$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/1fbffbcf-4666-3563-87e5-78090e6c8a71.roa File: 1fbffbcf-4666-3563-87e5-78090e6c8a71.roa (raw, json) Hash identifier: OqO3Z+qrvR7BD1OvcWyvS/EIudZJuKMUEOimC2/8mBg= Subject key identifier: E9:9E:A6:30:74:E0:3E:F0:3C:5B:57:BD:4D:D0:4D:99:0D:EC:90:2F Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584D8265255447AB49F457F13680 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/1fbffbcf-4666-3563-87e5-78090e6c8a71.roa Signing time: Wed 15 Apr 2026 01:00:24 +0000 ROA not before: Wed 15 Apr 2026 01:00:24 +0000 ROA not after: Tue 14 Jul 2026 01:00:24 +0000 asID: 396982 IP address blocks: 208.122.43.0/24 maxlen: 24 208.122.44.0/22 maxlen: 24 208.122.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:82:65:25:54:47:ab:49:f4:57:f1:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Apr 15 01:00:24 2026 GMT Not After : Jul 14 01:00:24 2026 GMT Subject: CN=0adf8f2c-e83d-4d7a-b5eb-57d85b13ab56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:84:5c:51:55:ef:a2:da:1f:13:18:90:45:5d: c3:91:29:ef:3a:23:c8:60:37:c7:f0:f2:db:52:cb: 89:6a:4c:6b:d1:d6:04:b1:31:5f:72:7a:e7:0a:57: c5:79:91:67:c6:33:e0:49:44:d9:fa:4d:fd:03:d7: e6:45:ce:1b:aa:64:79:2b:76:05:d5:14:8c:f8:5f: 2a:aa:06:8e:64:48:42:d7:bd:fb:3e:fe:ca:78:d1: 02:2d:db:7f:8e:52:8b:d7:4a:03:92:f0:ae:77:33: a9:ab:ee:d2:8c:ae:6b:2d:bd:00:10:f3:88:f2:39: 59:f6:f7:a2:ae:f3:a7:d5:87:b3:5f:e0:88:6d:d5: 6d:98:a6:25:d4:cc:68:67:c5:62:25:e5:b0:33:86: 5d:29:a0:43:56:93:c0:1d:1c:f6:51:b6:a1:cb:00: ee:68:c2:3c:e8:25:b0:ec:3b:58:06:b2:58:a1:cb: 08:64:f4:90:ba:a7:02:b1:23:cc:c7:41:b0:f2:0f: ce:a3:48:b5:38:89:96:d9:47:a1:23:bf:5e:ed:f6: a3:ec:c2:ec:7e:5f:22:e4:74:c5:39:09:c5:0f:fc: 75:36:7d:61:b0:66:e7:67:1b:79:4a:9b:d6:8f:cc: 92:38:d1:f9:6b:59:1f:dc:a6:ac:ac:e6:6b:df:25: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9E:A6:30:74:E0:3E:F0:3C:5B:57:BD:4D:D0:4D:99:0D:EC:90:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/1fbffbcf-4666-3563-87e5-78090e6c8a71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: 208.122.43.0-208.122.48.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c4:95:30:ec:7e:fd:4a:e7:e8:90:f1:61:14:b8:c5:52:fd: ce:d5:d2:40:54:1d:44:92:c5:b4:d9:6a:49:76:fc:ac:6c:8e: 25:fb:e5:34:b8:fa:d6:00:db:ca:ad:af:29:6a:3a:7a:52:fc: b5:3d:8b:8f:68:65:76:57:ed:97:54:4f:a9:4c:22:8c:54:0e: af:53:06:72:f4:1e:d8:18:58:7b:f3:e6:ea:65:c3:70:5a:41: 3e:39:f7:dc:3f:4d:ea:eb:6e:7d:0b:f0:a4:5e:87:64:14:95: 0a:73:9e:eb:e7:f9:0e:74:68:ca:6b:7f:a8:88:2a:20:66:e7: a9:8f:2d:75:67:38:8c:d3:8e:ac:03:cb:85:84:e7:e3:41:76: 9f:f8:a1:3f:bd:80:52:c0:f9:a1:fc:30:df:7a:86:8a:bf:16: 03:29:d3:4a:59:e7:55:09:58:e3:b0:9d:cf:ce:4a:90:f2:4e: 43:ce:68:a3:4e:78:a5:d4:b2:21:71:df:22:fe:d2:11:5d:9c: 6a:d1:6a:71:29:02:02:05:28:34:37:1d:42:c7:a9:3b:24:33: a1:85:1b:e3:f0:34:65:7e:2e:a2:5a:09:e8:18:de:85:78:93: 37:2b:2f:23:ab:72:ad:70:c4:a9:d0:bd:08:d1:86:58:2a:07: 0f:38:be:fe -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE2CZSVUR6tJ9FfxNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDQxNTAxMDAyNFoXDTI2MDcxNDAxMDAyNFowLzEtMCsGA1UEAxMk MGFkZjhmMmMtZTgzZC00ZDdhLWI1ZWItNTdkODViMTNhYjU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4RcUVXvotofExiQRV3DkSnvOiPIYDfH8PLb UsuJakxr0dYEsTFfcnrnClfFeZFnxjPgSUTZ+k39A9fmRc4bqmR5K3YF1RSM+F8q qgaOZEhC1737Pv7KeNECLdt/jlKL10oDkvCudzOpq+7SjK5rLb0AEPOI8jlZ9vei rvOn1YezX+CIbdVtmKYl1MxoZ8ViJeWwM4ZdKaBDVpPAHRz2UbahywDuaMI86CWw 7DtYBrJYocsIZPSQuqcCsSPMx0Gw8g/Oo0i1OImW2UehI79e7faj7MLsfl8i5HTF OQnFD/x1Nn1hsGbnZxt5SpvWj8ySONH5a1kf3KasrOZr3yXzAwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFOmepjB04D7wPFtXvU3QTZkN7JAvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvMWZiZmZiY2YtNDY2Ni0z NTYzLTg3ZTUtNzgwOTBlNmM4YTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADQeisD BADQejAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAmsSVMOx+/Urn6JDxYRS4xVL9ztXSQFQdRJLFtNlqSXb8 rGyOJfvlNLj61gDbyq2vKWo6elL8tT2Lj2hldlftl1RPqUwijFQOr1MGcvQe2BhY e/Pm6mXDcFpBPjn33D9N6utufQvwpF6HZBSVCnOe6+f5DnRoymt/qIgqIGbnqY8t dWc4jNOOrAPLhYTn40F2n/ihP72AUsD5ofww33qGir8WAynTSlnnVQlY47Cdz85K kPJOQ85oo054pdSyIXHfIv7SEV2catFqcSkCAgUoNDcdQsepOyQzoYUb4/A0ZX4u oloJ6BjehXiTNysvI6tyrXDEqdC9CNGGWCoHDzi+/g== -----END CERTIFICATE-----Generated at Fri Apr 17 09:28:13 2026 by rpki-client