$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa File: dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa (raw, json) Hash identifier: xfG7D0XO2aHgTV89cXA27S4AejCVXJ4k1M9/uVrbLkk= Subject key identifier: 10:8C:FF:2E:57:83:EA:74:49:B5:C6:F4:EA:27:7A:F2:B8:A1:86:BA Certificate issuer: /CN=208dcf74-3dce-4384-beaf-70319895fc4b Certificate serial: 010D0C9F4328584D571FB316A93F085654C91DA0 Authority key identifier: B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 16509 IP address blocks: 134.65.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:b3:16:a9:3f:08:56:54:c9:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=208dcf74-3dce-4384-beaf-70319895fc4b Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=5a4abf0c-62a3-406f-8d77-540ca23575ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7c:41:e4:48:90:8f:aa:ea:89:e7:5f:41:74: 6c:51:1b:2c:a1:6b:17:e1:ba:74:b0:18:c2:ad:e9: b9:c6:8c:c2:51:98:ba:b6:7c:9b:8c:0d:3e:7d:04: 68:27:50:c6:34:b3:01:7e:80:a7:34:98:c5:d8:a6: 3c:ee:c6:ca:85:08:cd:5e:0b:90:ba:d3:1a:45:c8: 26:90:6b:3a:c2:8d:45:e5:7c:8f:3d:0f:fc:32:9d: 92:0e:4c:b1:7d:49:18:fb:79:f3:ac:56:6b:d7:1a: c5:15:90:58:82:74:59:26:23:38:e8:a3:e5:5d:8a: 3d:16:e3:41:f1:09:7c:5a:4e:94:9b:3c:7f:d9:2e: 49:3f:16:14:af:d2:9a:30:49:7c:0e:61:3e:c9:bb: 9b:7c:4b:32:77:6a:48:35:9e:d2:10:7e:26:cd:17: f5:c6:d7:35:fe:80:0d:06:ea:7b:b1:d3:e1:64:98: ec:17:90:6d:3c:a8:31:d9:ee:c8:9b:d6:cd:bd:d1: 75:f4:14:9a:e0:be:0d:da:f7:88:2b:d2:d6:a2:15: 5a:01:67:2b:6d:9b:49:df:2a:ed:44:54:3a:2e:a3: b2:ac:0b:0c:3d:1f:86:fe:0a:f7:0e:09:d4:21:37: c9:3b:92:ee:62:21:33:7b:04:e7:fb:92:cb:cb:13: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8C:FF:2E:57:83:EA:74:49:B5:C6:F4:EA:27:7A:F2:B8:A1:86:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/dc2f8723-1a25-3bb3-8ab1-b25662ba1a77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b/208dcf74-3dce-4384-beaf-70319895fc4b.crl X509v3 Authority Key Identifier: keyid:B4:56:5E:FB:60:62:B4:E7:31:22:9B:90:F1:66:8D:39:BD:63:07:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/208dcf74-3dce-4384-beaf-70319895fc4b.cer sbgp-ipAddrBlock: critical IPv4: 134.65.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:e4:a9:38:0a:5c:6d:65:08:88:ec:77:9a:29:9d:15:c2:91: 4a:46:c4:4b:2a:b4:22:d4:ba:dc:2f:fd:fb:bf:a7:a2:20:94: 90:43:67:d9:22:91:ed:fe:c8:cb:b9:b2:60:4f:a5:1f:00:6f: 4f:61:8c:03:d5:cf:45:3e:7b:9c:c3:e4:9d:24:52:c7:b6:cf: 0b:93:2b:70:a9:6a:99:81:3b:3e:8f:7f:08:f7:e9:ae:d2:4c: 2b:e1:a4:dd:0a:28:18:c4:56:6c:b0:b3:27:d2:81:6f:b0:41: 52:0c:e4:56:f5:88:e0:96:17:f1:cb:8f:1e:f5:a4:70:af:ac: dd:c7:00:58:7a:c0:37:15:29:c6:b3:88:10:23:17:f3:43:cb: 5c:64:3b:36:df:e8:a2:97:ba:1c:37:07:45:0f:00:6a:19:f9: b0:bf:5b:9b:68:1b:42:34:58:57:37:ba:d4:84:f8:3b:67:95: 72:f6:1e:76:a4:3c:a2:2c:0b:5a:01:32:dd:7d:28:50:22:64: 57:b0:10:2b:94:6d:fe:d7:d4:b7:c4:4d:71:00:d5:0f:d5:c7: 0f:d2:1f:71:3b:c7:77:a3:66:5e:78:ff:ec:aa:ef:ab:b5:55: 83:d3:01:e6:4a:46:a0:87:66:b9:f9:b4:4a:72:92:67:83:3e: cf:54:0c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH7MWqT8IVlTJHaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjA4ZGNmNzQtM2RjZS00Mzg0LWJlYWYtNzAzMTk4OTVm YzRiMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk NWE0YWJmMGMtNjJhMy00MDZmLThkNzctNTQwY2EyMzU3NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHxB5EiQj6rqiedfQXRsURssoWsX4bp0sBjC rem5xozCUZi6tnybjA0+fQRoJ1DGNLMBfoCnNJjF2KY87sbKhQjNXguQutMaRcgm kGs6wo1F5XyPPQ/8Mp2SDkyxfUkY+3nzrFZr1xrFFZBYgnRZJiM46KPlXYo9FuNB 8Ql8Wk6Umzx/2S5JPxYUr9KaMEl8DmE+ybubfEsyd2pINZ7SEH4mzRf1xtc1/oAN Bup7sdPhZJjsF5BtPKgx2e7Im9bNvdF19BSa4L4N2veIK9LWohVaAWcrbZtJ3yrt RFQ6LqOyrAsMPR+G/gr3DgnUITfJO5LuYiEzewTn+5LLyxNLBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCM/y5Xg+p0SbXG9OonevK4oYa6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMDhk Y2Y3NC0zZGNlLTQzODQtYmVhZi03MDMxOTg5NWZjNGIvZGMyZjg3MjMtMWEyNS0z YmIzLThhYjEtYjI1NjYyYmExYTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjA4ZGNmNzQtM2RjZS00Mzg0LWJl YWYtNzAzMTk4OTVmYzRiLzIwOGRjZjc0LTNkY2UtNDM4NC1iZWFmLTcwMzE5ODk1 ZmM0Yi5jcmwwHwYDVR0jBBgwFoAUtFZe+2BitOcxIpuQ8WaNOb1jB1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMDhkY2Y3NC0zZGNlLTQzODQtYmVhZi03MDMx OTg5NWZjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQChkGoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/kqTgKXG1lCIjsd5opnRXCkUpGxEsqtCLUutwv/fu/p6IglJBDZ9ki ke3+yMu5smBPpR8Ab09hjAPVz0U+e5zD5J0kUse2zwuTK3CpapmBOz6Pfwj36a7S TCvhpN0KKBjEVmywsyfSgW+wQVIM5Fb1iOCWF/HLjx71pHCvrN3HAFh6wDcVKcaz iBAjF/NDy1xkOzbf6KKXuhw3B0UPAGoZ+bC/W5toG0I0WFc3utSE+DtnlXL2Hnak PKIsC1oBMt19KFAiZFewECuUbf7X1LfETXEA1Q/Vxw/SH3E7x3ejZl54/+yq76u1 VYPTAeZKRqCHZrn5tEpykmeDPs9UDAg= -----END CERTIFICATE-----Generated at Fri Apr 17 12:02:33 2026 by rpki-client