$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/e8a810ae-1c87-3852-8b0e-df674c9bb84b.roa File: e8a810ae-1c87-3852-8b0e-df674c9bb84b.roa (raw, json) Hash identifier: e3EBv/P6CnXMe2gsMNlGVSleJbqIQR/6x/D7pE9vcRM= Subject key identifier: C6:91:65:52:66:8F:68:43:D0:46:0C:C5:8E:15:81:68:DA:B3:88:32 Certificate issuer: /CN=3aef4e29-3cec-4bbe-bc1e-61dd513499e1 Certificate serial: 010D0C9F4328584D9E8AFF7248F6684561581A80 Authority key identifier: 84:D1:3A:6F:C7:FF:9B:91:B2:1A:DE:1B:46:D0:78:90:0F:7E:0E:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/e8a810ae-1c87-3852-8b0e-df674c9bb84b.roa Signing time: Sat 25 Apr 2026 02:59:21 +0000 ROA not before: Sat 25 Apr 2026 02:59:21 +0000 ROA not after: Fri 24 Jul 2026 02:59:21 +0000 asID: 19709 IP address blocks: 208.81.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:8a:ff:72:48:f6:68:45:61:58:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aef4e29-3cec-4bbe-bc1e-61dd513499e1 Validity Not Before: Apr 25 02:59:21 2026 GMT Not After : Jul 24 02:59:21 2026 GMT Subject: CN=1fabed34-4e57-4993-951a-b6b84f893d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:39:7f:54:ce:11:c7:89:30:6a:72:90:db:7b: 3e:dd:c8:ef:dd:f6:96:a4:3e:6a:cf:9b:67:7f:a2: b5:34:19:c6:b5:9c:06:b0:e0:23:49:2a:83:14:be: ab:d2:bf:3a:3d:11:d7:da:db:5f:c2:12:41:bc:9a: ef:98:90:29:52:ca:fc:98:48:88:a7:e6:2f:30:fe: 47:be:d8:18:ff:90:a7:97:3d:55:e0:48:e4:a2:e5: 66:16:de:de:d3:c2:54:cd:f5:d2:ff:c7:9f:98:9c: f3:ed:dd:d8:3a:b0:37:66:da:e3:73:95:2d:58:e4: cb:3a:f6:7b:f8:4e:89:7b:ab:8c:ef:7a:a5:ef:ee: 0f:c8:8b:ea:d6:a7:51:d4:d8:93:3e:ad:f9:2b:97: 02:d4:34:1f:6d:42:36:23:ec:90:d1:06:e7:08:c4: d1:59:7c:fb:9a:7f:71:96:75:40:c1:f3:f2:06:10: 42:b6:e8:f3:90:84:43:39:46:b6:f1:4a:99:13:67: c5:c1:ff:52:de:35:f8:77:a8:5d:37:5e:84:f3:7a: 95:a5:8c:7e:70:04:ed:3c:08:28:bd:64:39:32:1a: 5c:85:32:fd:df:34:51:5f:8c:57:4f:46:31:d0:e9: 0b:e3:8a:e5:f7:bf:8d:cd:0e:9f:7b:60:2a:de:c7: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:91:65:52:66:8F:68:43:D0:46:0C:C5:8E:15:81:68:DA:B3:88:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/e8a810ae-1c87-3852-8b0e-df674c9bb84b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.crl X509v3 Authority Key Identifier: keyid:84:D1:3A:6F:C7:FF:9B:91:B2:1A:DE:1B:46:D0:78:90:0F:7E:0E:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3aef4e29-3cec-4bbe-bc1e-61dd513499e1.cer sbgp-ipAddrBlock: critical IPv4: 208.81.