$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa File: 0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa (raw, json) Hash identifier: NSj0zMSsC7muZVAQZ4TQyMH/BC4hCYlSMrkXKpP7Ubw= Subject key identifier: D3:8D:8D:B2:4B:84:B9:DE:2F:D9:B4:A4:16:A7:11:9F:43:BF:C0:C1 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584D55BA3D27D8CBEEEDA57F3240 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16509 IP address blocks: 208.95.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3d:27:d8:cb:ee:ed:a5:7f:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=06f398ef-e2c6-4730-be41-f7ce0ccde0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:f6:55:19:11:55:29:3b:fd:d0:40:01:1e: ee:de:cd:cc:6c:74:71:df:f4:6b:cc:9c:00:1a:79: 46:e7:ec:6c:46:e9:87:0f:07:3c:b1:f0:83:98:d2: fb:1f:9e:fa:ba:d1:90:6c:c9:91:95:48:e0:bd:35: 23:6c:36:23:45:4e:10:12:4b:74:51:8b:2b:e4:84: ca:a5:c9:0c:ae:1c:ea:58:74:15:27:11:63:6a:bc: 4d:94:0a:b8:b4:6e:96:0e:42:d1:e4:7b:45:17:8e: d8:85:a8:71:a4:1e:98:dd:73:15:56:1f:40:65:fa: 1b:89:37:93:1a:d4:12:4a:bd:44:e3:ef:dd:a5:70: 8b:f4:00:cf:71:17:a2:19:fd:18:50:68:5c:f8:4e: 59:82:fe:1f:85:dc:f9:9c:ca:aa:e0:c9:a7:1b:20: cc:af:7f:2b:b6:d6:4a:a4:56:9f:13:7c:60:0d:12: d6:fb:38:4e:a4:d9:c0:15:9e:00:87:fd:7e:37:2f: 33:13:34:e5:83:0c:1f:51:2d:33:bf:c9:b6:92:84: 51:8f:51:46:22:a3:24:fe:c2:f3:ce:01:46:bf:3d: 95:fa:cb:bf:f5:51:ae:c6:53:65:cd:48:5a:95:61: d2:f5:aa:aa:2d:e9:a4:38:b4:c0:04:ea:f4:83:99: 09:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:8D:8D:B2:4B:84:B9:DE:2F:D9:B4:A4:16:A7:11:9F:43:BF:C0:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/0cea5f41-9cfb-326e-b57b-fa434d8b6539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:50:91:ba:10:53:43:ab:0b:73:c2:70:2c:ba:65:a3:9c:66: 9a:e4:9f:df:94:e0:bc:be:04:51:a7:79:5d:68:ec:55:eb:cf: df:5b:eb:0a:5f:f1:54:e6:96:b4:4d:73:7f:79:ea:18:2b:94: fb:b0:c5:31:69:89:d4:be:ae:92:fc:33:82:20:c3:5c:da:3d: 88:37:32:c9:47:66:f8:ca:19:84:34:6d:f3:74:46:2f:1b:60: c8:de:b8:0a:8b:c1:af:6d:a3:b7:4a:3d:28:06:04:5b:c1:c7: 2c:11:5e:a8:52:0b:c8:bf:38:42:42:86:37:74:b7:53:af:0c: c4:c1:37:c0:f1:05:ea:25:86:71:71:8c:40:2d:fb:cc:f4:02: 7c:82:57:1a:60:b1:0c:32:65:75:66:70:66:38:48:98:28:14: 40:a7:49:fe:83:61:21:ff:2c:13:15:9d:e3:46:cd:68:b7:d3: f1:ce:19:95:e2:42:c8:b8:61:c2:07:78:09:ec:ca:c6:63:05: 3f:86:cb:57:0b:5f:de:25:c9:12:d8:6a:10:1d:54:78:d4:9f: f7:ff:9e:d4:01:05:cb:08:22:cc:a9:83:3e:ba:b0:29:97:0d: 79:e2:5a:df:cb:40:1d:4c:1e:a2:b7:d7:48:d7:ec:92:49:0e: 7c:8b:b2:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj0n2Mvu7aV/MkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MDZmMzk4ZWYtZTJjNi00NzMwLWJlNDEtZjdjZTBjY2RlMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8f2VRkRVSk7/dBAAR7u3s3MbHRx3/RrzJwA GnlG5+xsRumHDwc8sfCDmNL7H576utGQbMmRlUjgvTUjbDYjRU4QEkt0UYsr5ITK pckMrhzqWHQVJxFjarxNlAq4tG6WDkLR5HtFF47YhahxpB6Y3XMVVh9AZfobiTeT GtQSSr1E4+/dpXCL9ADPcReiGf0YUGhc+E5Zgv4fhdz5nMqq4MmnGyDMr38rttZK pFafE3xgDRLW+zhOpNnAFZ4Ah/1+Ny8zEzTlgwwfUS0zv8m2koRRj1FGIqMk/sLz zgFGvz2V+su/9VGuxlNlzUhalWHS9aqqLemkOLTABOr0g5kJdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNONjbJLhLneL9m0pBanEZ9Dv8DBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvMGNlYTVmNDEtOWNmYi0z MjZlLWI1N2ItZmE0MzRkOGI2NTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F82MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElQkboQU0OrC3PCcCy6ZaOcZprkn9+U4Ly+BFGneV1o7FXrz99b6wpf 8VTmlrRNc3956hgrlPuwxTFpidS+rpL8M4Igw1zaPYg3MslHZvjKGYQ0bfN0Ri8b YMjeuAqLwa9to7dKPSgGBFvBxywRXqhSC8i/OEJChjd0t1OvDMTBN8DxBeolhnFx jEAt+8z0AnyCVxpgsQwyZXVmcGY4SJgoFECnSf6DYSH/LBMVneNGzWi30/HOGZXi Qsi4YcIHeAnsysZjBT+Gy1cLX94lyRLYahAdVHjUn/f/ntQBBcsIIsypgz66sCmX DXniWt/LQB1MHqK310jX7JJJDnyLsqc= -----END CERTIFICATE-----Generated at Fri Apr 17 10:49:55 2026 by rpki-client