$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/156ce4d8-90cb-328d-a792-dd85d82b760d.roa File: 156ce4d8-90cb-328d-a792-dd85d82b760d.roa (raw, json) Hash identifier: zNPxp6H5auuQngZUXvsNFTA1rht055ozVoujBmc+V4s= Subject key identifier: D9:BC:41:BA:92:FB:1A:A5:DB:F3:6E:36:69:DB:D9:73:89:60:25:B7 Certificate issuer: /CN=db859a2a-df82-4532-a984-71176499699e Certificate serial: 010D0C9F4328584D87697A5A9800519F2EFDEDC0 Authority key identifier: FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/156ce4d8-90cb-328d-a792-dd85d82b760d.roa Signing time: Thu 16 Apr 2026 20:08:14 +0000 ROA not before: Thu 16 Apr 2026 20:08:14 +0000 ROA not after: Wed 15 Jul 2026 20:08:14 +0000 asID: 398768 IP address blocks: 208.83.14.0/23 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:87:69:7a:5a:98:00:51:9f:2e:fd:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db859a2a-df82-4532-a984-71176499699e Validity Not Before: Apr 16 20:08:14 2026 GMT Not After : Jul 15 20:08:14 2026 GMT Subject: CN=7f8b10dd-6031-46ff-b018-c521d5dc232f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:0f:2d:e8:18:06:33:4e:ab:53:38:52:ed:24: 07:ed:c6:d0:79:b2:0b:de:47:f1:76:fc:d0:00:af: 9e:b5:31:dc:67:91:e8:f6:ba:f2:cc:7a:85:60:50: 69:5e:89:aa:d0:da:e6:7f:88:c3:80:7a:5c:d9:31: 48:60:07:ef:ce:d7:d6:52:bb:e3:ba:af:a2:b5:b0: 35:8b:75:b5:2e:14:d9:27:e8:1b:5d:48:4e:2c:09: 24:b5:12:5a:50:81:50:95:55:71:80:1e:c6:54:b5: aa:1d:f8:6c:ce:0a:2b:39:35:68:e0:84:36:e3:24: 5f:e4:f3:d4:c5:c0:ac:ec:91:ce:37:e0:6f:44:3a: 7b:31:a7:52:7c:e5:f9:b7:72:62:60:2b:9b:ca:72: 0b:7d:a3:e3:9c:2d:71:fc:9d:6f:09:fe:09:4e:7c: 0e:e4:dd:f0:80:4c:80:9b:f3:85:1f:ca:b3:59:80: 69:ff:78:5f:79:7c:e8:b1:ad:45:17:5c:b6:df:59: a0:bb:44:dd:6f:6a:78:ce:e9:00:29:8d:1d:3b:21: 66:34:40:d9:ad:0b:61:f1:50:79:8f:18:72:2c:0a: c2:09:56:c2:b8:79:54:58:27:cb:3a:08:2a:8c:59: 3f:d3:35:d8:0e:66:2e:0d:0d:a3:53:e9:f2:1d:3e: 20:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BC:41:BA:92:FB:1A:A5:DB:F3:6E:36:69:DB:D9:73:89:60:25:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/156ce4d8-90cb-328d-a792-dd85d82b760d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e/db859a2a-df82-4532-a984-71176499699e.crl X509v3 Authority Key Identifier: keyid:FF:41:AE:1C:A8:12:8D:60:CC:21:3E:5F:ED:61:49:62:AD:36:89:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db859a2a-df82-4532-a984-71176499699e.cer sbgp-ipAddrBlock: critical IPv4: 208.83.14.