$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa File: 3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa (raw, json) Hash identifier: LTEKfRdN6cFA5DoQhkUJnDGTY91HsKRog7VvOi2RvBk= Subject key identifier: E5:FD:2F:1C:47:00:A1:7F:D1:64:3B:57:D9:F0:CA:8B:DB:88:DE:21 Certificate issuer: /CN=371710da-4c28-4923-921b-e1d710cec29e Certificate serial: 010D0C9F4328584D39CF90A2319D3686F0EC7680 Authority key identifier: 5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 198949 IP address blocks: 208.68.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:90:a2:31:9d:36:86:f0:ec:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=371710da-4c28-4923-921b-e1d710cec29e Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=08f46162-19c6-433d-8d5b-394f8b444c7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:13:68:6e:4c:5f:d8:9d:90:cc:b1:e4:5a:d7: 37:ac:78:ed:f9:da:1d:2e:b1:f8:36:5f:d6:7f:9f: bd:6e:e3:96:56:af:52:c3:62:4f:69:0f:a6:2f:f2: 3a:65:bd:ee:4c:fa:c2:51:5a:bb:7c:4a:aa:4f:c2: e9:be:75:3b:70:d0:16:12:c3:b0:eb:b7:d7:ee:71: fa:7b:8b:17:5a:9e:29:ab:97:6c:06:bc:12:d4:c7: 91:57:81:7d:da:66:31:8f:e7:99:c0:35:59:b0:fa: 17:6b:cf:63:f3:03:76:cc:19:3e:b4:0b:97:60:4d: b0:7a:5d:52:8e:fc:53:d8:aa:d2:6e:8e:ff:ae:e3: a0:97:1c:9e:19:1d:24:50:f7:90:e7:12:f7:d4:5d: 39:be:e8:65:09:f5:c7:6a:ca:f8:15:9e:20:03:d1: 0e:aa:bd:a0:fa:25:6e:09:a4:7b:9e:3d:36:74:4d: 14:4d:a3:54:e6:19:ca:bb:da:da:f6:7d:bb:39:ae: ac:cf:e5:43:ac:30:77:73:4e:de:a7:2e:d6:e9:b5: 39:d7:36:30:8c:2d:0d:e7:87:2d:a8:b5:2c:95:32: ba:ac:56:05:8a:01:c3:f8:bf:b0:b9:1e:08:bb:52: 06:b6:cb:ac:d1:23:9e:5a:32:d9:0c:ba:c2:ac:c2: d0:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:FD:2F:1C:47:00:A1:7F:D1:64:3B:57:D9:F0:CA:8B:DB:88:DE:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/3fc1396a-9d01-3bc4-9bc3-67f3159ef8ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e/371710da-4c28-4923-921b-e1d710cec29e.crl X509v3 Authority Key Identifier: keyid:5D:6F:DA:FC:B7:B6:DE:51:70:F0:48:F6:9B:AC:DD:23:A7:5D:79:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/371710da-4c28-4923-921b-e1d710cec29e.cer sbgp-ipAddrBlock: critical IPv4: 208.68.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1c:69:8c:49:a0:c6:7d:ed:4a:85:da:94:cb:76:d3:96:0b: d7:72:83:c1:11:06:54:ec:43:97:d2:56:2c:62:62:9d:10:a0: ec:3c:32:cb:af:c4:76:9b:d8:45:12:f7:7b:42:ef:ed:cd:89: 78:df:83:fe:8a:71:26:6c:bb:aa:a0:00:b1:a6:d5:83:67:39: 9b:a6:42:af:a2:f9:c8:aa:eb:d6:71:e7:d7:cd:a5:b8:88:0e: 2a:d3:20:30:36:48:60:7a:f8:30:a0:13:57:07:29:c4:10:78: a6:dc:00:e5:b4:c8:14:e7:29:2f:97:49:82:46:90:69:e5:23: ac:b0:3b:4e:20:68:51:10:06:1c:a0:66:db:a3:76:f6:c1:03: 58:0d:e9:9c:d9:1f:6f:4a:a3:8a:d3:1d:e9:22:2e:83:c6:3f: d4:15:a0:a1:9d:fd:3c:e0:c0:40:7d:8c:1f:00:09:8a:fd:e6: 4d:70:e1:8d:81:5a:31:4b:c3:d9:b1:ab:e2:62:c9:3f:dd:5c: 50:7c:37:6f:e7:cd:44:e5:0b:b6:83:d7:5a:f3:8a:7c:2d:c8: 64:1b:b6:8e:65:64:2b:ad:fb:83:d3:fb:53:22:86:a1:45:fb: cf:a9:86:b8:82:ac:fe:f3:d1:c6:1a:cf:d9:0c:66:8e:ab:5c: 2c:c9:50:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE05z5CiMZ02hvDsdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcxNzEwZGEtNGMyOC00OTIzLTkyMWItZTFkNzEwY2Vj MjllMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MDhmNDYxNjItMTljNi00MzNkLThkNWItMzk0ZjhiNDQ0YzdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBNobkxf2J2QzLHkWtc3rHjt+dodLrH4Nl/W f5+9buOWVq9Sw2JPaQ+mL/I6Zb3uTPrCUVq7fEqqT8LpvnU7cNAWEsOw67fX7nH6 e4sXWp4pq5dsBrwS1MeRV4F92mYxj+eZwDVZsPoXa89j8wN2zBk+tAuXYE2wel1S jvxT2KrSbo7/ruOglxyeGR0kUPeQ5xL31F05vuhlCfXHasr4FZ4gA9EOqr2g+iVu CaR7nj02dE0UTaNU5hnKu9ra9n27Oa6sz+VDrDB3c07epy7W6bU51zYwjC0N54ct qLUslTK6rFYFigHD+L+wuR4Iu1IGtsus0SOeWjLZDLrCrMLQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX9LxxHAKF/0WQ7V9nwyovbiN4hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zNzE3 MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3MTBjZWMyOWUvM2ZjMTM5NmEtOWQwMS0z YmM0LTliYzMtNjdmMzE1OWVmOGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzcxNzEwZGEtNGMyOC00OTIzLTky MWItZTFkNzEwY2VjMjllLzM3MTcxMGRhLTRjMjgtNDkyMy05MjFiLWUxZDcxMGNl YzI5ZS5jcmwwHwYDVR0jBBgwFoAUXW/a/Le23lFw8Ej2m6zdI6ddeV4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zNzE3MTBkYS00YzI4LTQ5MjMtOTIxYi1lMWQ3 MTBjZWMyOWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EQUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYcaYxJoMZ97UqF2pTLdtOWC9dyg8ERBlTsQ5fSVixiYp0QoOw8Msuv xHab2EUS93tC7+3NiXjfg/6KcSZsu6qgALGm1YNnOZumQq+i+ciq69Zx59fNpbiI DirTIDA2SGB6+DCgE1cHKcQQeKbcAOW0yBTnKS+XSYJGkGnlI6ywO04gaFEQBhyg ZtujdvbBA1gN6ZzZH29Ko4rTHekiLoPGP9QVoKGd/TzgwEB9jB8ACYr95k1w4Y2B WjFLw9mxq+JiyT/dXFB8N2/nzUTlC7aD11rzinwtyGQbto5lZCut+4PT+1MihqFF +8+phriCrP7z0cYaz9kMZo6rXCzJUOo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:29:07 2026 by rpki-client