$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa File: 16d526a6-8c61-3f11-a555-e4df6480ae14.roa (raw, json) Hash identifier: OiNpls5tpN4LYJSfWSjo4kEj0Eocl51Be+hzYGlV4bQ= Subject key identifier: 14:50:5F:2B:04:E8:E4:DB:51:A5:F3:8F:35:92:3B:8D:04:48:B9:98 Certificate issuer: /CN=78108340-c24e-45fa-a787-5578ce17c653 Certificate serial: 010D0C9F4328584D0912574768DCB2009EB66C18 Authority key identifier: 96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 11796 IP address blocks: 208.74.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:57:47:68:dc:b2:00:9e:b6:6c:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78108340-c24e-45fa-a787-5578ce17c653 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=7b0eb5ca-d350-4a00-84ae-4b8e58f798ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:b4:90:40:b4:6a:db:ce:25:84:29:4f:af: b4:03:f0:12:7d:43:c8:d3:f2:c3:dd:52:c2:01:8a: d5:da:c3:14:29:2e:e8:1c:4b:cc:98:a7:a2:96:f9: 46:20:10:57:9f:0f:66:b5:ae:d5:cf:25:07:9a:39: 03:df:43:65:29:7d:1a:57:cc:5e:6b:da:f5:58:28: 1a:99:a5:75:1e:cd:54:7a:cd:f4:ba:e0:23:8b:95: eb:70:e2:79:53:2a:a0:f7:56:08:89:64:d5:2a:24: 15:75:d8:87:bb:a2:e2:a9:f2:4f:90:07:3a:67:91: a9:c3:85:da:53:31:5c:5e:1f:92:33:bc:a5:d3:c9: a8:0a:a7:24:0f:51:07:7e:d7:79:28:02:53:25:db: 67:0c:55:27:71:6e:04:ac:f5:8f:49:f4:fd:72:2d: dd:52:d5:37:ef:1d:32:e5:9f:98:b3:74:95:c4:28: c3:29:37:0d:4c:db:c7:49:34:6e:82:f5:3d:f0:2c: 39:ee:b4:e7:3f:aa:42:b8:3b:2e:8e:85:25:15:ac: fc:e7:67:4a:28:43:09:61:29:89:76:15:03:4b:a6: 8a:54:a7:38:0c:22:15:8b:b7:4a:9d:5a:17:1b:5b: 5f:53:f0:a9:31:78:9e:aa:f0:54:19:c6:f6:ae:62: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:50:5F:2B:04:E8:E4:DB:51:A5:F3:8F:35:92:3B:8D:04:48:B9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/16d526a6-8c61-3f11-a555-e4df6480ae14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653/78108340-c24e-45fa-a787-5578ce17c653.crl X509v3 Authority Key Identifier: keyid:96:B4:2B:83:19:3D:79:88:72:B2:4D:D9:B7:6D:1B:E1:B1:56:43:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/78108340-c24e-45fa-a787-5578ce17c653.cer sbgp-ipAddrBlock: critical IPv4: 208.74.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f6:9d:95:ca:2c:e0:dd:12:cd:7b:08:53:a8:35:06:c9:18: 44:37:97:de:50:bf:ce:e3:ef:a9:42:b7:39:9f:ae:13:81:f5: b4:82:84:f3:a6:58:ae:b9:33:48:68:16:1a:31:62:6f:c7:d3: 48:65:e1:3c:a8:8c:4f:28:af:5d:12:9f:c7:6f:1c:9f:ff:a8: 50:a8:09:29:3c:6d:fa:0e:98:af:96:e6:27:3f:13:83:93:30: 7b:7f:e9:3c:5f:e6:dc:66:bc:13:2f:87:e6:77:a2:96:7f:3c: 05:8e:32:f6:66:6d:ea:cb:49:3b:d8:8c:08:6d:6c:90:6b:dc: d8:28:46:13:5c:2f:48:0c:44:77:67:4b:d0:f9:ba:d1:b3:c1: 30:bb:b1:c1:53:94:51:78:69:c6:73:6c:de:89:7a:67:c9:90: 5c:44:e6:0e:6c:ab:8c:c2:6e:cb:ed:2a:5e:9b:8b:81:d3:bc: e4:ff:35:43:2d:86:17:14:77:89:34:85:1c:88:75:e4:37:84: fe:a0:c0:c4:38:75:1b:34:f5:d8:9f:da:5a:dc:5a:52:69:33: f6:a8:d2:22:3e:d1:29:52:38:79:1a:0f:d8:5f:6e:da:da:0f: ca:0a:c0:d0:33:49:cc:a1:b0:83:e7:c9:be:5c:95:4f:43:d6: bc:22:d0:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEldHaNyyAJ62bBgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzgxMDgzNDAtYzI0ZS00NWZhLWE3ODctNTU3OGNlMTdj NjUzMB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk N2IwZWI1Y2EtZDM1MC00YTAwLTg0YWUtNGI4ZTU4Zjc5OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje+0kEC0atvOJYQpT6+0A/ASfUPI0/LD3VLC AYrV2sMUKS7oHEvMmKeilvlGIBBXnw9mta7VzyUHmjkD30NlKX0aV8xea9r1WCga maV1Hs1Ues30uuAji5XrcOJ5Uyqg91YIiWTVKiQVddiHu6LiqfJPkAc6Z5Gpw4Xa UzFcXh+SM7yl08moCqckD1EHftd5KAJTJdtnDFUncW4ErPWPSfT9ci3dUtU37x0y 5Z+Ys3SVxCjDKTcNTNvHSTRugvU98Cw57rTnP6pCuDsujoUlFaz852dKKEMJYSmJ dhUDS6aKVKc4DCIVi7dKnVoXG1tfU/CpMXieqvBUGcb2rmLySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRQXysE6OTbUaXzjzWSO40ESLmYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ODEw ODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4Y2UxN2M2NTMvMTZkNTI2YTYtOGM2MS0z ZjExLWE1NTUtZTRkZjY0ODBhZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNzgxMDgzNDAtYzI0ZS00NWZhLWE3 ODctNTU3OGNlMTdjNjUzLzc4MTA4MzQwLWMyNGUtNDVmYS1hNzg3LTU1NzhjZTE3 YzY1My5jcmwwHwYDVR0jBBgwFoAUlrQrgxk9eYhysk3Zt20b4bFWQ90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83ODEwODM0MC1jMjRlLTQ1ZmEtYTc4Ny01NTc4 Y2UxN2M2NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE72nZXKLODdEs17CFOoNQbJGEQ3l95Qv87j76lCtzmfrhOB9bSChPOm WK65M0hoFhoxYm/H00hl4TyojE8or10Sn8dvHJ//qFCoCSk8bfoOmK+W5ic/E4OT MHt/6Txf5txmvBMvh+Z3opZ/PAWOMvZmberLSTvYjAhtbJBr3NgoRhNcL0gMRHdn S9D5utGzwTC7scFTlFF4acZzbN6JemfJkFxE5g5sq4zCbsvtKl6bi4HTvOT/NUMt hhcUd4k0hRyIdeQ3hP6gwMQ4dRs09dif2lrcWlJpM/ao0iI+0SlSOHkaD9hfbtra D8oKwNAzScyhsIPnyb5clU9D1rwi0FI= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:50 2026 by rpki-client