$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa File: d301a4b3-34ea-309b-80f1-90e66068431c.roa (raw, json) Hash identifier: 8BvTqk5ySIASHjd8oeyD/Qn0KaRtk8sWCpiUNNRLo4k= Subject key identifier: 45:B9:94:99:C7:A3:93:03:73:C0:69:EB:A2:3B:6B:45:52:6C:AE:17 Certificate issuer: /CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Certificate serial: 010D0C9F4328584D3DFFA6608F7388A5477DB380 Authority key identifier: B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 4323 IP address blocks: 208.54.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:a6:60:8f:73:88:a5:47:7d:b3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e2f3353-82b9-432b-bd94-000bf5cef0c3 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=f55032b0-348d-4fcd-b2f3-9d1161c56236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:53:fb:08:4e:a0:08:01:80:2c:cb:05:da:e9: 3a:51:f3:a9:a6:35:14:f1:08:2a:cf:68:2d:7f:25: f7:19:23:92:dd:63:34:86:a0:e0:56:a7:3a:90:ee: f4:0c:6a:87:02:45:dd:24:5f:c0:68:86:ec:3a:1b: bc:54:a5:4b:08:fd:22:e9:44:c6:88:a6:2e:34:e7: e2:02:10:89:cd:6b:f4:27:0a:f4:59:1f:cd:91:c5: ae:d5:2c:ae:cf:57:c7:2b:28:91:0f:d7:86:0b:41: 25:64:62:53:84:c8:67:b9:0d:7a:5f:ef:92:57:02: 74:f0:00:82:38:a2:dd:ad:7f:9d:39:e5:70:0d:f6: 3e:68:ef:b3:2f:94:49:b4:9b:5c:d6:fc:e8:b6:38: 3f:9e:60:14:10:50:67:24:7b:65:37:d5:39:ed:12: c0:58:ad:23:e9:dc:8f:1f:08:8e:d5:21:e6:b3:c5: 08:ad:62:29:ec:0a:78:e1:1a:a3:a6:7d:85:14:c3: ad:c8:81:c8:d6:88:70:c8:62:74:b9:15:48:c2:cd: 26:ff:6a:25:a3:0b:91:09:20:2d:95:a1:a3:29:09: 05:f9:78:44:e1:9e:a7:6f:ac:da:c8:ff:25:49:ec: 19:15:7d:32:7c:cf:5f:a9:e5:24:8c:eb:39:d4:7d: 42:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B9:94:99:C7:A3:93:03:73:C0:69:EB:A2:3B:6B:45:52:6C:AE:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/d301a4b3-34ea-309b-80f1-90e66068431c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3/8e2f3353-82b9-432b-bd94-000bf5cef0c3.crl X509v3 Authority Key Identifier: keyid:B4:B5:6C:64:46:3D:47:EB:DC:A5:0E:CB:D0:7B:9A:33:43:55:40:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e2f3353-82b9-432b-bd94-000bf5cef0c3.cer sbgp-ipAddrBlock: critical IPv4: 208.54.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:a8:1d:56:76:5f:7d:66:ef:8d:73:a7:d5:d1:a9:fb:60:8c: aa:53:0e:b1:02:1b:9f:6c:76:ed:c1:b8:3e:cf:73:3b:be:fc: 7c:0d:2d:be:5c:bf:b9:c1:e2:52:6d:b9:70:f7:fc:9c:87:78: da:c6:05:43:ce:85:c8:00:34:20:4f:8f:db:67:64:79:e2:a5: 2e:45:79:a1:ae:14:9e:dc:42:38:49:0a:ee:05:fe:ee:77:2b: 62:f3:01:df:bf:63:b0:fe:ed:cf:11:f5:04:bf:a8:42:b9:ad: 2d:13:7d:ed:0d:55:27:78:ea:56:98:79:f3:09:c2:4b:79:f7: 11:67:03:18:27:60:3c:6c:a8:72:3e:26:46:85:50:fc:86:39: 6a:47:d3:89:05:b9:9e:13:bb:9e:b4:a9:fb:55:14:65:4b:25: 4f:77:20:5b:ac:54:1b:80:f5:e3:f0:d2:53:eb:7a:d8:6e:c6: e5:3f:41:c4:c2:fa:0a:d8:37:3a:02:26:41:60:0f:4b:ba:8f: 27:75:0f:ea:7c:70:b3:9c:f7:f2:57:89:9b:f0:b7:64:c0:5b: 33:ec:00:0a:c7:8b:6a:b5:a7:58:bf:7e:04:5d:67:3c:01:21: 0a:f6:3a:c9:e1:8e:bf:eb:15:5a:29:0a:c4:07:03:ce:42:9e: b0:d9:cb:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6Zgj3OIpUd9s4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUyZjMzNTMtODJiOS00MzJiLWJkOTQtMDAwYmY1Y2Vm MGMzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZjU1MDMyYjAtMzQ4ZC00ZmNkLWIyZjMtOWQxMTYxYzU2MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVP7CE6gCAGALMsF2uk6UfOppjUU8Qgqz2gt fyX3GSOS3WM0hqDgVqc6kO70DGqHAkXdJF/AaIbsOhu8VKVLCP0i6UTGiKYuNOfi AhCJzWv0Jwr0WR/NkcWu1Syuz1fHKyiRD9eGC0ElZGJThMhnuQ16X++SVwJ08ACC OKLdrX+dOeVwDfY+aO+zL5RJtJtc1vzotjg/nmAUEFBnJHtlN9U57RLAWK0j6dyP HwiO1SHms8UIrWIp7Ap44Rqjpn2FFMOtyIHI1ohwyGJ0uRVIws0m/2olowuRCSAt laGjKQkF+XhE4Z6nb6zayP8lSewZFX0yfM9fqeUkjOs51H1C0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEW5lJnHo5MDc8Bp66I7a0VSbK4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJm MzM1My04MmI5LTQzMmItYmQ5NC0wMDBiZjVjZWYwYzMvZDMwMWE0YjMtMzRlYS0z MDliLTgwZjEtOTBlNjYwNjg0MzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUyZjMzNTMtODJiOS00MzJiLWJk OTQtMDAwYmY1Y2VmMGMzLzhlMmYzMzUzLTgyYjktNDMyYi1iZDk0LTAwMGJmNWNl ZjBjMy5jcmwwHwYDVR0jBBgwFoAUtLVsZEY9R+vcpQ7L0HuaM0NVQEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTJmMzM1My04MmI5LTQzMmItYmQ5NC0wMDBi ZjVjZWYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DYBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOGoHVZ2X31m741zp9XRqftgjKpTDrECG59sdu3BuD7Pczu+/HwNLb5c v7nB4lJtuXD3/JyHeNrGBUPOhcgANCBPj9tnZHnipS5FeaGuFJ7cQjhJCu4F/u53 K2LzAd+/Y7D+7c8R9QS/qEK5rS0Tfe0NVSd46laYefMJwkt59xFnAxgnYDxsqHI+ JkaFUPyGOWpH04kFuZ4Tu560qftVFGVLJU93IFusVBuA9ePw0lPrethuxuU/QcTC +grYNzoCJkFgD0u6jyd1D+p8cLOc9/JXiZvwt2TAWzPsAArHi2q1p1i/fgRdZzwB IQr2Osnhjr/rFVopCsQHA85CnrDZy98= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:19 2026 by rpki-client