$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa File: ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa (raw, json) Hash identifier: aqLD47A0pr2iBdzY7Bh3hmmOb5kkaIlgazAzod+tX8w= Subject key identifier: 80:12:ED:6B:9D:5C:55:DC:CA:35:57:9A:F1:EB:10:02:E6:A1:6F:8E Certificate issuer: /CN=329c727b-a867-426a-ad3d-167aed3107dd Certificate serial: 010D0C9F4328584DE84B3DC6D087BA0F8DABB200 Authority key identifier: 3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa Signing time: Thu 21 May 2026 13:00:32 +0000 ROA not before: Thu 21 May 2026 13:00:32 +0000 ROA not after: Wed 19 Aug 2026 13:00:32 +0000 asID: 10482 IP address blocks: 204.209.208.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e8:4b:3d:c6:d0:87:ba:0f:8d:ab:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=329c727b-a867-426a-ad3d-167aed3107dd Validity Not Before: May 21 13:00:32 2026 GMT Not After : Aug 19 13:00:32 2026 GMT Subject: CN=40d0f331-4b7f-4460-b724-e58185ac0320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:fa:92:d8:23:a2:06:31:88:e5:76:bc:9b: 06:82:84:28:a4:08:0c:37:a2:08:68:dd:2b:e5:50: 40:10:37:1c:a1:db:1d:6d:cd:ad:b1:51:e4:3c:5e: 2f:00:4d:3d:8a:b5:c9:6d:55:0a:20:88:6a:df:dd: 2c:6e:93:71:ac:19:34:21:84:b9:31:90:05:40:6a: c6:0d:5e:c4:2e:db:df:68:02:ba:2a:9f:74:b1:cd: f8:10:c6:fb:eb:33:97:47:51:9c:15:4e:e1:82:dc: b6:21:14:26:04:84:cf:29:cf:5b:78:c4:32:5f:7b: b2:09:4d:c1:f6:23:77:5b:ac:67:bf:64:b2:40:86: 1b:55:24:58:2d:0a:58:45:ab:6c:d0:34:38:dc:3a: 96:cb:51:4c:19:7d:48:43:14:b6:c1:9a:15:32:3e: 9c:b0:1b:50:46:a9:20:6e:bb:05:91:47:63:ce:96: 36:b5:6c:b8:dc:92:e1:02:6c:91:15:4b:ac:ba:dc: ee:8b:f8:08:34:26:bb:a9:13:b5:48:78:7f:9c:be: 89:9c:a0:3e:11:cb:dd:97:81:27:61:32:6d:87:b4: 13:96:13:d8:b9:5a:92:cc:c9:d0:a7:7e:44:49:2c: f2:5d:9d:97:b4:f1:27:dd:68:44:70:12:90:8a:41: 76:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:12:ED:6B:9D:5C:55:DC:CA:35:57:9A:F1:EB:10:02:E6:A1:6F:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/ff6facde-6cf7-3b4c-8f2e-3d975f5fe77d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd/329c727b-a867-426a-ad3d-167aed3107dd.crl X509v3 Authority Key Identifier: keyid:3D:96:52:35:D1:CE:A3:12:EF:D4:C3:3C:1C:6A:E7:E1:F0:1F:F5:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/329c727b-a867-426a-ad3d-167aed3107dd.cer sbgp-ipAddrBlock: critical IPv4: 204.209.208.