$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa File: a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa (raw, json) Hash identifier: Me8hEzZ8GX6dh1Fi93E63kvI5ijlFIfDIKkQog62b1Q= Subject key identifier: 82:8C:27:A0:BA:03:CA:9F:46:13:11:0B:CE:28:91:C3:16:B1:54:D8 Certificate issuer: /CN=7a2be303-4525-4433-b220-b1c6b5052945 Certificate serial: 010D0C9F4328584D75D52AC2899A285E137195C0 Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.56.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:2a:c2:89:9a:28:5e:13:71:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=6dd85696-6f19-4ab7-8bef-b219d557c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:00:91:96:62:c8:95:a5:16:b0:e1:f5:7a:8c: 4f:5c:3a:24:94:81:8c:ac:f4:7a:1f:f9:19:f2:20: a6:b9:66:41:44:10:48:d2:f5:73:a7:02:ae:aa:1a: cc:b8:cd:9e:4f:f2:d0:48:67:19:62:d4:3a:46:90: 73:2c:22:b2:db:d7:6e:1a:9f:d3:e8:ed:56:4f:a5: 75:bf:07:1d:20:41:6b:a5:ff:32:e0:70:1d:32:9c: e4:fe:87:a1:44:fb:26:5c:bd:06:a9:dd:36:ba:66: a5:69:9b:c5:f9:7a:61:7c:ff:b4:a3:f5:de:cb:4f: 0d:d2:cb:55:70:c2:c7:a8:55:42:b8:27:0f:3f:1a: 06:85:34:37:04:12:e2:57:df:10:fa:b1:61:ed:8f: 26:f2:cb:b2:b1:24:c6:a1:18:84:be:c5:72:4d:a2: 71:7d:1b:38:18:24:63:18:c2:f7:a2:8d:04:0e:a0: 68:1c:c1:5a:cc:8a:7b:e4:0d:5c:93:a2:ee:13:e4: 5b:7e:d6:07:a3:fa:c1:cb:b1:2a:5d:e4:df:c8:49: e7:30:7e:9a:a3:d5:8c:4a:d2:2a:3b:6a:34:58:2b: fb:3c:64:10:dd:31:48:30:1c:da:6b:7e:c4:2e:67: 1f:7c:18:77:86:87:b2:d8:ea:91:66:ad:d8:cf:d3: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8C:27:A0:BA:03:CA:9F:46:13:11:0B:CE:28:91:C3:16:B1:54:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/a8ca5d2d-27f4-3285-892f-a366214e0fa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl X509v3 Authority Key Identifier: keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer sbgp-ipAddrBlock: critical IPv4: 208.56.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:72:fd:fe:bd:23:77:60:f2:23:72:8e:10:2c:ef:fa:7a:7a: 86:0f:e7:df:37:49:c8:84:86:88:79:13:85:da:5d:ab:3d:16: 6b:26:54:8b:23:80:f9:cd:54:85:c7:4d:c3:25:a9:2a:66:f8: 35:cd:b8:43:47:07:12:21:8b:20:65:8c:bc:ee:37:f4:8d:e0: 34:91:84:7a:26:fa:e7:12:4d:3a:a5:9b:c6:2e:53:0f:ee:38: ff:0c:36:59:4e:d6:67:d6:da:49:ad:16:52:fa:e5:6d:08:e4: 18:60:ef:d2:92:13:da:b8:c0:67:af:e4:5e:1a:58:b3:7a:13: 6d:5a:0c:c2:c0:ec:1b:c7:6e:13:55:dc:b5:bf:58:f1:49:c6: d1:8c:29:bf:ef:2c:6d:1e:04:5b:67:93:95:d4:9d:58:ae:2f: 96:d1:90:ce:83:2d:3c:56:7c:9b:83:db:53:86:8b:50:56:57: 8e:ff:39:21:d9:b5:90:f0:5f:79:9f:06:2f:99:54:ac:6f:07: ac:9d:80:c6:67:0f:d1:bd:94:d0:00:a6:c1:6c:d5:bd:bb:36: 35:19:ef:4a:d9:e5:fa:76:10:30:0f:13:6b:26:77:45:d1:c1: 3b:07:01:74:be:71:50:23:d1:e2:51:cd:23:b0:cc:f6:01:bc: ab:b0:58:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111SrCiZooXhNxlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy OTQ1MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NmRkODU2OTYtNmYxOS00YWI3LThiZWYtYjIxOWQ1NTdjODdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wCRlmLIlaUWsOH1eoxPXDoklIGMrPR6H/kZ 8iCmuWZBRBBI0vVzpwKuqhrMuM2eT/LQSGcZYtQ6RpBzLCKy29duGp/T6O1WT6V1 vwcdIEFrpf8y4HAdMpzk/oehRPsmXL0Gqd02umalaZvF+XphfP+0o/Xey08N0stV cMLHqFVCuCcPPxoGhTQ3BBLiV98Q+rFh7Y8m8suysSTGoRiEvsVyTaJxfRs4GCRj GML3oo0EDqBoHMFazIp75A1ck6LuE+RbftYHo/rBy7EqXeTfyEnnMH6ao9WMStIq O2o0WCv7PGQQ3TFIMBzaa37ELmcffBh3hoey2OqRZq3Yz9NjnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKMJ6C6A8qfRhMRC84okcMWsVTYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvYThjYTVkMmQtMjdmNC0z Mjg1LTg5MmYtYTM2NjIxNGUwZmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1 Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2 YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFy/f69I3dg8iNyjhAs7/p6eoYP5983SciEhoh5E4XaXas9FmsmVIsj gPnNVIXHTcMlqSpm+DXNuENHBxIhiyBljLzuN/SN4DSRhHom+ucSTTqlm8YuUw/u OP8MNllO1mfW2kmtFlL65W0I5Bhg79KSE9q4wGev5F4aWLN6E21aDMLA7BvHbhNV 3LW/WPFJxtGMKb/vLG0eBFtnk5XUnViuL5bRkM6DLTxWfJuD21OGi1BWV47/OSHZ tZDwX3mfBi+ZVKxvB6ydgMZnD9G9lNAApsFs1b27NjUZ70rZ5fp2EDAPE2smd0XR wTsHAXS+cVAj0eJRzSOwzPYBvKuwWKA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:43:16 2026 by rpki-client