$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa File: 9814d97b-c411-3c0f-aac7-5659a975f78a.roa (raw, json) Hash identifier: oKVDh0Kh2q1lCW1eO0W8ecRvoA63YLH2DlrJ0tQKDfI= Subject key identifier: 06:41:0A:03:F2:0B:1F:C6:80:50:96:06:E3:B4:1B:3E:70:7A:99:5F Certificate issuer: /CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Certificate serial: 010D0C9F4328584D27AA2CBDC47AA63A0DC0B000 Authority key identifier: 8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 33322 IP address blocks: 208.71.168.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:2c:bd:c4:7a:a6:3a:0d:c0:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fadcb874-6a9f-43d3-9f1c-eac4987918bb Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=d54a4e01-de88-4c87-8758-170dd33f1f1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:37:22:54:b7:09:b8:9b:c4:aa:e5:02:f5:ef: 28:41:d6:63:69:ee:40:83:96:2c:50:e6:7e:f8:87: b5:fe:3d:ba:da:b5:2c:f4:a2:11:28:6a:01:c7:8e: 40:33:65:6e:42:03:88:7b:3c:0a:52:2d:5d:ef:41: cb:5d:a1:05:a4:2e:3e:bf:ce:50:c8:f7:6a:53:15: 19:99:ba:43:06:4b:b2:4d:c3:9b:6a:d0:34:09:76: 0a:eb:7e:17:8d:c1:d7:1c:f0:d7:96:d3:ad:a1:3f: 84:4b:1d:41:c3:7e:3a:20:b0:e0:90:71:89:4e:ae: 54:92:6b:e4:3d:1e:22:1a:f9:7a:18:6d:a8:7f:10: d6:46:93:8f:66:05:be:d0:52:0c:56:43:27:28:0c: c0:a5:58:c4:6c:79:45:af:73:00:ba:d9:88:6b:84: 74:f2:f2:09:1f:38:f5:31:0c:80:4a:85:7c:53:1c: f4:e5:bd:54:6a:07:e5:10:fa:03:65:52:cd:05:f3: 7c:35:6f:1e:c3:03:08:bd:92:5f:d6:d5:9c:67:52: f0:fd:cd:74:96:8d:dd:78:80:64:c5:90:0c:b9:54: 2a:33:cf:5b:4c:f7:e3:d2:5a:b3:05:40:27:26:d2: 35:24:a0:49:52:8c:96:ac:21:0b:19:0b:c8:1f:a8: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:41:0A:03:F2:0B:1F:C6:80:50:96:06:E3:B4:1B:3E:70:7A:99:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/9814d97b-c411-3c0f-aac7-5659a975f78a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb/fadcb874-6a9f-43d3-9f1c-eac4987918bb.crl X509v3 Authority Key Identifier: keyid:8D:17:5A:B9:8B:0A:E6:36:0F:02:B0:60:97:54:4B:12:55:3E:39:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fadcb874-6a9f-43d3-9f1c-eac4987918bb.cer sbgp-ipAddrBlock: critical IPv4: 208.71.168.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:8b:0d:dc:aa:ef:63:0b:f2:1e:a2:c7:e8:6c:23:65:2a:ee: c5:53:72:45:cd:2b:6c:33:9d:c8:d0:16:29:59:e1:04:89:9f: 9d:53:55:3e:f3:f4:d1:ec:6b:fd:89:79:fe:96:fd:10:6a:68: 38:05:4f:f6:b5:88:9c:6c:e4:ea:4a:f2:32:22:3f:9c:53:77: 96:79:76:6b:d6:fc:e0:75:c7:04:3a:d7:70:74:cb:4b:6c:7c: bf:da:c1:fb:3b:53:7c:a1:e2:99:8f:a5:7b:25:cf:a0:d1:04: 44:33:36:3a:ed:32:29:2e:8b:2a:0e:1e:2f:6b:25:3b:ce:22: 8f:03:1a:0e:47:8b:4b:8c:07:1b:1f:40:97:ea:a6:fa:64:20: af:66:f3:3a:02:78:6b:87:df:16:9e:cb:ce:4d:ff:f7:76:48: 7a:6c:fb:33:4d:dc:5a:31:91:b6:63:4d:b9:aa:b1:21:b5:cb: 4f:0a:61:bf:50:d5:49:ba:b3:b0:36:05:b3:79:c0:bb:fe:32: b9:61:2c:96:30:bc:cb:db:6b:de:ba:32:3f:d5:10:0e:e5:b2: 23:14:c9:90:87:e4:e5:53:4e:93:0b:37:2a:9c:d5:4b:a1:9c: 5f:10:b5:6a:7e:ff:b1:75:d8:6b:d6:89:0a:95:4c:65:e1:22: 0d:4e:66:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nqiy9xHqmOg3AsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFkY2I4NzQtNmE5Zi00M2QzLTlmMWMtZWFjNDk4Nzkx OGJiMB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZDU0YTRlMDEtZGU4OC00Yzg3LTg3NTgtMTcwZGQzM2YxZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TciVLcJuJvEquUC9e8oQdZjae5Ag5YsUOZ+ +Ie1/j262rUs9KIRKGoBx45AM2VuQgOIezwKUi1d70HLXaEFpC4+v85QyPdqUxUZ mbpDBkuyTcObatA0CXYK634XjcHXHPDXltOtoT+ESx1Bw346ILDgkHGJTq5Ukmvk PR4iGvl6GG2ofxDWRpOPZgW+0FIMVkMnKAzApVjEbHlFr3MAutmIa4R08vIJHzj1 MQyASoV8Uxz05b1UagflEPoDZVLNBfN8NW8ewwMIvZJf1tWcZ1Lw/c10lo3deIBk xZAMuVQqM89bTPfj0lqzBUAnJtI1JKBJUoyWrCELGQvIH6g72wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZBCgPyCx/GgFCWBuO0Gz5weplfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRj Yjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0OTg3OTE4YmIvOTgxNGQ5N2ItYzQxMS0z YzBmLWFhYzctNTY1OWE5NzVmNzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZmFkY2I4NzQtNmE5Zi00M2QzLTlm MWMtZWFjNDk4NzkxOGJiL2ZhZGNiODc0LTZhOWYtNDNkMy05ZjFjLWVhYzQ5ODc5 MThiYi5jcmwwHwYDVR0jBBgwFoAUjRdauYsK5jYPArBgl1RLElU+OdMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mYWRjYjg3NC02YTlmLTQzZDMtOWYxYy1lYWM0 OTg3OTE4YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EeoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2LDdyq72ML8h6ix+hsI2Uq7sVTckXNK2wzncjQFilZ4QSJn51TVT7z 9NHsa/2Jef6W/RBqaDgFT/a1iJxs5OpK8jIiP5xTd5Z5dmvW/OB1xwQ613B0y0ts fL/awfs7U3yh4pmPpXslz6DRBEQzNjrtMikuiyoOHi9rJTvOIo8DGg5Hi0uMBxsf QJfqpvpkIK9m8zoCeGuH3xaey85N//d2SHps+zNN3FoxkbZjTbmqsSG1y08KYb9Q 1Um6s7A2BbN5wLv+MrlhLJYwvMvba966Mj/VEA7lsiMUyZCH5OVTTpMLNyqc1Uuh nF8QtWp+/7F12GvWiQqVTGXhIg1OZnU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:36 2026 by rpki-client