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:49:09:79:8a:ae:59:5a:d8:0b:ec:93:e8:29:bc:e8:3d:0f: 7f:0b:37:01:30:68:1e:7c:be:e2:7b:31:e0:70:b3:12:32:6c: 86:54:c4:f7:14:71:49:26:5b:52:ba:1e:34:3b:85:f3:e0:a3: 45:40:9d:2e:29:d8:c4:99:04:19:59:20:fa:8e:1d:c0:94:34: 3d:d7:4f:e6:ce:27:0c:40:50:2a:fd:fc:b3:29:8b:dc:73:24: 1b:a1:7d:22:7b:05:02:f1:18:44:36:c3:e4:19:82:56:87:04: 9c:69:e9:65:57:ff:4f:4e:32:0a:db:61:5c:b1:7f:18:3b:80: 4e:ff:ea:44:16:98:e2:b7:a4:3a:12:84:46:ba:e8:3f:25:b9: 79:63:8d:98:7c:dd:1a:ac:96:db:bf:c4:28:cd:7f:e3:1e:17: 81:50:c3:30:4c:44:50:c6:fd:4c:67:d1:4d:bd:f7:c4:ca:3a: 8b:3f:0f:78:fb:7b:65:3f:1f:11:0a:47:da:00:b2:fc:c5:35: 91:c6:42:c3:17:77:f7:fd:bb:47:eb:9b:44:62:8a:23:8b:01: ba:35:e8:84:f1:ee:06:16:35:4f:6d:55:3c:1b:f5:f4:fe:7e: 10:71:4f:7a:32:8d:a9:fc:94:6d:2b:72:53:2c:3c:97:3b:2c: 97:2f:c3:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3oSz3G0Ie6D42rsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI5YzcyN2ItYTg2Ny00MjZhLWFkM2QtMTY3YWVkMzEw N2RkMB4XDTI2MDUyMTEzMDAzMloXDTI2MDgxOTEzMDAzMlowLzEtMCsGA1UEAxMk NDBkMGYzMzEtNGI3Zi00NDYwLWI3MjQtZTU4MTg1YWMwMzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKb6ktgjogYxiOV2vJsGgoQopAgMN6IIaN0r 5VBAEDccodsdbc2tsVHkPF4vAE09irXJbVUKIIhq390sbpNxrBk0IYS5MZAFQGrG DV7ELtvfaAK6Kp90sc34EMb76zOXR1GcFU7hgty2IRQmBITPKc9beMQyX3uyCU3B 9iN3W6xnv2SyQIYbVSRYLQpYRats0DQ43DqWy1FMGX1IQxS2wZoVMj6csBtQRqkg brsFkUdjzpY2tWy43JLhAmyRFUusutzui/gINCa7qRO1SHh/nL6JnKA+Ecvdl4En YTJth7QTlhPYuVqSzMnQp35ESSzyXZ2XtPEn3WhEcBKQikF2jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIAS7WudXFXcyjVXmvHrEALmoW+OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjlj NzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdhZWQzMTA3ZGQvZmY2ZmFjZGUtNmNmNy0z YjRjLThmMmUtM2Q5NzVmNWZlNzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzI5YzcyN2ItYTg2Ny00MjZhLWFk M2QtMTY3YWVkMzEwN2RkLzMyOWM3MjdiLWE4NjctNDI2YS1hZDNkLTE2N2FlZDMx MDdkZC5jcmwwHwYDVR0jBBgwFoAUPZZSNdHOoxLv1MM8HGrn4fAf9SIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zMjljNzI3Yi1hODY3LTQyNmEtYWQzZC0xNjdh ZWQzMTA3ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzNHQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhJCXmKrlla2Avsk+gpvOg9D38LNwEwaB58vuJ7MeBwsxIybIZUxPcU cUkmW1K6HjQ7hfPgo0VAnS4p2MSZBBlZIPqOHcCUND3XT+bOJwxAUCr9/LMpi9xz JBuhfSJ7BQLxGEQ2w+QZglaHBJxp6WVX/09OMgrbYVyxfxg7gE7/6kQWmOK3pDoS hEa66D8luXljjZh83Rqsltu/xCjNf+MeF4FQwzBMRFDG/Uxn0U2998TKOos/D3j7 e2U/HxEKR9oAsvzFNZHGQsMXd/f9u0frm0RiiiOLAbo16ITx7gYWNU9tVTwb9fT+ fhBxT3oyjan8lG0rclMsPJc7LJcvwyc= -----END CERTIFICATE-----Generated at Sat Jun 13 08:46:29 2026 by rpki-client