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:fa:64:01:4a:16:d1:ac:8d:9f:10:57:68:e5:1f:6c:30:39: 7d:58:0f:9c:64:80:ec:15:6c:f8:6a:2c:25:65:fb:61:59:95: 8d:7e:06:e1:7b:cf:57:18:91:da:c5:1a:0a:4d:1f:4b:8e:a6: fe:cd:99:82:7c:2d:f3:54:95:81:1f:11:da:3c:ef:74:87:30: 18:4f:d9:cc:c1:1e:7e:1b:da:26:f8:25:f9:82:26:b5:d7:30: 82:62:66:b6:9c:a5:36:e7:6f:a2:f6:70:e4:0c:d4:8d:1f:69: 06:05:c2:9a:ec:b1:ed:c2:33:a4:1e:05:f0:b4:3c:08:fd:8a: ad:cd:b3:3d:76:86:dc:87:a7:30:12:54:73:70:8c:66:41:44: 2c:4f:ff:ac:b2:8f:1d:15:e1:09:1f:5c:14:d4:c4:e5:07:b4: c9:35:cf:27:af:92:81:55:f4:27:da:3f:7b:26:16:70:cf:3e: 65:0d:52:25:10:69:64:1c:47:7d:a9:86:9c:cd:49:56:85:47: 0a:26:b2:c1:db:08:14:b1:9f:9d:27:21:49:a8:77:0e:be:b4: ef:d1:a1:e0:53:0a:1a:6d:4b:20:f7:f2:98:b1:34:ba:73:92: 68:14:57:c5:f0:60:c1:c2:7f:5a:26:29:93:28:12:77:fe:3c: 72:8c:01:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eiv9ySPZoRWFYGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FlZjRlMjktM2NlYy00YmJlLWJjMWUtNjFkZDUxMzQ5 OWUxMB4XDTI2MDQyNTAyNTkyMVoXDTI2MDcyNDAyNTkyMVowLzEtMCsGA1UEAxMk MWZhYmVkMzQtNGU1Ny00OTkzLTk1MWEtYjZiODRmODkzZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDl/VM4Rx4kwanKQ23s+3cjv3faWpD5qz5tn f6K1NBnGtZwGsOAjSSqDFL6r0r86PRHX2ttfwhJBvJrvmJApUsr8mEiIp+YvMP5H vtgY/5Cnlz1V4EjkouVmFt7e08JUzfXS/8efmJzz7d3YOrA3Ztrjc5UtWOTLOvZ7 +E6Je6uM73ql7+4PyIvq1qdR1NiTPq35K5cC1DQfbUI2I+yQ0QbnCMTRWXz7mn9x lnVAwfPyBhBCtujzkIRDOUa28UqZE2fFwf9S3jX4d6hdN16E83qVpYx+cATtPAgo vWQ5MhpchTL93zRRX4xXT0Yx0OkL44rl97+NzQ6fe2Aq3sfawwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMaRZVJmj2hD0EYMxY4VgWjas4gyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zYWVm NGUyOS0zY2VjLTRiYmUtYmMxZS02MWRkNTEzNDk5ZTEvZThhODEwYWUtMWM4Ny0z ODUyLThiMGUtZGY2NzRjOWJiODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvM2FlZjRlMjktM2NlYy00YmJlLWJj MWUtNjFkZDUxMzQ5OWUxLzNhZWY0ZTI5LTNjZWMtNGJiZS1iYzFlLTYxZGQ1MTM0 OTllMS5jcmwwHwYDVR0jBBgwFoAUhNE6b8f/m5GyGt4bRtB4kA9+DqEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zYWVmNGUyOS0zY2VjLTRiYmUtYmMxZS02MWRk NTEzNDk5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFv6ZAFKFtGsjZ8QV2jlH2wwOX1YD5xkgOwVbPhqLCVl+2FZlY1+BuF7 z1cYkdrFGgpNH0uOpv7NmYJ8LfNUlYEfEdo873SHMBhP2czBHn4b2ib4JfmCJrXX MIJiZracpTbnb6L2cOQM1I0faQYFwprsse3CM6QeBfC0PAj9iq3Nsz12htyHpzAS VHNwjGZBRCxP/6yyjx0V4QkfXBTUxOUHtMk1zyevkoFV9CfaP3smFnDPPmUNUiUQ aWQcR32phpzNSVaFRwomssHbCBSxn50nIUmodw6+tO/RoeBTChptSyD38pixNLpz kmgUV8XwYMHCf1omKZMoEnf+PHKMATM= -----END CERTIFICATE-----Generated at Wed May 13 04:00:14 2026 by rpki-client