$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa File: c38a9254-bd55-334d-8825-624e13ddc8fa.roa (raw, json) Hash identifier: n6vyvf2dTUlDQBe90GcEZ8GNS+keXF4HK6w2iUaHJFE= Subject key identifier: 7F:1B:AA:AB:AE:A7:DA:78:1A:7E:18:4A:36:99:20:13:1B:3C:6A:9A Certificate issuer: /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Certificate serial: 010D0C9F4328584D83CA9F5B89AEF70A37D45380 Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 26155 IP address blocks: 67.223.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:ca:9f:5b:89:ae:f7:0a:37:d4:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=ab679bab-0ae5-4280-a8f2-d28fed916367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:c0:80:88:e6:b9:b6:46:78:ad:cb:16:ea: f2:8b:bc:c4:1d:45:06:7e:fa:51:3e:dc:fa:33:5a: 6d:9d:59:b0:21:08:49:56:79:63:3e:f1:e1:34:8d: f9:4a:54:8a:49:2a:9a:6b:2c:51:62:4a:78:e2:d7: 87:d7:1f:f8:0e:71:c0:0e:22:99:49:d8:76:5b:64: 37:05:80:8d:57:31:b8:cf:46:3f:b5:ad:1d:b1:97: 01:1a:3d:56:09:81:0d:3b:1a:48:87:c5:7a:1c:d7: 78:e4:f1:95:c6:46:99:23:9f:3c:28:dd:ba:ed:e0: 0d:19:54:7d:17:e6:2f:62:0d:7a:d7:68:e5:fa:d1: cb:24:76:db:84:99:de:49:14:c9:01:ca:e2:b5:ed: 75:5d:b0:ec:80:de:85:d2:82:80:a6:fe:fd:ed:c3: 02:cd:bd:4c:fe:07:c5:a5:7d:39:cd:b0:b7:2d:5d: 9e:69:a7:6c:de:a6:9f:f7:d5:44:97:74:56:43:ce: 89:d7:a3:93:64:39:c2:da:04:78:53:4d:f4:5a:16: 44:e7:ff:c9:a6:fa:4c:9a:94:e0:0f:7a:a7:9c:0d: a5:1d:92:84:92:ac:87:7b:b3:de:2c:b3:0a:0b:b5: e1:23:21:d9:a6:d6:e8:fe:20:9e:32:68:41:91:a1: ad:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:1B:AA:AB:AE:A7:DA:78:1A:7E:18:4A:36:99:20:13:1B:3C:6A:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/c38a9254-bd55-334d-8825-624e13ddc8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl X509v3 Authority Key Identifier: keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer sbgp-ipAddrBlock: critical IPv4: 67.223.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:41:52:3d:05:b5:44:c3:17:f9:71:fc:1d:40:37:fe:8a:3f: 64:d1:c8:b1:ab:07:d6:0b:41:6a:62:9f:69:46:a0:cf:13:b2: 4c:ce:c4:d8:15:76:36:e0:11:8b:06:a6:2f:a5:21:8a:fc:10: 60:33:9f:85:7b:c9:90:6e:7b:47:03:60:ca:51:08:14:d5:95: 27:9c:64:38:7f:99:fa:e3:90:36:b9:21:b5:53:ee:36:2a:85: 8c:7f:50:52:98:a8:bf:b9:0d:b0:84:ca:3c:f3:44:ec:6c:f1: 59:17:bd:0a:1a:61:c1:a3:65:f5:de:b4:a5:88:55:19:e5:e5: 56:2f:99:2a:ac:3b:cb:f4:23:34:c2:a0:83:08:bf:ae:0f:45: 36:36:91:21:28:0f:3d:9a:b1:46:be:72:b6:cf:c3:be:4d:69: 40:c3:97:51:d3:16:e4:ca:49:b4:e5:61:f8:36:74:99:f4:ab: c5:32:cc:73:97:a3:4a:77:ee:0e:c9:6f:f2:cc:2a:63:ec:61: f8:92:ae:4e:bf:f7:90:03:1d:a7:82:bb:da:1a:5a:de:3a:91: b5:91:12:34:e3:6a:5a:52:a5:9c:6e:e5:65:12:13:5a:a0:db: 82:d3:e5:5f:1b:58:0b:03:ce:b4:5c:38:e1:93:0e:28:06:a1: 6f:e5:10:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyp9bia73CjfUU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0 YzZkMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk YWI2NzliYWItMGFlNS00MjgwLWE4ZjItZDI4ZmVkOTE2MzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7/AgIjmubZGeK3LFuryi7zEHUUGfvpRPtz6 M1ptnVmwIQhJVnljPvHhNI35SlSKSSqaayxRYkp44teH1x/4DnHADiKZSdh2W2Q3 BYCNVzG4z0Y/ta0dsZcBGj1WCYENOxpIh8V6HNd45PGVxkaZI588KN267eANGVR9 F+YvYg1612jl+tHLJHbbhJneSRTJAcrite11XbDsgN6F0oKApv797cMCzb1M/gfF pX05zbC3LV2eaads3qaf99VEl3RWQ86J16OTZDnC2gR4U030WhZE5//JpvpMmpTg D3qnnA2lHZKEkqyHe7PeLLMKC7XhIyHZptbo/iCeMmhBkaGt8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8bqquup9p4Gn4YSjaZIBMbPGqaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5 NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvYzM4YTkyNTQtYmQ1NS0z MzRkLTg4MjUtNjI0ZTEzZGRjOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ99tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5BUj0FtUTDF/lx/B1AN/6KP2TRyLGrB9YLQWpin2lGoM8TskzOxNgV djbgEYsGpi+lIYr8EGAzn4V7yZBue0cDYMpRCBTVlSecZDh/mfrjkDa5IbVT7jYq hYx/UFKYqL+5DbCEyjzzROxs8VkXvQoaYcGjZfXetKWIVRnl5VYvmSqsO8v0IzTC oIMIv64PRTY2kSEoDz2asUa+crbPw75NaUDDl1HTFuTKSbTlYfg2dJn0q8UyzHOX o0p37g7Jb/LMKmPsYfiSrk6/95ADHaeCu9oaWt46kbWREjTjalpSpZxu5WUSE1qg 24LT5V8bWAsDzrRcOOGTDigGoW/lEIA= -----END CERTIFICATE-----Generated at Fri Apr 17 17:40:05 2026 by rpki-client