$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa File: 10935088-7b41-35a5-964a-87c340874376.roa (raw, json) Hash identifier: 8oickSR9GSEAMJXaweCGuX0+Wmxe3yA2E93rhoIAwLA= Subject key identifier: BC:C6:17:79:2F:C1:38:43:5F:3A:0E:00:21:17:71:BB:4E:32:D3:92 Certificate issuer: /CN=8847881a-ccc0-4631-8384-a7d78db5864d Certificate serial: 010D0C9F4328584DCD2EDE08B2B3126C88458780 Authority key identifier: 65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa Signing time: Mon 11 May 2026 19:56:43 +0000 ROA not before: Mon 11 May 2026 19:56:43 +0000 ROA not after: Sun 09 Aug 2026 19:56:43 +0000 asID: 852 IP address blocks: 208.78.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:2e:de:08:b2:b3:12:6c:88:45:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8847881a-ccc0-4631-8384-a7d78db5864d Validity Not Before: May 11 19:56:43 2026 GMT Not After : Aug 9 19:56:43 2026 GMT Subject: CN=a5fe3ef6-02e8-4ed6-9966-bd90ae56ae00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:31:49:c1:f9:e9:e6:da:b6:40:16:4f:cf: 31:54:50:75:b7:a2:56:2d:36:71:18:bb:e3:90:44: 84:2c:6d:a3:e7:1c:61:71:56:d4:ec:f3:8a:b2:1d: f5:63:4d:7d:7c:d6:6c:58:9c:99:da:0e:8f:2c:2a: d4:be:22:92:4f:9d:72:11:7f:7f:a3:88:8e:4e:1e: 72:f0:6e:11:57:6e:7d:e5:f3:09:de:6b:19:a7:29: ea:08:35:52:cc:b0:90:de:03:63:fa:a0:bc:9f:d6: 9a:c2:25:ac:e5:c8:f8:38:f5:29:0e:59:bc:43:9d: 4f:5e:d3:fa:df:6f:37:4c:d1:05:de:c6:51:82:7c: da:5b:26:0e:a5:b7:b2:a2:66:9b:9b:e2:d3:3d:77: bd:8d:37:b5:55:50:46:f5:e8:1d:ad:34:98:fa:64: a7:dd:33:e9:21:fb:19:38:f9:81:1a:82:9a:9a:16: 67:96:7e:e6:4c:7f:a5:87:b9:a9:9c:c7:d0:ef:b0: 65:4e:81:79:12:63:9d:c9:43:be:1e:c4:3e:22:27: ed:00:69:26:25:71:e2:07:00:8c:f3:94:b0:87:a2: c1:27:39:69:93:ef:09:7e:6e:99:32:d4:7d:39:be: 6a:90:f7:44:66:60:4d:17:4f:4a:72:91:58:5e:e1: e9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C6:17:79:2F:C1:38:43:5F:3A:0E:00:21:17:71:BB:4E:32:D3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/10935088-7b41-35a5-964a-87c340874376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d/8847881a-ccc0-4631-8384-a7d78db5864d.crl X509v3 Authority Key Identifier: keyid:65:0C:DD:D3:74:05:4D:57:AA:6E:30:A8:E0:12:B2:B4:A7:44:39:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8847881a-ccc0-4631-8384-a7d78db5864d.cer sbgp-ipAddrBlock: critical IPv4: 208.78.