$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa File: b86c8153-8eed-3c82-878a-5f781ef3ae78.roa (raw, json) Hash identifier: NZxxR1ii456jvp2WFc6+S6XOioKKqEr4qoqWnXGiZU8= Subject key identifier: 60:FE:01:7A:FF:36:A3:74:F8:0C:DA:33:65:3C:F5:6C:F5:70:DD:94 Certificate issuer: /CN=374c2f21-6f14-4735-b65a-b9bf6142515e Certificate serial: 010D0C9F4328584D4B8A1F69ED7397D42C96CE80 Authority key identifier: A4:21:FB:4B:59:9A:B7:0C:FD:75:DE:40:05:96:6F:A9:D4:B6:6D:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa Signing time: Thu 26 Mar 2026 09:25:30 +0000 ROA not before: Thu 26 Mar 2026 09:25:30 +0000 ROA not after: Wed 24 Jun 2026 09:25:30 +0000 asID: 11600 IP address blocks: 208.88.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:8a:1f:69:ed:73:97:d4:2c:96:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=374c2f21-6f14-4735-b65a-b9bf6142515e Validity Not Before: Mar 26 09:25:30 2026 GMT Not After : Jun 24 09:25:30 2026 GMT Subject: CN=70f8f961-17f0-4874-876a-2bc104594971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:34:e3:21:3a:52:86:68:b8:c7:ec:ba:3e: 45:9b:d7:d1:6d:ad:a3:20:6a:df:77:98:1d:50:90: b9:05:29:13:ef:97:f2:85:22:9b:cd:64:17:e2:f6: ef:1d:d0:e1:1a:88:4b:0d:58:7d:ea:9e:1f:62:c9: c5:48:85:f0:8c:1a:c9:4d:a2:eb:ef:9c:7d:91:d4: f2:ff:50:10:63:50:c1:5d:ed:cc:fb:e2:9a:da:38: 85:b0:6f:e0:ba:25:a7:7d:02:00:a9:02:46:33:60: d5:64:d3:eb:eb:d7:d6:ff:ac:51:69:cc:ca:4e:e0: f2:33:fb:07:27:95:13:84:2f:7c:0c:c8:d0:5f:04: b5:a2:40:e7:a9:ab:ac:d8:58:ee:33:ae:19:e2:cf: ea:94:4a:b3:e7:9f:c1:cf:5b:40:ea:aa:f6:52:71: 5c:d4:04:b3:59:fd:03:bd:c7:95:40:a6:21:3f:2c: e2:c8:d9:73:a5:1c:de:1c:34:da:69:7a:59:00:b5: 9f:5d:3b:e4:23:ef:98:ce:1b:7c:50:a5:da:c3:51: 91:fe:8d:a9:40:7e:b6:b3:77:1a:62:40:81:b9:98: bb:24:40:19:75:e4:f4:eb:de:7e:39:6f:6e:7f:ef: a8:f5:f9:c3:59:3d:74:7c:1c:68:7d:d9:24:30:f8: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FE:01:7A:FF:36:A3:74:F8:0C:DA:33:65:3C:F5:6C:F5:70:DD:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/b86c8153-8eed-3c82-878a-5f781ef3ae78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e/374c2f21-6f14-4735-b65a-b9bf6142515e.crl X509v3 Authority Key Identifier: keyid:A4:21:FB:4B:59:9A:B7:0C:FD:75:DE:40:05:96:6F:A9:D4:B6:6D:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/374c2f21-6f14-4735-b65a-b9bf6142515e.cer sbgp-ipAddrBlock: critical IPv4: 208.88.