$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa File: ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa (raw, json) Hash identifier: G+4lDQuF8+xidfQrjEu+/IsgY2xP4ILaRgulIgZ8sA4= Subject key identifier: 8A:3E:BC:0E:65:28:5A:1F:36:C6:E8:BB:E4:C5:28:8C:72:18:63:83 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584D67DFCEBE4987C0707C150D00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 16696 IP address blocks: 208.101.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ce:be:49:87:c0:70:7c:15:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=d709c0d8-72fa-43a4-9af1-b1c76362d8a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a4:a5:f5:8f:2e:15:78:ca:09:1d:31:67:99: e3:f6:da:a9:a3:8d:c6:5c:3a:6e:6c:5e:cf:8d:8c: 8b:7c:cc:60:44:0f:8f:20:13:28:db:59:7a:26:a7: 43:32:0d:bb:62:80:7b:3c:cf:e1:62:3d:8d:05:81: 80:17:cc:3e:09:d3:06:82:ee:32:8b:5b:0b:1e:5d: 82:55:2f:a6:bb:9a:03:53:a2:dc:a2:bf:c1:3d:b1: 94:bf:3a:c1:94:bf:b0:3a:c0:d4:18:b0:03:c2:1b: 18:63:69:59:f7:e4:cf:a7:66:eb:cd:02:f9:9e:2f: d6:92:cb:26:c8:e1:c4:fa:1b:07:9d:5a:da:32:5c: cc:f5:88:d8:48:a4:be:45:61:36:5b:35:c8:f3:47: 81:af:75:42:e6:cf:d4:91:23:ae:1d:2a:84:84:17: 8a:86:2c:ae:11:d2:72:f7:d3:bd:01:3a:08:ed:cd: 49:95:ad:c4:33:83:d4:bf:26:10:45:db:85:a0:93: df:6b:06:39:4d:54:b3:1e:9a:ad:d9:4c:39:fe:03: 17:48:31:64:4c:83:86:ac:8e:dc:89:a8:a8:0c:54: 5d:49:21:e9:c2:5c:de:0f:29:af:25:08:36:d7:24: 4e:71:ab:65:19:cb:05:7a:69:43:05:7c:37:b3:a7: bb:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:BC:0E:65:28:5A:1F:36:C6:E8:BB:E4:C5:28:8C:72:18:63:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 208.101.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:9e:c6:b3:d6:a6:b7:fe:2b:9b:e9:a2:fb:7a:b8:97:b8:3c: d8:82:f6:4a:5e:74:96:2c:d0:0c:45:59:95:5e:b1:0c:c7:4a: 8d:3b:17:63:cb:c5:2f:75:38:ae:47:36:8b:68:71:50:ed:6c: 78:c1:e1:79:d7:61:09:4a:c1:89:27:d2:e2:90:6f:9a:f0:6e: 41:3c:15:b9:62:9d:e5:a1:61:0e:85:6b:df:57:9b:a5:0b:ee: a0:2d:f3:ba:2c:4a:9d:c5:47:b7:07:76:64:89:68:7c:b2:e4: ef:b7:7c:d6:6e:45:2d:04:39:bc:d4:fa:6e:f1:fd:92:dd:be: b8:f2:dd:e7:bd:44:5a:90:c7:ac:a9:35:19:df:2c:88:de:91: a5:0b:98:e3:04:04:30:a3:01:bb:37:28:38:34:37:b9:86:af: 07:04:40:cb:60:3c:81:e4:a6:1c:17:de:a7:df:fe:e4:87:9a: 28:de:97:0f:69:f2:29:da:8c:16:f9:bf:3a:9b:63:a9:21:59: d1:73:55:27:bc:f7:5f:3d:2b:da:78:87:71:65:a2:00:72:bf: ee:d7:75:e2:4d:8a:b1:48:26:f8:2d:e6:61:19:03:9d:6e:aa: 98:13:f5:ea:fc:43:83:f3:59:09:cd:7a:a4:9b:83:81:28:d9: f0:fc:d3:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n386+SYfAcHwVDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk ZDcwOWMwZDgtNzJmYS00M2E0LTlhZjEtYjFjNzYzNjJkOGE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqSl9Y8uFXjKCR0xZ5nj9tqpo43GXDpubF7P jYyLfMxgRA+PIBMo21l6JqdDMg27YoB7PM/hYj2NBYGAF8w+CdMGgu4yi1sLHl2C VS+mu5oDU6Lcor/BPbGUvzrBlL+wOsDUGLADwhsYY2lZ9+TPp2brzQL5ni/Wkssm yOHE+hsHnVraMlzM9YjYSKS+RWE2WzXI80eBr3VC5s/UkSOuHSqEhBeKhiyuEdJy 99O9AToI7c1Jla3EM4PUvyYQRduFoJPfawY5TVSzHpqt2Uw5/gMXSDFkTIOGrI7c iaioDFRdSSHpwlzeDymvJQg21yROcatlGcsFemlDBXw3s6e7mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo+vA5lKFofNsbou+TFKIxyGGODMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmY1NWFhMWQtNWY5My0z MjE3LTg1MzYtNGFmNzg2ZjZmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWexrPWprf+K5vpovt6uJe4PNiC9kpedJYs0AxFWZVesQzHSo07F2PL xS91OK5HNotocVDtbHjB4XnXYQlKwYkn0uKQb5rwbkE8FblineWhYQ6Fa99Xm6UL 7qAt87osSp3FR7cHdmSJaHyy5O+3fNZuRS0EObzU+m7x/ZLdvrjy3ee9RFqQx6yp NRnfLIjekaULmOMEBDCjAbs3KDg0N7mGrwcEQMtgPIHkphwX3qff/uSHmijelw9p 8inajBb5vzqbY6khWdFzVSe89189K9p4h3FlogByv+7XdeJNirFIJvgt5mEZA51u qpgT9er8Q4PzWQnNeqSbg4Eo2fD805o= -----END CERTIFICATE-----Generated at Fri Apr 17 11:41:26 2026 by rpki-client