$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa File: 8981f9f7-457a-3b83-995f-2557ffc8cb47.roa (raw, json) Hash identifier: SaqeFLkibCU866cuuTju72fA5j5wjbLqmrCgpMAFpQ8= Subject key identifier: E9:FB:58:14:8B:1D:14:3F:F3:8D:09:E4:3D:7D:00:DD:BB:4D:FA:83 Certificate issuer: /CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Certificate serial: 010D0C9F4328584D67DFC5271528916C1AB52C80 Authority key identifier: 51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 26461 IP address blocks: 208.91.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c5:27:15:28:91:6c:1a:b5:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2dee9b00-7f9e-4d2c-8e17-494dffa66902 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=5fdf1286-1bb0-469b-b361-7012e010b74d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a3:4d:94:9e:25:2c:6a:36:e3:de:a3:54:e1: 5f:f3:1b:b2:9a:87:ed:ea:94:f7:86:bb:f5:da:ea: 17:fb:50:d6:50:f1:e5:69:4c:7f:e9:9a:b7:7b:6d: 9b:60:04:43:a5:34:34:c7:07:b3:d5:ed:18:16:fe: 78:7d:d1:33:cb:d0:11:d4:f2:4a:b4:f0:42:ba:e8: bd:34:aa:46:c3:1f:a0:0c:20:5d:ac:4a:dc:66:1a: 3f:f3:1c:b3:a3:af:23:16:09:f6:65:e7:8d:84:1c: 71:43:55:12:a8:b5:76:f2:ca:81:54:aa:65:8a:81: c7:e3:b1:cc:44:a0:85:f4:b9:6f:26:56:93:ba:c1: 98:2d:e9:95:74:fb:94:48:58:ba:fd:30:41:95:f4: c0:05:a7:bb:c7:60:3b:02:ab:dc:11:39:d9:7c:bb: 09:0a:d7:d2:9d:0e:ba:dd:10:57:24:85:b7:fc:c7: 29:2b:cb:12:dc:94:f0:fb:56:be:04:5a:fd:f8:b9: 98:62:27:20:47:7e:d0:ff:34:35:6a:78:e2:53:4b: 47:42:a6:cf:e9:df:0a:d9:46:41:23:6a:a5:1d:96: 37:0a:99:21:75:25:35:39:e8:76:be:18:0f:3c:9d: e7:33:13:60:19:10:f7:2f:af:50:ad:d6:46:36:8b: 94:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:FB:58:14:8B:1D:14:3F:F3:8D:09:E4:3D:7D:00:DD:BB:4D:FA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/8981f9f7-457a-3b83-995f-2557ffc8cb47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902/2dee9b00-7f9e-4d2c-8e17-494dffa66902.crl X509v3 Authority Key Identifier: keyid:51:6F:67:7F:8D:57:C0:7A:7F:D4:EF:C8:3A:CF:F2:31:53:EF:1A:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2dee9b00-7f9e-4d2c-8e17-494dffa66902.cer sbgp-ipAddrBlock: critical IPv4: 208.91.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4f:49:fa:79:dd:56:64:fc:56:d6:7f:b1:55:6a:17:dd:2c: f7:e1:61:ea:18:d4:8e:94:b0:4b:b3:3f:f7:8a:0d:4c:da:1b: 92:f5:41:b5:98:6c:46:42:f2:2f:40:55:e2:e5:ca:61:f9:16: e4:bd:9e:ea:ab:ed:97:15:8a:2d:52:a5:2e:b1:4f:e1:c7:5e: df:4f:d0:1c:63:66:27:ac:07:6e:f2:63:65:61:82:fa:ca:e4: ff:fe:96:ad:bb:59:34:74:84:e7:e0:c2:e8:9f:9e:9c:7b:0e: 34:6d:de:77:28:93:f8:53:8e:c8:7d:8e:20:95:4a:ae:82:53: 46:49:69:5a:52:da:6f:8a:3d:b9:b5:f8:dc:41:1c:31:d4:e8: 06:cd:61:de:7d:09:d7:0a:b7:d9:6d:da:bd:3b:07:08:91:2e: 64:41:14:79:ef:f2:5e:3a:77:da:c7:02:6c:71:58:3d:64:0d: 13:31:c2:8a:f4:1b:17:f0:9f:de:de:9d:1f:a6:09:b8:59:e8: 44:50:e6:c3:fc:37:ac:f4:c1:c1:89:3f:09:de:37:13:d4:25: 11:2e:4b:08:7a:e6:64:3f:64:d9:13:dd:7f:7a:72:df:5d:1e: 84:fb:ed:f2:0b:c2:74:de:62:23:04:f9:e6:1b:29:5a:0e:7e: ef:3d:8d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38UnFSiRbBq1LIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRlZTliMDAtN2Y5ZS00ZDJjLThlMTctNDk0ZGZmYTY2 OTAyMB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk NWZkZjEyODYtMWJiMC00NjliLWIzNjEtNzAxMmUwMTBiNzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKNNlJ4lLGo2496jVOFf8xuymoft6pT3hrv1 2uoX+1DWUPHlaUx/6Zq3e22bYARDpTQ0xwez1e0YFv54fdEzy9AR1PJKtPBCuui9 NKpGwx+gDCBdrErcZho/8xyzo68jFgn2ZeeNhBxxQ1USqLV28sqBVKplioHH47HM RKCF9LlvJlaTusGYLemVdPuUSFi6/TBBlfTABae7x2A7AqvcETnZfLsJCtfSnQ66 3RBXJIW3/McpK8sS3JTw+1a+BFr9+LmYYicgR37Q/zQ1anjiU0tHQqbP6d8K2UZB I2qlHZY3CpkhdSU1Oeh2vhgPPJ3nMxNgGRD3L69QrdZGNouUOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn7WBSLHRQ/840J5D19AN27TfqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZGVl OWIwMC03ZjllLTRkMmMtOGUxNy00OTRkZmZhNjY5MDIvODk4MWY5ZjctNDU3YS0z YjgzLTk5NWYtMjU1N2ZmYzhjYjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmRlZTliMDAtN2Y5ZS00ZDJjLThl MTctNDk0ZGZmYTY2OTAyLzJkZWU5YjAwLTdmOWUtNGQyYy04ZTE3LTQ5NGRmZmE2 NjkwMi5jcmwwHwYDVR0jBBgwFoAUUW9nf41XwHp/1O/IOs/yMVPvGmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8yZGVlOWIwMC03ZjllLTRkMmMtOGUxNy00OTRk ZmZhNjY5MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FvrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJPSfp53VZk/FbWf7FVahfdLPfhYeoY1I6UsEuzP/eKDUzaG5L1QbWY bEZC8i9AVeLlymH5FuS9nuqr7ZcVii1SpS6xT+HHXt9P0BxjZiesB27yY2VhgvrK 5P/+lq27WTR0hOfgwuifnpx7DjRt3ncok/hTjsh9jiCVSq6CU0ZJaVpS2m+KPbm1 +NxBHDHU6AbNYd59CdcKt9lt2r07BwiRLmRBFHnv8l46d9rHAmxxWD1kDRMxwor0 Gxfwn97enR+mCbhZ6ERQ5sP8N6z0wcGJPwneNxPUJREuSwh65mQ/ZNkT3X96ct9d HoT77fILwnTeYiME+eYbKVoOfu89jSE= -----END CERTIFICATE-----Generated at Fri Apr 17 09:48:13 2026 by rpki-client