$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: 9Q6SRK3t9CrJWfvcdXL8rPmZSvLKBhm0qOEY9je884Q= Subject key identifier: D8:21:88:7B:77:73:A8:32:28:DE:67:A9:C3:D2:0F:48:8D:14:C5:CB Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584D343A155FE3B43BB68B199180 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:15:5f:e3:b4:3b:b6:8b:19:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=5f6fa6cc-35d4-4c10-905c-71994f236edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:bb:33:1b:72:b4:20:66:5c:35:9d:cc:b3: 77:a6:1e:33:7c:a7:ff:62:1d:48:2b:13:e5:14:8b: e1:0a:cb:a7:1e:7a:68:bd:66:e2:30:dc:ca:f9:b8: 17:46:0d:bf:78:25:1b:d3:0b:4d:69:bf:82:11:98: d0:3e:33:b5:ee:81:00:82:06:52:01:c0:15:ec:35: 04:af:ce:1f:9a:1f:3a:07:08:02:e0:9d:07:71:96: 96:a2:38:98:31:8f:96:35:e5:26:4c:bf:0a:7d:b4: 34:65:26:32:88:67:fd:52:a5:52:c0:20:db:d4:d7: dc:c8:1e:41:1e:eb:bd:3a:94:a7:9c:68:7d:6e:78: 04:64:d2:c1:fd:41:fb:8e:bd:70:90:9a:d3:da:2e: df:73:cf:5b:9a:de:16:59:91:f8:29:24:5e:28:da: f2:02:c7:fc:e9:b1:57:6c:0d:99:02:f5:e3:9e:d1: 7c:17:e7:b3:ff:61:f0:cb:f0:f1:56:70:3d:d0:57: 2c:f2:7f:3f:0d:b8:fe:a2:ed:be:57:59:16:04:36: df:b7:75:39:c5:c9:41:8c:fd:16:e5:78:8a:61:e4: e0:7c:e2:4b:6d:3f:e4:24:30:fa:fe:cb:84:4d:02: 8a:e1:e2:62:48:87:6c:2f:cc:ef:77:8d:03:29:2d: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:21:88:7B:77:73:A8:32:28:DE:67:A9:C3:D2:0F:48:8D:14:C5:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a8:1c:9e:7e:62:bf:31:8c:c0:15:d5:90:31:b0:b7:18:04: e4:f5:3e:a2:7a:a6:a3:14:2e:4f:aa:56:c2:82:61:20:e9:3c: ba:40:25:54:88:46:2e:43:e4:41:57:75:b4:48:f3:49:ef:3e: 21:6a:3d:09:67:37:b9:ea:19:4a:6c:c4:7a:0d:12:3f:1a:cb: f4:34:6c:d1:ff:16:63:31:d5:cd:0a:44:b4:14:de:39:b8:29: d8:c7:6d:bc:dc:f4:c3:a0:24:31:86:f3:bc:9c:76:41:36:8d: e3:4f:67:62:60:10:ab:e0:59:b6:73:15:1c:a5:c5:ec:1d:77: 9f:35:8e:ae:c0:c9:e4:42:86:da:93:2a:3f:55:e2:af:ae:c9: 52:dc:f2:8d:a0:59:c0:9a:97:52:23:0a:3a:b5:59:a9:d5:33: 55:29:4c:84:8f:92:53:01:7a:ed:c3:56:ea:5d:cd:53:b4:18: 87:44:3a:ff:cf:e1:c1:f3:8d:34:a7:36:b1:88:d8:1b:5c:4f: 94:95:dd:66:f5:4a:15:a4:00:a9:f8:2a:70:9c:46:41:3f:33: 37:a5:bb:77:d9:f1:e4:f9:a6:12:22:a6:0e:54:fd:1b:90:41: b2:98:9a:e2:e3:b2:98:d8:c3:ee:6b:79:77:78:6b:ee:c5:b3: 7c:de:c9:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00OhVf47Q7tosZkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk NWY2ZmE2Y2MtMzVkNC00YzEwLTkwNWMtNzE5OTRmMjM2ZWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVa7MxtytCBmXDWdzLN3ph4zfKf/Yh1IKxPl FIvhCsunHnpovWbiMNzK+bgXRg2/eCUb0wtNab+CEZjQPjO17oEAggZSAcAV7DUE r84fmh86BwgC4J0HcZaWojiYMY+WNeUmTL8KfbQ0ZSYyiGf9UqVSwCDb1NfcyB5B Huu9OpSnnGh9bngEZNLB/UH7jr1wkJrT2i7fc89bmt4WWZH4KSReKNryAsf86bFX bA2ZAvXjntF8F+ez/2Hwy/DxVnA90Fcs8n8/Dbj+ou2+V1kWBDbft3U5xclBjP0W 5XiKYeTgfOJLbT/kJDD6/suETQKK4eJiSIdsL8zvd40DKS05HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNghiHt3c6gyKN5nqcPSD0iNFMXLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSoHJ5+Yr8xjMAV1ZAxsLcYBOT1PqJ6pqMULk+qVsKCYSDpPLpAJVSI Ri5D5EFXdbRI80nvPiFqPQlnN7nqGUpsxHoNEj8ay/Q0bNH/FmMx1c0KRLQU3jm4 KdjHbbzc9MOgJDGG87ycdkE2jeNPZ2JgEKvgWbZzFRylxewdd581jq7AyeRChtqT Kj9V4q+uyVLc8o2gWcCal1IjCjq1WanVM1UpTISPklMBeu3DVupdzVO0GIdEOv/P 4cHzjTSnNrGI2BtcT5SV3Wb1ShWkAKn4KnCcRkE/Mzelu3fZ8eT5phIipg5U/RuQ QbKYmuLjspjYw+5reXd4a+7Fs3zeyR0= -----END CERTIFICATE-----Generated at Sat Mar 28 15:14:38 2026 by rpki-client