$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08f2a208-0880-3095-a6aa-ebb83c681780.roa File: 08f2a208-0880-3095-a6aa-ebb83c681780.roa (raw, json) Hash identifier: k5Sukx2M2zNs/wgmvDKWa5zU3IwMIR0G5mrfS/7vl3A= Subject key identifier: 36:5A:5F:CE:65:C1:4F:45:76:48:AD:95:51:29:F7:96:78:2D:81:73 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584D5D8FA3E13F422453895101E0 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08f2a208-0880-3095-a6aa-ebb83c681780.roa Signing time: Wed 01 Apr 2026 20:21:10 +0000 ROA not before: Wed 01 Apr 2026 20:21:10 +0000 ROA not after: Tue 30 Jun 2026 20:21:10 +0000 asID: 852 IP address blocks: 72.25.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5d:8f:a3:e1:3f:42:24:53:89:51:01:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Apr 1 20:21:10 2026 GMT Not After : Jun 30 20:21:10 2026 GMT Subject: CN=8a8186ae-1821-48ae-ad77-9898b8c8345d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:be:89:ed:8a:f9:01:73:b2:8a:02:ee:c1: cd:3b:cb:87:6f:9f:b8:49:e1:20:77:57:38:22:e2: e3:91:c6:11:29:0b:a7:8b:6c:9b:d8:68:05:c9:ca: 93:0c:c0:88:a2:51:50:cb:03:31:be:b3:e8:4a:98: dd:8d:ee:70:c1:64:e4:6b:bb:2b:dd:0c:1c:5d:b5: 46:8c:7a:9f:78:c3:41:cb:80:32:0e:e8:26:04:03: aa:6f:70:cc:20:cb:a2:91:95:fe:45:81:f3:48:4b: c5:90:7b:ba:02:6e:24:72:ff:62:9f:63:6a:f2:1c: ce:db:81:54:c5:72:ff:77:d3:36:00:11:1f:c4:b5: 27:10:56:98:19:c9:80:c9:9e:3b:c8:d7:f7:cd:ac: d2:a6:6d:9d:77:c0:bd:1f:b5:af:fe:00:95:41:80: e5:6d:e6:4d:d7:4d:0f:34:e1:a7:c7:eb:8c:9e:44: 68:50:96:13:60:73:d0:e0:b7:0e:80:85:15:0f:1b: ec:9b:9b:50:4b:c1:54:dd:2d:8f:90:14:88:1c:47: e9:d3:65:ca:0c:e0:fa:4f:7a:2d:0c:c6:f1:b7:49: d3:f2:53:c7:37:f0:11:06:3f:ec:3a:44:d2:4f:fc: 63:a4:45:c5:84:5d:45:75:50:32:71:00:7a:18:be: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5A:5F:CE:65:C1:4F:45:76:48:AD:95:51:29:F7:96:78:2D:81:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/08f2a208-0880-3095-a6aa-ebb83c681780.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 72.25.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:74:7b:86:71:e1:bd:07:e9:9f:5a:c0:0b:b2:7b:3b:62:4a: 0b:b4:65:3c:19:5f:93:17:09:32:18:8f:89:0f:67:a5:d9:f7: c3:8b:77:3a:51:92:ec:bb:e2:aa:2d:91:61:e9:ac:43:27:f8: 2f:a7:87:e1:79:67:8a:c9:65:df:d9:ae:78:ca:04:bd:3a:d7: b4:35:56:4c:57:50:21:dc:5f:c9:65:7c:d5:3a:c6:7b:8c:f6: 4d:f7:55:8e:b9:79:67:45:04:7a:0e:16:4d:83:c4:99:8b:d0: c3:b2:9e:f8:5e:03:41:d2:89:03:f8:2a:0e:ef:05:ba:d3:79: a1:23:df:2b:5e:a8:64:67:9d:09:dd:de:89:93:a5:58:79:ca: 0a:8b:2d:7c:85:e9:9e:32:86:d6:25:75:08:29:00:ae:ac:17: f8:11:53:d7:bd:ab:34:c7:d8:ed:99:64:11:15:f2:7c:ce:19: 6b:a9:a9:0e:09:18:f8:03:2d:a8:07:6e:02:fe:45:e8:56:b7: 90:d9:91:c0:ae:49:66:6e:9a:a4:1d:3f:41:68:61:7b:35:7f: dd:e1:10:6a:6a:82:fc:21:d4:44:b6:21:62:a3:bb:50:5c:49: 96:71:b3:77:7c:dc:4b:c9:f3:7b:df:a0:40:cd:b2:21:76:3d: ac:d7:5f:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1dj6PhP0IkU4lRAeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDQwMTIwMjExMFoXDTI2MDYzMDIwMjExMFowLzEtMCsGA1UEAxMk OGE4MTg2YWUtMTgyMS00OGFlLWFkNzctOTg5OGI4YzgzNDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluq+ie2K+QFzsooC7sHNO8uHb5+4SeEgd1c4 IuLjkcYRKQuni2yb2GgFycqTDMCIolFQywMxvrPoSpjdje5wwWTka7sr3QwcXbVG jHqfeMNBy4AyDugmBAOqb3DMIMuikZX+RYHzSEvFkHu6Am4kcv9in2Nq8hzO24FU xXL/d9M2ABEfxLUnEFaYGcmAyZ47yNf3zazSpm2dd8C9H7Wv/gCVQYDlbeZN100P NOGnx+uMnkRoUJYTYHPQ4LcOgIUVDxvsm5tQS8FU3S2PkBSIHEfp02XKDOD6T3ot DMbxt0nT8lPHN/ARBj/sOkTST/xjpEXFhF1FdVAycQB6GL61YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZaX85lwU9FdkitlVEp95Z4LYFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMDhmMmEyMDgtMDg4MC0z MDk1LWE2YWEtZWJiODNjNjgxNzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGSBnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADx0e4Zx4b0H6Z9awAuyeztiSgu0ZTwZX5MXCTIYj4kPZ6XZ98OLdzpR kuy74qotkWHprEMn+C+nh+F5Z4rJZd/ZrnjKBL0617Q1VkxXUCHcX8llfNU6xnuM 9k33VY65eWdFBHoOFk2DxJmL0MOynvheA0HSiQP4Kg7vBbrTeaEj3yteqGRnnQnd 3omTpVh5ygqLLXyF6Z4yhtYldQgpAK6sF/gRU9e9qzTH2O2ZZBEV8nzOGWupqQ4J GPgDLagHbgL+RehWt5DZkcCuSWZumqQdP0FoYXs1f93hEGpqgvwh1ES2IWKju1Bc SZZxs3d83EvJ83vfoEDNsiF2PazXX2w= -----END CERTIFICATE-----Generated at Fri Apr 17 17:12:53 2026 by rpki-client