$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa File: 912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa (raw, json) Hash identifier: GN9LYGU5l9vXlkyEvgi5dXJvvHg3ngUqKzTbQb1WijI= Subject key identifier: 92:AF:F1:F0:FA:11:39:EA:1A:35:8A:E6:8F:C7:D0:09:03:22:5A:64 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584D7A05335DBD573B365CA6B000 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 16563 IP address blocks: 208.86.96.0/23 maxlen: 23 208.86.96.0/24 maxlen: 24 208.86.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:33:5d:bd:57:3b:36:5c:a6:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=bd85302c-f379-479a-a82b-0d4fba644e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:34:85:c9:c1:6a:fb:32:b6:18:29:63:6d: fb:79:1b:37:1a:62:e3:45:bf:be:50:f8:70:5c:0b: 27:e5:db:fc:69:ab:ed:a4:c2:86:a5:51:4a:1b:9b: 79:3b:64:d2:ce:23:7b:a3:14:e4:33:64:cd:fe:3a: 6a:56:f7:36:f9:ad:e4:0e:5f:9c:2a:56:2e:86:c7: 03:35:4a:ca:ea:d9:49:58:2f:b1:a0:cc:46:47:8a: bd:ad:ab:8a:f2:d0:e6:da:be:05:c9:69:57:04:22: 30:f8:b9:f6:2c:6e:22:cd:3d:86:b0:86:af:bf:87: 23:bb:4f:2d:cf:a3:fd:cb:a7:4d:99:49:70:f6:69: 25:4d:14:fb:a0:fb:29:cf:03:4a:2f:52:e2:eb:e5: 1f:2f:bd:b2:99:27:67:5d:21:22:ff:ba:a0:3b:3b: f5:b8:49:0f:94:fc:a7:61:97:50:5d:36:7c:01:89: b9:e1:ad:4d:c5:91:70:54:08:37:d5:2f:78:a3:eb: fb:a8:0b:30:ba:c3:6b:f7:17:65:10:e5:13:5f:17: 4b:1a:e2:c1:d4:d8:87:e2:4e:8d:ae:11:29:a0:ce: 27:88:15:bd:b7:a1:11:70:e9:07:75:85:9a:13:c9: bb:2b:76:8e:d1:74:1c:a6:c3:82:df:1a:3a:ea:35: 3d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:F1:F0:FA:11:39:EA:1A:35:8A:E6:8F:C7:D0:09:03:22:5A:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/912f5eaa-9a9d-3d8b-8012-10690c9e5149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:88:c3:31:66:fb:c1:41:f8:69:e5:2b:f0:3b:6c:a4:6c:30: fa:57:63:0f:36:e6:18:db:1d:44:b3:c0:6e:04:f1:a6:bb:61: 08:22:43:dc:ee:4e:0c:fd:b5:c6:3b:46:4f:0e:b9:76:66:ff: ba:4d:c5:c1:fc:c7:98:b1:f9:b6:1c:53:4b:2f:ca:da:d6:eb: 15:4d:a2:02:71:f6:0d:c2:a8:9f:ca:71:f7:1c:1a:74:c4:50: ea:81:a3:99:80:fe:be:f8:87:e3:7e:ff:d3:4c:6b:05:24:3f: 00:b5:9e:d8:f4:cf:6b:2c:44:0d:77:a9:76:b6:c0:fd:dd:90: d7:5e:d8:e9:89:ba:9d:06:dc:d9:2b:0c:6b:00:b2:9e:a7:8e: 43:d0:9a:a2:76:3a:92:03:8c:b3:47:16:f4:fb:50:09:26:72: a9:b3:11:87:9c:c0:3c:0e:a5:db:16:89:2a:be:39:25:2e:5b: ea:7b:97:d2:1d:5c:d0:2e:43:59:ca:6a:1c:05:82:90:cd:43: 7d:3f:23:94:99:80:f8:f3:fa:6c:98:ee:9e:96:b6:50:25:40: 5d:f5:27:5d:08:a5:f3:ae:6d:fe:30:68:3f:cd:67:3f:ad:98: 26:7e:4c:62:56:28:b9:47:25:dc:fb:2d:ae:87:ec:98:bb:8b: 19:34:3c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTNdvVc7NlymsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk YmQ4NTMwMmMtZjM3OS00NzlhLWE4MmItMGQ0ZmJhNjQ0ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZg0hcnBavsythgpY237eRs3GmLjRb++UPhw XAsn5dv8aavtpMKGpVFKG5t5O2TSziN7oxTkM2TN/jpqVvc2+a3kDl+cKlYuhscD NUrK6tlJWC+xoMxGR4q9rauK8tDm2r4FyWlXBCIw+Ln2LG4izT2GsIavv4cju08t z6P9y6dNmUlw9mklTRT7oPspzwNKL1Li6+UfL72ymSdnXSEi/7qgOzv1uEkPlPyn YZdQXTZ8AYm54a1NxZFwVAg31S94o+v7qAswusNr9xdlEOUTXxdLGuLB1NiH4k6N rhEpoM4niBW9t6ERcOkHdYWaE8m7K3aO0XQcpsOC3xo66jU9oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJKv8fD6ETnqGjWK5o/H0AkDIlpkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvOTEyZjVlYWEtOWE5ZC0z ZDhiLTgwMTItMTA2OTBjOWU1MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmIwzFm+8FB+GnlK/A7bKRsMPpXYw825hjbHUSzwG4E8aa7YQgiQ9zu Tgz9tcY7Rk8OuXZm/7pNxcH8x5ix+bYcU0svytrW6xVNogJx9g3CqJ/KcfccGnTE UOqBo5mA/r74h+N+/9NMawUkPwC1ntj0z2ssRA13qXa2wP3dkNde2OmJup0G3Nkr DGsAsp6njkPQmqJ2OpIDjLNHFvT7UAkmcqmzEYecwDwOpdsWiSq+OSUuW+p7l9Id XNAuQ1nKahwFgpDNQ30/I5SZgPjz+myY7p6WtlAlQF31J10IpfOubf4waD/NZz+t mCZ+TGJWKLlHJdz7La6H7Ji7ixk0PO4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:06:51 2026 by rpki-client