$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa File: 9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa (raw, json) Hash identifier: 1HKJF4XoNL0V4DHuAJsYDuP+kQva88us7P3FSGqp6r0= Subject key identifier: A4:10:FA:08:F7:3E:F7:1F:6E:C4:78:CB:98:2D:7A:63:D9:05:7E:0E Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584D59EA781AEC52ED6854D0E120 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 8014 IP address blocks: 204.236.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:78:1a:ec:52:ed:68:54:d0:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=2d37edc3-f716-45af-87f8-040c7a414b0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:35:f3:3b:f6:44:10:df:c6:2e:4e:4c:c0: 7f:83:dd:0c:15:ba:de:8f:80:68:49:6b:8c:29:87: 94:9a:46:35:85:54:a8:a8:8e:dc:bc:27:ca:81:9b: 7f:d1:45:30:4b:e5:91:de:46:6e:7b:93:80:4a:29: 50:42:fb:b6:9a:57:2e:e7:99:63:0c:1c:ec:53:ad: 15:69:01:9b:22:1f:ea:d1:96:96:dd:53:ad:f1:59: e3:d7:f7:d6:ae:f6:ce:96:f0:9a:21:c5:51:d6:52: 8b:67:05:11:33:21:3d:6d:d4:d1:28:72:34:91:ef: 22:00:02:94:f7:a4:d2:9f:a5:55:e1:5e:6c:ac:56: 91:65:7c:f5:cd:06:78:6c:2b:20:2e:7a:f1:ca:c6: 01:89:e3:7e:6e:91:92:e5:c5:de:06:d0:96:0e:1d: ea:ce:4c:b5:a8:da:82:c2:92:29:5c:46:59:ed:fb: 24:19:06:c2:52:3f:39:ee:b1:38:57:3b:8a:ae:f8: ec:65:af:c7:70:bd:5b:52:a0:18:99:f0:72:ba:30: d8:05:8b:6d:e8:f3:92:00:96:e5:22:44:60:83:3f: c8:fb:66:5f:9c:b8:99:48:86:64:de:2a:9f:e5:e8: 07:e2:7a:d9:db:95:90:35:00:86:9d:78:ae:2a:3c: 09:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:FA:08:F7:3E:F7:1F:6E:C4:78:CB:98:2D:7A:63:D9:05:7E:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/9ffd9715-9834-3b1a-adef-7ce43f7d9704.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:df:40:80:82:98:41:3d:84:14:1f:85:dc:0a:4f:a7:8d:12: d1:4f:67:25:3c:e3:53:de:da:b8:69:b6:d7:b9:47:f0:60:07: 55:ce:4d:8f:25:b2:90:74:fa:b6:6f:4f:f2:2d:7d:13:b8:12: 4d:42:c7:06:a3:d6:3f:a1:65:09:d2:cb:9d:14:fb:c1:37:aa: 96:50:c3:f8:64:ed:32:1c:37:99:60:4c:13:2b:89:da:16:bf: 98:46:cd:01:e7:f6:3d:25:78:f2:5a:25:8e:61:a7:6d:20:d0: 0d:5b:0c:42:52:74:0d:a6:e5:f8:f1:c5:f2:29:43:bc:67:75: 45:8f:77:2a:1a:d5:6e:df:73:fa:0e:d6:74:5b:48:26:d6:be: 78:21:59:3d:0f:ba:9a:fe:32:be:b8:27:b4:30:44:4a:21:52: e0:ea:70:d2:36:e7:2a:ad:92:f2:7c:9e:2a:d8:e4:a8:f0:69: 54:1d:0a:f5:00:b2:5f:46:67:77:65:c0:0b:15:5e:ec:ec:dd: d2:47:f5:4d:c6:d3:30:e0:21:63:76:6f:35:49:d1:9b:fa:e7: a3:a8:00:89:66:00:5c:cd:bf:35:f7:b0:e2:cc:20:cf:49:b5: 2b:be:49:f5:07:18:d7:28:4b:a5:bb:78:5e:9b:59:9d:cf:f8: af:e6:6d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nga7FLtaFTQ4SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk MmQzN2VkYzMtZjcxNi00NWFmLTg3ZjgtMDQwYzdhNDE0YjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2c18zv2RBDfxi5OTMB/g90MFbrej4BoSWuM KYeUmkY1hVSoqI7cvCfKgZt/0UUwS+WR3kZue5OASilQQvu2mlcu55ljDBzsU60V aQGbIh/q0ZaW3VOt8Vnj1/fWrvbOlvCaIcVR1lKLZwURMyE9bdTRKHI0ke8iAAKU 96TSn6VV4V5srFaRZXz1zQZ4bCsgLnrxysYBieN+bpGS5cXeBtCWDh3qzky1qNqC wpIpXEZZ7fskGQbCUj857rE4VzuKrvjsZa/HcL1bUqAYmfByujDYBYtt6POSAJbl IkRggz/I+2ZfnLiZSIZk3iqf5egH4nrZ25WQNQCGnXiuKjwJcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQQ+gj3PvcfbsR4y5gtemPZBX4OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvOWZmZDk3MTUtOTgzNC0z YjFhLWFkZWYtN2NlNDNmN2Q5NzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzfQICCmEE9hBQfhdwKT6eNEtFPZyU841Pe2rhptte5R/BgB1XOTY8l spB0+rZvT/ItfRO4Ek1Cxwaj1j+hZQnSy50U+8E3qpZQw/hk7TIcN5lgTBMridoW v5hGzQHn9j0lePJaJY5hp20g0A1bDEJSdA2m5fjxxfIpQ7xndUWPdyoa1W7fc/oO 1nRbSCbWvnghWT0Pupr+Mr64J7QwREohUuDqcNI25yqtkvJ8nirY5KjwaVQdCvUA sl9GZ3dlwAsVXuzs3dJH9U3G0zDgIWN2bzVJ0Zv656OoAIlmAFzNvzX3sOLMIM9J tSu+SfUHGNcoS6W7eF6bWZ3P+K/mbTI= -----END CERTIFICATE-----Generated at Fri Apr 17 14:31:01 2026 by rpki-client