$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa File: 02d4c8c1-811c-301f-ae47-61c6c62035fe.roa (raw, json) Hash identifier: Aa+dge82sudlfZ+XyjZNsaK3rSW5/ZvO2gW8dsjGKFs= Subject key identifier: 27:2A:00:F6:6F:73:3C:70:E1:36:75:76:BD:97:26:0E:C8:7F:6E:B1 Certificate issuer: /CN=b0217be3-0b99-45d9-9156-e23551753455 Certificate serial: 010D0C9F4328584D80FFE69DCD8427DB00EAB400 Authority key identifier: 61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa Signing time: Tue 14 Apr 2026 13:00:30 +0000 ROA not before: Tue 14 Apr 2026 13:00:30 +0000 ROA not after: Mon 13 Jul 2026 13:00:30 +0000 asID: 395019 IP address blocks: 208.76.208.0/22 maxlen: 22 2602:fbfd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:80:ff:e6:9d:cd:84:27:db:00:ea:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0217be3-0b99-45d9-9156-e23551753455 Validity Not Before: Apr 14 13:00:30 2026 GMT Not After : Jul 13 13:00:30 2026 GMT Subject: CN=e2f79365-51c5-4d39-800a-dd7e5e62a281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ad:50:65:88:ad:3c:c1:4a:32:71:26:12:f4: de:26:8d:f8:b5:ad:5c:b9:f4:69:f3:0b:ed:bb:c7: 97:cd:32:da:1f:a2:91:99:4d:94:ac:82:4b:b2:e6: 9f:ae:3a:d3:4a:65:65:1b:81:b3:45:b9:f4:fa:21: 43:b7:14:a0:9c:7a:d9:d9:65:7a:37:79:ef:98:81: 11:ae:f0:67:af:61:85:96:47:dc:0f:ba:d1:9a:2d: 0d:f8:3f:4e:c8:c9:0d:9f:6c:69:59:42:2f:ed:29: 2a:29:86:81:21:86:6a:52:ea:fa:94:57:85:c3:b5: da:ca:eb:87:e3:7d:a5:8a:a8:1c:74:cf:50:4c:94: 8c:70:aa:b6:8f:14:61:0d:fc:45:6f:a9:b4:13:3a: d8:d9:be:15:5b:65:8d:4d:03:88:a1:db:ea:d9:27: ff:53:25:91:9e:35:67:42:d6:1f:c5:bf:6a:ca:31: f5:16:11:59:b9:2f:fa:48:9d:8a:e0:4f:33:33:4e: b5:da:49:f3:60:f3:a2:d9:d1:ba:c3:d8:94:1b:9a: 59:a3:c2:fc:bf:fd:d7:48:aa:a5:1d:94:5b:6f:b8: 41:1a:b7:9b:52:9b:e3:59:ce:dd:25:4a:5a:82:d0: 4d:b0:c9:c8:61:2c:76:85:78:22:74:a4:22:f4:48: a5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:00:F6:6F:73:3C:70:E1:36:75:76:BD:97:26:0E:C8:7F:6E:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/02d4c8c1-811c-301f-ae47-61c6c62035fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455/b0217be3-0b99-45d9-9156-e23551753455.crl X509v3 Authority Key Identifier: keyid:61:F2:92:9F:AE:6F:06:0D:B5:C1:9C:50:85:70:18:63:49:DE:DB:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b0217be3-0b99-45d9-9156-e23551753455.cer sbgp-ipAddrBlock: critical IPv4: 208.76.208.0/22 IPv6: 2602:fbfd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ed:68:c8:f2:49:44:d6:5a:64:b0:02:65:ac:1f:ac:f7:2c: 