$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa File: 7c82a209-9386-3901-a7b9-57c1f597512b.roa (raw, json) Hash identifier: wcMd8mhsKNhdTc8aTeKGPWfZ59WQqB+BLt5/DHVKoKc= Subject key identifier: 48:23:20:28:1A:E3:7E:50:87:DC:94:2B:4B:9C:81:2E:30:3A:11:62 Certificate issuer: /CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Certificate serial: 010D0C9F4328584D00B270BE0D8EAB8B4F54B740 Authority key identifier: 99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 22251 IP address blocks: 208.68.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:70:be:0d:8e:ab:8b:4f:54:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cf8807c-494e-41ab-842c-c0672d6283b1 Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=e87b8d3e-948f-43da-8966-b79feac38e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3d:76:5f:dd:90:ca:d0:b6:74:f8:d2:89:7e: fd:d2:6c:b3:97:8c:cf:de:65:47:6f:87:ed:0b:f3: 55:78:c7:a7:ef:6a:87:d2:3b:f5:c2:16:7c:71:fe: 36:48:93:a4:0b:ad:c9:fd:0d:47:54:80:8d:e1:4d: a6:8c:c6:b7:a8:01:f3:13:23:8a:e5:4a:a2:ba:2d: 21:6d:3b:50:5c:a7:05:34:d9:a0:fa:1d:a7:ae:48: b3:17:79:20:80:28:f3:07:c3:55:55:a0:cb:b8:32: ee:c4:43:41:c7:d3:c4:fc:41:f5:3f:85:9a:b6:96: 74:d8:db:d3:73:ce:43:52:02:1b:96:32:32:d0:48: bf:57:aa:cf:3a:1e:57:e9:ef:7c:f6:94:17:1f:05: 0f:04:c2:16:e0:db:37:16:c2:97:fe:42:66:dc:ab: 61:6d:17:cf:84:56:fa:15:56:3e:15:04:20:0d:d6: 5e:77:2a:c6:82:f8:80:de:91:98:89:b8:00:ad:03: c7:89:c0:9c:6c:5c:e1:7f:68:9e:52:d5:8d:c7:70: 25:64:6e:34:9b:d8:09:4a:ae:a1:92:8d:8f:11:aa: 01:9d:18:b4:91:2c:c3:d0:e8:8a:c5:61:9b:e8:b2: 81:f4:a7:a5:5e:4a:8f:02:73:9b:47:48:b1:b8:d6: 7b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:23:20:28:1A:E3:7E:50:87:DC:94:2B:4B:9C:81:2E:30:3A:11:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/7c82a209-9386-3901-a7b9-57c1f597512b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1/8cf8807c-494e-41ab-842c-c0672d6283b1.crl X509v3 Authority Key Identifier: keyid:99:22:B4:C2:53:72:17:E1:3D:05:32:6E:4D:EE:63:68:74:51:84:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8cf8807c-494e-41ab-842c-c0672d6283b1.cer sbgp-ipAddrBlock: critical IPv4: 208.68.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:55:19:28:ec:d1:0d:10:6c:d4:9a:d3:62:5b:9d:85:57:1f: 97:f6:95:66:97:1d:a9:ac:46:81:9a:19:c4:46:3b:d4:dc:f2: d0:70:68:f2:35:36:c0:8d:4d:5e:fc:ca:6a:a7:79:69:b6:3c: fd:a9:30:0a:3b:2f:d0:80:85:84:75:d0:62:dc:5a:51:ba:34: 21:59:a1:41:7f:3a:1a:90:9b:c5:aa:d0:49:e7:e8:5d:bb:23: 15:16:31:b9:94:a4:f4:5e:df:a8:11:ff:a0:6d:5c:fd:78:4a: ea:98:92:c3:7b:fa:f2:5f:e2:9d:4a:e9:08:01:14:d4:20:f2: 5f:0e:ed:73:f7:f1:db:bd:3b:03:89:fa:8f:a2:f2:e1:a3:8c: 6b:51:b1:6f:24:97:aa:05:6d:80:e1:69:c8:8d:0f:c4:bf:07: 82:57:07:4c:bf:f0:52:58:9b:81:87:05:a0:0f:2c:19:7c:ed: 7f:8c:7d:c3:0a:dc:c0:69:e2:1c:57:74:a4:56:cb:a5:f0:f9: f6:4e:21:50:10:dd:99:6f:51:1a:28:48:16:a9:ac:8f:25:d5: 11:81:65:58:af:04:5d:b2:a9:7a:b5:21:de:37:0a:d1:77:db: 2d:2f:28:da:0a:b7:4c:b7:b8:6a:22:1b:44:ec:12:3c:2e:4f: 97:7f:99:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0AsnC+DY6ri09Ut0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGNmODgwN2MtNDk0ZS00MWFiLTg0MmMtYzA2NzJkNjI4 M2IxMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk ZTg3YjhkM2UtOTQ4Zi00M2RhLTg5NjYtYjc5ZmVhYzM4ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT12X92QytC2dPjSiX790myzl4zP3mVHb4ft C/NVeMen72qH0jv1whZ8cf42SJOkC63J/Q1HVICN4U2mjMa3qAHzEyOK5Uqiui0h bTtQXKcFNNmg+h2nrkizF3kggCjzB8NVVaDLuDLuxENBx9PE/EH1P4WatpZ02NvT c85DUgIbljIy0Ei/V6rPOh5X6e989pQXHwUPBMIW4Ns3FsKX/kJm3KthbRfPhFb6 FVY+FQQgDdZedyrGgviA3pGYibgArQPHicCcbFzhf2ieUtWNx3AlZG40m9gJSq6h ko2PEaoBnRi0kSzD0OiKxWGb6LKB9KelXkqPAnObR0ixuNZ7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgjICga435Qh9yUK0ucgS4wOhFiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4 ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3MmQ2MjgzYjEvN2M4MmEyMDktOTM4Ni0z OTAxLWE3YjktNTdjMWY1OTc1MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGNmODgwN2MtNDk0ZS00MWFiLTg0 MmMtYzA2NzJkNjI4M2IxLzhjZjg4MDdjLTQ5NGUtNDFhYi04NDJjLWMwNjcyZDYy ODNiMS5jcmwwHwYDVR0jBBgwFoAUmSK0wlNyF+E9BTJuTe5jaHRRhJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84Y2Y4ODA3Yy00OTRlLTQxYWItODQyYy1jMDY3 MmQ2MjgzYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdVGSjs0Q0QbNSa02JbnYVXH5f2lWaXHamsRoGaGcRGO9Tc8tBwaPI1 NsCNTV78ymqneWm2PP2pMAo7L9CAhYR10GLcWlG6NCFZoUF/OhqQm8Wq0Enn6F27 IxUWMbmUpPRe36gR/6BtXP14SuqYksN7+vJf4p1K6QgBFNQg8l8O7XP38du9OwOJ +o+i8uGjjGtRsW8kl6oFbYDhaciND8S/B4JXB0y/8FJYm4GHBaAPLBl87X+MfcMK 3MBp4hxXdKRWy6Xw+fZOIVAQ3ZlvURooSBaprI8l1RGBZVivBF2yqXq1Id43CtF3 2y0vKNoKt0y3uGoiG0TsEjwuT5d/mWc= -----END CERTIFICATE-----Generated at Mon Mar 2 17:12:34 2026 by rpki-client