$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa File: ebd76a09-c746-3e90-b835-0218552a1e60.roa (raw, json) Hash identifier: JEVcJw5cx8kehbBhzmXEypu4w1J/6Oq3ZtMc+jK9PFo= Subject key identifier: 35:C1:C9:D9:93:3D:02:F1:00:3D:25:84:6D:2A:33:F8:90:69:22:88 Certificate issuer: /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Certificate serial: 010D0C9F4328584D5E1A6858AF64C55234CADC00 Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 27313 IP address blocks: 204.79.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:68:58:af:64:c5:52:34:ca:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=7937a8b3-9a28-4c4a-912b-4d2d4b90326b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:60:a0:49:03:79:6f:88:e5:78:8c:26:80:b7: 7d:3e:51:63:0b:2c:55:3f:0a:e9:74:bb:b8:42:de: 7c:02:31:dc:91:08:1e:70:7e:eb:0c:ca:85:8f:3f: 5f:6c:70:70:3a:84:2c:47:16:da:f1:65:44:b4:1f: 34:ac:21:7f:72:bf:02:7d:62:47:d2:e9:51:09:52: 98:2f:28:07:40:47:cd:06:9b:1d:e8:a8:da:c5:ec: 25:01:7b:4a:18:4f:1a:10:8e:2d:56:5b:d5:51:37: 65:69:9e:a6:f9:f3:c3:bd:45:9b:c4:46:bf:31:fa: c5:ec:6f:ab:5d:b1:4f:c9:84:ad:a4:75:be:5e:11: 45:35:40:19:9b:93:09:4c:1f:de:69:94:84:75:6b: e4:94:62:27:7c:fe:e2:93:e6:04:50:f8:34:6f:29: 4f:46:d6:02:e1:47:b6:b2:db:fd:b7:dc:5d:f3:04: 13:b6:d5:b2:1a:9a:c3:b1:97:1c:95:5e:96:a5:26: 0c:b5:22:66:7b:24:a5:05:49:b5:49:d4:ad:0a:bc: b0:af:c7:a0:ab:c7:92:87:74:a1:82:da:0a:4b:b3: b4:e6:99:0c:22:58:3a:6d:82:a5:06:86:67:a9:52: e5:d0:7a:00:b1:92:f9:cb:bb:01:3d:08:31:9b:97: d5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C1:C9:D9:93:3D:02:F1:00:3D:25:84:6D:2A:33:F8:90:69:22:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/ebd76a09-c746-3e90-b835-0218552a1e60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl X509v3 Authority Key Identifier: keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer sbgp-ipAddrBlock: critical IPv4: 204.79.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:6d:88:b2:1e:09:d5:75:82:80:c0:84:10:8c:03:86:f8:2a: a0:51:f2:b5:1a:38:4c:68:4d:8f:24:f5:13:29:92:ba:1c:8a: ce:06:34:a5:2e:57:c9:7b:d8:67:92:67:af:47:34:da:67:ad: 83:a4:71:6a:60:37:0a:b7:1b:93:e6:d1:ce:91:fb:97:c3:d9: 68:cf:82:77:2f:dc:f9:48:62:64:a3:c2:37:4d:3c:03:ba:df: e3:8d:57:e3:5b:9b:3f:e7:48:80:9f:50:94:e3:26:cf:3e:d2: ca:db:65:55:20:ab:af:7d:fd:27:02:77:40:22:88:b4:23:46: a1:82:69:47:d1:a7:de:94:06:c8:12:aa:58:0e:0a:88:96:4e: e8:66:4a:23:44:59:81:26:eb:1d:2c:28:8a:fe:a9:4f:61:a2: 9a:12:db:38:5f:bf:61:bf:c6:b9:5e:4e:31:9f:e8:40:fc:c8: 00:5c:13:ce:29:10:5a:08:a5:dd:2b:94:fe:1c:82:f4:38:34: 29:ae:30:c1:79:fa:69:b7:f4:ca:d5:77:05:2b:90:a5:6e:1e: bc:27:da:ae:52:11:95:89:9b:93:ab:19:95:a2:0d:6e:8d:04: e9:65:dc:d2:8a:a4:c7:14:9f:52:d2:66:2d:d5:72:0f:d7:d2: 85:e0:59:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGmhYr2TFUjTK3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj MWU0MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk NzkzN2E4YjMtOWEyOC00YzRhLTkxMmItNGQyZDRiOTAzMjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWCgSQN5b4jleIwmgLd9PlFjCyxVPwrpdLu4 Qt58AjHckQgecH7rDMqFjz9fbHBwOoQsRxba8WVEtB80rCF/cr8CfWJH0ulRCVKY LygHQEfNBpsd6KjaxewlAXtKGE8aEI4tVlvVUTdlaZ6m+fPDvUWbxEa/MfrF7G+r XbFPyYStpHW+XhFFNUAZm5MJTB/eaZSEdWvklGInfP7ik+YEUPg0bylPRtYC4Ue2 stv9t9xd8wQTttWyGprDsZcclV6WpSYMtSJmeySlBUm1SdStCrywr8egq8eSh3Sh gtoKS7O05pkMIlg6bYKlBoZnqVLl0HoAsZL5y7sBPQgxm5fV6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXBydmTPQLxAD0lhG0qM/iQaSKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0 ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvZWJkNzZhMDktYzc0Ni0z ZTkwLWI4MzUtMDIxODU1MmExZTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1 YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3 YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIFtiLIeCdV1goDAhBCMA4b4KqBR8rUaOExoTY8k9RMpkrocis4GNKUu V8l72GeSZ69HNNpnrYOkcWpgNwq3G5Pm0c6R+5fD2WjPgncv3PlIYmSjwjdNPAO6 3+ONV+Nbmz/nSICfUJTjJs8+0srbZVUgq699/ScCd0AiiLQjRqGCaUfRp96UBsgS qlgOCoiWTuhmSiNEWYEm6x0sKIr+qU9hopoS2zhfv2G/xrleTjGf6ED8yABcE84p EFoIpd0rlP4cgvQ4NCmuMMF5+mm39MrVdwUrkKVuHrwn2q5SEZWJm5OrGZWiDW6N BOll3NKKpMcUn1LSZi3Vcg/X0oXgWbs= -----END CERTIFICATE-----Generated at Fri Apr 17 16:58:58 2026 by rpki-client