$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa File: ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa (raw, json) Hash identifier: ziMrQHgu3HFhHwXZjn14S+ly82pr+U53OFESktNccZQ= Subject key identifier: CF:CF:9D:95:B1:93:50:FA:B9:7E:84:D9:11:92:0E:8E:20:9E:88:D4 Certificate issuer: /CN=0e002701-2485-4643-ba40-3ea23fa41085 Certificate serial: 010D0C9F4328584D7A053369A332387740ED7080 Authority key identifier: 89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa Signing time: Sun 12 Apr 2026 01:00:24 +0000 ROA not before: Sun 12 Apr 2026 01:00:24 +0000 ROA not after: Sat 11 Jul 2026 01:00:24 +0000 asID: 394997 IP address blocks: 208.86.98.0/23 maxlen: 23 208.86.98.0/24 maxlen: 24 208.86.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7a:05:33:69:a3:32:38:77:40:ed:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e002701-2485-4643-ba40-3ea23fa41085 Validity Not Before: Apr 12 01:00:24 2026 GMT Not After : Jul 11 01:00:24 2026 GMT Subject: CN=73a5aa11-45b7-4768-a589-b077b10f69a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:1e:8f:b3:bb:f7:f8:e5:23:76:b4:74:ad:0f: be:04:5f:53:26:47:8c:18:f8:58:81:f0:a9:d0:70: f4:d7:c8:00:74:ba:33:23:f1:52:12:f0:4d:bf:74: 69:17:07:d1:3e:3b:61:9d:79:bc:22:98:c1:dc:77: d9:b9:ee:94:cb:2d:62:f8:74:b8:b6:79:ab:73:71: 22:5a:08:1c:9f:57:bd:8f:04:01:31:f7:1f:c4:93: 1f:93:47:c0:ba:92:d7:cf:95:da:5d:1e:56:92:4e: 27:7b:3d:b7:21:ed:bd:80:3a:02:ff:71:0c:98:a2: c5:45:af:18:e6:f9:76:15:56:a1:5c:e4:42:ac:72: 5b:d7:a9:60:78:4d:40:72:f4:95:fe:0c:84:bf:e9: a0:3d:f0:e4:0d:2d:ad:9d:34:b7:70:82:2a:13:3c: fa:47:4d:be:09:f0:12:01:8b:67:ef:dd:89:38:35: 0d:ed:2a:9e:f9:50:eb:18:32:8e:b8:6d:58:01:e3: ee:4e:78:17:1d:eb:0d:29:69:57:d6:f7:f2:38:f5: 57:6c:99:6b:3d:49:de:89:6a:fc:82:2c:f7:b4:af: 71:31:ba:da:f1:23:5a:0b:13:a9:8f:7a:8d:db:92: b4:9e:b3:73:76:82:a2:c0:e2:f9:3d:98:a0:86:19: ee:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:CF:9D:95:B1:93:50:FA:B9:7E:84:D9:11:92:0E:8E:20:9E:88:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/ba8f26f9-324a-37ae-86d6-34a5fdf55b34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085/0e002701-2485-4643-ba40-3ea23fa41085.crl X509v3 Authority Key Identifier: keyid:89:24:57:81:82:9B:18:63:45:EE:40:AE:69:58:AB:9A:35:E5:62:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0e002701-2485-4643-ba40-3ea23fa41085.cer sbgp-ipAddrBlock: critical IPv4: 208.86.