$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa File: 4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa (raw, json) Hash identifier: sc0JWVQAtQOKpHOWf34VZHuJs6+gHesMasX6XVFLrIM= Subject key identifier: E9:92:13:6F:06:3E:93:36:E0:A2:B4:68:FF:F9:1E:BE:64:A5:9E:EE Certificate issuer: /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Certificate serial: 010D0C9F4328584CAA271FBD43F3E1636F28B880 Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa Signing time: Tue 27 Jan 2026 14:00:36 +0000 ROA not before: Tue 27 Jan 2026 14:00:36 +0000 ROA not after: Mon 27 Apr 2026 13:00:36 +0000 asID: 12157 IP address blocks: 208.67.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:aa:27:1f:bd:43:f3:e1:63:6f:28:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff Validity Not Before: Jan 27 14:00:36 2026 GMT Not After : Apr 27 13:00:36 2026 GMT Subject: CN=00f2ba4b-7b5c-43d8-8e63-d80224936ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6a:5b:c1:06:76:a0:63:dc:37:98:f5:28:87: 75:2b:89:85:23:22:68:c6:0b:7a:11:e1:aa:75:cc: 07:be:3e:de:e0:9e:ce:bf:da:e7:ad:26:28:7b:78: 1a:91:79:4d:d2:b5:66:0a:5e:de:ab:4b:0b:ab:65: bb:d9:28:a3:31:ba:7f:56:f3:30:ab:a8:b4:80:14: 88:49:0a:e8:5e:c1:b4:9c:8c:34:1c:5d:60:25:75: 29:9e:b2:ff:55:5a:98:bc:e3:8a:3a:cb:6a:ed:b2: f5:76:02:30:ee:a6:ce:ea:4d:d7:11:d7:05:3c:6e: 30:2f:5d:bd:3e:b9:4e:61:2d:ff:27:bf:b8:71:74: e7:10:d4:87:cf:8f:53:0d:c1:3e:f5:20:39:5c:e9: f8:67:e5:cc:63:fd:04:67:e6:f8:67:61:42:72:25: e1:b9:23:ed:92:cd:07:17:f4:2d:ce:f1:de:42:99: 81:73:4c:c0:d2:c5:63:36:a4:45:e7:d9:6c:51:be: 96:1d:b0:1d:2e:0f:4a:c9:78:e6:e8:9c:4c:07:98: 82:a7:72:5d:68:82:5b:8a:44:b7:d2:3c:da:92:0c: 6b:04:44:3e:e0:83:ec:9e:9d:20:1f:4a:9c:a5:9f: 5b:ae:b6:15:64:56:7f:c2:e9:71:e9:56:8a:1c:8e: 07:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:92:13:6F:06:3E:93:36:E0:A2:B4:68:FF:F9:1E:BE:64:A5:9E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/4c8a06f7-42c2-3699-9c10-aa6015918cdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl X509v3 Authority Key Identifier: keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer sbgp-ipAddrBlock: critical IPv4: 208.67.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ab:60:b4:0c:24:59:71:e6:0b:d9:84:07:e3:74:31:90:b4: e5:1d:bc:41:56:54:f3:29:e4:ec:04:26:da:23:47:86:ba:70: 65:4b:ad:5a:79:c0:3c:f8:0c:76:e4:f6:7e:bb:96:5e:76:6d: aa:7e:4d:2a:59:c5:47:39:a1:74:fb:f5:11:25:39:0a:d1:87: ec:33:8c:3a:68:ed:98:df:01:dc:71:40:d1:36:ab:af:76:58: 37:e7:80:dc:fa:f8:b1:04:f7:1f:7a:11:d6:e7:3a:fd:df:95: c8:a5:58:3e:07:a2:ab:a3:5d:ed:b3:7d:d2:88:f7:f6:e1:b5: 2c:66:d5:a1:18:67:d4:b8:72:07:bb:80:61:96:fd:32:6e:4e: e7:ae:7a:64:dd:c3:42:35:b5:e1:71:0d:7e:77:2b:93:52:8e: 50:1c:5d:3d:da:14:e3:91:e2:76:e2:a2:0e:00:8c:65:73:f0: 04:df:1d:7a:c3:4d:55:7b:2a:0b:bb:a8:db:c6:39:a2:fe:18: 5c:3e:2b:c7:bc:89:e7:50:15:9b:07:35:fd:65:e4:1c:7a:85: 0f:72:ac:9c:b0:a6:aa:30:c9:e4:14:a8:dd:64:ac:a1:a2:0b: 36:4b:66:ec:89:d5:7f:4d:f1:8b:63:a1:8f:d6:45:9c:47:d2: 3f:09:14:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyqJx+9Q/PhY28ouIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3 OWZmMB4XDTI2MDEyNzE0MDAzNloXDTI2MDQyNzEzMDAzNlowLzEtMCsGA1UEAxMk MDBmMmJhNGItN2I1Yy00M2Q4LThlNjMtZDgwMjI0OTM2YWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGpbwQZ2oGPcN5j1KId1K4mFIyJoxgt6EeGq dcwHvj7e4J7Ov9rnrSYoe3gakXlN0rVmCl7eq0sLq2W72SijMbp/VvMwq6i0gBSI SQroXsG0nIw0HF1gJXUpnrL/VVqYvOOKOstq7bL1dgIw7qbO6k3XEdcFPG4wL129 PrlOYS3/J7+4cXTnENSHz49TDcE+9SA5XOn4Z+XMY/0EZ+b4Z2FCciXhuSPtks0H F/QtzvHeQpmBc0zA0sVjNqRF59lsUb6WHbAdLg9KyXjm6JxMB5iCp3JdaIJbikS3 0jzakgxrBEQ+4IPsnp0gH0qcpZ9brrYVZFZ/wulx6VaKHI4H4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmSE28GPpM24KK0aP/5Hr5kpZ7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4 YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvNGM4YTA2ZjctNDJjMi0z Njk5LTljMTAtYWE2MDE1OTE4Y2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4 MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0 NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0 ODJmNDc5ZmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6rYLQMJFlx5gvZhAfjdDGQtOUdvEFWVPMp5OwEJtojR4a6cGVLrVp5 wDz4DHbk9n67ll52bap+TSpZxUc5oXT79RElOQrRh+wzjDpo7ZjfAdxxQNE2q692 WDfngNz6+LEE9x96EdbnOv3flcilWD4HoqujXe2zfdKI9/bhtSxm1aEYZ9S4cge7 gGGW/TJuTueuemTdw0I1teFxDX53K5NSjlAcXT3aFOOR4nbiog4AjGVz8ATfHXrD TVV7Kgu7qNvGOaL+GFw+K8e8iedQFZsHNf1l5Bx6hQ9yrJywpqowyeQUqN1krKGi CzZLZuyJ1X9N8YtjoY/WRZxH0j8JFBw= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:19 2026 by rpki-client