$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa File: fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa (raw, json) Hash identifier: ZVnW1W4To+N/va7G7h36R9R39YPqdn5YaWCpxoIHwwU= Subject key identifier: BC:87:78:12:24:2E:83:40:73:B7:1A:81:2B:A6:0A:94:75:FC:80:8A Certificate issuer: /CN=0538ef3c-e342-4e27-a075-8167bc73c054 Certificate serial: 010D0C9F4328584D4D5A68BB13B7C27579B81180 Authority key identifier: 3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 11260 IP address blocks: 208.96.64.0/18 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:68:bb:13:b7:c2:75:79:b8:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0538ef3c-e342-4e27-a075-8167bc73c054 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=487d48cf-1bef-4fc9-b315-07f8d3a2b5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6d:cd:77:e4:4e:07:06:1d:b6:74:3a:16:6f: 18:5a:d4:66:c1:1e:d9:8d:19:26:e3:70:eb:f6:9c: 51:34:4e:82:d8:36:a0:e4:86:8d:af:dc:72:8a:4d: c8:2e:3b:29:17:f0:c4:e1:6a:30:f2:90:d5:11:87: 9a:e0:91:91:da:d8:8d:08:54:c5:52:5a:ea:5c:ca: 13:45:22:b5:94:c2:d8:34:66:db:3c:69:37:2c:08: 65:4c:d7:65:83:72:d1:a8:d7:01:d8:da:ab:7c:ed: a1:2e:e2:e6:22:8e:80:6e:c8:4c:fb:6c:5d:c9:89: b1:6a:33:e9:39:49:2b:87:5b:2b:d1:43:02:10:33: 25:9c:cc:cc:dd:fb:89:fa:0c:0a:ae:ac:a9:fb:90: 67:d5:a0:b2:fd:cb:0a:25:97:1e:be:e9:6b:8f:9e: 81:e1:be:d4:b5:29:b9:92:8e:d7:ed:93:29:97:6c: 9e:2c:81:dd:9a:f5:71:eb:6c:6b:a3:7e:0a:e4:a8: af:50:04:de:db:c9:7c:d1:bb:44:c6:94:43:d5:ee: e2:4f:b9:82:8d:67:7d:a0:76:3e:36:2f:71:fc:11: cb:b2:df:6d:30:f1:4a:54:de:8e:70:55:7d:f1:d1: 2c:67:ed:b2:96:b7:40:2b:3f:18:81:2e:b7:d4:fd: f2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:87:78:12:24:2E:83:40:73:B7:1A:81:2B:A6:0A:94:75:FC:80:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/fcd8ef4b-0632-3d6a-89e1-840ed9931851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054/0538ef3c-e342-4e27-a075-8167bc73c054.crl X509v3 Authority Key Identifier: keyid:3D:AC:2D:38:4E:48:06:E1:5D:2B:A3:84:D6:1D:D6:10:85:CE:33:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0538ef3c-e342-4e27-a075-8167bc73c054.cer sbgp-ipAddrBlock: critical IPv4: 208.96.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:b4:d5:31:56:21:89:6d:30:15:65:1b:66:79:84:0c:42:76: 32:d7:22:d9:80:a6:65:b7:29:ba:31:e4:c2:15:c2:01:fb:b0: a3:6f:07:12:82:56:4d:b9:d8:77:bb:df:01:a6:a8:88:be:9f: a6:72:4b:cd:94:a2:50:2c:5f:e5:a4:e0:ae:4b:47:b0:65:95: 8a:6e:cc:58:d8:98:a4:5f:57:46:16:5b:1e:0b:79:c7:70:23: 01:cd:11:dd:73:ae:ec:47:52:7a:01:2d:cb:bc:68:98:15:e7: ea:fd:72:26:22:88:de:0f:ec:0a:67:d6:33:aa:06:b3:1d:fb: d6:16:0b:3f:ff:36:90:6f:7b:99:77:0d:6c:4c:e5:07:57:38: f8:b9:4f:a0:9b:10:9a:b9:43:92:ec:2c:70:80:50:0e:6b:a9: 3f:ab:64:4d:ee:59:30:5d:62:0b:1a:a1:79:c9:3c:a9:e5:f6: 97:b5:94:00:77:8e:58:36:eb:89:1a:08:7d:b2:a1:1a:a3:3b: 3b:2a:f6:2a:d1:1f:c8:17:bc:31:91:54:3b:00:8a:13:9a:71: ab:80:ca:a6:d2:b4:d8:99:51:7d:73:ab:cb:04:2f:d1:78:16: 38:39:33:35:85:62:c2:4e:c5:86:2b:9b:33:8b:08:ae:88:67: fd:d9:79:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWmi7E7fCdXm4EYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDUzOGVmM2MtZTM0Mi00ZTI3LWEwNzUtODE2N2JjNzNj MDU0MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NDg3ZDQ4Y2YtMWJlZi00ZmM5LWIzMTUtMDdmOGQzYTJiNWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG3Nd+ROBwYdtnQ6Fm8YWtRmwR7ZjRkm43Dr 9pxRNE6C2Dag5IaNr9xyik3ILjspF/DE4Wow8pDVEYea4JGR2tiNCFTFUlrqXMoT RSK1lMLYNGbbPGk3LAhlTNdlg3LRqNcB2NqrfO2hLuLmIo6AbshM+2xdyYmxajPp OUkrh1sr0UMCEDMlnMzM3fuJ+gwKrqyp+5Bn1aCy/csKJZcevulrj56B4b7UtSm5 ko7X7ZMpl2yeLIHdmvVx62xro34K5KivUATe28l80btExpRD1e7iT7mCjWd9oHY+ Ni9x/BHLst9tMPFKVN6OcFV98dEsZ+2ylrdAKz8YgS631P3yFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyHeBIkLoNAc7cagSumCpR1/ICKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4 ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3YmM3M2MwNTQvZmNkOGVmNGItMDYzMi0z ZDZhLTg5ZTEtODQwZWQ5OTMxODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDUzOGVmM2MtZTM0Mi00ZTI3LWEw NzUtODE2N2JjNzNjMDU0LzA1MzhlZjNjLWUzNDItNGUyNy1hMDc1LTgxNjdiYzcz YzA1NC5jcmwwHwYDVR0jBBgwFoAUPawtOE5IBuFdK6OE1h3WEIXOM4IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wNTM4ZWYzYy1lMzQyLTRlMjctYTA3NS04MTY3 YmM3M2MwNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0GBAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABK01TFWIYltMBVlG2Z5hAxCdjLXItmApmW3Kbox5MIVwgH7sKNvBxKC Vk252He73wGmqIi+n6ZyS82UolAsX+Wk4K5LR7BllYpuzFjYmKRfV0YWWx4Lecdw IwHNEd1zruxHUnoBLcu8aJgV5+r9ciYiiN4P7Apn1jOqBrMd+9YWCz//NpBve5l3 DWxM5QdXOPi5T6CbEJq5Q5LsLHCAUA5rqT+rZE3uWTBdYgsaoXnJPKnl9pe1lAB3 jlg264kaCH2yoRqjOzsq9irRH8gXvDGRVDsAihOacauAyqbStNiZUX1zq8sEL9F4 Fjg5MzWFYsJOxYYrmzOLCK6IZ/3Zeaw= -----END CERTIFICATE-----Generated at Fri Apr 17 11:23:58 2026 by rpki-client