$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa File: 0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa (raw, json) Hash identifier: ML3aJMn375y5x6vzX4dAdHiW7jI/OO9UxEFCOsyW7i4= Subject key identifier: 3A:5B:A8:CE:97:29:52:C8:6D:26:D4:40:11:7F:08:AD:2F:12:75:53 Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e Certificate serial: 010D0C9F4328584DBBA04A76F08B167884F18780 Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa Signing time: Tue 05 May 2026 13:00:31 +0000 ROA not before: Tue 05 May 2026 13:00:31 +0000 ROA not after: Mon 03 Aug 2026 13:00:31 +0000 asID: 23465 IP address blocks: 208.186.204.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bb:a0:4a:76:f0:8b:16:78:84:f1:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e Validity Not Before: May 5 13:00:31 2026 GMT Not After : Aug 3 13:00:31 2026 GMT Subject: CN=1981cc2b-e7b2-4d89-b8a9-8cb743e57e4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:fc:26:3e:32:a2:44:64:c4:29:15:ee:ac:af: 23:18:cb:3b:06:27:d9:6f:02:0d:28:44:31:d7:57: 57:92:a1:c6:36:89:37:24:91:99:a0:d7:10:03:56: 6a:0f:e5:46:93:4e:21:1d:58:4c:19:3f:a0:df:c9: 7d:19:80:5b:28:8c:7e:92:5e:a8:f6:12:31:40:db: 0c:4a:1c:22:37:0c:72:d8:56:51:ac:56:b2:ea:74: cc:1f:ec:09:9c:9b:c6:4d:9f:e2:2f:8a:80:0d:86: 2a:15:a1:ce:32:83:70:6f:1b:a8:d4:2f:2a:c6:6f: 99:54:eb:45:c4:db:df:4c:55:35:1f:c8:8d:49:31: ea:d4:09:85:bb:01:4a:43:77:65:67:1b:37:ae:71: 76:d0:46:83:98:75:79:8f:18:d3:d6:2d:27:7c:77: cb:3e:a1:3e:09:23:1e:85:31:1d:a1:24:14:87:48: 51:f8:ab:45:1f:1a:ba:12:b3:05:44:dc:10:0e:89: 09:02:4e:f1:5d:03:af:24:41:7e:17:28:aa:48:0b: bf:05:9d:d2:64:a8:2f:02:f6:c1:b8:a4:09:87:ca: 9e:7e:ce:9e:5d:96:1a:e7:2e:cb:b9:b2:59:ad:b1: e2:f4:91:b9:2e:86:fa:e9:13:11:c0:63:e6:f5:b4: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5B:A8:CE:97:29:52:C8:6D:26:D4:40:11:7F:08:AD:2F:12:75:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/0cfd1e43-99b0-3c2f-8b04-f55dd9eb0aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl X509v3 Authority Key Identifier: keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer sbgp-ipAddrBlock: critical IPv4: 208.186.204.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:5f:37:f8:14:a9:4a:3f:ac:4b:8a:fa:c0:80:26:d0:54:25: 92:a3:c7:b1:49:78:0a:03:36:88:d2:ff:90:95:ff:6e:b0:35: 61:61:af:59:9f:6c:83:cb:1d:8f:7f:7e:9b:a5:94:54:ae:93: 60:f9:3f:64:29:33:ab:e1:f0:c3:59:74:8b:13:d5:6a:09:9e: 9e:ae:72:44:e2:4b:13:2f:5d:36:1d:96:46:2c:2f:fa:91:9a: 50:9b:d9:0f:8f:dd:d7:4e:90:f6:c6:1a:70:2d:ae:27:45:25: d5:34:01:92:17:20:0e:b7:0b:8e:d8:00:cb:53:e9:66:bd:b0: 2a:56:0f:b7:01:72:c4:52:96:3c:f2:a7:5e:29:19:98:8b:1f: f3:41:e4:1d:df:5c:95:05:b6:6b:2d:99:ad:65:e1:e3:f3:90: 66:2b:02:bc:96:9e:12:46:77:b2:9e:25:79:3c:b3:19:ca:1a: aa:35:f5:ce:3c:df:8a:45:4e:72:36:a4:ca:a9:ee:58:dd:bf: 1a:fa:80:4d:25:66:f4:39:15:00:b5:c3:70:90:45:55:a5:e3: 2e:1c:a8:8e:4a:4d:b5:df:16:7d:89:4f:d8:7c:15:cb:a9:34: 1c:06:77:de:d7:e3:54:53:7a:53:54:b9:31:8a:48:0e:55:00: 8a:73:6d:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE27oEp28IsWeITxh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAwMWRkMWYtOTQ2Yi00NTdiLTk4ZDgtNDE3MDE2NjUz MDllMB4XDTI2MDUwNTEzMDAzMVoXDTI2MDgwMzEzMDAzMVowLzEtMCsGA1UEAxMk MTk4MWNjMmItZTdiMi00ZDg5LWI4YTktOGNiNzQzZTU3ZTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPwmPjKiRGTEKRXurK8jGMs7BifZbwINKEQx 11dXkqHGNok3JJGZoNcQA1ZqD+VGk04hHVhMGT+g38l9GYBbKIx+kl6o9hIxQNsM ShwiNwxy2FZRrFay6nTMH+wJnJvGTZ/iL4qADYYqFaHOMoNwbxuo1C8qxm+ZVOtF xNvfTFU1H8iNSTHq1AmFuwFKQ3dlZxs3rnF20EaDmHV5jxjT1i0nfHfLPqE+CSMe hTEdoSQUh0hR+KtFHxq6ErMFRNwQDokJAk7xXQOvJEF+FyiqSAu/BZ3SZKgvAvbB uKQJh8qefs6eXZYa5y7LubJZrbHi9JG5Lob66RMRwGPm9bTBXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpbqM6XKVLIbSbUQBF/CK0vEnVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAx ZGQxZi05NDZiLTQ1N2ItOThkOC00MTcwMTY2NTMwOWUvMGNmZDFlNDMtOTliMC0z YzJmLThiMDQtZjU1ZGQ5ZWIwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDAwMWRkMWYtOTQ2Yi00NTdiLTk4 ZDgtNDE3MDE2NjUzMDllL2QwMDFkZDFmLTk0NmItNDU3Yi05OGQ4LTQxNzAxNjY1 MzA5ZS5jcmwwHwYDVR0jBBgwFoAUPsMu7a2ToVOmHKVimvGVSvJgMy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMDAxZGQxZi05NDZiLTQ1N2ItOThkOC00MTcw MTY2NTMwOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0LrMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtfN/gUqUo/rEuK+sCAJtBUJZKjx7FJeAoDNojS/5CV/26wNWFhr1mf bIPLHY9/fpullFSuk2D5P2QpM6vh8MNZdIsT1WoJnp6uckTiSxMvXTYdlkYsL/qR mlCb2Q+P3ddOkPbGGnAtridFJdU0AZIXIA63C47YAMtT6Wa9sCpWD7cBcsRSljzy p14pGZiLH/NB5B3fXJUFtmstma1l4ePzkGYrAryWnhJGd7KeJXk8sxnKGqo19c48 34pFTnI2pMqp7ljdvxr6gE0lZvQ5FQC1w3CQRVWl4y4cqI5KTbXfFn2JT9h8Fcup NBwGd97X41RTelNUuTGKSA5VAIpzbcs= -----END CERTIFICATE-----Generated at Wed May 13 16:10:58 2026 by rpki-client