$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa File: 8a599c8a-6f69-352a-9eff-d9583500ded1.roa (raw, json) Hash identifier: 6WK+DOCpRbAA5g//S9s9HhwvFZCfNY2zuFlVXak2VKs= Subject key identifier: 1F:4E:86:22:24:DB:B0:F1:9F:09:A4:D2:03:65:9C:F1:2C:42:14:D7 Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584D2A74EE168DD65579ADA99C00 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 33322 IP address blocks: 204.10.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:ee:16:8d:d6:55:79:ad:a9:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=105333da-8988-4fe2-bb6a-8ad00267fb61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6d:d7:f9:5f:38:8f:41:50:0c:47:e5:8d:82: 5a:98:82:d9:1f:2f:46:86:bb:cf:56:2a:ac:00:05: 72:80:93:09:83:c4:89:a9:09:a5:b6:0a:c3:d3:65: 39:5b:23:d0:42:d4:d5:49:67:e2:2a:20:d3:bb:67: 91:ac:7f:78:1c:7e:df:50:bb:55:0b:7a:62:e8:84: 72:a9:0e:6c:71:fe:d3:79:a2:87:ef:79:9a:25:4c: de:20:80:aa:53:6d:d0:48:6c:ad:a1:08:19:0d:6c: 52:97:5d:f5:af:2e:22:2f:36:a5:63:86:d3:f2:a8: 1d:d8:57:b6:89:cd:11:c3:2c:59:bf:2d:4e:b3:a0: 1e:eb:85:9e:00:5e:e2:f5:a9:68:ed:f0:f6:21:8e: 7f:d7:55:0d:b2:37:b1:15:20:5d:67:66:c4:f5:de: 71:ed:30:9e:c3:26:4b:30:fc:b5:db:94:f8:03:65: 40:41:98:b3:90:19:8d:29:26:c4:8b:20:5a:f4:3a: 16:b5:82:af:60:a3:aa:c1:74:ee:b1:e7:f3:f8:b8: 4a:d5:ca:c4:f7:e1:92:3b:2f:a0:12:c4:2f:9d:45: 9d:16:31:8b:c6:9e:87:bf:e8:ed:3a:2f:80:8c:bf: e0:aa:59:4d:4a:d2:5e:b0:81:de:c4:d5:20:22:9f: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:86:22:24:DB:B0:F1:9F:09:A4:D2:03:65:9C:F1:2C:42:14:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/8a599c8a-6f69-352a-9eff-d9583500ded1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 204.10.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:94:cc:28:d5:55:fa:9e:64:3c:71:f6:83:00:25:75:55:5d: b5:7c:e6:63:47:8e:6a:f8:fa:d5:a4:b2:5b:bb:0b:d3:be:b6: 08:f9:7c:82:88:ce:fb:20:1f:cf:d5:41:ca:0a:3f:a9:17:df: 07:c0:c3:8a:53:f6:eb:87:14:2b:5a:dd:c3:5d:ac:83:8c:1a: 32:57:e4:cc:bf:66:da:e7:a7:40:52:51:50:de:71:82:06:ea: 59:ef:2d:9b:05:fa:86:1f:7f:55:a8:a8:e7:3c:3f:b8:ca:e3: f0:d7:c9:09:8a:67:05:63:e8:d7:4b:0c:8e:30:36:e1:bf:62: 3c:6d:87:62:23:1a:a9:20:ea:7f:e2:15:33:f5:66:1a:de:bb: fe:8e:a3:30:3e:4a:4b:21:f1:d7:3c:8f:0d:f4:49:6c:93:fe: 82:ff:6f:e9:cf:38:61:67:c9:49:97:29:be:d4:d4:00:74:ec: 3b:ae:12:ff:34:54:f0:f0:54:38:19:1e:67:7b:02:84:4d:91: fc:93:6a:fa:0a:11:ee:08:2a:1b:94:60:67:d3:5d:cc:8f:b6: 00:30:17:c8:d6:68:9b:52:fb:fc:87:03:23:41:46:c1:5d:cb: 9f:d2:7c:06:cf:4d:64:27:9b:a3:72:70:3f:5a:cd:13:d1:3c: e1:7c:db:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdO4WjdZVea2pnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTA1MzMzZGEtODk4OC00ZmUyLWJiNmEtOGFkMDAyNjdmYjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1m3X+V84j0FQDEfljYJamILZHy9GhrvPViqs AAVygJMJg8SJqQmltgrD02U5WyPQQtTVSWfiKiDTu2eRrH94HH7fULtVC3pi6IRy qQ5scf7TeaKH73maJUzeIICqU23QSGytoQgZDWxSl131ry4iLzalY4bT8qgd2Fe2 ic0RwyxZvy1Os6Ae64WeAF7i9alo7fD2IY5/11UNsjexFSBdZ2bE9d5x7TCewyZL MPy125T4A2VAQZizkBmNKSbEiyBa9DoWtYKvYKOqwXTusefz+LhK1crE9+GSOy+g EsQvnUWdFjGLxp6Hv+jtOi+AjL/gqllNStJesIHexNUgIp+N9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9OhiIk27Dxnwmk0gNlnPEsQhTXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOGE1OTljOGEtNmY2OS0z NTJhLTllZmYtZDk1ODM1MDBkZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAokMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuUzCjVVfqeZDxx9oMAJXVVXbV85mNHjmr4+tWkslu7C9O+tgj5fIKI zvsgH8/VQcoKP6kX3wfAw4pT9uuHFCta3cNdrIOMGjJX5My/Ztrnp0BSUVDecYIG 6lnvLZsF+oYff1WoqOc8P7jK4/DXyQmKZwVj6NdLDI4wNuG/Yjxth2IjGqkg6n/i FTP1Zhreu/6OozA+Sksh8dc8jw30SWyT/oL/b+nPOGFnyUmXKb7U1AB07DuuEv80 VPDwVDgZHmd7AoRNkfyTavoKEe4IKhuUYGfTXcyPtgAwF8jWaJtS+/yHAyNBRsFd y5/SfAbPTWQnm6NycD9azRPRPOF829w= -----END CERTIFICATE-----Generated at Thu Mar 26 13:00:11 2026 by rpki-client