$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa File: 9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa (raw, json) Hash identifier: bhUL/arH8CuOI4uN1wB6Do/z9S5G8ueUmzhctuPBhg4= Subject key identifier: 50:76:EB:DA:0C:98:8D:4B:C2:F9:E8:2E:1C:31:6F:85:4C:92:6A:76 Certificate issuer: /CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Certificate serial: 010D0C9F4328584DAB0A583C3585BF13970B5180 Authority key identifier: 42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa Signing time: Wed 29 Apr 2026 14:25:39 +0000 ROA not before: Wed 29 Apr 2026 14:25:39 +0000 ROA not after: Tue 28 Jul 2026 14:25:39 +0000 asID: 14430 IP address blocks: 208.68.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ab:0a:58:3c:35:85:bf:13:97:0b:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0fc7-7b66-4e52-a96e-e85dab7d2566 Validity Not Before: Apr 29 14:25:39 2026 GMT Not After : Jul 28 14:25:39 2026 GMT Subject: CN=b9a206a2-8300-4442-9967-e22328abbde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3b:e3:f2:ae:f1:a9:52:52:8b:13:32:6b:09: af:c0:8b:4b:af:78:40:f0:a2:e4:08:df:7c:ef:67: 50:57:14:86:7f:8c:12:bf:ea:fe:25:6a:9e:24:fb: 9a:9b:45:18:13:f3:9e:f3:23:e5:83:14:19:6c:0c: 7d:d6:2a:f1:04:b7:4c:57:92:99:15:94:54:d7:8a: e3:d7:21:94:35:3a:25:36:e7:11:4e:59:e4:08:ec: e7:7f:57:db:92:fb:1f:e8:14:00:b1:00:49:3b:69: 89:2c:d2:86:b2:b3:92:b7:37:2d:70:9e:94:f4:36: 4c:53:9a:90:0a:f9:19:df:be:f0:6b:c2:01:57:24: 33:72:5a:b9:62:d7:06:9f:d9:7b:48:58:c3:7e:bb: 7b:f6:4d:f7:51:6b:26:10:0c:17:62:05:02:8f:f2: d5:09:39:fe:3b:42:d0:2e:14:8a:d9:11:ad:08:24: a9:84:22:42:ac:3c:34:56:89:0b:aa:b9:35:f5:f5: 0b:04:87:96:3d:84:ab:78:06:18:c1:75:1e:b1:52: f2:d0:53:7f:9d:7f:e0:9e:31:80:f4:fd:17:f4:72: ef:25:ce:78:e0:07:89:38:05:cc:78:7f:fe:31:a6: bd:6a:a2:f4:0c:10:8c:b8:07:6d:68:de:85:7d:e0: ec:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:76:EB:DA:0C:98:8D:4B:C2:F9:E8:2E:1C:31:6F:85:4C:92:6A:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/9c6f5e16-b5f7-3115-bb49-7bbc1ef160f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566/023d0fc7-7b66-4e52-a96e-e85dab7d2566.crl X509v3 Authority Key Identifier: keyid:42:53:F1:86:AD:3F:72:A6:70:94:E8:E6:0A:60:D7:E2:E7:43:49:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/023d0fc7-7b66-4e52-a96e-e85dab7d2566.cer sbgp-ipAddrBlock: critical IPv4: 208.68.