$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa File: 4fcf8fdb-2990-369f-8239-fd79baf2050a.roa (raw, json) Hash identifier: YadptNqtlrXsWFghXh6ozUPTwzivxrw4T2vvJ5wqo7s= Subject key identifier: BF:92:EB:ED:E6:3A:9A:12:BB:83:34:69:44:09:1A:20:EA:91:2C:09 Certificate issuer: /CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Certificate serial: 010D0C9F4328584D0BDCF9CB41AE358512932600 Authority key identifier: 8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa Signing time: Tue 03 Mar 2026 14:00:40 +0000 ROA not before: Tue 03 Mar 2026 14:00:40 +0000 ROA not after: Mon 01 Jun 2026 13:00:40 +0000 asID: 14523 IP address blocks: 208.69.88.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0b:dc:f9:cb:41:ae:35:85:12:93:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf0a8a9b-3645-438a-a6e6-e0385bffcfef Validity Not Before: Mar 3 14:00:40 2026 GMT Not After : Jun 1 13:00:40 2026 GMT Subject: CN=fe560b20-6876-47ec-8acd-15140d816f8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:12:b9:27:8e:f2:9c:c6:02:b0:37:a8:ff:c6: e6:aa:4e:ee:cb:74:dd:e2:42:38:26:93:b1:b9:72: 90:61:ff:64:23:6c:c6:f8:f3:0a:95:fb:f6:e5:5d: 7c:a6:a7:01:da:67:94:97:38:70:c2:a9:e2:35:86: a3:a3:16:0a:f6:34:ec:e9:ff:46:b4:bf:ea:37:c8: 70:ce:94:dd:b4:96:2b:14:9c:06:b0:f8:39:7e:9f: ed:e6:48:85:d7:9e:48:46:19:aa:6b:8c:fa:da:2a: 45:6e:b2:89:b3:eb:54:9d:d9:f6:47:4f:70:fc:75: 87:5e:ab:f7:fb:ce:1b:79:ef:71:a0:af:dd:cb:5b: 1f:dc:ad:64:e5:cb:7b:c8:90:56:d7:60:11:9d:a5: dd:8a:5a:b7:4f:1e:81:a7:58:e0:6e:88:b5:63:6b: c8:8c:2e:ff:a4:ab:c8:d7:9f:65:09:91:40:ef:79: 24:c0:90:fd:d7:83:f4:83:ee:c6:7b:12:20:2e:46: b0:33:92:1a:da:1c:77:09:fd:20:f3:07:12:8b:24: 8c:be:36:42:e3:6b:ae:53:49:36:ab:39:d5:58:16: 39:22:28:36:f7:23:cc:78:f7:22:09:42:fb:ee:b9: 6b:51:58:26:52:a9:30:b4:80:5e:d5:c2:95:9b:cf: fa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:92:EB:ED:E6:3A:9A:12:BB:83:34:69:44:09:1A:20:EA:91:2C:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/4fcf8fdb-2990-369f-8239-fd79baf2050a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.crl X509v3 Authority Key Identifier: keyid:8C:2B:1A:CD:7B:06:82:D8:BE:8B:14:5D:07:8E:13:B5:90:3D:5C:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf0a8a9b-3645-438a-a6e6-e0385bffcfef.cer sbgp-ipAddrBlock: critical IPv4: 208.69.