94:cd:5a:2e:f0:53:7d:00:13:3c:14:d9:c3:39:9c:55:48:1b: c6:12:48:5d:18:5a:cf:91:0d:8f:32:6b:63:11:11:0e:e5:c5: 17:45:20:24:b1:98:6f:2a:de:55:8a:63:95:17:9b:91:bf:e4: 0d:65:b4:b2:b5:16:c8:70:46:de:a7:7b:a1:16:e4:cd:2c:00: 74:7d:8b:8e:07:29:9e:10:df:8a:3d:82:20:71:55:83:a3:ab: 9f:c4:73:da:36:7a:0a:57:93:d5:7d:7b:bd:34:b0:0c:d9:06: 09:f2:39:01:e0:f7:e0:dd:73:1d:8b:36:4e:10:42:7a:d1:da: 4e:43:97:7e:d5:1e:c0:85:3b:91:75:24:d4:be:ae:de:49:81: 35:2a:10:d0:f3:cb:08:24:3a:54:ec:33:ac:4d:27:0f:f7:52: d1:fd:7f:32:35:87:21:6e:2a:c7:86:6a:55:e1:81:29:87:c2: ea:2b:a8:6b:74:83:f2:24:1c:a6:53:8c:2e:fa:97:72:60:6b: a2:87:a4:e6:47:81:a1:6b:53:6c:ea:bb:a5:99:de:88:16:c8: eb:df:8d:0a:5e:e1:5e:76:14:39:48:af:16:20:99:df:28:86: 14:55:b2:43 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2A/+adzYQn2wDqtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyMTdiZTMtMGI5OS00NWQ5LTkxNTYtZTIzNTUxNzUz NDU1MB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk ZTJmNzkzNjUtNTFjNS00ZDM5LTgwMGEtZGQ3ZTVlNjJhMjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka1QZYitPMFKMnEmEvTeJo34ta1cufRp8wvt u8eXzTLaH6KRmU2UrIJLsuafrjrTSmVlG4GzRbn0+iFDtxSgnHrZ2WV6N3nvmIER rvBnr2GFlkfcD7rRmi0N+D9OyMkNn2xpWUIv7SkqKYaBIYZqUur6lFeFw7XayuuH 432liqgcdM9QTJSMcKq2jxRhDfxFb6m0EzrY2b4VW2WNTQOIodvq2Sf/UyWRnjVn QtYfxb9qyjH1FhFZuS/6SJ2K4E8zM0612knzYPOi2dG6w9iUG5pZo8L8v/3XSKql HZRbb7hBGrebUpvjWc7dJUpagtBNsMnIYSx2hXgidKQi9EilYwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCcqAPZvczxw4TZ1dr2XJg7If26xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIx N2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1NTE3NTM0NTUvMDJkNGM4YzEtODExYy0z MDFmLWFlNDctNjFjNmM2MjAzNWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjAyMTdiZTMtMGI5OS00NWQ5LTkx NTYtZTIzNTUxNzUzNDU1L2IwMjE3YmUzLTBiOTktNDVkOS05MTU2LWUyMzU1MTc1 MzQ1NS5jcmwwHwYDVR0jBBgwFoAUYfKSn65vBg21wZxQhXAYY0ne2zYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMDIxN2JlMy0wYjk5LTQ1ZDktOTE1Ni1lMjM1 NTE3NTM0NTUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0EzQMA4E AgACMAgDBgQmAvv9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBr7WjI8klE1lpksAJlrB+s9yyUzVou8FN9 ABM8FNnDOZxVSBvGEkhdGFrPkQ2PMmtjEREO5cUXRSAksZhvKt5VimOVF5uRv+QN ZbSytRbIcEbep3uhFuTNLAB0fYuOBymeEN+KPYIgcVWDo6ufxHPaNnoKV5PVfXu9 NLAM2QYJ8jkB4Pfg3XMdizZOEEJ60dpOQ5d+1R7AhTuRdSTUvq7eSYE1KhDQ88sI JDpU7DOsTScP91LR/X8yNYchbirHhmpV4YEph8LqK6hrdIPyJBymU4wu+pdyYGui h6TmR4Gha1Ns6rulmd6IFsjr340KXuFedhQ5SK8WIJnfKIYUVbJD -----END CERTIFICATE-----Generated at Fri Apr 17 17:01:50 2026 by rpki-client