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:2e:30:a0:fe:fd:50:e0:1c:e5:05:16:15:bd:00:7c:9e:c0: ac:4f:74:0c:7c:03:91:88:b7:01:ea:80:59:b7:90:40:c8:72: c5:68:4e:23:01:b5:02:5d:3c:a6:8d:9c:3c:20:ec:fd:0a:71: 31:03:02:45:b2:7d:74:d3:7c:2b:06:69:b4:34:ac:28:56:9e: 16:aa:18:4a:e2:66:24:7e:94:e4:73:2e:07:b0:c7:ca:cd:41: 7b:ef:a9:6c:ff:b2:22:e5:06:b3:ae:d3:4d:f4:19:59:69:0e: f3:9e:34:bb:71:da:03:6b:fb:10:f8:30:ef:7d:67:34:7d:cb: e3:95:76:2a:70:24:3f:08:5d:a3:ff:30:1c:16:53:d7:1b:e9: b9:8b:b7:da:78:36:ea:d3:5a:cd:35:c7:bb:09:00:e7:da:f0: d0:79:f3:ab:ed:e4:0b:2c:81:2a:58:4a:09:43:3f:b3:67:21: c2:cb:4f:e0:c3:a9:93:e2:fd:65:8f:a0:bc:86:2d:0a:e9:c6: ed:fa:03:2f:e5:e2:29:8a:be:76:0b:c0:2a:8f:50:ef:da:fa: 7d:41:cf:20:83:d9:6e:65:9c:b3:f6:41:e6:4e:d2:91:23:13: 21:47:57:e4:ab:60:56:b8:22:51:47:f6:9f:84:a8:fa:5c:2c: 2e:5b:b3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2rClg8NYW/E5cLUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDIzZDBmYzctN2I2Ni00ZTUyLWE5NmUtZTg1ZGFiN2Qy NTY2MB4XDTI2MDQyOTE0MjUzOVoXDTI2MDcyODE0MjUzOVowLzEtMCsGA1UEAxMk YjlhMjA2YTItODMwMC00NDQyLTk5NjctZTIyMzI4YWJiZGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTvj8q7xqVJSixMyawmvwItLr3hA8KLkCN98 72dQVxSGf4wSv+r+JWqeJPuam0UYE/Oe8yPlgxQZbAx91irxBLdMV5KZFZRU14rj 1yGUNTolNucRTlnkCOznf1fbkvsf6BQAsQBJO2mJLNKGsrOStzctcJ6U9DZMU5qQ CvkZ377wa8IBVyQzclq5YtcGn9l7SFjDfrt79k33UWsmEAwXYgUCj/LVCTn+O0LQ LhSK2RGtCCSphCJCrDw0VokLqrk19fULBIeWPYSreAYYwXUesVLy0FN/nX/gnjGA 9P0X9HLvJc544AeJOAXMeH/+Maa9aqL0DBCMuAdtaN6FfeDsvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFB269oMmI1LwvnoLhwxb4VMkmp2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMjNk MGZjNy03YjY2LTRlNTItYTk2ZS1lODVkYWI3ZDI1NjYvOWM2ZjVlMTYtYjVmNy0z MTE1LWJiNDktN2JiYzFlZjE2MGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDIzZDBmYzctN2I2Ni00ZTUyLWE5 NmUtZTg1ZGFiN2QyNTY2LzAyM2QwZmM3LTdiNjYtNGU1Mi1hOTZlLWU4NWRhYjdk MjU2Ni5jcmwwHwYDVR0jBBgwFoAUQlPxhq0/cqZwlOjmCmDX4udDSSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMjNkMGZjNy03YjY2LTRlNTItYTk2ZS1lODVk YWI3ZDI1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0ER4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMuMKD+/VDgHOUFFhW9AHyewKxPdAx8A5GItwHqgFm3kEDIcsVoTiMB tQJdPKaNnDwg7P0KcTEDAkWyfXTTfCsGabQ0rChWnhaqGEriZiR+lORzLgewx8rN QXvvqWz/siLlBrOu0030GVlpDvOeNLtx2gNr+xD4MO99ZzR9y+OVdipwJD8IXaP/ MBwWU9cb6bmLt9p4NurTWs01x7sJAOfa8NB586vt5AssgSpYSglDP7NnIcLLT+DD qZPi/WWPoLyGLQrpxu36Ay/l4imKvnYLwCqPUO/a+n1BzyCD2W5lnLP2QeZO0pEj EyFHV+SrYFa4IlFH9p+EqPpcLC5bswU= -----END CERTIFICATE-----Generated at Wed May 13 04:00:12 2026 by rpki-client