$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa File: 91aaccaf-f050-3f69-9e66-2f8cb643c659.roa (raw, json) Hash identifier: 0xWofSusHZnL/9FM51k1MDj6Th475Sjr4B7RmvhEy/U= Subject key identifier: 70:3D:5C:0C:21:B3:78:84:37:8D:1A:BD:2E:82:2D:90:C2:B2:35:22 Certificate issuer: /CN=2267c34a-3a60-4747-b909-d82f8824f3ec Certificate serial: 010D0C9F4328584D2644B915B42CA0D59A7B0980 Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 3561 IP address blocks: 208.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:b9:15:b4:2c:a0:d5:9a:7b:09:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=a4c065d6-143e-49e4-ac10-6a1f5703317d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:91:d6:ff:56:1a:ce:b8:b1:57:6b:9e:22:26: e3:54:d3:a7:12:6d:41:97:96:7e:f0:4c:d9:8d:8b: 1e:b6:37:c0:10:18:f6:3b:e3:e5:7d:5c:00:af:2a: ba:b3:d2:78:47:32:16:f4:1a:e5:bd:fc:7d:90:81: 7c:fc:61:6a:dd:0a:a8:f5:4f:54:52:42:f7:32:0b: e0:73:59:48:f7:ee:4a:80:03:13:53:a3:19:a2:85: 3f:cf:80:e7:bf:76:d9:09:39:b0:ba:57:89:04:97: 7e:5b:e4:9e:6e:25:ca:a2:1f:b7:52:44:da:b6:67: 6a:ba:4b:1e:5d:92:6b:c5:2c:9f:b8:33:37:23:eb: 67:51:42:6a:8c:70:94:69:c2:b3:f6:61:e3:fa:c2: f4:ac:bd:08:53:0b:a3:84:48:99:b9:48:fa:86:b6: 6d:95:86:ac:7b:8b:36:bb:20:51:8a:e5:0a:45:85: a5:c1:cb:f3:8d:e0:13:f8:0f:b1:a1:f8:15:52:16: 78:51:64:01:f9:21:7d:28:d9:cf:de:ff:5d:a9:fb: 0a:c8:39:91:c3:18:96:f7:37:78:fe:f6:c0:d9:fb: 69:7e:10:9a:5c:c6:e5:25:ac:e7:2d:3e:3e:fa:e8: 92:26:96:83:01:64:db:56:bd:7d:92:6e:7d:c4:e5: fb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3D:5C:0C:21:B3:78:84:37:8D:1A:BD:2E:82:2D:90:C2:B2:35:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/91aaccaf-f050-3f69-9e66-2f8cb643c659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl X509v3 Authority Key Identifier: keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer sbgp-ipAddrBlock: critical IPv4: 208.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:96:05:af:2d:bb:d8:a7:fb:44:5f:0f:54:28:94:0b:54:79: 89:5a:3f:b1:ed:db:0b:50:57:fa:ef:6d:09:63:ce:80:9e:8e: 48:b8:be:56:58:78:fa:15:d3:85:28:8b:d0:3d:e2:5b:d7:99: 6b:79:eb:86:6d:45:ff:18:3d:33:59:c3:b4:32:a7:6c:49:47: b3:89:63:85:64:5e:3b:fe:6d:29:7a:e0:18:b9:74:3b:3a:ba: 59:3c:22:34:49:25:d5:77:fc:70:ca:dd:f9:0c:cd:43:68:0c: 4a:31:d1:4e:3d:a3:07:29:d8:cd:77:b2:5e:4e:9a:26:f8:73: dc:6c:e4:a7:c0:48:10:fc:0c:44:66:8b:35:a8:4d:76:ec:7a: e8:e6:82:a0:67:7a:e2:a6:70:35:26:41:2a:27:d0:e0:e8:6d: a7:2b:48:83:53:23:d4:96:0c:03:c9:1f:27:0c:d4:2d:bf:b9: 19:16:e9:3c:07:76:1b:06:75:0c:57:7b:58:2c:b0:3b:16:d9: 5d:61:56:99:6e:bf:1f:20:2d:d8:31:f1:22:d8:9d:2a:94:28: 68:d8:13:29:0e:9a:ee:08:a6:b3:ac:ae:43:4e:e9:ac:15:da: f2:db:42:f0:96:86:32:a0:9f:0c:e9:eb:43:24:0c:5b:d5:15: 26:50:7e:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0mRLkVtCyg1Zp7CYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm M2VjMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YTRjMDY1ZDYtMTQzZS00OWU0LWFjMTAtNmExZjU3MDMzMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJHW/1YazrixV2ueIibjVNOnEm1Bl5Z+8EzZ jYsetjfAEBj2O+PlfVwAryq6s9J4RzIW9Brlvfx9kIF8/GFq3Qqo9U9UUkL3Mgvg c1lI9+5KgAMTU6MZooU/z4Dnv3bZCTmwuleJBJd+W+SebiXKoh+3UkTatmdqukse XZJrxSyfuDM3I+tnUUJqjHCUacKz9mHj+sL0rL0IUwujhEiZuUj6hrZtlYase4s2 uyBRiuUKRYWlwcvzjeAT+A+xofgVUhZ4UWQB+SF9KNnP3v9dqfsKyDmRwxiW9zd4 /vbA2ftpfhCaXMblJaznLT4++uiSJpaDAWTbVr19km59xOX78wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHA9XAwhs3iEN40avS6CLZDCsjUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3 YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOTFhYWNjYWYtZjA1MC0z ZjY5LTllNjYtMmY4Y2I2NDNjNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5 MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0 ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0J/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2WBa8tu9in+0RfD1QolAtUeYlaP7Ht2wtQV/rvbQljzoCejki4vlZY ePoV04Uoi9A94lvXmWt564ZtRf8YPTNZw7Qyp2xJR7OJY4VkXjv+bSl64Bi5dDs6 ulk8IjRJJdV3/HDK3fkMzUNoDEox0U49owcp2M13sl5Omib4c9xs5KfASBD8DERm izWoTXbseujmgqBneuKmcDUmQSon0ODobacrSINTI9SWDAPJHycM1C2/uRkW6TwH dhsGdQxXe1gssDsW2V1hVpluvx8gLdgx8SLYnSqUKGjYEykOmu4IprOsrkNO6awV 2vLbQvCWhjKgnwzp60MkDFvVFSZQfo0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:19:25 2026 by rpki-client