$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa File: ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa (raw, json) Hash identifier: Hwxa0MYYP3R8AxfYaCB2KBL/HKYoQpysvYA0b+KaXZs= Subject key identifier: BA:96:AB:D2:85:25:40:39:17:7E:6C:18:AA:77:68:20:6B:F0:6F:B7 Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584D59EAAFEE53DC4C58616C0670 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:af:ee:53:dc:4c:58:61:6c:06:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=78d19043-cf85-4b97-a26a-6c5b0e500a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:b3:00:df:be:d3:b2:d8:2f:41:cd:5c:11: 09:99:ef:89:36:60:0d:8e:f8:ed:4c:16:75:15:f6: 9a:90:ab:6b:b9:e9:f8:93:28:ea:24:17:5a:31:3d: 00:15:4c:06:8d:51:df:c2:74:7f:44:3a:6d:b1:2e: 92:c5:e7:78:8d:84:66:f7:23:33:8e:4d:a5:17:54: 3c:07:8f:7c:2f:3e:04:7b:81:83:68:16:ca:a9:49: 81:db:b4:94:9e:7f:de:d2:56:4a:15:3d:2c:f6:90: f2:68:cf:f6:e1:d6:c9:89:bc:c2:7c:35:a8:09:0a: e9:4b:c3:6e:6d:f1:05:37:b9:85:c8:8f:96:09:f5: 80:79:a9:57:4d:d9:bd:b2:68:d5:b0:ed:62:35:4d: 90:ca:e5:2b:43:bd:6f:9c:7d:20:ce:4b:ac:e5:69: 6b:be:76:4b:74:34:31:9f:d2:c6:1e:27:10:18:76: f0:98:d6:e8:b5:15:a4:09:63:60:78:28:b1:cc:cc: 38:b2:0e:4f:8d:1b:d9:fa:4c:a6:f1:d6:30:15:c3: 58:04:a6:2b:f2:59:1e:62:60:0e:9a:43:7f:01:00: 13:b4:5d:1a:26:23:26:85:7b:d3:b1:45:2e:92:58: ec:1c:5a:a2:2f:f2:01:db:f8:b8:0a:48:6b:76:f5: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:96:AB:D2:85:25:40:39:17:7E:6C:18:AA:77:68:20:6B:F0:6F:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/ae3e7880-cb87-3d85-8e01-d1ee8a570604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e5:26:32:8d:7a:9b:d2:18:ae:c6:ca:38:5e:7e:9a:0d:ad: ed:83:1a:01:30:2e:5f:ac:15:ba:e4:a3:85:23:eb:6a:c5:b1: c2:88:7c:ed:fd:57:59:0f:40:6e:45:74:4b:6a:64:e6:e7:22: b3:d6:62:24:0c:2f:8d:3b:b6:c1:53:9e:46:00:84:a1:87:5c: 27:88:23:87:a9:13:34:e7:60:87:9f:1d:bb:66:ab:10:f6:29: a0:2b:7d:38:bb:dc:a4:d6:91:10:f8:8b:04:72:ef:2d:89:cb: bf:c3:79:f8:af:67:4d:34:b5:56:8c:4e:44:b9:c7:a3:0c:2e: fe:65:ca:eb:05:05:42:96:70:1b:3a:49:55:9c:ec:cf:6a:8c: ee:a0:98:7f:89:39:e8:35:fb:90:23:c6:39:65:f6:45:f0:08: b9:83:fc:f4:70:fb:ed:83:49:0b:9d:14:76:1e:3d:04:86:d0: a5:77:35:42:86:d4:4f:4d:77:7c:0b:6a:fa:3d:46:d7:2a:4c: 85:bc:24:ff:37:f9:53:97:21:44:0d:f7:70:ed:d2:3b:82:dd: 35:27:9e:7c:8b:1b:95:36:2f:6f:48:f6:c3:ef:3e:31:aa:91: 6f:dd:b7:3a:8f:fd:e0:28:a4:91:a4:63:41:39:ac:d4:c6:d0: 97:a1:fc:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6q/uU9xMWGFsBnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzhkMTkwNDMtY2Y4NS00Yjk3LWEyNmEtNmM1YjBlNTAwYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqizAN++07LYL0HNXBEJme+JNmANjvjtTBZ1 FfaakKtruen4kyjqJBdaMT0AFUwGjVHfwnR/RDptsS6Sxed4jYRm9yMzjk2lF1Q8 B498Lz4Ee4GDaBbKqUmB27SUnn/e0lZKFT0s9pDyaM/24dbJibzCfDWoCQrpS8Nu bfEFN7mFyI+WCfWAealXTdm9smjVsO1iNU2QyuUrQ71vnH0gzkus5WlrvnZLdDQx n9LGHicQGHbwmNbotRWkCWNgeCixzMw4sg5PjRvZ+kym8dYwFcNYBKYr8lkeYmAO mkN/AQATtF0aJiMmhXvTsUUukljsHFqiL/IB2/i4CkhrdvVnhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqWq9KFJUA5F35sGKp3aCBr8G+3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvYWUzZTc4ODAtY2I4Ny0z ZDg1LThlMDEtZDFlZThhNTcwNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLlJjKNepvSGK7GyjhefpoNre2DGgEwLl+sFbrko4Uj62rFscKIfO39 V1kPQG5FdEtqZObnIrPWYiQML407tsFTnkYAhKGHXCeII4epEzTnYIefHbtmqxD2 KaArfTi73KTWkRD4iwRy7y2Jy7/DefivZ000tVaMTkS5x6MMLv5lyusFBUKWcBs6 SVWc7M9qjO6gmH+JOeg1+5Ajxjll9kXwCLmD/PRw++2DSQudFHYePQSG0KV3NUKG 1E9Nd3wLavo9RtcqTIW8JP83+VOXIUQN93Dt0juC3TUnnnyLG5U2L29I9sPvPjGq kW/dtzqP/eAopJGkY0E5rNTG0Jeh/As= -----END CERTIFICATE-----Generated at Fri Apr 17 13:20:06 2026 by rpki-client