$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa File: 2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa (raw, json) Hash identifier: 9wah8/SK5YRPYVWnAbaRV4eYecHa1AK66JqhtovAs60= Subject key identifier: 97:DA:52:2E:0B:48:C5:58:2D:EB:25:E8:9C:2C:5A:F2:21:C3:5F:82 Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584D5E1A4A81697321373B17D080 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 208.71.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:4a:81:69:73:21:37:3b:17:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=c2728d98-3066-41e3-808c-96695ea94061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e0:1f:15:a6:f1:43:0b:a1:b8:40:79:c7:85: 3c:f8:5f:73:39:ca:be:cd:70:ed:df:64:fc:07:66: a6:2d:f3:22:5b:0a:bc:f8:0c:4d:39:c2:0f:b9:0e: 13:e8:ee:7b:36:9f:b4:75:eb:a4:7f:9e:ca:95:fe: af:77:99:ee:3a:de:64:86:c0:6e:fb:6d:15:60:6b: 53:f6:ba:41:8f:5b:7a:ad:86:14:60:cc:bf:7d:46: 8f:41:c1:7c:f6:9b:f1:9e:b5:99:9a:6b:d9:f1:32: f6:37:a8:98:aa:56:f4:ad:79:1a:50:77:97:b6:aa: 4c:2e:be:9e:8f:7b:7f:37:e5:81:f9:0a:75:3a:db: 2b:ed:94:f8:65:28:6b:2d:ec:67:e6:09:37:9a:5d: 63:db:07:d9:a4:10:1e:83:6a:cb:5a:72:3c:49:26: 65:b2:73:79:ca:dd:90:e6:a6:67:f9:d6:b3:11:df: a4:34:bd:2c:66:76:8a:0f:33:4d:e9:8a:29:1a:e0: ca:34:a6:b3:3e:c0:63:fb:d6:8d:aa:28:c0:72:0c: f9:30:9b:67:7a:f4:9b:b7:00:50:e6:f5:b3:2a:dd: 85:42:cd:78:3b:af:a7:7e:f3:a1:a0:36:78:28:a4: da:81:06:ef:90:58:4b:61:f7:c5:cf:08:66:7f:d5: 14:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:DA:52:2E:0B:48:C5:58:2D:EB:25:E8:9C:2C:5A:F2:21:C3:5F:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/2dbef95c-c607-3c9a-a265-4a14cc6c3fe5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:89:2f:0f:97:8d:8b:fa:3b:0d:6c:02:bf:ae:17:f4:3d:ab: c1:a6:86:65:9a:f7:c6:2f:56:64:ea:33:c9:3c:93:77:b9:d3: c6:21:49:c4:be:f1:03:37:5e:16:f3:80:18:6d:b6:e2:b6:96: 48:2d:d8:df:f9:f0:9d:6f:be:03:7a:5b:76:e2:e0:4b:e8:5c: 11:1a:87:0a:eb:0d:ea:d4:66:61:fc:db:cf:5f:5e:7a:2f:19: c0:a3:6d:2a:55:d1:20:c3:0c:f1:00:2d:7d:aa:5f:4d:d8:50: c9:ce:87:71:8b:4b:06:ab:4b:42:cf:d2:e7:fd:74:fa:8d:15: 24:b2:46:0d:61:61:81:b5:04:7b:fd:ad:28:eb:e3:b9:ae:cd: 6e:61:65:6e:d8:84:60:4d:ba:48:df:8f:ce:e7:c3:d6:31:6a: 28:84:52:85:2d:78:a8:9a:67:24:44:26:70:23:51:2d:01:aa: 64:96:b9:d0:34:cc:a6:bf:c9:40:eb:04:0a:1c:c8:d6:6c:23: 5d:de:1c:12:49:dd:38:b4:d1:9d:d0:20:5f:18:00:d0:cb:78: 2f:54:ab:8c:82:68:99:e0:fb:dd:55:af:7a:f6:8a:4d:0e:a0: 31:6e:36:96:6d:1b:11:c4:35:06:71:78:5e:11:95:9b:2f:53: c4:92:44:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkqBaXMhNzsX0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YzI3MjhkOTgtMzA2Ni00MWUzLTgwOGMtOTY2OTVlYTk0MDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuAfFabxQwuhuEB5x4U8+F9zOcq+zXDt32T8 B2amLfMiWwq8+AxNOcIPuQ4T6O57Np+0deukf57Klf6vd5nuOt5khsBu+20VYGtT 9rpBj1t6rYYUYMy/fUaPQcF89pvxnrWZmmvZ8TL2N6iYqlb0rXkaUHeXtqpMLr6e j3t/N+WB+Qp1Otsr7ZT4ZShrLexn5gk3ml1j2wfZpBAeg2rLWnI8SSZlsnN5yt2Q 5qZn+dazEd+kNL0sZnaKDzNN6YopGuDKNKazPsBj+9aNqijAcgz5MJtnevSbtwBQ 5vWzKt2FQs14O6+nfvOhoDZ4KKTagQbvkFhLYffFzwhmf9UUuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfaUi4LSMVYLesl6JwsWvIhw1+CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvMmRiZWY5NWMtYzYwNy0z YzlhLWEyNjUtNGExNGNjNmMzZmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmJLw+XjYv6Ow1sAr+uF/Q9q8GmhmWa98YvVmTqM8k8k3e508YhScS+ 8QM3XhbzgBhttuK2lkgt2N/58J1vvgN6W3bi4EvoXBEahwrrDerUZmH8289fXnov GcCjbSpV0SDDDPEALX2qX03YUMnOh3GLSwarS0LP0uf9dPqNFSSyRg1hYYG1BHv9 rSjr47muzW5hZW7YhGBNukjfj87nw9YxaiiEUoUteKiaZyREJnAjUS0BqmSWudA0 zKa/yUDrBAocyNZsI13eHBJJ3Ti00Z3QIF8YANDLeC9Uq4yCaJng+91Vr3r2ik0O oDFuNpZtGxHENQZxeF4RlZsvU8SSRLE= -----END CERTIFICATE-----Generated at Fri Apr 17 03:46:36 2026 by rpki-client