$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa File: 23d0f331-5da5-31e0-b663-9c0b7082918b.roa (raw, json) Hash identifier: F0M/EywBsveWZbV+b7Fxy+b//Lj9hxTcV5P0i1sTvT4= Subject key identifier: D3:D0:56:65:DA:68:EB:CA:C2:57:BF:1A:50:D1:84:3A:CC:60:15:21 Certificate issuer: /CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a Certificate serial: 010D0C9F4328584DA815742BEF56085D5B628480 Authority key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 18705 IP address blocks: 208.93.72.0/21 maxlen: 21 208.93.73.0/24 maxlen: 24 208.93.76.0/23 maxlen: 23 208.93.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:74:2b:ef:56:08:5d:5b:62:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=27ec64f8-c05e-4c84-b618-f0468fd76bda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:19:a6:8d:73:ef:52:a2:0c:0e:a2:91:9e: 60:5f:ab:9e:b6:a1:0b:9a:d8:c0:20:69:a7:51:ac: 7d:84:db:c7:c1:6a:ef:1c:8d:24:a6:ac:e5:61:1a: 5f:8a:02:a6:22:25:b6:8a:b6:47:6a:0a:66:e2:c2: ae:48:0e:6a:c2:35:97:0f:e8:c6:43:10:2e:01:9c: 66:17:76:a7:39:e3:02:9f:c8:f0:47:91:0d:af:10: 99:c9:d3:c4:ed:ad:c8:8a:e3:df:64:38:37:98:59: 1c:e4:f8:78:ca:6d:4c:4a:ec:c4:02:59:2a:19:c9: 47:0e:c7:09:b9:bd:77:0d:5a:52:55:87:d9:11:6d: 28:1c:98:b5:7b:ba:81:96:42:12:b5:b2:83:69:50: bf:b5:a6:be:34:88:0b:3f:be:c7:d3:1b:dd:35:df: 6c:11:27:5f:68:f9:c6:79:84:4e:cf:82:51:84:4c: 54:c4:3d:f5:e8:09:4c:a5:82:56:b4:03:b3:a3:72: 45:2b:f0:4a:36:66:f1:68:de:1c:0d:7e:fb:4b:5a: 04:bb:5d:20:75:20:21:3a:b3:b3:06:53:45:3b:08: 75:4c:cd:7c:e2:99:e7:a3:67:48:bb:6b:82:58:8f: 39:ed:37:43:08:a0:b2:14:da:53:fc:8b:c8:10:56: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D0:56:65:DA:68:EB:CA:C2:57:BF:1A:50:D1:84:3A:CC:60:15:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl X509v3 Authority Key Identifier: keyid:F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer sbgp-ipAddrBlock: critical IPv4: 208.93.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:2d:56:59:75:2e:67:07:97:b1:be:2d:4d:98:b9:ca:12:ef: 8e:e8:e5:94:92:1d:6c:e8:ee:e9:9a:41:79:e0:f9:19:b5:0b: 86:a2:d1:fe:50:0c:c5:49:bf:c0:fc:fb:5b:17:7e:ce:c7:14: ed:84:70:fd:0c:db:a7:be:01:d5:eb:a3:24:f4:f5:6b:71:49: 4b:76:80:f2:e0:05:f1:d8:70:4b:12:91:e0:9c:fd:b1:ef:a6: cc:c5:93:c8:91:f6:ea:79:b0:25:11:8d:84:fd:a9:ce:ed:9b: 35:3e:c7:f8:c1:78:d5:58:75:1a:57:0d:68:60:c0:e8:0c:3a: 9b:c6:63:80:36:8c:80:e0:79:02:0e:54:bd:03:d7:f8:dd:77: 6c:a7:85:4e:dd:8d:e2:94:31:42:ba:78:4d:e6:d7:fe:ab:33: a3:9c:eb:a7:e2:5b:bf:cb:cf:58:8c:96:9d:db:6d:b0:67:a4: a4:fd:5f:f8:ea:36:cd:9b:39:a3:4a:13:03:5a:e5:b1:43:d6: 1e:52:25:fa:4c:7c:ec:f7:41:64:6a:56:cc:cb:ab:e6:66:8f: 53:e2:6a:06:cf:0e:d7:65:23:ad:0c:59:eb:42:8d:fa:f2:ba: 1a:2b:66:d8:8c:e0:ff:f3:d2:5e:ac:9a:5a:e9:4a:ac:64:62: 47:8c:68:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFXQr71YIXVtihIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E2ZDQwOWYtZjZjNi00YmE1LWE2NzQtNmI2MzY4ZDI0 NzhhMB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MjdlYzY0ZjgtYzA1ZS00Yzg0LWI2MTgtZjA0NjhmZDc2YmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9AZpo1z71KiDA6ikZ5gX6uetqELmtjAIGmn Uax9hNvHwWrvHI0kpqzlYRpfigKmIiW2irZHagpm4sKuSA5qwjWXD+jGQxAuAZxm F3anOeMCn8jwR5ENrxCZydPE7a3IiuPfZDg3mFkc5Ph4ym1MSuzEAlkqGclHDscJ ub13DVpSVYfZEW0oHJi1e7qBlkIStbKDaVC/taa+NIgLP77H0xvdNd9sESdfaPnG eYROz4JRhExUxD316AlMpYJWtAOzo3JFK/BKNmbxaN4cDX77S1oEu10gdSAhOrOz BlNFOwh1TM184pnno2dIu2uCWI857TdDCKCyFNpT/IvIEFZlHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPQVmXaaOvKwle/GlDRhDrMYBUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zYTZk NDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYzNjhkMjQ3OGEvMjNkMGYzMzEtNWRhNS0z MWUwLWI2NjMtOWMwYjcwODI5MThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvM2E2ZDQwOWYtZjZjNi00YmE1LWE2 NzQtNmI2MzY4ZDI0NzhhLzNhNmQ0MDlmLWY2YzYtNGJhNS1hNjc0LTZiNjM2OGQy NDc4YS5jcmwwHwYDVR0jBBgwFoAU9tSU1jR5ZCJVmR6zQ2XQWMT1sGgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zYTZkNDA5Zi1mNmM2LTRiYTUtYTY3NC02YjYz NjhkMjQ3OGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0F1IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEctVll1LmcHl7G+LU2YucoS747o5ZSSHWzo7umaQXng+Rm1C4ai0f5Q DMVJv8D8+1sXfs7HFO2EcP0M26e+AdXroyT09WtxSUt2gPLgBfHYcEsSkeCc/bHv pszFk8iR9up5sCURjYT9qc7tmzU+x/jBeNVYdRpXDWhgwOgMOpvGY4A2jIDgeQIO VL0D1/jdd2ynhU7djeKUMUK6eE3m1/6rM6Oc66fiW7/Lz1iMlp3bbbBnpKT9X/jq Ns2bOaNKEwNa5bFD1h5SJfpMfOz3QWRqVszLq+Zmj1PiagbPDtdlI60MWetCjfry uhorZtiM4P/z0l6smlrpSqxkYkeMaE8= -----END CERTIFICATE-----Generated at Wed May 13 17:22:09 2026 by rpki-client