$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa File: c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa (raw, json) Hash identifier: /6kN0rZmYeH3mA3L5Oq/SLQv1QQk6iKwY2B9CeEs9/4= Subject key identifier: 55:EE:D9:ED:07:08:71:5B:1D:60:30:13:CB:32:4A:68:07:27:B9:10 Certificate issuer: /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Certificate serial: 010D0C9F4328584D651508C12EBF5610994DD2C0 Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 14297 IP address blocks: 139.131.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:08:c1:2e:bf:56:10:99:4d:d2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d7c9bcaa-67fa-4f5d-adc8-b8c0ea85b083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:ee:5a:cb:39:d6:90:ee:c3:f0:84:0a:0b: 09:97:dc:34:8d:51:3f:31:8b:c4:2a:a5:4f:02:4f: 6b:39:30:f3:a6:ba:a1:52:ad:db:fb:86:fd:17:8c: c3:d9:30:05:18:74:cd:16:61:9b:20:0b:50:3f:d8: cb:af:50:77:fe:47:b1:4c:9c:8f:96:8f:22:67:c9: 36:5f:af:ab:7f:af:10:b4:a9:29:94:14:e2:76:a8: 35:2b:e8:5e:e3:91:94:ec:cb:d4:0b:4d:ca:ac:b6: 5f:0c:78:7c:5b:33:38:ec:cc:38:3d:8f:44:a8:5c: cf:50:4e:d9:e9:b8:61:aa:b9:2a:33:84:8b:0a:68: c3:30:62:1c:ae:36:b4:f3:46:07:b8:60:a5:eb:03: 3f:02:20:96:63:f6:0f:4f:f1:49:2e:43:58:e0:cf: a2:1e:bf:91:8d:a7:20:a4:6d:5d:34:73:36:5d:29: 01:d2:a2:f5:20:ac:8e:28:d2:9c:ff:b6:69:e6:d9: 2d:6c:91:c7:4e:c1:32:24:e2:cc:62:eb:36:b6:09: 5a:72:b8:07:63:2a:2f:d4:1a:ac:fe:b2:2c:1a:17: a4:09:1d:67:9f:f6:00:30:2f:94:be:1f:a8:0d:4d: af:92:4c:34:b7:db:54:03:b0:06:61:d1:7d:f3:bb: 11:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:EE:D9:ED:07:08:71:5B:1D:60:30:13:CB:32:4A:68:07:27:B9:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c923c6bb-fc72-3faa-99a1-3cef42c4f1d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl X509v3 Authority Key Identifier: keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer sbgp-ipAddrBlock: critical IPv4: 139.131.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:ca:ff:63:75:ee:89:89:18:07:33:ef:7b:77:ae:69:3e:bc: 21:02:22:b1:ba:a0:e3:9e:36:fa:cb:5c:66:b2:0f:ad:a4:3c: 91:55:d1:63:e6:32:8c:01:10:8e:50:c2:03:5b:2f:24:e3:65: 8e:6c:e3:35:28:6c:13:40:29:2c:45:26:b5:88:98:71:ab:d4: 2b:da:0c:53:72:74:8f:4f:2a:86:eb:46:48:ff:9e:11:ef:cb: e0:d7:08:24:ab:87:e1:77:f8:3d:39:13:12:17:df:14:5a:e6: 59:8d:45:f1:3e:ca:d7:f4:97:35:35:66:f9:93:6c:a8:29:52: 71:3d:9c:fd:62:8e:8c:e8:4f:e2:8c:f0:26:1b:b7:47:70:07: 66:65:7d:10:c5:a3:42:c2:ec:5e:33:03:06:16:f5:ce:68:69: 2a:12:d7:c9:80:2e:cd:37:5f:c9:98:a4:99:d3:e2:da:0f:7e: 23:10:0e:e2:a1:52:ec:9f:ff:bd:60:06:d7:cd:a9:0a:24:77: 03:2c:53:e9:00:1f:38:ff:c8:5b:56:25:56:e7:9f:bd:e0:24: 4a:cd:0a:75:e3:7e:bf:ac:4a:d9:1f:37:3b:68:40:02:f4:2d: 74:d2:f1:32:ee:50:8c:7e:fb:fd:91:61:00:67:1d:d9:2b:00: c0:7f:09:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFQjBLr9WEJlN0sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjg3MDU3NzYtZjgxNS00NmM2LThmNWMtNDhhM2E4N2Uz N2U2MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDdjOWJjYWEtNjdmYS00ZjVkLWFkYzgtYjhjMGVhODViMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo73uWss51pDuw/CECgsJl9w0jVE/MYvEKqVP Ak9rOTDzprqhUq3b+4b9F4zD2TAFGHTNFmGbIAtQP9jLr1B3/kexTJyPlo8iZ8k2 X6+rf68QtKkplBTidqg1K+he45GU7MvUC03KrLZfDHh8WzM47Mw4PY9EqFzPUE7Z 6bhhqrkqM4SLCmjDMGIcrja080YHuGCl6wM/AiCWY/YPT/FJLkNY4M+iHr+Rjacg pG1dNHM2XSkB0qL1IKyOKNKc/7Zp5tktbJHHTsEyJOLMYus2tglacrgHYyov1Bqs /rIsGhekCR1nn/YAMC+Uvh+oDU2vkkw0t9tUA7AGYdF987sRdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXu2e0HCHFbHWAwE8sySmgHJ7kQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcw NTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEzYTg3ZTM3ZTYvYzkyM2M2YmItZmM3Mi0z ZmFhLTk5YTEtM2NlZjQyYzRmMWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjg3MDU3NzYtZjgxNS00NmM2LThm NWMtNDhhM2E4N2UzN2U2L2Y4NzA1Nzc2LWY4MTUtNDZjNi04ZjVjLTQ4YTNhODdl MzdlNi5jcmwwHwYDVR0jBBgwFoAUWqMLYk+sj2zl3vZ9EAXTAm/h+X8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mODcwNTc3Ni1mODE1LTQ2YzYtOGY1Yy00OGEz YTg3ZTM3ZTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBi4NsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjK/2N17omJGAcz73t3rmk+vCECIrG6oOOeNvrLXGayD62kPJFV0WPm MowBEI5QwgNbLyTjZY5s4zUobBNAKSxFJrWImHGr1CvaDFNydI9PKobrRkj/nhHv y+DXCCSrh+F3+D05ExIX3xRa5lmNRfE+ytf0lzU1ZvmTbKgpUnE9nP1ijozoT+KM 8CYbt0dwB2ZlfRDFo0LC7F4zAwYW9c5oaSoS18mALs03X8mYpJnT4toPfiMQDuKh Uuyf/71gBtfNqQokdwMsU+kAHzj/yFtWJVbnn73gJErNCnXjfr+sStkfNztoQAL0 LXTS8TLuUIx++/2RYQBnHdkrAMB/CVA= -----END CERTIFICATE-----Generated at Sat Apr 18 10:09:19 2026 by rpki-client