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:77:d4:f8:71:0b:93:31:85:d3:bf:07:28:68:b1:b1:65:b5: 75:8f:f7:e7:07:69:e6:43:2a:62:3b:dd:f4:45:a6:a1:d1:33: 13:e2:0c:25:88:25:d3:ef:bf:6a:c4:1a:62:68:19:4f:f8:97: bd:36:44:f6:69:8b:ab:9f:2a:44:61:78:5e:99:8c:ee:6e:8c: 62:a1:a3:fb:6b:22:0d:ac:08:bb:08:e7:04:f5:fe:ed:b5:f7: 3c:12:49:1d:de:96:0a:6c:e4:2c:15:a4:7a:a6:e0:4a:49:ea: 38:8f:e5:19:55:59:51:bf:15:88:85:ce:b9:6f:0d:be:5a:95: 3c:d7:09:f2:f7:87:1a:06:a7:e0:7c:9c:b0:5e:33:84:b5:93: 9f:e0:4d:2b:9e:ab:25:db:12:88:3c:43:b7:56:d1:f1:ca:26: 74:b9:60:1c:8e:89:eb:28:5d:7f:bd:91:31:e6:ac:f5:3e:d2: b8:5f:98:3c:32:6e:4f:c7:36:3e:ab:a6:49:22:9b:0a:06:ff: 16:a0:8c:16:9e:05:1f:8c:05:6f:80:cd:c7:6a:f9:3b:16:f8: 83:8b:43:ca:d1:99:79:d7:0f:65:51:ae:30:67:78:86:fe:57: f0:34:2a:36:0c:4e:30:b6:7f:b3:97:3b:6b:e5:2b:6b:b7:ff: fa:35:3a:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BTNpozI4d0DtcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMDI3MDEtMjQ4NS00NjQzLWJhNDAtM2VhMjNmYTQx MDg1MB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk NzNhNWFhMTEtNDViNy00NzY4LWE1ODktYjA3N2IxMGY2OWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjR6Ps7v3+OUjdrR0rQ++BF9TJkeMGPhYgfCp 0HD018gAdLozI/FSEvBNv3RpFwfRPjthnXm8IpjB3HfZue6Uyy1i+HS4tnmrc3Ei Wggcn1e9jwQBMfcfxJMfk0fAupLXz5XaXR5Wkk4nez23Ie29gDoC/3EMmKLFRa8Y 5vl2FVahXORCrHJb16lgeE1AcvSV/gyEv+mgPfDkDS2tnTS3cIIqEzz6R02+CfAS AYtn792JODUN7Sqe+VDrGDKOuG1YAePuTngXHesNKWlX1vfyOPVXbJlrPUneiWr8 giz3tK9xMbra8SNaCxOpj3qN25K0nrNzdoKiwOL5PZighhnukwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/PnZWxk1D6uX6E2RGSDo4gnojUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wZTAw MjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEyM2ZhNDEwODUvYmE4ZjI2ZjktMzI0YS0z N2FlLTg2ZDYtMzRhNWZkZjU1YjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMGUwMDI3MDEtMjQ4NS00NjQzLWJh NDAtM2VhMjNmYTQxMDg1LzBlMDAyNzAxLTI0ODUtNDY0My1iYTQwLTNlYTIzZmE0 MTA4NS5jcmwwHwYDVR0jBBgwFoAUiSRXgYKbGGNF7kCuaVirmjXlYqIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8wZTAwMjcwMS0yNDg1LTQ2NDMtYmE0MC0zZWEy M2ZhNDEwODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJ31PhxC5MxhdO/ByhosbFltXWP9+cHaeZDKmI73fRFpqHRMxPiDCWI JdPvv2rEGmJoGU/4l702RPZpi6ufKkRheF6ZjO5ujGKho/trIg2sCLsI5wT1/u21 9zwSSR3elgps5CwVpHqm4EpJ6jiP5RlVWVG/FYiFzrlvDb5alTzXCfL3hxoGp+B8 nLBeM4S1k5/gTSueqyXbEog8Q7dW0fHKJnS5YByOiesoXX+9kTHmrPU+0rhfmDwy bk/HNj6rpkkimwoG/xagjBaeBR+MBW+Azcdq+TsW+IOLQ8rRmXnXD2VRrjBneIb+ V/A0KjYMTjC2f7OXO2vlK2u3//o1Onw= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:41 2026 by rpki-client