$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa File: dbda1118-9914-33ac-a372-020cfd89d214.roa (raw, json) Hash identifier: qjvKjexYoWNKi4ZLehDIr9iP+/vOfNwRbYUl03rW+Cs= Subject key identifier: 29:78:6B:86:55:CC:2A:07:BD:F9:A5:46:13:BB:81:56:92:1F:5A:EE Certificate issuer: /CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Certificate serial: 010D0C9F4328584DBD05911CA9A03E8EEF220E00 Authority key identifier: 16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 13629 IP address blocks: 208.94.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:91:1c:a9:a0:3e:8e:ef:22:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea68408f-7dee-415b-a1c1-b76df0a87a93 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=de1e2dd1-62c6-431f-875a-330b6344166c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c5:0a:47:f0:50:02:96:2e:b5:71:67:db:6f: 6a:ce:95:23:de:28:d9:16:fe:18:63:4b:36:ac:c3: a6:49:34:5d:91:af:7c:2f:21:fb:5b:75:d3:1d:e8: 6a:4f:51:40:1f:7b:00:25:2e:a8:68:fa:bd:ff:04: 15:f1:e2:e4:22:80:51:b9:25:5d:17:6a:69:88:43: 68:13:13:ba:16:9d:fd:84:bf:aa:b8:fe:42:f0:5e: 98:c2:af:c1:d4:de:ce:6f:16:95:1d:76:07:6d:a7: 11:43:39:6c:94:b3:9b:d5:a7:8f:84:76:37:65:c0: 84:25:37:e9:21:50:af:a5:e8:f3:db:d2:b3:ba:90: 60:02:d4:04:48:bf:2f:14:5d:73:26:7b:74:20:6d: 22:6d:35:de:34:06:28:cd:cb:e2:5f:78:42:22:00: 1b:3a:81:fd:ab:3a:64:58:4a:9c:44:b1:4a:0d:84: 10:d7:5c:76:9d:0b:91:9c:e3:04:1d:9f:a2:f6:5d: 21:52:ea:aa:97:bd:83:6d:ce:a6:3c:79:f0:ab:b0: bc:42:a1:ab:3e:71:5e:74:4e:38:c1:4e:88:89:34: b0:2e:8e:06:87:38:2c:7a:4f:f3:c2:92:fd:ce:af: 8f:fa:c2:46:7c:87:c5:7c:ae:29:e9:a8:71:55:3e: be:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:78:6B:86:55:CC:2A:07:BD:F9:A5:46:13:BB:81:56:92:1F:5A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/dbda1118-9914-33ac-a372-020cfd89d214.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93/ea68408f-7dee-415b-a1c1-b76df0a87a93.crl X509v3 Authority Key Identifier: keyid:16:98:5B:DC:CF:BA:48:E5:06:2D:24:F0:82:6E:8D:43:45:4B:2E:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ea68408f-7dee-415b-a1c1-b76df0a87a93.cer sbgp-ipAddrBlock: critical IPv4: 208.94.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:8f:bd:e9:ef:40:7f:bb:ac:1f:08:92:37:c5:5c:da:73:23: 4a:ab:63:e6:52:52:25:4e:0e:a3:ca:a6:54:6b:b7:b6:52:cd: 3a:00:00:37:95:ad:4c:4c:9c:78:ec:fa:ac:5f:f5:af:be:a9: 96:0d:53:7b:31:d5:32:be:e8:73:9f:f0:11:4b:5c:0b:06:60: 02:33:ee:f5:55:32:f7:cb:c2:54:d9:17:7a:3c:10:78:e4:9a: a6:ce:63:88:a9:8d:2b:81:99:33:ca:4f:c3:a4:61:b2:a6:5b: 55:bc:ff:0c:01:48:dc:59:e4:3b:77:cb:8e:3f:0f:24:bc:c9: 83:c0:02:07:29:24:08:1b:92:d2:0a:02:a1:37:d4:18:32:73: 41:a7:9b:8b:d1:13:95:70:b1:e7:42:50:95:59:e9:9a:30:a1: ef:70:c5:d9:1c:95:19:f0:55:78:f2:af:cb:39:4d:10:f3:d3: f1:0b:92:e3:6c:25:a5:85:f5:62:9a:3b:90:ca:11:1f:87:55: ff:aa:07:47:6c:5b:27:4f:a5:68:3c:fc:02:68:40:a9:a1:66: 5b:00:82:2c:a7:3a:29:5c:12:b7:2b:0f:19:4e:f0:86:24:a2: 2b:47:93:4f:d1:9a:b2:30:6b:e9:4e:62:a2:6d:b7:d8:11:26: 1e:d8:e4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BZEcqaA+ju8iDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWE2ODQwOGYtN2RlZS00MTViLWExYzEtYjc2ZGYwYTg3 YTkzMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk ZGUxZTJkZDEtNjJjNi00MzFmLTg3NWEtMzMwYjYzNDQxNjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlMUKR/BQApYutXFn229qzpUj3ijZFv4YY0s2 rMOmSTRdka98LyH7W3XTHehqT1FAH3sAJS6oaPq9/wQV8eLkIoBRuSVdF2ppiENo ExO6Fp39hL+quP5C8F6Ywq/B1N7ObxaVHXYHbacRQzlslLOb1aePhHY3ZcCEJTfp IVCvpejz29KzupBgAtQESL8vFF1zJnt0IG0ibTXeNAYozcviX3hCIgAbOoH9qzpk WEqcRLFKDYQQ11x2nQuRnOMEHZ+i9l0hUuqql72Dbc6mPHnwq7C8QqGrPnFedE44 wU6IiTSwLo4Ghzgsek/zwpL9zq+P+sJGfIfFfK4p6ahxVT6+ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl4a4ZVzCoHvfmlRhO7gVaSH1ruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4 NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZkZjBhODdhOTMvZGJkYTExMTgtOTkxNC0z M2FjLWEzNzItMDIwY2ZkODlkMjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWE2ODQwOGYtN2RlZS00MTViLWEx YzEtYjc2ZGYwYTg3YTkzL2VhNjg0MDhmLTdkZWUtNDE1Yi1hMWMxLWI3NmRmMGE4 N2E5My5jcmwwHwYDVR0jBBgwFoAUFphb3M+6SOUGLSTwgm6NQ0VLLqgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lYTY4NDA4Zi03ZGVlLTQxNWItYTFjMS1iNzZk ZjBhODdhOTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGPvenvQH+7rB8IkjfFXNpzI0qrY+ZSUiVODqPKplRrt7ZSzToAADeV rUxMnHjs+qxf9a++qZYNU3sx1TK+6HOf8BFLXAsGYAIz7vVVMvfLwlTZF3o8EHjk mqbOY4ipjSuBmTPKT8OkYbKmW1W8/wwBSNxZ5Dt3y44/DyS8yYPAAgcpJAgbktIK AqE31Bgyc0Gnm4vRE5VwsedCUJVZ6Zowoe9wxdkclRnwVXjyr8s5TRDz0/ELkuNs JaWF9WKaO5DKER+HVf+qB0dsWydPpWg8/AJoQKmhZlsAgiynOilcErcrDxlO8IYk oitHk0/RmrIwa+lOYqJtt9gRJh7Y5Ag= -----END CERTIFICATE-----Generated at Wed May 13 08:11:09 2026 by rpki-client