$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa File: c0ac2f53-beae-3b05-97d0-d26974f3905b.roa (raw, json) Hash identifier: BJjBhmDxh3fb5rhwSM5j/KOtz/x3qW/gm/tcPSW9Eik= Subject key identifier: 8D:99:46:0C:73:6C:66:0E:85:D9:4A:66:F7:DF:B4:CC:BD:1D:1D:35 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584D55BA3D08EEC44BDC11E24E60 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 16713 IP address blocks: 208.70.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:3d:08:ee:c4:4b:dc:11:e2:4e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=ac00b9b3-58b9-446b-8801-8f56d8f16393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:84:43:b8:ba:36:01:fe:e9:1f:ec:ff:ca:88: 8d:0f:52:91:40:c4:33:44:29:8c:17:99:3d:10:22: a4:b7:c0:d6:de:01:dd:2e:90:bc:d9:a2:9d:6d:ac: dd:db:c3:3e:7c:ab:65:7b:a5:d9:4d:4c:c1:46:73: 1e:1b:33:74:a1:da:c3:78:c4:b8:47:95:88:39:68: f2:f1:5b:f2:e8:9b:85:c6:69:45:6c:ec:9c:0e:77: 3d:b1:98:19:1b:8b:5f:e2:29:4e:af:5d:43:c2:49: 53:b3:b1:67:ef:6f:88:f0:47:2d:1c:b5:bb:85:e6: 70:43:3a:43:c5:a7:c2:25:a9:46:4c:51:39:00:0d: 04:d3:a7:56:7d:7b:10:63:1e:8d:8e:2e:4a:f5:35: e9:ce:18:45:e3:f9:d4:ce:da:73:66:ca:b4:35:03: 5a:d3:9c:22:32:c4:7e:81:58:4d:55:50:fb:1b:3a: 3a:2d:87:1e:28:ef:ea:f0:ac:3c:37:98:0c:97:c7: e7:8d:ec:99:9f:f8:5f:df:bf:7c:a9:55:24:8b:04: 89:dd:8b:5b:e7:fd:f2:f7:a5:e7:e3:57:8c:f3:57: 02:c7:f5:8a:52:1a:da:c4:27:3f:39:ad:06:9c:88: ae:85:99:fc:4d:84:64:1d:7c:66:dc:74:a1:fe:49: d5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:99:46:0C:73:6C:66:0E:85:D9:4A:66:F7:DF:B4:CC:BD:1D:1D:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/c0ac2f53-beae-3b05-97d0-d26974f3905b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 208.70.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:9e:7c:1c:95:ec:f9:63:57:a7:2f:1d:36:c6:20:c6:90:43: bf:45:22:50:db:ba:b9:f0:8b:71:85:98:39:2d:38:20:f9:64: 81:8e:68:d8:87:ad:3b:c3:77:3e:44:c6:ef:f4:99:62:f9:9f: 26:fe:33:43:c9:ed:62:06:71:fc:38:cd:87:57:e4:22:9e:dd: ce:49:ae:ab:7f:20:0d:94:36:7b:56:c9:50:74:85:77:2e:72: f3:27:e7:1b:be:5a:96:f1:ed:33:6d:f0:eb:28:11:fa:8c:a5: b3:75:ba:26:46:3b:3f:70:ff:e1:d8:55:49:37:72:97:64:3c: cc:09:d4:51:79:bc:e6:cf:11:9f:58:6c:3e:8a:73:e7:1f:fa: cd:96:80:b5:54:05:98:f7:ab:7a:8a:33:60:d4:65:70:49:bd: ee:0a:97:d1:b3:4b:ad:d3:3f:06:31:80:51:8d:97:bc:f6:88: fd:a3:48:f6:50:a7:ee:69:41:fb:88:34:4d:2f:bc:3f:36:ca: 44:85:29:81:2e:65:de:b6:6c:68:84:5d:45:6a:c9:67:39:ab: 82:58:30:fb:f0:4c:8e:20:19:10:ce:92:7d:e2:3f:a0:00:e4: 69:3a:c3:1a:8e:76:d7:24:cd:20:b7:f5:59:10:47:f0:23:ad: 93:e0:ee:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuj0I7sRL3BHiTmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk YWMwMGI5YjMtNThiOS00NDZiLTg4MDEtOGY1NmQ4ZjE2MzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIRDuLo2Af7pH+z/yoiND1KRQMQzRCmMF5k9 ECKkt8DW3gHdLpC82aKdbazd28M+fKtle6XZTUzBRnMeGzN0odrDeMS4R5WIOWjy 8Vvy6JuFxmlFbOycDnc9sZgZG4tf4ilOr11DwklTs7Fn72+I8EctHLW7heZwQzpD xafCJalGTFE5AA0E06dWfXsQYx6Nji5K9TXpzhhF4/nUztpzZsq0NQNa05wiMsR+ gVhNVVD7Gzo6LYceKO/q8Kw8N5gMl8fnjeyZn/hf3798qVUkiwSJ3Ytb5/3y96Xn 41eM81cCx/WKUhraxCc/Oa0GnIiuhZn8TYRkHXxm3HSh/knVHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2ZRgxzbGYOhdlKZvfftMy9HR01MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvYzBhYzJmNTMtYmVhZS0z YjA1LTk3ZDAtZDI2OTc0ZjM5MDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EaXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqefByV7PljV6cvHTbGIMaQQ79FIlDburnwi3GFmDktOCD5ZIGOaNiH rTvDdz5Exu/0mWL5nyb+M0PJ7WIGcfw4zYdX5CKe3c5Jrqt/IA2UNntWyVB0hXcu cvMn5xu+Wpbx7TNt8OsoEfqMpbN1uiZGOz9w/+HYVUk3cpdkPMwJ1FF5vObPEZ9Y bD6Kc+cf+s2WgLVUBZj3q3qKM2DUZXBJve4Kl9GzS63TPwYxgFGNl7z2iP2jSPZQ p+5pQfuINE0vvD82ykSFKYEuZd62bGiEXUVqyWc5q4JYMPvwTI4gGRDOkn3iP6AA 5Gk6wxqOdtckzSC39VkQR/AjrZPg7jg= -----END CERTIFICATE-----Generated at Fri Apr 17 21:17:34 2026 by rpki-client