$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa File: a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa (raw, json) Hash identifier: AfLOtfFPP1/2iBHK5zkX26FKtdTcZgY3w8KNMKXphk4= Subject key identifier: 35:0D:F0:87:DD:58:1C:03:51:FE:C2:53:93:05:BB:F3:B1:BF:7F:56 Certificate issuer: /CN=3c1b9e2d-457a-403f-9256-27f272ed993d Certificate serial: 010D0C9F4328584D59EA5C0512BCA4788F068980 Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 208.95.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:5c:05:12:bc:a4:78:8f:06:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=dd164f90-ecbd-46d8-989c-2183f270c71f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:83:4c:88:79:d4:36:e5:be:01:7c:c5:73:37: 15:ea:79:37:f1:b0:64:9e:2c:96:b9:e2:4a:1e:71: 62:62:13:7f:a3:9d:c4:3c:93:a7:a4:47:28:4a:2d: 72:38:0e:5d:3c:6d:b5:a3:7c:12:ce:9c:1e:15:8c: 1e:e4:0c:13:da:d4:88:97:ba:4e:eb:a2:f9:56:29: 83:13:d7:48:3a:c4:bc:ab:5a:13:98:85:a9:00:28: 51:fa:d8:84:da:17:2d:d7:6c:4c:38:2e:17:3f:d3: ea:cf:87:88:c9:ab:b8:a9:39:45:0e:65:f1:8c:bc: c1:62:2e:a2:dc:d1:5c:22:0d:9b:41:f6:f7:fb:73: 1e:10:c0:3b:5e:33:37:57:79:5a:5a:fa:cb:28:31: 40:cb:ad:64:a0:29:51:4f:89:a3:fb:88:9f:00:d6: b2:c0:95:2c:0a:94:8d:3c:63:6f:82:a6:39:d9:9f: 89:8f:02:76:29:27:0c:04:0c:be:6d:c9:7d:6e:ab: 55:57:28:d9:6b:65:d8:b7:da:b4:9d:d3:45:77:6d: cc:ec:36:f8:dd:47:e8:25:c9:ce:24:ad:20:92:f7: 22:3e:71:70:b7:01:67:12:80:2d:c1:05:7b:23:38: 18:bf:38:09:1e:dd:4b:88:a3:7d:6f:7b:b1:05:8d: d6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:0D:F0:87:DD:58:1C:03:51:FE:C2:53:93:05:BB:F3:B1:BF:7F:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/a9c7de46-993e-3970-9c3d-f28d8a4026a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl X509v3 Authority Key Identifier: keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer sbgp-ipAddrBlock: critical IPv4: 208.95.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:92:31:68:55:35:1e:dd:ed:52:89:ef:9a:b5:40:42:9a:91: 43:a9:80:fa:b1:05:f4:0c:17:81:07:da:7e:d0:73:80:84:31: b9:6e:0c:8b:9a:25:11:3d:ba:78:c3:a6:d3:cf:e5:5a:26:89: d1:19:0d:0a:87:eb:04:45:64:8b:d4:07:08:61:cb:f0:2e:5b: 03:b6:1b:4e:8d:94:ff:0a:69:59:87:d5:4d:77:4d:e8:ca:2f: 21:65:01:2f:a8:cb:49:49:1a:6a:5b:ee:16:08:6c:6d:f0:04: 2e:c4:78:bd:ce:f7:d0:28:8a:ce:be:d0:6e:2c:be:3f:18:75: 89:af:10:04:a1:89:1c:34:07:5c:74:67:e4:6a:e3:66:e6:4a: f9:3a:1b:1a:9d:7d:0f:9b:54:73:e7:fb:aa:6e:bd:4f:50:d7: 65:6f:88:a3:6a:5b:a5:52:1b:66:2e:7f:2a:1c:f1:71:63:9c: 52:5d:9e:63:30:78:c9:77:6a:c9:f6:3d:bb:bd:1e:d5:58:4a: b4:b3:d5:79:19:28:af:17:56:ed:f1:24:f5:75:c2:fa:e9:3c: 98:d0:5c:4d:57:b2:68:34:a9:c6:59:31:2d:84:7d:64:d3:98: 0b:64:cb:6c:e7:f7:7d:45:51:6c:dd:fe:9e:61:48:fe:b9:6e: 40:c1:51:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6lwFErykeI8GiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxYjllMmQtNDU3YS00MDNmLTkyNTYtMjdmMjcyZWQ5 OTNkMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGQxNjRmOTAtZWNiZC00NmQ4LTk4OWMtMjE4M2YyNzBjNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NMiHnUNuW+AXzFczcV6nk38bBkniyWueJK HnFiYhN/o53EPJOnpEcoSi1yOA5dPG21o3wSzpweFYwe5AwT2tSIl7pO66L5VimD E9dIOsS8q1oTmIWpAChR+tiE2hct12xMOC4XP9Pqz4eIyau4qTlFDmXxjLzBYi6i 3NFcIg2bQfb3+3MeEMA7XjM3V3laWvrLKDFAy61koClRT4mj+4ifANaywJUsCpSN PGNvgqY52Z+JjwJ2KScMBAy+bcl9bqtVVyjZa2XYt9q0ndNFd23M7Db43UfoJcnO JK0gkvciPnFwtwFnEoAtwQV7IzgYvzgJHt1LiKN9b3uxBY3WfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUN8IfdWBwDUf7CU5MFu/Oxv39WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFi OWUyZC00NTdhLTQwM2YtOTI1Ni0yN2YyNzJlZDk5M2QvYTljN2RlNDYtOTkzZS0z OTcwLTljM2QtZjI4ZDhhNDAyNmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2MxYjllMmQtNDU3YS00MDNmLTky NTYtMjdmMjcyZWQ5OTNkLzNjMWI5ZTJkLTQ1N2EtNDAzZi05MjU2LTI3ZjI3MmVk OTkzZC5jcmwwHwYDVR0jBBgwFoAU7t8l0kJMmR/VBLPQ02SetbVqcsMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zYzFiOWUyZC00NTdhLTQwM2YtOTI1Ni0yN2Yy NzJlZDk5M2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F81MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmSMWhVNR7d7VKJ75q1QEKakUOpgPqxBfQMF4EH2n7Qc4CEMbluDIua JRE9unjDptPP5VomidEZDQqH6wRFZIvUBwhhy/AuWwO2G06NlP8KaVmH1U13TejK LyFlAS+oy0lJGmpb7hYIbG3wBC7EeL3O99Aois6+0G4svj8YdYmvEAShiRw0B1x0 Z+Rq42bmSvk6GxqdfQ+bVHPn+6puvU9Q12VviKNqW6VSG2Yufyoc8XFjnFJdnmMw eMl3asn2Pbu9HtVYSrSz1XkZKK8XVu3xJPV1wvrpPJjQXE1Xsmg0qcZZMS2EfWTT mAtky2zn931FUWzd/p5hSP65bkDBUbY= -----END CERTIFICATE-----Generated at Fri Apr 17 16:49:40 2026 by rpki-client