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:e4:9a:01:4d:63:64:62:86:7b:e3:ea:7e:62:b4:d8:9b:de: fd:3e:02:51:76:d3:a9:97:7a:a5:a8:b5:62:fe:3c:42:e7:c4: 47:d4:57:84:27:1b:a4:e9:94:cf:5f:06:d1:2b:8c:24:c1:59: 48:0a:9a:a6:b9:58:51:cc:8a:f7:ca:28:67:a5:e8:f7:d8:cb: 01:57:57:0b:05:77:77:41:11:7c:6f:19:a5:38:db:f6:f8:6f: 77:d0:6c:25:88:d4:12:83:5d:95:6d:eb:f2:50:f2:1c:af:40: c2:d6:85:d4:18:8b:eb:39:ff:77:17:0f:b5:06:20:26:a0:be: 88:4b:86:50:f9:ed:4b:1c:5e:cc:c6:85:f8:97:3c:c5:db:f8: 67:5a:02:22:29:f8:18:02:d0:c4:c1:00:80:30:0d:37:05:77: a5:ef:ac:66:05:a5:31:a6:f3:58:3f:4a:14:0c:af:26:c9:09: a9:dd:d9:f6:d8:9f:02:34:72:99:72:c7:3b:0e:72:09:17:3c: 09:eb:9f:4a:d3:41:e8:0f:22:c9:a7:63:7e:b8:7d:c1:aa:43: 8c:78:af:2e:ca:77:56:af:73:1f:e4:74:a7:74:50:02:87:c8: 44:79:ed:26:cc:72:74:3f:de:b4:1a:8e:b2:de:0a:00:bb:8b: 5f:9b:10:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0L3PnLQa41hRKTJgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YwYThhOWItMzY0NS00MzhhLWE2ZTYtZTAzODViZmZj ZmVmMB4XDTI2MDMwMzE0MDA0MFoXDTI2MDYwMTEzMDA0MFowLzEtMCsGA1UEAxMk ZmU1NjBiMjAtNjg3Ni00N2VjLThhY2QtMTUxNDBkODE2ZjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRK5J47ynMYCsDeo/8bmqk7uy3Td4kI4JpOx uXKQYf9kI2zG+PMKlfv25V18pqcB2meUlzhwwqniNYajoxYK9jTs6f9GtL/qN8hw zpTdtJYrFJwGsPg5fp/t5kiF155IRhmqa4z62ipFbrKJs+tUndn2R09w/HWHXqv3 +84bee9xoK/dy1sf3K1k5ct7yJBW12ARnaXdilq3Tx6Bp1jgboi1Y2vIjC7/pKvI 159lCZFA73kkwJD914P0g+7GexIgLkawM5Ia2hx3Cf0g8wcSiySMvjZC42uuU0k2 qznVWBY5Iig29yPMePciCUL77rlrUVgmUqkwtIBe1cKVm8/6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+S6+3mOpoSu4M0aUQJGiDqkSwJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZjBh OGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4NWJmZmNmZWYvNGZjZjhmZGItMjk5MC0z NjlmLTgyMzktZmQ3OWJhZjIwNTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2YwYThhOWItMzY0NS00MzhhLWE2 ZTYtZTAzODViZmZjZmVmL2NmMGE4YTliLTM2NDUtNDM4YS1hNmU2LWUwMzg1YmZm Y2ZlZi5jcmwwHwYDVR0jBBgwFoAUjCsazXsGgti+ixRdB44TtZA9XJMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZjBhOGE5Yi0zNjQ1LTQzOGEtYTZlNi1lMDM4 NWJmZmNmZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EVYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXkmgFNY2Rihnvj6n5itNib3v0+AlF206mXeqWotWL+PELnxEfUV4Qn G6TplM9fBtErjCTBWUgKmqa5WFHMivfKKGel6PfYywFXVwsFd3dBEXxvGaU42/b4 b3fQbCWI1BKDXZVt6/JQ8hyvQMLWhdQYi+s5/3cXD7UGICagvohLhlD57UscXszG hfiXPMXb+GdaAiIp+BgC0MTBAIAwDTcFd6XvrGYFpTGm81g/ShQMrybJCand2fbY nwI0cplyxzsOcgkXPAnrn0rTQegPIsmnY364fcGqQ4x4ry7Kd1avcx/kdKd0UAKH yER57SbMcnQ/3rQajrLeCgC7i1+bENo= -----END CERTIFICATE-----Generated at Sat Mar 28 14:29:16 2026 by rpki-client