$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa File: 8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa (raw, json) Hash identifier: R6Il/LBbW/mLwxc4jQ9HJ1qiHJkHMlv/ip58onVanbc= Subject key identifier: AF:29:06:4F:6C:CE:92:61:21:07:FE:1F:B1:5F:02:C8:E7:41:50:49 Certificate issuer: /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Certificate serial: 010D0C9F4328584D67DFC473A2588E95408A8E80 Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa Signing time: Sun 05 Apr 2026 13:00:31 +0000 ROA not before: Sun 05 Apr 2026 13:00:31 +0000 ROA not after: Sat 04 Jul 2026 13:00:31 +0000 asID: 5744 IP address blocks: 151.207.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:67:df:c4:73:a2:58:8e:95:40:8a:8e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5 Validity Not Before: Apr 5 13:00:31 2026 GMT Not After : Jul 4 13:00:31 2026 GMT Subject: CN=3dae49d3-1dcf-4993-a418-487def580d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:ef:f8:f7:80:da:df:42:9e:6c:68:33:d3: af:57:15:e9:e2:55:79:b3:af:63:57:b1:1a:cd:cc: ce:60:4a:7d:12:50:02:ea:ae:23:7d:64:f7:ef:7f: 70:75:41:40:7a:a3:fb:6b:76:8a:a1:43:98:08:af: 89:fb:9f:f9:68:5a:3f:2f:0a:5a:2f:ae:3f:c1:4d: 06:c1:cd:62:25:d5:5a:af:88:b2:bb:09:92:2c:f1: 66:0c:9b:d6:a0:33:f8:7e:5b:3a:be:77:aa:7b:3c: ff:f1:c3:a2:e0:3b:c9:61:26:a1:bd:a8:72:61:69: 72:2a:b2:11:d3:5f:75:7d:74:90:94:7a:59:73:a0: a1:35:5c:6b:e9:5b:67:62:28:0f:68:d3:91:ce:34: f2:f7:65:9b:27:38:be:56:d8:1d:79:9e:02:99:06: 05:b2:60:3c:96:bf:4a:3c:b2:58:40:4c:26:8a:b3: f2:d8:16:05:92:d6:dc:f4:e5:70:de:63:e0:e8:51: 2b:31:2e:82:c9:33:9c:f5:0f:2e:8e:06:99:67:37: 68:1d:f6:9d:74:09:a1:0e:1c:31:62:33:d8:4a:92: c1:32:72:4d:21:22:f2:e3:32:94:c8:a4:1c:ab:5a: c7:e5:c9:6a:e5:2f:dd:46:76:92:82:31:0a:45:ac: 4e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:29:06:4F:6C:CE:92:61:21:07:FE:1F:B1:5F:02:C8:E7:41:50:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8ed845ef-4627-3c5a-ae5c-d8d97298d49d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl X509v3 Authority Key Identifier: keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer sbgp-ipAddrBlock: critical IPv4: 151.207.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9b:60:9b:c6:4b:81:97:22:c7:f1:cd:34:21:00:1f:a4:11: 3f:ab:da:c9:d7:62:56:ec:23:5b:ff:72:87:83:2a:24:38:81: 4f:cd:dd:d6:16:d8:3b:97:72:6a:36:f6:07:84:cb:2d:e9:e2: 42:14:78:d6:be:49:45:c6:22:a6:56:b1:7e:02:5d:b0:ab:02: 74:99:58:48:c7:56:2e:09:ba:ec:20:7e:4c:44:76:83:ee:20: f1:96:3a:81:fb:48:5d:91:f3:d3:bb:63:6e:d2:ba:ab:11:6b: e5:28:24:41:f3:cb:8b:51:4c:cf:74:4e:48:68:1f:37:b3:fb: b2:b7:a9:6e:85:81:40:b2:20:0b:e2:24:e7:43:fb:c8:8c:0e: df:7e:88:d2:38:7f:de:29:7b:bd:9b:65:3b:2b:51:6f:6d:4f: 30:61:51:47:ed:5e:88:8c:08:9c:36:0c:d7:83:c1:08:79:e5: cc:b7:b1:09:ac:54:e1:6d:4f:35:cb:a5:32:b9:48:21:71:9b: 05:5b:96:04:26:2b:01:5c:61:50:5c:1e:d1:76:42:27:9b:3e: 89:81:56:f7:bd:43:ad:dd:2f:22:c5:ea:68:94:a6:cb:a2:54: 7a:84:3c:76:9c:e0:9f:5c:4b:cc:99:6c:38:b9:6e:86:c6:21: 65:e1:46:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1n38RzoliOlUCKjoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzZTRlZjEtMmEzYi00MDUwLTk2ODctYTkyZWM4M2I5 Y2I1MB4XDTI2MDQwNTEzMDAzMVoXDTI2MDcwNDEzMDAzMVowLzEtMCsGA1UEAxMk M2RhZTQ5ZDMtMWRjZi00OTkzLWE0MTgtNDg3ZGVmNTgwZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAfv+PeA2t9CnmxoM9OvVxXp4lV5s69jV7Ea zczOYEp9ElAC6q4jfWT3739wdUFAeqP7a3aKoUOYCK+J+5/5aFo/LwpaL64/wU0G wc1iJdVar4iyuwmSLPFmDJvWoDP4fls6vneqezz/8cOi4DvJYSahvahyYWlyKrIR 0191fXSQlHpZc6ChNVxr6VtnYigPaNORzjTy92WbJzi+VtgdeZ4CmQYFsmA8lr9K PLJYQEwmirPy2BYFktbc9OVw3mPg6FErMS6CyTOc9Q8ujgaZZzdoHfaddAmhDhwx YjPYSpLBMnJNISLy4zKUyKQcq1rH5clq5S/dRnaSgjEKRaxOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8pBk9szpJhIQf+H7FfAsjnQVBJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNl NGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJlYzgzYjljYjUvOGVkODQ1ZWYtNDYyNy0z YzVhLWFlNWMtZDhkOTcyOThkNDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGQzZTRlZjEtMmEzYi00MDUwLTk2 ODctYTkyZWM4M2I5Y2I1LzhkM2U0ZWYxLTJhM2ItNDA1MC05Njg3LWE5MmVjODNi OWNiNS5jcmwwHwYDVR0jBBgwFoAUNmEEs7p9Bg5pZJUGypdGOL42/6AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZDNlNGVmMS0yYTNiLTQwNTAtOTY4Ny1hOTJl YzgzYjljYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEl8/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWbYJvGS4GXIsfxzTQhAB+kET+r2snXYlbsI1v/coeDKiQ4gU/N3dYW 2DuXcmo29geEyy3p4kIUeNa+SUXGIqZWsX4CXbCrAnSZWEjHVi4JuuwgfkxEdoPu IPGWOoH7SF2R89O7Y27SuqsRa+UoJEHzy4tRTM90TkhoHzez+7K3qW6FgUCyIAvi JOdD+8iMDt9+iNI4f94pe72bZTsrUW9tTzBhUUftXoiMCJw2DNeDwQh55cy3sQms VOFtTzXLpTK5SCFxmwVblgQmKwFcYVBcHtF2QiebPomBVve9Q63dLyLF6miUpsui VHqEPHac4J9cS8yZbDi5bobGIWXhRnA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:32:46 2026 by rpki-client