80:AD:99:A0:C4:7A:45:00 Certificate issuer: /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Certificate serial: 010D0C9F4328584D80FFDEDB025603FD005AE0E0 Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 139267 IP address blocks: 208.80.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:de:db:02:56:03:fd:00:5a:e0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=54fedba7-f417-45b1-8689-ee274a15946f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:de:3d:18:88:8f:d3:37:78:59:b3:f5:ca:b3: 35:69:2b:ec:40:e2:50:19:77:ed:d2:74:70:1b:5b: 11:c2:22:2c:e3:4b:60:68:07:0f:64:04:4a:21:cc: a5:7c:d2:1c:fa:08:d1:8a:9c:69:00:d1:ad:49:fc: 9c:cb:9c:df:33:97:f0:e3:40:76:10:58:21:e9:19: 88:30:07:10:e3:61:0b:e3:3a:c8:8d:76:15:4a:16: 94:b7:ed:03:ab:3c:c3:9a:e2:30:48:b6:f2:f1:dc: e8:7c:58:1a:12:bc:65:86:a0:11:70:7c:8a:62:41: 2a:c7:8e:83:3d:25:c3:7e:37:80:a9:d9:c8:b8:fd: 63:bd:0b:fc:06:c0:6a:b5:50:20:0b:65:5b:f1:1a: d1:31:0f:80:b3:94:ab:56:5a:31:51:46:e1:75:37: f0:a8:60:b8:4b:e6:73:dd:fa:42:47:37:c5:73:d0: e0:ae:b5:8e:25:4d:a1:cb:34:6a:9c:38:7b:2c:9e: 33:f2:5c:f9:39:28:64:de:53:a4:9a:0f:ab:1a:9b: 2d:f9:e4:b2:de:11:88:e8:08:45:bb:f5:2f:b2:d2: 1b:31:b6:d6:2b:0a:f5:59:38:f4:35:d4:55:19:9f: 0b:f6:3a:5f:75:39:ec:f3:09:e0:49:49:47:9c:9c: 4f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:43:C0:B6:30:E5:FD:F5:AB:72:69:21:80:AD:99:A0:C4:7A:45:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl X509v3 Authority Key Identifier: keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer sbgp-ipAddrBlock: critical IPv4: 208.80.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:3d:3a:bb:22:05:89:d0:13:0f:5b:e8:f2:b5:38:56:ad:e7: de:19:5f:72:17:04:e7:8e:5d:d5:ef:c1:31:6a:61:d0:52:81: 3f:54:ed:28:60:05:36:29:b1:5a:be:03:c7:e1:38:4e:24:84: f6:af:7a:08:a9:bc:41:86:a6:3c:d6:3a:7e:56:27:e1:db:b6: ed:7f:7b:c0:a9:58:e9:eb:96:03:ad:df:e3:9f:9b:1a:1f:98: e4:98:29:7a:c6:f4:32:ec:6f:df:cd:bf:95:9a:17:12:8c:58: 2a:71:a3:04:d5:62:9c:b8:27:17:70:04:53:f6:00:54:4f:5a: 01:05:f6:94:81:a1:fb:f5:23:15:fd:d1:83:86:e3:a5:07:91: 43:d6:71:ef:e9:e6:31:f1:a9:5f:09:73:19:ec:03:86:24:05: 38:0c:f5:5d:5c:f8:cc:66:f0:f5:2d:42:c6:79:5c:0a:44:1c: ce:ca:8a:99:6a:f0:ce:bb:c5:dd:e3:ea:90:74:d3:93:34:d2: db:31:cd:8b:a0:c8:fc:fb:34:32:f8:12:72:0c:cf:05:ea:c5: 01:6f:10:98:20:7f:7d:d0:9d:65:45:fe:1e:10:5f:b0:2a:03: 4f:8b:23:bb:99:77:1b:8e:f6:cb:b0:c1:cb:4d:52:0e:5d:57: ea:c7:d9:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2A/97bAlYD/QBa4OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx NTE5MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk NTRmZWRiYTctZjQxNy00NWIxLTg2ODktZWUyNzRhMTU5NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1949GIiP0zd4WbP1yrM1aSvsQOJQGXft0nRw G1sRwiIs40tgaAcPZARKIcylfNIc+gjRipxpANGtSfycy5zfM5fw40B2EFgh6RmI MAcQ42EL4zrIjXYVShaUt+0DqzzDmuIwSLby8dzofFgaErxlhqARcHyKYkEqx46D PSXDfjeAqdnIuP1jvQv8BsBqtVAgC2Vb8RrRMQ+As5SrVloxUUbhdTfwqGC4S+Zz 3fpCRzfFc9DgrrWOJU2hyzRqnDh7LJ4z8lz5OShk3lOkmg+rGpst+eSy3hGI6AhF u/UvstIbMbbWKwr1WTj0NdRVGZ8L9jpfdTns8wngSUlHnJxP3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlDwLYw5f31q3JpIYCtmaDEekUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvMzYzOTcwYzQtMzVhYS0z MzgwLTg4ZGQtMjAzOTgxZjhiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK09OrsiBYnQEw9b6PK1OFat594ZX3IXBOeOXdXvwTFqYdBSgT9U7Shg BTYpsVq+A8fhOE4khPavegipvEGGpjzWOn5WJ+Hbtu1/e8CpWOnrlgOt3+Ofmxof mOSYKXrG9DLsb9/Nv5WaFxKMWCpxowTVYpy4JxdwBFP2AFRPWgEF9pSBofv1IxX9 0YOG46UHkUPWce/p5jHxqV8JcxnsA4YkBTgM9V1c+Mxm8PUtQsZ5XApEHM7Kiplq 8M67xd3j6pB005M00tsxzYugyPz7NDL4EnIMzwXqxQFvEJggf33QnWVF/h4QX7Aq A0+LI7uZdxuO9suwwctNUg5dV+rH2TQ= -----END CERTIFICATE-----Generated at Fri Apr 17 22:29:58 2026 by rpki-client