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b2:ed:1e:35:6d:b4:cc:80:a0:f5:2b:00:28:1f:b2:a8:35: d8:c8:dc:f2:44:82:40:59:c0:a9:4a:8c:9f:03:f5:13:57:21: 79:a7:a2:fe:eb:19:c4:7c:39:b6:75:c3:c5:af:dc:9d:d5:aa: 85:ae:40:27:83:e4:0f:ff:3e:49:f5:01:9c:22:af:68:1e:06: 2c:fb:91:70:dd:6d:9c:6a:e1:79:7c:bc:3b:a7:c2:00:9a:e7: 6c:16:c2:d1:07:12:4c:a4:2d:2a:84:a9:6c:ac:a2:26:31:d6: 61:bc:d9:59:c7:a6:3b:12:d9:16:ec:69:33:97:63:78:42:b6: 32:47:c4:5d:e4:6f:63:4c:92:2b:d5:31:96:4f:18:ba:57:93: c0:05:93:01:4b:27:8e:b9:6c:f2:c1:a3:b3:69:07:d7:34:2d: 60:80:be:28:68:7d:4e:d1:80:81:55:8f:fd:b7:95:59:5d:39: 56:2e:13:51:25:dd:a4:89:f6:e9:da:3b:ef:bb:8b:42:88:94: 27:aa:fc:5f:2c:68:ab:df:c5:03:a6:b4:37:e6:2f:9e:db:37: b2:f9:88:24:01:27:de:bc:e0:18:10:3a:a0:66:07:21:36:2e: a6:c7:a8:c3:d5:26:e9:5b:e0:76:4d:2e:be:f5:62:69:21:45: fe:b2:88:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3NLt4IsrMSbIhFh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODg0Nzg4MWEtY2NjMC00NjMxLTgzODQtYTdkNzhkYjU4 NjRkMB4XDTI2MDUxMTE5NTY0M1oXDTI2MDgwOTE5NTY0M1owLzEtMCsGA1UEAxMk YTVmZTNlZjYtMDJlOC00ZWQ2LTk5NjYtYmQ5MGFlNTZhZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdQxScH56ebatkAWT88xVFB1t6JWLTZxGLvj kESELG2j5xxhcVbU7POKsh31Y019fNZsWJyZ2g6PLCrUviKST51yEX9/o4iOTh5y 8G4RV2595fMJ3msZpynqCDVSzLCQ3gNj+qC8n9aawiWs5cj4OPUpDlm8Q51PXtP6 3283TNEF3sZRgnzaWyYOpbeyomabm+LTPXe9jTe1VVBG9egdrTSY+mSn3TPpIfsZ OPmBGoKamhZnln7mTH+lh7mpnMfQ77BlToF5EmOdyUO+HsQ+IiftAGkmJXHiBwCM 85Swh6LBJzlpk+8Jfm6ZMtR9Ob5qkPdEZmBNF09KcpFYXuHpTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzGF3kvwThDXzoOACEXcbtOMtOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ODQ3 ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3OGRiNTg2NGQvMTA5MzUwODgtN2I0MS0z NWE1LTk2NGEtODdjMzQwODc0Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODg0Nzg4MWEtY2NjMC00NjMxLTgz ODQtYTdkNzhkYjU4NjRkLzg4NDc4ODFhLWNjYzAtNDYzMS04Mzg0LWE3ZDc4ZGI1 ODY0ZC5jcmwwHwYDVR0jBBgwFoAUZQzd03QFTVeqbjCo4BKytKdEOQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ODQ3ODgxYS1jY2MwLTQ2MzEtODM4NC1hN2Q3 OGRiNTg2NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIey7R41bbTMgKD1KwAoH7KoNdjI3PJEgkBZwKlKjJ8D9RNXIXmnov7r GcR8ObZ1w8Wv3J3VqoWuQCeD5A//Pkn1AZwir2geBiz7kXDdbZxq4Xl8vDunwgCa 52wWwtEHEkykLSqEqWysoiYx1mG82VnHpjsS2RbsaTOXY3hCtjJHxF3kb2NMkivV MZZPGLpXk8AFkwFLJ465bPLBo7NpB9c0LWCAvihofU7RgIFVj/23lVldOVYuE1El 3aSJ9unaO++7i0KIlCeq/F8saKvfxQOmtDfmL57bN7L5iCQBJ9684BgQOqBmByE2 LqbHqMPVJulb4HZNLr71YmkhRf6yiO8= -----END CERTIFICATE-----Generated at Wed May 13 13:42:15 2026 by rpki-client