$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa File: 594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa (raw, json) Hash identifier: bZSyTZz4Smpu/T/9pEswWYx2eM/3fw0dSpTA6puIEH4= Subject key identifier: 75:24:A8:9F:2C:BB:2C:FF:8D:DF:58:6B:35:A9:19:4B:70:F0:AB:C3 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584D27AA2CD2E528F63BD0F64600 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 33322 IP address blocks: 208.82.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:2c:d2:e5:28:f6:3b:d0:f6:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=6d0d8c2d-3414-45fd-a936-5d283a05cf95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:f6:38:48:56:c3:16:08:f7:aa:5e:c7:fd: 01:91:0c:91:9f:f9:fb:5d:ec:a7:98:a4:d7:11:1a: 15:f7:89:21:b3:90:f3:d6:dc:41:2c:54:4d:fe:55: 0c:34:01:bc:32:a7:43:80:a3:e7:9b:4a:e6:b0:aa: 77:83:d9:77:b0:f0:42:72:ee:db:03:57:58:60:62: 02:30:7f:d4:73:81:25:ee:3d:b9:f0:09:3f:04:90: 0a:b4:07:17:8f:85:03:15:de:fe:b1:c5:3e:75:28: 40:c6:f1:a9:58:0e:1b:f9:a5:86:29:5f:f5:e7:d9: 46:4d:97:a5:59:48:26:0d:45:24:9c:c5:ee:96:18: 02:59:82:18:35:8a:25:e1:c9:a2:92:f7:7d:7d:4d: a7:94:cc:ea:ac:cb:63:f7:31:04:7f:81:21:e8:03: b5:43:54:67:a4:e2:8a:06:6c:a8:fb:95:2b:eb:4b: 67:3f:d7:70:76:11:84:af:9c:ea:05:bc:00:f2:d1: 96:37:95:07:28:22:2f:8d:73:28:8b:6c:b7:5e:07: 74:73:14:37:67:75:6b:48:ed:e5:9c:d0:81:c0:c7: 91:88:b6:91:2a:7e:b7:33:d1:a7:7a:a0:c6:ef:be: bb:f0:78:ad:1c:1b:0e:d8:8b:04:0d:18:c2:a3:f4: e7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:24:A8:9F:2C:BB:2C:FF:8D:DF:58:6B:35:A9:19:4B:70:F0:AB:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/594b22dc-8cbb-3e61-a8cb-494350bd1e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.82.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:98:6c:6d:45:73:1f:21:8f:e7:47:4b:18:61:e9:10:af:d0: 30:f7:ac:b5:63:3c:47:c7:5d:64:50:d3:2d:56:50:04:f0:f9: a4:79:9a:c6:c4:3e:0c:a9:15:e3:eb:85:cb:70:40:d9:7f:68: 7d:ef:c3:19:25:49:0b:23:c7:ee:a8:55:c5:8d:d7:84:4b:8e: a9:89:11:73:c7:31:65:09:7e:14:6f:ff:ff:90:66:86:3f:ee: 68:f3:a6:91:7b:e0:24:91:a8:67:6f:5c:64:6b:26:e9:67:88: 29:14:5f:e7:1a:f3:4c:bf:22:e7:0a:ae:65:46:84:a8:42:a1: 33:c3:7f:f2:4d:63:a6:9f:f8:7e:26:36:e2:c3:43:3a:bf:34: e4:4f:f4:4c:41:24:a4:20:92:cb:a9:6d:38:74:b7:aa:b3:d9: 38:4c:cf:4e:3e:cf:d4:19:ac:23:6e:fa:84:42:8d:7c:0a:93: a6:b5:5f:61:ae:9d:ce:0b:9d:b8:d9:cb:25:6a:9b:cb:19:4a: c4:e3:02:78:2f:2e:0c:df:5d:a3:5e:ff:e7:4d:24:ad:31:0a: d1:d8:ed:39:14:20:30:02:3f:19:08:98:cb:60:48:9b:54:17: aa:0a:7c:76:55:ba:16:b3:2f:06:2b:32:1b:ca:21:6f:28:d6: d5:83:42:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqizS5Sj2O9D2RgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk NmQwZDhjMmQtMzQxNC00NWZkLWE5MzYtNWQyODNhMDVjZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYD2OEhWwxYI96pex/0BkQyRn/n7XeynmKTX ERoV94khs5Dz1txBLFRN/lUMNAG8MqdDgKPnm0rmsKp3g9l3sPBCcu7bA1dYYGIC MH/Uc4El7j258Ak/BJAKtAcXj4UDFd7+scU+dShAxvGpWA4b+aWGKV/159lGTZel WUgmDUUknMXulhgCWYIYNYol4cmikvd9fU2nlMzqrMtj9zEEf4Eh6AO1Q1RnpOKK Bmyo+5Ur60tnP9dwdhGEr5zqBbwA8tGWN5UHKCIvjXMoi2y3Xgd0cxQ3Z3VrSO3l nNCBwMeRiLaRKn63M9GneqDG77678HitHBsO2IsEDRjCo/Tn8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUkqJ8suyz/jd9YazWpGUtw8KvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvNTk0YjIyZGMtOGNiYi0z ZTYxLWE4Y2ItNDk0MzUwYmQxZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyYbG1Fcx8hj+dHSxhh6RCv0DD3rLVjPEfHXWRQ0y1WUATw+aR5msbE PgypFePrhctwQNl/aH3vwxklSQsjx+6oVcWN14RLjqmJEXPHMWUJfhRv//+QZoY/ 7mjzppF74CSRqGdvXGRrJulniCkUX+ca80y/IucKrmVGhKhCoTPDf/JNY6af+H4m NuLDQzq/NORP9ExBJKQgksupbTh0t6qz2ThMz04+z9QZrCNu+oRCjXwKk6a1X2Gu nc4LnbjZyyVqm8sZSsTjAngvLgzfXaNe/+dNJK0xCtHY7TkUIDACPxkImMtgSJtU F6oKfHZVuhazLwYrMhvKIW8o1tWDQgs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:52 2026 by rpki-client