$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa File: 80176c29-2db4-33cf-b400-b52a4a80cd03.roa (raw, json) Hash identifier: FmlcM2GoNTzwJVnRN8bIAHPz1HVPOJ0TqFO9wol3o1Y= Subject key identifier: C5:1D:60:C5:88:96:AC:B1:47:EA:72:7A:98:74:5D:D8:BB:AA:AD:D2 Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584D869548D306A1C897DBDEA2E0 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 16509 IP address blocks: 208.71.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:48:d3:06:a1:c8:97:db:de:a2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=9367b43b-8cd8-4eb2-8d89-4f47490fb4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:06:d6:f5:4f:c5:d2:47:fc:8f:55:93:42:fc: 30:2d:fb:1c:e1:4f:07:5a:63:c8:06:35:c4:cd:d8: 7a:29:80:76:31:01:f2:14:55:33:75:e2:89:10:43: 63:c4:2e:d9:4f:3b:bf:e5:4b:74:0f:52:48:e2:c8: 54:2f:a0:21:b1:40:b5:dc:2d:f4:18:55:73:b4:b7: 3d:a1:60:c4:68:a2:5e:eb:56:81:57:38:c4:4c:e3: 04:85:21:b4:5b:c8:ef:65:9c:b2:34:2f:8a:6e:34: bc:1d:ed:b6:7a:89:e5:d7:a6:e3:ed:c2:31:77:38: 23:68:a0:20:ea:3f:2e:a7:c9:d4:56:d6:8a:10:68: bd:9f:bf:27:35:12:20:00:5f:ae:12:fc:04:34:0b: e8:37:f9:3e:b0:f6:ad:b1:c2:3a:5a:2c:d1:cc:bb: 9e:04:16:3f:7a:3a:83:d3:8e:8f:b0:5f:22:f4:b2: e0:be:2e:21:f6:e7:5d:19:4b:03:ef:84:c8:b7:70: d5:16:dc:db:1f:28:04:87:ff:04:c3:b3:54:90:76: 52:21:6e:3c:ef:01:db:4a:05:cc:54:3c:4d:8e:e4: 71:33:c8:85:f6:b0:7e:cb:f8:5e:9d:4e:98:8a:d8: ad:86:4b:2e:a8:fe:ff:85:d0:69:62:92:d6:03:9e: 1a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:60:C5:88:96:AC:B1:47:EA:72:7A:98:74:5D:D8:BB:AA:AD:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/80176c29-2db4-33cf-b400-b52a4a80cd03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:89:04:b8:d5:e8:19:33:2e:bf:10:45:13:02:02:07:ab:15: f5:71:0c:f9:44:8e:2e:f6:82:68:13:b9:96:c5:8b:d4:ae:f0: 15:b1:38:1e:a5:9f:5e:e2:16:12:2e:2e:87:6f:0f:89:30:27: 8d:a7:24:3a:a9:07:7d:cd:c5:ba:18:3a:bc:79:0d:a3:79:7e: c4:a2:6b:72:ad:5f:d6:36:bd:b0:2d:3e:0c:64:6e:c6:b9:8f: 19:88:87:31:0c:a1:a6:dc:e6:c4:e6:46:df:c0:75:61:ff:ac: 6a:db:62:7b:47:6d:b7:8e:22:c5:91:7f:f4:61:bb:25:59:24: c1:7a:fa:79:af:7f:f2:f8:4e:ae:82:13:15:01:b8:b2:43:41: 5c:fb:b1:41:44:5d:95:24:9b:28:56:c3:79:e9:35:9a:dd:c1: 78:dd:e6:4b:80:f2:0a:f8:da:f4:c9:bd:fd:3a:d8:53:43:47: 0d:06:b6:b6:4f:fd:ae:d3:55:5f:14:81:e6:38:00:a0:07:aa: 74:d1:cc:63:58:89:52:03:eb:17:b9:e9:a4:b2:94:ca:8b:15: 78:54:55:af:f4:da:07:be:02:5f:2b:6c:64:fe:55:c6:3a:6c: 10:02:62:a5:05:aa:bf:1b:55:0b:c4:53:19:52:41:fd:3f:99: cb:76:66:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUjTBqHIl9veouAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk OTM2N2I0M2ItOGNkOC00ZWIyLThkODktNGY0NzQ5MGZiNGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AbW9U/F0kf8j1WTQvwwLfsc4U8HWmPIBjXE zdh6KYB2MQHyFFUzdeKJEENjxC7ZTzu/5Ut0D1JI4shUL6AhsUC13C30GFVztLc9 oWDEaKJe61aBVzjETOMEhSG0W8jvZZyyNC+KbjS8He22eonl16bj7cIxdzgjaKAg 6j8up8nUVtaKEGi9n78nNRIgAF+uEvwENAvoN/k+sPatscI6WizRzLueBBY/ejqD 046PsF8i9LLgvi4h9uddGUsD74TIt3DVFtzbHygEh/8Ew7NUkHZSIW487wHbSgXM VDxNjuRxM8iF9rB+y/henU6YitithksuqP7/hdBpYpLWA54apwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUdYMWIlqyxR+pyeph0Xdi7qq3SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvODAxNzZjMjktMmRiNC0z M2NmLWI0MDAtYjUyYTRhODBjZDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeJBLjV6BkzLr8QRRMCAgerFfVxDPlEji72gmgTuZbFi9Su8BWxOB6l n17iFhIuLodvD4kwJ42nJDqpB33NxboYOrx5DaN5fsSia3KtX9Y2vbAtPgxkbsa5 jxmIhzEMoabc5sTmRt/AdWH/rGrbYntHbbeOIsWRf/RhuyVZJMF6+nmvf/L4Tq6C ExUBuLJDQVz7sUFEXZUkmyhWw3npNZrdwXjd5kuA8gr42vTJvf062FNDRw0GtrZP /a7TVV8UgeY4AKAHqnTRzGNYiVID6xe56aSylMqLFXhUVa/02ge+Al8rbGT+VcY6 bBACYqUFqr8bVQvEUxlSQf0/mct2Zo0= -----END CERTIFICATE-----Generated at Fri Apr 17 07:06:32 2026 by rpki-client