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:b0:0b:5f:3e:14:76:c3:87:1d:1b:92:62:5c:3d:77:e4:6b: 25:e6:b5:a7:47:c6:1c:22:2b:09:c1:35:3b:9c:77:9c:c9:9e: 1a:7c:90:69:ac:98:fd:aa:f4:e3:65:29:38:cc:f4:bc:a2:0a: 5c:0b:9e:20:65:46:92:dd:f6:44:e7:98:5f:30:43:a8:46:84: df:97:eb:1a:dc:d7:e6:c2:03:63:71:5c:c4:75:b8:0f:e6:cd: a6:bd:bd:c8:62:b3:12:76:94:11:60:5a:42:d6:98:e4:42:53: 4c:2d:8d:92:fe:87:b9:96:d6:16:25:ba:a2:95:fa:22:d2:b1: da:cf:8a:1d:5d:00:43:12:84:1d:82:fd:8f:2f:c4:29:f4:7e: e3:92:b0:a1:29:d1:90:1b:9b:3e:85:09:d5:7c:e8:e0:45:35: 2e:98:52:cc:77:d1:91:cb:c7:2e:72:52:d4:5d:54:7b:cc:a2: 94:ac:84:d6:b2:91:23:47:28:c7:a7:7f:e9:53:95:d4:79:26: 8d:4f:d8:ca:0b:11:0d:fc:3d:62:11:9c:fb:80:f3:d1:2f:76: cc:d9:2e:a9:2b:70:b4:7e:5d:36:01:8f:9d:cb:3e:60:75:68: c2:55:31:db:41:b5:d5:0c:35:d8:46:bf:b1:2f:c8:54:93:59: ac:65:c5:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Lih9p7XOX1CyWzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc0YzJmMjEtNmYxNC00NzM1LWI2NWEtYjliZjYxNDI1 MTVlMB4XDTI2MDMyNjA5MjUzMFoXDTI2MDYyNDA5MjUzMFowLzEtMCsGA1UEAxMk NzBmOGY5NjEtMTdmMC00ODc0LTg3NmEtMmJjMTA0NTk0OTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+g04yE6UoZouMfsuj5Fm9fRba2jIGrfd5gd UJC5BSkT75fyhSKbzWQX4vbvHdDhGohLDVh96p4fYsnFSIXwjBrJTaLr75x9kdTy /1AQY1DBXe3M++Ka2jiFsG/guiWnfQIAqQJGM2DVZNPr69fW/6xRaczKTuDyM/sH J5UThC98DMjQXwS1okDnqaus2FjuM64Z4s/qlEqz55/Bz1tA6qr2UnFc1ASzWf0D vceVQKYhPyziyNlzpRzeHDTaaXpZALWfXTvkI++Yzht8UKXaw1GR/o2pQH62s3ca YkCBuZi7JEAZdeT0695+OW9uf++o9fnDWT10fBxofdkkMPhGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD+AXr/NqN0+AzaM2U89Wz1cN2UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzRj MmYyMS02ZjE0LTQ3MzUtYjY1YS1iOWJmNjE0MjUxNWUvYjg2YzgxNTMtOGVlZC0z YzgyLTg3OGEtNWY3ODFlZjNhZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzc0YzJmMjEtNmYxNC00NzM1LWI2 NWEtYjliZjYxNDI1MTVlLzM3NGMyZjIxLTZmMTQtNDczNS1iNjVhLWI5YmY2MTQy NTE1ZS5jcmwwHwYDVR0jBBgwFoAUpCH7S1matwz9dd5ABZZvqdS2bQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzRjMmYyMS02ZjE0LTQ3MzUtYjY1YS1iOWJm NjE0MjUxNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FhFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAewC18+FHbDhx0bkmJcPXfkayXmtadHxhwiKwnBNTucd5zJnhp8kGms mP2q9ONlKTjM9LyiClwLniBlRpLd9kTnmF8wQ6hGhN+X6xrc1+bCA2NxXMR1uA/m zaa9vchisxJ2lBFgWkLWmORCU0wtjZL+h7mW1hYluqKV+iLSsdrPih1dAEMShB2C /Y8vxCn0fuOSsKEp0ZAbmz6FCdV86OBFNS6YUsx30ZHLxy5yUtRdVHvMopSshNay kSNHKMenf+lTldR5Jo1P2MoLEQ38PWIRnPuA89EvdszZLqkrcLR+XTYBj53LPmB1 aMJVMdtBtdUMNdhGv7EvyFSTWaxlxbk= -----END CERTIFICATE-----Generated at Fri Apr 17 15:55:12 2026 by rpki-client