$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa File: 203d4c5b-39cc-31ee-9546-b82bfe541856.roa (raw, json) Hash identifier: eLrTCyG7ZGhsDe0ETqr7htkWoEiHC5jzGccls1g0oFY= Subject key identifier: E8:90:F4:F3:6C:62:E1:BD:B4:2E:1D:0A:77:26:B4:FE:20:44:92:EF Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584D5E1A6E941C75C2D09D68B600 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 8014 IP address blocks: 204.236.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:6e:94:1c:75:c2:d0:9d:68:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=cda0913f-7560-4003-9330-b466b16484a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:7d:75:fb:fa:06:a7:b0:36:d5:86:d4:e7:23: 72:0b:30:38:1e:16:40:e1:89:9a:db:e1:2e:ee:9e: e3:bc:95:dd:ec:45:aa:28:4e:d3:5e:36:e4:70:ea: 01:9f:f3:09:fa:3e:32:bf:3f:d2:aa:6d:71:23:00: d5:45:d8:e7:17:83:70:16:60:32:13:20:59:2d:07: df:a1:35:bc:1b:35:23:49:8b:39:af:dc:d6:39:4e: 75:eb:9a:20:08:39:00:56:6f:f1:dd:1a:3c:34:23: f1:6a:2a:a9:e3:91:8e:0c:fd:7e:18:5c:54:ad:79: ee:82:2a:70:78:c2:1a:9e:8b:29:57:d7:4e:84:19: db:dc:a4:e6:78:d8:6d:42:ef:6f:c1:c4:4e:77:f7: e6:74:e1:81:4b:b9:87:80:88:d0:d6:7a:63:d6:c4: f8:59:e2:63:11:79:a1:37:29:be:7e:96:c9:a2:5d: a6:c1:86:79:85:b0:81:92:16:39:83:a1:20:fa:34: a5:9d:8b:a5:a4:c1:ae:48:b8:bf:d2:fd:5d:1f:f1: c9:cc:75:4e:1a:06:7a:79:50:d1:53:e2:3f:59:ed: 4d:d1:3c:42:0f:a7:1b:37:89:49:3a:37:e5:15:c0: 3e:dd:dd:cd:7e:07:80:47:60:1a:f7:80:64:1e:fb: 33:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:90:F4:F3:6C:62:E1:BD:B4:2E:1D:0A:77:26:B4:FE:20:44:92:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/203d4c5b-39cc-31ee-9546-b82bfe541856.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:fb:4c:60:c1:7d:c4:3d:bf:2b:89:83:e9:a7:f9:29:ff: 0a:90:de:aa:d6:f3:55:7c:00:b1:e6:77:a0:66:83:c7:3d:87: 93:ff:9f:90:22:9a:f1:94:77:f3:03:d5:54:85:10:1a:c4:a4: b4:c6:13:ac:ce:67:e5:de:e5:28:1f:1b:20:d6:17:f0:cd:0b: 20:b3:dc:b5:83:4c:e1:6a:81:1f:a6:9c:40:47:1f:9c:d0:97: ea:9f:47:49:e1:9b:73:22:a3:17:05:a4:36:9a:54:b2:7a:f6: e1:c6:b8:5c:83:25:e1:e1:51:5b:4c:f2:d7:bb:fb:25:92:21: 3f:05:13:96:60:8c:06:01:2a:86:60:4b:a7:5f:45:c8:80:e5: 7a:77:f8:d3:c7:47:da:58:a2:dd:b1:78:93:62:7a:fd:ee:4b: 76:8b:ba:5b:ec:bf:ed:7a:d0:b7:5c:1d:93:82:b4:08:52:e3: a7:17:5b:3e:69:fc:51:46:7f:53:74:ea:24:e7:7e:88:9c:aa: e2:f9:73:91:68:25:ad:77:73:d5:14:e5:ee:41:d7:b8:2d:f1: 2f:1e:a3:44:cc:14:b2:e0:3c:36:ea:15:7a:24:73:e9:cc:7c: cb:0a:f4:07:6a:52:27:ed:84:e3:f7:d3:e2:e3:3f:42:7e:af: 43:0b:47:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGm6UHHXC0J1otgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk Y2RhMDkxM2YtNzU2MC00MDAzLTkzMzAtYjQ2NmIxNjQ4NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgn11+/oGp7A21YbU5yNyCzA4HhZA4Yma2+Eu 7p7jvJXd7EWqKE7TXjbkcOoBn/MJ+j4yvz/Sqm1xIwDVRdjnF4NwFmAyEyBZLQff oTW8GzUjSYs5r9zWOU5165ogCDkAVm/x3Ro8NCPxaiqp45GODP1+GFxUrXnugipw eMIanospV9dOhBnb3KTmeNhtQu9vwcROd/fmdOGBS7mHgIjQ1npj1sT4WeJjEXmh Nym+fpbJol2mwYZ5hbCBkhY5g6Eg+jSlnYulpMGuSLi/0v1dH/HJzHVOGgZ6eVDR U+I/We1N0TxCD6cbN4lJOjflFcA+3d3NfgeAR2Aa94BkHvsz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiQ9PNsYuG9tC4dCncmtP4gRJLvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMjAzZDRjNWItMzljYy0z MWVlLTk1NDYtYjgyYmZlNTQxODU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzk+0xgwX3EPb8riYPpp/kp/wqQ3qrW81V8ALHmd6Bmg8c9h5P/n5Ai mvGUd/MD1VSFEBrEpLTGE6zOZ+Xe5SgfGyDWF/DNCyCz3LWDTOFqgR+mnEBHH5zQ l+qfR0nhm3MioxcFpDaaVLJ69uHGuFyDJeHhUVtM8te7+yWSIT8FE5ZgjAYBKoZg S6dfRciA5Xp3+NPHR9pYot2xeJNiev3uS3aLulvsv+160LdcHZOCtAhS46cXWz5p /FFGf1N06iTnfoicquL5c5FoJa13c9UU5e5B17gt8S8eo0TMFLLgPDbqFXokc+nM fMsK9AdqUifthOP30+LjP0J+r0MLRyg= -----END CERTIFICATE-----Generated at Fri Apr 17 14:29:30 2026 by rpki-client