$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa File: d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa (raw, json) Hash identifier: 2EJYBSK13pE20W+Iq3YcPeESC7LU5pQxzKszH1BmjDc= Subject key identifier: 90:E7:9B:28:A3:19:C5:43:57:54:68:0D:37:76:B3:06:4B:B3:2E:00 Certificate issuer: /CN=3133c6b3-ff40-49eb-bad3-65967c11dca0 Certificate serial: 010D0C9F4328584D746FDA43000888CD50879A80 Authority key identifier: FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 36236 IP address blocks: 208.67.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:6f:da:43:00:08:88:cd:50:87:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3133c6b3-ff40-49eb-bad3-65967c11dca0 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=3a24c069-c155-4d74-9975-633fa61b68f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2f:7e:55:dd:08:f4:77:0e:31:62:83:a1:b5: 3e:3e:1a:ca:28:16:f8:ec:27:8a:17:41:93:68:8c: d4:99:27:d4:c5:eb:a8:c2:8d:a4:08:0e:a2:82:fb: 2c:0b:39:e8:c7:f2:90:45:b9:3a:66:fa:3c:c1:e8: c7:39:b5:06:e0:22:eb:09:3d:e1:f1:8e:84:70:69: 37:26:d2:ae:b0:ea:65:52:66:76:ee:cc:bd:0d:d9: 8d:3f:1c:4c:6d:e6:f7:cd:9d:69:2e:ab:fc:b9:47: 0a:b6:ef:fe:26:89:a6:c4:65:09:0e:ae:45:2a:a3: 74:2e:c2:fd:c5:12:b1:c9:ea:47:2f:7f:76:bd:e7: 86:f5:f2:64:95:07:cc:19:61:16:fe:80:bf:b6:86: 14:5e:3e:3b:04:fe:cc:91:9f:aa:94:ea:f3:d7:de: 17:54:28:09:25:36:02:27:3d:3b:bb:1e:0f:6d:dd: 1e:ad:72:65:53:8e:21:55:2a:04:a0:46:80:df:e8: 0f:72:1e:c5:5c:c9:9f:24:22:9a:6f:a2:7c:77:89: d4:af:67:e5:7b:f5:cc:9e:dc:e4:ec:91:bd:56:e9: cc:5a:e7:70:92:72:21:c8:29:19:20:02:3a:f8:3f: 73:8f:94:e6:97:11:f6:19:a3:e8:bb:a6:3f:71:65: 69:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E7:9B:28:A3:19:C5:43:57:54:68:0D:37:76:B3:06:4B:B3:2E:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/d2f3792b-d476-3d4f-bab9-53104dc0e0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0/3133c6b3-ff40-49eb-bad3-65967c11dca0.crl X509v3 Authority Key Identifier: keyid:FA:2F:FF:59:90:7F:F5:95:8C:42:8A:11:46:14:08:40:E1:11:05:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3133c6b3-ff40-49eb-bad3-65967c11dca0.cer sbgp-ipAddrBlock: critical IPv4: 208.67.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:aa:b0:ce:53:fb:eb:ee:84:a0:18:a2:d5:73:10:73:96:42: de:45:1b:31:2a:d1:bc:c6:89:01:b5:5f:2c:9a:f5:ff:87:49: 8f:71:fd:53:44:73:8c:8c:86:28:54:e4:50:59:5c:55:e4:19: 1d:a4:c8:80:54:e5:20:65:bc:5c:45:58:7a:8c:60:58:14:6c: a8:8d:00:e0:69:56:cd:99:66:4f:36:a4:79:e0:80:79:fd:e1: f6:54:3b:6c:a9:e7:df:f5:51:f1:b2:43:20:33:88:37:02:ec: 46:b9:d6:e9:6b:fe:2a:c6:bc:06:3e:26:dd:fa:df:f1:3a:77: fd:c5:d8:d9:b3:30:9f:c3:e9:8c:e8:d4:95:b1:70:62:ba:e1: ea:fd:7b:de:24:68:4b:d7:7f:36:b6:9d:32:10:d3:29:31:06: 4d:c2:7f:fb:66:c6:35:5e:3d:c4:1c:14:1f:b7:9e:14:45:6e: 84:e1:4d:3d:35:93:cc:8e:b8:7c:2c:e1:ac:92:35:21:15:7f: 0a:e3:e9:b2:3f:09:4a:66:b9:52:1e:df:1c:82:62:c0:16:cb: a4:f2:f1:05:76:8e:8b:4e:d0:55:7e:37:5e:17:86:19:b3:d5: b3:ff:33:9c:1b:85:fd:e7:c9:1c:0c:34:ca:95:51:af:3b:7f: c3:ff:12:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10b9pDAAiIzVCHmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEzM2M2YjMtZmY0MC00OWViLWJhZDMtNjU5NjdjMTFk Y2EwMB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk M2EyNGMwNjktYzE1NS00ZDc0LTk5NzUtNjMzZmE2MWI2OGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji9+Vd0I9HcOMWKDobU+PhrKKBb47CeKF0GT aIzUmSfUxeuowo2kCA6igvssCznox/KQRbk6Zvo8wejHObUG4CLrCT3h8Y6EcGk3 JtKusOplUmZ27sy9DdmNPxxMbeb3zZ1pLqv8uUcKtu/+JommxGUJDq5FKqN0LsL9 xRKxyepHL392veeG9fJklQfMGWEW/oC/toYUXj47BP7MkZ+qlOrz194XVCgJJTYC Jz07ux4Pbd0erXJlU44hVSoEoEaA3+gPch7FXMmfJCKab6J8d4nUr2fle/XMntzk 7JG9VunMWudwknIhyCkZIAI6+D9zj5TmlxH2GaPou6Y/cWVpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDnmyijGcVDV1RoDTd2swZLsy4AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zMTMz YzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2N2MxMWRjYTAvZDJmMzc5MmItZDQ3Ni0z ZDRmLWJhYjktNTMxMDRkYzBlMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzEzM2M2YjMtZmY0MC00OWViLWJh ZDMtNjU5NjdjMTFkY2EwLzMxMzNjNmIzLWZmNDAtNDllYi1iYWQzLTY1OTY3YzEx ZGNhMC5jcmwwHwYDVR0jBBgwFoAU+i//WZB/9ZWMQooRRhQIQOERBYAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zMTMzYzZiMy1mZjQwLTQ5ZWItYmFkMy02NTk2 N2MxMWRjYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeqsM5T++vuhKAYotVzEHOWQt5FGzEq0bzGiQG1Xyya9f+HSY9x/VNE c4yMhihU5FBZXFXkGR2kyIBU5SBlvFxFWHqMYFgUbKiNAOBpVs2ZZk82pHnggHn9 4fZUO2yp59/1UfGyQyAziDcC7Ea51ulr/irGvAY+Jt363/E6d/3F2NmzMJ/D6Yzo 1JWxcGK64er9e94kaEvXfza2nTIQ0ykxBk3Cf/tmxjVePcQcFB+3nhRFboThTT01 k8yOuHws4aySNSEVfwrj6bI/CUpmuVIe3xyCYsAWy6Ty8QV2jotO0FV+N14Xhhmz 1bP/M5wbhf3nyRwMNMqVUa87f8P/Epo= -----END CERTIFICATE-----Generated at Fri Apr 17 12:06:42 2026 by rpki-client