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:24:ef:32:ad:86:a2:ae:76:b9:69:bc:c5:fa:65:93:02:9c: 34:b7:fd:3d:cd:d9:2a:b7:d4:ec:80:83:e6:73:d1:67:8f:d7: 25:ff:90:3d:d9:08:eb:7f:46:7f:04:dd:ee:95:e1:f3:c9:b9: 44:37:8d:9e:25:b5:7f:9a:aa:6b:d0:f0:8f:84:db:71:97:70: cf:f0:33:20:7b:52:1c:e3:63:8c:ad:c6:e8:91:59:78:40:25: b2:50:a6:65:8b:70:49:41:22:61:f2:81:54:8f:19:a9:54:7f: ac:c9:aa:a3:d2:90:13:8b:78:81:87:e9:0d:fa:46:ca:62:ef: 6a:73:65:30:ff:42:ca:29:8c:aa:1a:55:76:5f:57:7c:5f:1d: 98:86:94:e1:52:b4:1b:5d:a4:f2:d4:ce:1d:52:d5:59:cd:e2: 06:79:63:a1:55:53:de:52:ed:ef:0a:40:c5:62:17:19:f1:0c: 61:32:74:22:82:44:d9:06:33:f9:26:68:b2:01:18:e5:c3:8c: b5:d0:6b:d9:32:ba:59:2d:0c:c7:9c:1c:82:5a:8f:81:84:6f: e5:e8:56:b9:89:2c:cb:48:da:27:23:fc:46:d7:7b:27:07:17: 9b:43:0b:cc:aa:61:c7:8a:7b:cd:05:34:b1:a4:df:41:5c:78: 56:1c:7c:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2HaXpamABRny797cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI4NTlhMmEtZGY4Mi00NTMyLWE5ODQtNzExNzY0OTk2 OTllMB4XDTI2MDQxNjIwMDgxNFoXDTI2MDcxNTIwMDgxNFowLzEtMCsGA1UEAxMk N2Y4YjEwZGQtNjAzMS00NmZmLWIwMTgtYzUyMWQ1ZGMyMzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig8t6BgGM06rUzhS7SQH7cbQebIL3kfxdvzQ AK+etTHcZ5Ho9rryzHqFYFBpXomq0Nrmf4jDgHpc2TFIYAfvztfWUrvjuq+itbA1 i3W1LhTZJ+gbXUhOLAkktRJaUIFQlVVxgB7GVLWqHfhszgorOTVo4IQ24yRf5PPU xcCs7JHON+BvRDp7MadSfOX5t3JiYCubynILfaPjnC1x/J1vCf4JTnwO5N3wgEyA m/OFH8qzWYBp/3hfeXzosa1FF1y231mgu0Tdb2p4zukAKY0dOyFmNEDZrQth8VB5 jxhyLArCCVbCuHlUWCfLOggqjFk/0zXYDmYuDQ2jU+nyHT4g0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNm8QbqS+xql2/NuNmnb2XOJYCW3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1 OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3NjQ5OTY5OWUvMTU2Y2U0ZDgtOTBjYi0z MjhkLWE3OTItZGQ4NWQ4MmI3NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGI4NTlhMmEtZGY4Mi00NTMyLWE5 ODQtNzExNzY0OTk2OTllL2RiODU5YTJhLWRmODItNDUzMi1hOTg0LTcxMTc2NDk5 Njk5ZS5jcmwwHwYDVR0jBBgwFoAU/0GuHKgSjWDMIT5f7WFJYq02iV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kYjg1OWEyYS1kZjgyLTQ1MzItYTk4NC03MTE3 NjQ5OTY5OWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0FMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEk7zKthqKudrlpvMX6ZZMCnDS3/T3N2Sq31OyAg+Zz0WeP1yX/kD3Z COt/Rn8E3e6V4fPJuUQ3jZ4ltX+aqmvQ8I+E23GXcM/wMyB7UhzjY4ytxuiRWXhA JbJQpmWLcElBImHygVSPGalUf6zJqqPSkBOLeIGH6Q36Rspi72pzZTD/QsopjKoa VXZfV3xfHZiGlOFStBtdpPLUzh1S1VnN4gZ5Y6FVU95S7e8KQMViFxnxDGEydCKC RNkGM/kmaLIBGOXDjLXQa9kyulktDMecHIJaj4GEb+XoVrmJLMtI2icj/EbXeycH F5tDC8yqYceKe80FNLGk30FceFYcfDQ= -----END CERTIFICATE-----Generated at Fri Apr 17 15:44:50 2026 by rpki-client