$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa File: d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa (raw, json) Hash identifier: z1nFHkITa5fzWfh0YEhiNY2aUC6e0JU5/ubwBlNnMBM= Subject key identifier: 34:9F:7E:48:90:C6:D1:A2:97:AE:58:2E:B2:15:B4:45:92:44:DF:0A Certificate issuer: /CN=487abf98-3073-43c6-b10e-a615e64ccc65 Certificate serial: 010D0C9F4328584D59EAB13316E769C735E79100 Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 208.89.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:b1:33:16:e7:69:c7:35:e7:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=df132957-ff1b-4c6c-8dfc-1edda9e380b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:b7:1b:8c:30:80:c1:c5:46:ea:ac:93:eb: d0:06:21:04:f3:19:11:ff:a4:a2:f6:7c:e9:ee:76: e6:17:5b:0a:2e:e4:ec:c1:f5:48:06:96:ce:99:25: 05:23:d1:03:7f:e4:60:26:ce:25:02:2a:2c:29:29: fc:0a:89:b3:da:d1:ab:41:ab:3c:fc:ec:bb:16:60: 1c:d8:a0:c7:e2:35:06:3c:2a:96:03:3d:5b:b2:de: 78:b0:0e:cb:4f:41:db:fe:8b:35:d6:2a:31:cd:d1: cf:45:0d:f5:86:51:fd:21:75:54:8e:94:b7:85:fb: 75:5e:0e:a5:e0:7b:73:fb:54:65:0b:71:4f:54:03: e2:d3:ea:3d:f4:d1:5f:07:4c:21:ee:90:f7:f1:2e: 5b:1a:93:24:7b:14:97:ec:42:b9:ca:0f:bc:05:87: fa:57:5f:c1:b0:8e:8d:a7:fd:c0:72:e7:b3:a4:a9: 05:24:68:54:9a:4b:22:f0:16:ac:b4:cc:59:1a:ee: fa:5c:f5:a7:e2:98:f2:ba:e9:be:a4:03:23:4f:26: 1b:89:f6:ac:2e:eb:02:84:54:47:f7:f1:7d:12:54: ad:14:4f:c6:70:43:46:58:6d:78:39:a8:ed:06:8d: d1:ae:ef:f3:2e:35:f9:a0:c9:82:d9:ce:6a:af:9e: 66:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:7E:48:90:C6:D1:A2:97:AE:58:2E:B2:15:B4:45:92:44:DF:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/d8ce3f7b-9507-3637-9ed2-0792cb53930c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl X509v3 Authority Key Identifier: keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer sbgp-ipAddrBlock: critical IPv4: 208.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:04:d5:45:d8:86:ae:6e:0d:65:48:45:b7:f9:47:5d:bc:af: 7f:e5:7c:c5:41:6b:bb:10:7b:59:ae:45:88:3b:5b:30:fd:ee: 1b:45:b1:d8:d6:fe:5e:79:d1:6d:b2:93:14:d8:d8:a6:ce:41: 3a:6a:f8:ae:00:4c:a0:ef:9c:3f:c9:75:ef:b2:d1:24:63:65: 6e:e7:2c:fe:77:7d:0a:79:b4:44:96:b8:3e:95:c1:45:7c:c1: 40:b3:a2:53:52:20:b9:64:1d:b5:f5:7b:3e:e2:cf:54:43:a8: 30:28:01:0f:17:9f:c7:b5:27:04:56:5f:f0:f7:f9:77:76:28: 2c:b2:69:4a:dd:bb:c7:d6:da:4d:17:7a:b2:2f:a4:99:08:69: 6e:47:7b:b0:ee:7d:f2:64:67:a9:c7:fb:22:58:9c:5b:2f:57: 95:a3:2d:2a:99:0e:bf:cf:78:f3:cc:ac:05:3d:86:4f:f2:10: 24:d7:34:a6:8e:f2:0a:d0:af:c1:9a:cb:18:d1:df:5c:bc:8c: 68:62:77:de:91:0f:04:59:75:d3:57:db:0f:36:14:60:6d:01: c7:0e:8c:11:05:d9:0c:d9:67:a3:00:e4:2b:1a:a8:9b:cb:9e: e0:7b:af:ab:54:4d:69:8f:29:5c:79:60:ca:c9:e4:6d:46:9f: b4:97:61:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6rEzFudpxzXnkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDg3YWJmOTgtMzA3My00M2M2LWIxMGUtYTYxNWU2NGNj YzY1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZGYxMzI5NTctZmYxYi00YzZjLThkZmMtMWVkZGE5ZTM4MGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0O3G4wwgMHFRuqsk+vQBiEE8xkR/6Si9nzp 7nbmF1sKLuTswfVIBpbOmSUFI9EDf+RgJs4lAiosKSn8Comz2tGrQas8/Oy7FmAc 2KDH4jUGPCqWAz1bst54sA7LT0Hb/os11ioxzdHPRQ31hlH9IXVUjpS3hft1Xg6l 4Htz+1RlC3FPVAPi0+o99NFfB0wh7pD38S5bGpMkexSX7EK5yg+8BYf6V1/BsI6N p/3AcuezpKkFJGhUmksi8BastMxZGu76XPWn4pjyuum+pAMjTyYbifasLusChFRH 9/F9ElStFE/GcENGWG14OajtBo3Rru/zLjX5oMmC2c5qr55mVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSffkiQxtGil65YLrIVtEWSRN8KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdh YmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1ZTY0Y2NjNjUvZDhjZTNmN2ItOTUwNy0z NjM3LTllZDItMDc5MmNiNTM5MzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDg3YWJmOTgtMzA3My00M2M2LWIx MGUtYTYxNWU2NGNjYzY1LzQ4N2FiZjk4LTMwNzMtNDNjNi1iMTBlLWE2MTVlNjRj Y2M2NS5jcmwwHwYDVR0jBBgwFoAUUHrkAjzYg+et9qTUFubnFT8KBQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ODdhYmY5OC0zMDczLTQzYzYtYjEwZS1hNjE1 ZTY0Y2NjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkE1UXYhq5uDWVIRbf5R128r3/lfMVBa7sQe1muRYg7WzD97htFsdjW /l550W2ykxTY2KbOQTpq+K4ATKDvnD/Jde+y0SRjZW7nLP53fQp5tESWuD6VwUV8 wUCzolNSILlkHbX1ez7iz1RDqDAoAQ8Xn8e1JwRWX/D3+Xd2KCyyaUrdu8fW2k0X erIvpJkIaW5He7DuffJkZ6nH+yJYnFsvV5WjLSqZDr/PePPMrAU9hk/yECTXNKaO 8grQr8GayxjR31y8jGhid96RDwRZddNX2w82FGBtAccOjBEF2QzZZ6MA5CsaqJvL nuB7r6tUTWmPKVx5YMrJ5G1Gn7SXYTE= -----END CERTIFICATE-----Generated at Fri Apr 17 16:07:16 2026 by rpki-client