$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa File: a6654227-7e4a-384e-aaf7-165cd7a07f42.roa (raw, json) Hash identifier: QSE08FUPanO3x3DVI4Ro+PQa+Dgybuef02/F4nGYWwc= Subject key identifier: FF:E1:96:00:0E:C9:C3:D5:36:9D:76:38:50:68:66:CA:CD:C3:17:E2 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584D4D5A79AC6C95145C0BAE7A80 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 8014 IP address blocks: 204.236.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:79:ac:6c:95:14:5c:0b:ae:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=4aac1af9-54cd-444b-8fdf-cbd9e4369c10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e9:5b:b7:dd:51:6b:0b:7b:21:47:08:e6:08: 36:ab:73:ce:c5:d3:ca:b4:dc:64:db:86:5c:25:e1: 95:8e:02:64:bb:27:5e:54:a2:3d:a3:82:7c:a5:bb: 6b:03:45:9e:98:4e:58:d2:6d:2e:e1:06:1f:59:31: c1:16:73:3f:b4:ea:20:1d:25:78:ee:86:68:51:e6: 42:6c:71:0c:c8:06:c3:02:63:e6:46:d1:28:60:95: 1d:b0:02:f5:d3:58:10:7e:1d:06:8e:a1:f4:e7:e8: a7:61:78:76:92:02:70:18:c0:b1:c8:b1:01:78:27: f6:90:09:62:9a:b1:b0:9f:9a:2d:75:f8:9d:13:2c: 5d:62:e1:c0:ad:4d:34:55:9d:6e:db:f3:48:b4:4e: 1d:8b:f6:f7:79:b8:27:76:43:a7:7f:7d:53:90:64: 82:3a:5e:fa:8d:97:27:43:e0:f9:b2:75:7d:2f:58: b4:1a:c0:c5:e9:6d:d4:65:fc:11:85:14:aa:51:43: 8a:15:02:04:dd:ed:a0:0d:7f:46:5a:ea:b7:6d:f9: 44:99:aa:5b:78:76:a9:20:c7:61:7f:7b:cb:84:67: 4c:6e:35:21:57:7d:67:3b:b7:a7:13:e9:03:75:98: 0d:12:a4:48:c1:40:f3:7b:59:e6:7c:e5:c5:0e:dc: cc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E1:96:00:0E:C9:C3:D5:36:9D:76:38:50:68:66:CA:CD:C3:17:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/a6654227-7e4a-384e-aaf7-165cd7a07f42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:10:83:53:ae:b4:5e:66:51:ba:c2:ca:b7:02:76:d2:46:3d: 57:75:1b:74:b1:ef:b3:32:5f:e9:fa:0c:86:e7:90:0d:e6:10: a9:17:48:e1:cc:11:93:3a:a2:dd:6a:d8:62:7c:21:b4:62:a8: 45:85:ee:f1:be:2f:dd:28:87:ce:ec:27:73:e3:44:ed:69:8f: ad:eb:2f:4f:82:fa:5f:39:17:44:a9:ed:3b:91:f7:98:c1:24: 01:2d:62:cd:25:39:76:56:47:16:8f:18:2d:f6:e8:ec:f4:ac: ec:e4:95:c4:2a:db:87:5e:7f:4a:74:3e:eb:d7:06:30:bd:fb: c4:02:4d:a6:74:9a:da:4f:14:d7:05:97:cd:17:0c:26:a8:99: 46:11:40:a4:d5:e2:95:24:8a:1d:a6:6d:62:72:a8:32:e3:d8: 2d:e8:db:d9:db:e3:c7:e8:1b:4e:28:e0:a8:2c:d1:d6:5a:98: b5:d6:05:f7:25:ca:ca:e0:2f:33:72:4f:08:13:77:93:bb:ea: 39:d7:aa:d9:7d:49:8a:0f:8c:d1:83:5b:9e:b1:9b:b1:b8:d5: 2d:99:f3:29:73:94:18:19:47:17:39:34:56:d5:24:26:af:62: f9:ca:44:44:87:b8:45:51:90:58:0f:ee:3d:65:c9:12:f9:60: ed:a2:75:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWnmsbJUUXAuueoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NGFhYzFhZjktNTRjZC00NDRiLThmZGYtY2JkOWU0MzY5YzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+lbt91Rawt7IUcI5gg2q3POxdPKtNxk24Zc JeGVjgJkuydeVKI9o4J8pbtrA0WemE5Y0m0u4QYfWTHBFnM/tOogHSV47oZoUeZC bHEMyAbDAmPmRtEoYJUdsAL101gQfh0GjqH05+inYXh2kgJwGMCxyLEBeCf2kAli mrGwn5otdfidEyxdYuHArU00VZ1u2/NItE4di/b3ebgndkOnf31TkGSCOl76jZcn Q+D5snV9L1i0GsDF6W3UZfwRhRSqUUOKFQIE3e2gDX9GWuq3bflEmapbeHapIMdh f3vLhGdMbjUhV31nO7enE+kDdZgNEqRIwUDze1nmfOXFDtzM7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/hlgAOycPVNp12OFBoZsrNwxfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvYTY2NTQyMjctN2U0YS0z ODRlLWFhZjctMTY1Y2Q3YTA3ZjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzOxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoQg1OutF5mUbrCyrcCdtJGPVd1G3Sx77MyX+n6DIbnkA3mEKkXSOHM EZM6ot1q2GJ8IbRiqEWF7vG+L90oh87sJ3PjRO1pj63rL0+C+l85F0Sp7TuR95jB JAEtYs0lOXZWRxaPGC326Oz0rOzklcQq24def0p0PuvXBjC9+8QCTaZ0mtpPFNcF l80XDCaomUYRQKTV4pUkih2mbWJyqDLj2C3o29nb48foG04o4Kgs0dZamLXWBfcl ysrgLzNyTwgTd5O76jnXqtl9SYoPjNGDW56xm7G41S2Z8ylzlBgZRxc5NFbVJCav YvnKRESHuEVRkFgP7j1lyRL5YO2idcc= -----END CERTIFICATE-----Generated at Fri Apr 17 12:50:07 2026 by rpki-client