$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa File: 4abcb4fa-f6d5-3038-aab9-f1da35524331.roa (raw, json) Hash identifier: //vxJf5efeVNK3cij1sP34T9kjAGgCnZMlPZop2XeaQ= Subject key identifier: 08:3A:0F:C5:D4:42:2F:32:08:5E:73:CA:AC:76:D0:0A:D6:F5:4D:A7 Certificate issuer: /CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d Certificate serial: 010D0C9F4328584DA8156F727A32FDC060E8AAC0 Authority key identifier: 77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 20119 IP address blocks: 144.208.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:6f:72:7a:32:fd:c0:60:e8:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=08c9b6a2-f58c-4e65-8a8c-d185778a6ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:8a:77:0f:d1:cd:fe:dd:ab:4c:c4:f8:03: e0:de:d8:95:d5:67:d1:64:7f:e4:f3:d3:4e:33:1c: 88:66:ea:80:28:b6:6d:bf:15:2b:79:65:09:12:86: b8:f3:ac:10:cc:b9:50:19:28:9f:f8:fa:27:9a:5a: a1:9f:6d:b3:82:c8:eb:53:75:bb:9b:4c:a4:a0:1d: bf:30:15:cf:dd:c5:8d:6e:4c:06:66:7e:2c:bb:4c: fc:8d:b4:84:fa:cd:86:bc:60:d5:62:a7:7f:55:3f: 52:1f:1e:18:9e:4e:76:64:22:f5:76:db:e7:9e:1d: df:95:e8:68:da:15:e9:f6:ae:e3:a0:90:12:fb:5d: 6e:a1:61:4e:88:61:d9:f5:b0:ea:18:10:0a:db:63: 3b:73:03:92:85:85:09:33:bc:37:61:5f:e0:4c:fd: f8:52:96:1e:56:92:71:e6:b7:6f:6a:01:c4:ce:f5: ab:9c:62:c9:a6:ac:23:42:a6:4d:d0:60:2a:2f:42: b0:e8:13:7f:48:d1:53:a3:46:cc:05:21:89:e5:09: 08:ba:3e:18:19:54:c9:64:35:8c:8e:94:83:89:e0: e7:f3:99:df:a5:86:81:c6:9d:f6:5b:64:ba:99:e6: fd:51:81:21:9e:36:03:04:e5:fb:cb:19:d5:56:3a: 4f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:3A:0F:C5:D4:42:2F:32:08:5E:73:CA:AC:76:D0:0A:D6:F5:4D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/4abcb4fa-f6d5-3038-aab9-f1da35524331.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.crl X509v3 Authority Key Identifier: keyid:77:1E:BB:F7:A6:28:E0:E5:AA:89:0B:D6:4F:82:BD:79:CC:B9:6D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10f1bbc6-b6e7-4e19-ae29-5eec68c9f26d.cer sbgp-ipAddrBlock: critical IPv4: 144.208.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:14:c6:ef:45:2f:7d:93:55:9d:da:8a:b9:08:6f:a5:08:65: 1b:55:5a:81:78:a7:5d:19:f3:92:30:d9:22:5b:77:30:0d:b7: 86:aa:39:c6:9d:ef:12:98:7b:2c:ca:c3:75:cf:02:36:7a:90: f8:f1:46:4b:e8:d9:25:46:51:fd:93:f7:0b:39:f7:56:c3:59: fb:07:ee:ba:1e:f5:a4:16:c3:c7:5a:f1:11:a4:4c:e3:22:c6: 3a:da:b7:9d:33:4c:a6:1e:c7:b9:c9:4a:74:a3:80:2b:3a:9c: b2:98:c7:45:c0:82:66:57:ce:fa:70:8a:ab:01:8e:49:b6:be: 29:4e:4b:9f:e3:61:5a:2a:ab:67:2c:01:e0:b5:ad:b6:27:ff: 0a:58:b9:5f:c3:bd:33:f7:5b:e1:d1:67:8f:3f:42:f9:27:37: 5e:ac:7e:36:aa:4b:36:25:40:dc:7f:30:73:91:3b:9d:64:4b: c4:8c:73:9c:70:ba:93:a8:80:ad:d2:3a:2e:e5:d4:50:62:7d: 1f:0a:fc:10:76:96:d1:0c:b4:cd:b2:75:55:f4:33:e9:e4:0b: 81:0b:56:e6:65:1b:c0:bd:e3:91:12:21:e5:de:9d:dc:72:a5: b3:0d:80:ef:72:c5:29:3f:ce:10:b5:a2:3a:e4:64:38:ea:02: c9:b1:81:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFW9yejL9wGDoqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmMWJiYzYtYjZlNy00ZTE5LWFlMjktNWVlYzY4Yzlm MjZkMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MDhjOWI2YTItZjU4Yy00ZTY1LThhOGMtZDE4NTc3OGE2YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QaKdw/Rzf7dq0zE+APg3tiV1WfRZH/k89NO MxyIZuqAKLZtvxUreWUJEoa486wQzLlQGSif+Ponmlqhn22zgsjrU3W7m0ykoB2/ MBXP3cWNbkwGZn4su0z8jbSE+s2GvGDVYqd/VT9SHx4Ynk52ZCL1dtvnnh3fleho 2hXp9q7joJAS+11uoWFOiGHZ9bDqGBAK22M7cwOShYUJM7w3YV/gTP34UpYeVpJx 5rdvagHEzvWrnGLJpqwjQqZN0GAqL0Kw6BN/SNFTo0bMBSGJ5QkIuj4YGVTJZDWM jpSDieDn85nfpYaBxp32W2S6meb9UYEhnjYDBOX7yxnVVjpPUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAg6D8XUQi8yCF5zyqx20ArW9U2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYx YmJjNi1iNmU3LTRlMTktYWUyOS01ZWVjNjhjOWYyNmQvNGFiY2I0ZmEtZjZkNS0z MDM4LWFhYjktZjFkYTM1NTI0MzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmMWJiYzYtYjZlNy00ZTE5LWFl MjktNWVlYzY4YzlmMjZkLzEwZjFiYmM2LWI2ZTctNGUxOS1hZTI5LTVlZWM2OGM5 ZjI2ZC5jcmwwHwYDVR0jBBgwFoAUdx6796Yo4OWqiQvWT4K9ecy5bUcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGYxYmJjNi1iNmU3LTRlMTktYWUyOS01ZWVj NjhjOWYyNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkNBYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUUxu9FL32TVZ3airkIb6UIZRtVWoF4p10Z85Iw2SJbdzANt4aqOcad 7xKYeyzKw3XPAjZ6kPjxRkvo2SVGUf2T9ws591bDWfsH7roe9aQWw8da8RGkTOMi xjrat50zTKYex7nJSnSjgCs6nLKYx0XAgmZXzvpwiqsBjkm2vilOS5/jYVoqq2cs AeC1rbYn/wpYuV/DvTP3W+HRZ48/QvknN16sfjaqSzYlQNx/MHORO51kS8SMc5xw upOogK3SOi7l1FBifR8K/BB2ltEMtM2ydVX0M+nkC4ELVuZlG8C945ESIeXendxy pbMNgO9yxSk/zhC1ojrkZDjqAsmxgTQ= -----END CERTIFICATE-----Generated at Wed May 13 11:47:47 2026 by rpki-client