$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa File: d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa (raw, json) Hash identifier: cPuHyKNGbIV4aRRr+mtiaBMCuKO45k/F3MhzBKPtd9M= Subject key identifier: 16:CE:D6:FB:85:B5:D5:FB:B7:09:C6:F2:FA:DE:A7:6B:5A:A5:76:DE Certificate issuer: /CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Certificate serial: 010D0C9F4328584D67DFCAC067C23B7C29B98940 Authority key identifier: 1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 17103 IP address blocks: 208.90.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:ca:c0:67:c2:3b:7c:29:b9:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b1000a-ddde-44a7-ad9c-12d049acde17 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=09019411-c718-4cba-afb4-798ccff90ddd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:19:1b:53:90:f6:f4:c5:85:ea:76:ff:ea: 81:62:9c:c4:5e:7a:a6:60:da:6e:9f:18:f0:1d:6a: 11:4f:4b:31:e4:67:04:df:1b:31:92:28:1f:16:bf: ef:7a:e1:67:00:68:49:68:22:c2:16:b5:01:21:85: c9:94:68:9e:1a:bf:21:a0:5e:1b:29:f4:c2:41:a2: 35:8a:9e:65:29:78:4d:25:6d:20:75:d8:d3:24:2c: 8a:88:1b:e6:29:d2:d7:de:80:6e:50:73:d6:02:3f: ef:5e:45:ad:fa:43:d8:fa:af:b8:fa:15:24:bf:e6: cd:2a:16:a7:ab:c7:76:6e:35:3f:b9:1b:5a:d1:cc: 1e:4c:6b:ed:d1:5e:09:8e:b6:68:9c:61:42:11:72: 81:5f:86:03:ff:cb:99:48:f3:45:e4:42:a6:b0:ff: e2:11:47:fc:51:b9:94:4a:c4:3c:b1:d9:57:60:19: ba:9f:e3:f3:59:f5:b0:c3:2e:99:d8:5f:0c:2e:6a: 2d:4a:73:8c:57:82:b7:5c:1c:de:69:99:de:93:a9: 22:fa:7b:65:94:ad:3e:15:eb:52:bf:78:33:76:a5: f8:dd:50:50:4d:9e:95:82:b9:6a:3b:fd:7c:56:1b: 31:7b:45:71:44:db:a1:71:53:d6:14:e8:99:ac:35: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:D6:FB:85:B5:D5:FB:B7:09:C6:F2:FA:DE:A7:6B:5A:A5:76:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/d3ddb18f-5ef6-3fea-b8e6-d380e513a119.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17/34b1000a-ddde-44a7-ad9c-12d049acde17.crl X509v3 Authority Key Identifier: keyid:1E:EC:0F:F6:F1:1D:87:A6:13:F3:A1:DB:28:93:B5:87:3E:C7:B7:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/34b1000a-ddde-44a7-ad9c-12d049acde17.cer sbgp-ipAddrBlock: critical IPv4: 208.90.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:b5:56:44:ba:dc:36:e7:5e:ae:5b:3f:2f:ee:b8:98:ec:ee: 9c:b6:9a:16:80:b7:e2:1c:08:8d:a8:6a:93:53:bf:9d:30:88: a7:a1:d9:65:3a:59:ed:e5:e2:cc:ff:01:b3:79:d2:70:66:92: 69:7a:8d:a0:03:57:44:02:a5:24:b3:06:0a:ce:44:47:ad:10: a5:44:0f:70:6b:39:55:11:9e:c3:a2:93:51:19:cc:d5:42:d9: 80:61:6f:46:e5:aa:dd:9a:1a:ad:a0:e5:f0:87:e8:22:54:e0: 04:c5:bc:90:f3:fa:86:b2:7a:17:c5:76:1a:85:e1:7d:3f:5b: 14:5f:a9:ed:17:a4:41:5b:86:be:f0:37:8f:63:c5:98:03:49: f8:40:8b:6f:07:0d:47:66:35:bd:c4:c7:e1:2e:3d:8b:69:3a: c7:7c:97:a7:91:04:22:14:79:9a:6b:d2:b5:a8:e4:21:61:94: cc:d6:55:56:9a:75:9b:70:29:1b:ec:77:84:09:70:7c:1a:f4: d1:72:56:a9:64:0d:04:73:49:18:15:1d:59:d9:fc:43:83:d8: e8:d9:42:43:9f:4d:89:1b:c4:6e:e6:ef:68:58:74:36:12:51: c3:72:a2:48:67:41:b1:79:96:3e:0e:89:7a:6c:69:64:b6:cb: 3e:04:96:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38rAZ8I7fCm5iUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRiMTAwMGEtZGRkZS00NGE3LWFkOWMtMTJkMDQ5YWNk ZTE3MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk MDkwMTk0MTEtYzcxOC00Y2JhLWFmYjQtNzk4Y2NmZjkwZGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXkZG1OQ9vTFhep2/+qBYpzEXnqmYNpunxjw HWoRT0sx5GcE3xsxkigfFr/veuFnAGhJaCLCFrUBIYXJlGieGr8hoF4bKfTCQaI1 ip5lKXhNJW0gddjTJCyKiBvmKdLX3oBuUHPWAj/vXkWt+kPY+q+4+hUkv+bNKhan q8d2bjU/uRta0cweTGvt0V4JjrZonGFCEXKBX4YD/8uZSPNF5EKmsP/iEUf8UbmU SsQ8sdlXYBm6n+PzWfWwwy6Z2F8MLmotSnOMV4K3XBzeaZnek6ki+ntllK0+FetS v3gzdqX43VBQTZ6VgrlqO/18Vhsxe0VxRNuhcVPWFOiZrDUjbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbO1vuFtdX7twnG8vrep2tapXbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNGIx MDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQwNDlhY2RlMTcvZDNkZGIxOGYtNWVmNi0z ZmVhLWI4ZTYtZDM4MGU1MTNhMTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzRiMTAwMGEtZGRkZS00NGE3LWFk OWMtMTJkMDQ5YWNkZTE3LzM0YjEwMDBhLWRkZGUtNDRhNy1hZDljLTEyZDA0OWFj ZGUxNy5jcmwwHwYDVR0jBBgwFoAUHuwP9vEdh6YT86HbKJO1hz7Ht4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNGIxMDAwYS1kZGRlLTQ0YTctYWQ5Yy0xMmQw NDlhY2RlMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FqQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+1VkS63DbnXq5bPy/uuJjs7py2mhaAt+IcCI2oapNTv50wiKeh2WU6 We3l4sz/AbN50nBmkml6jaADV0QCpSSzBgrOREetEKVED3BrOVURnsOik1EZzNVC 2YBhb0blqt2aGq2g5fCH6CJU4ATFvJDz+oayehfFdhqF4X0/WxRfqe0XpEFbhr7w N49jxZgDSfhAi28HDUdmNb3Ex+EuPYtpOsd8l6eRBCIUeZpr0rWo5CFhlMzWVVaa dZtwKRvsd4QJcHwa9NFyVqlkDQRzSRgVHVnZ/EOD2OjZQkOfTYkbxG7m72hYdDYS UcNyokhnQbF5lj4OiXpsaWS2yz4ElsU= -----END CERTIFICATE-----Generated at Fri Apr 17 14:25:13 2026 by rpki-client