$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa File: 7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa (raw, json) Hash identifier: bF+1nhishJl/BCeFxiNnSC3+o0UipaFkTsHTK/UPOJc= Subject key identifier: 55:3A:C6:42:E6:90:7B:F6:A9:05:33:E6:DC:1E:C1:FE:40:7D:24:2C Certificate issuer: /CN=a5e2d89d-6269-4405-9578-836517825b32 Certificate serial: 010D0C9F4328584D19B4ADCC0BBA72A24110B020 Authority key identifier: E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 397293 IP address blocks: 208.77.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:ad:cc:0b:ba:72:a2:41:10:b0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5e2d89d-6269-4405-9578-836517825b32 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=144725a5-3154-428b-bd6b-419b3912d67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:38:ff:a5:ef:37:9e:33:e6:f8:6b:4e:40:9e: 20:31:2a:ce:17:09:a5:16:42:fc:20:dc:6f:72:29: 64:76:0f:15:76:72:e4:91:4e:7f:1c:66:2a:01:4c: e1:79:1d:14:6b:11:3b:83:a5:77:be:fc:42:6c:1e: d2:ef:9a:c7:4a:e1:76:15:f9:26:56:2c:c0:00:06: 16:64:dc:3c:49:36:0c:f6:94:e9:af:d5:8f:02:5e: 3c:02:37:b4:87:0f:24:07:8b:28:7e:a6:2f:f7:f4: 0c:ad:c0:5f:ab:a3:9a:ca:a1:23:da:66:56:13:b2: f6:f6:ff:51:b7:45:f7:4a:af:d3:3b:9a:4d:e5:ce: ba:b3:f5:0f:62:13:0b:d0:3c:1f:b9:71:66:57:eb: db:81:ec:75:10:d6:72:ad:57:82:cd:72:99:50:18: ca:30:e9:06:cb:8b:7e:67:f3:33:2d:7c:93:d8:b1: 64:5b:84:ff:0a:6d:50:8b:6c:b4:23:9c:45:29:f9: 53:8e:46:2a:83:0d:fd:9b:cd:40:2a:96:84:a3:31: 09:9d:86:ab:25:08:8d:65:a3:e5:e4:1c:35:fa:44: 89:cd:3c:93:55:2f:72:d1:34:01:69:39:20:21:e5: 76:09:93:2d:49:df:4c:59:b9:60:33:21:b3:c3:1b: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3A:C6:42:E6:90:7B:F6:A9:05:33:E6:DC:1E:C1:FE:40:7D:24:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/7ae06a15-6dd6-362c-be0a-fd21de184c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32/a5e2d89d-6269-4405-9578-836517825b32.crl X509v3 Authority Key Identifier: keyid:E7:D0:41:7E:41:CB:15:E0:97:1D:1B:5B:D5:41:A1:BC:EB:5A:8B:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a5e2d89d-6269-4405-9578-836517825b32.cer sbgp-ipAddrBlock: critical IPv4: 208.77.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:33:7d:b6:46:34:c4:f0:08:1a:57:f1:c8:d5:59:4f:12:01: 23:80:bd:97:7f:98:b8:03:b8:be:60:16:80:fe:df:d1:80:11: be:45:8d:b5:21:44:cc:8d:7a:59:97:9d:d4:97:34:0c:78:cf: 80:c5:2b:1b:6a:ba:f4:43:c1:36:8b:c3:28:3c:e4:aa:32:5e: ce:35:56:b5:cb:c3:b0:0c:db:f6:3e:c6:6d:33:53:ec:86:b9: ec:ca:36:39:8b:e8:4f:ff:dd:7e:03:0c:17:40:4b:8d:42:3b: 4b:dc:68:f8:04:db:9e:a7:b7:cc:ec:66:2a:cf:9a:e7:10:d1: 95:d3:a3:c0:58:70:f6:45:19:a5:e0:a0:d6:7c:52:bb:49:cc: 26:13:bd:94:43:e3:3e:b4:3e:7d:c3:1f:11:83:a1:68:fa:15: 17:5f:1c:35:02:52:b3:f7:e3:e6:ac:6d:e3:f9:58:bf:ff:d8: 42:df:11:b3:9b:23:3e:0a:3e:da:5e:19:c3:e8:04:21:db:82: 5f:2d:83:54:07:68:52:b1:2b:1f:23:17:d9:4a:d2:cf:ac:a3: ba:79:fe:de:f1:62:0f:cd:ca:5b:0b:2e:58:a5:d7:2e:a6:fa: 52:58:78:2f:0b:94:93:11:a9:e9:3a:da:62:5c:9e:ed:c3:79: 28:98:f4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtK3MC7pyokEQsCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTVlMmQ4OWQtNjI2OS00NDA1LTk1NzgtODM2NTE3ODI1 YjMyMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MTQ0NzI1YTUtMzE1NC00MjhiLWJkNmItNDE5YjM5MTJkNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjj/pe83njPm+GtOQJ4gMSrOFwmlFkL8INxv cilkdg8VdnLkkU5/HGYqAUzheR0UaxE7g6V3vvxCbB7S75rHSuF2FfkmVizAAAYW ZNw8STYM9pTpr9WPAl48Aje0hw8kB4sofqYv9/QMrcBfq6OayqEj2mZWE7L29v9R t0X3Sq/TO5pN5c66s/UPYhML0DwfuXFmV+vbgex1ENZyrVeCzXKZUBjKMOkGy4t+ Z/MzLXyT2LFkW4T/Cm1Qi2y0I5xFKflTjkYqgw39m81AKpaEozEJnYarJQiNZaPl 5Bw1+kSJzTyTVS9y0TQBaTkgIeV2CZMtSd9MWblgMyGzwxt5ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU6xkLmkHv2qQUz5twewf5AfSQsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUy ZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1MTc4MjViMzIvN2FlMDZhMTUtNmRkNi0z NjJjLWJlMGEtZmQyMWRlMTg0YzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTVlMmQ4OWQtNjI2OS00NDA1LTk1 NzgtODM2NTE3ODI1YjMyL2E1ZTJkODlkLTYyNjktNDQwNS05NTc4LTgzNjUxNzgy NWIzMi5jcmwwHwYDVR0jBBgwFoAU59BBfkHLFeCXHRtb1UGhvOtai84wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNWUyZDg5ZC02MjY5LTQ0MDUtOTU3OC04MzY1 MTc4MjViMzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0E1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJczfbZGNMTwCBpX8cjVWU8SASOAvZd/mLgDuL5gFoD+39GAEb5FjbUh RMyNelmXndSXNAx4z4DFKxtquvRDwTaLwyg85KoyXs41VrXLw7AM2/Y+xm0zU+yG uezKNjmL6E//3X4DDBdAS41CO0vcaPgE256nt8zsZirPmucQ0ZXTo8BYcPZFGaXg oNZ8UrtJzCYTvZRD4z60Pn3DHxGDoWj6FRdfHDUCUrP34+asbeP5WL//2ELfEbOb Iz4KPtpeGcPoBCHbgl8tg1QHaFKxKx8jF9lK0s+so7p5/t7xYg/NylsLLlil1y6m +lJYeC8LlJMRqek62mJcnu3DeSiY9GE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:49 2026 by rpki-client