$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa File: dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa (raw, json) Hash identifier: GJqDBNZ9nfS7fdzpYYCqSJMfI3KnMnC/pEXsM0Z4qOM= Subject key identifier: 13:3B:85:36:C1:72:9B:18:63:B2:D3:92:1A:37:54:D1:19:02:DE:1C Certificate issuer: /CN=378928e8-c134-40aa-9858-3838053cbbe9 Certificate serial: 010D0C9F4328584DA8157E9E15D3CB245B614FE0 Authority key identifier: 05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 12261 IP address blocks: 208.118.192.0/22 maxlen: 22 208.118.196.0/22 maxlen: 22 208.118.200.0/22 maxlen: 22 208.118.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:7e:9e:15:d3:cb:24:5b:61:4f:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=378928e8-c134-40aa-9858-3838053cbbe9 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=e5f548fe-861a-406a-8c4f-9f3e6bf3d1d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:c5:63:62:e3:41:11:fc:c3:91:cb:43:ca: 42:15:a8:86:8d:23:7a:2d:bb:5c:21:f1:7b:67:b6: 29:78:64:86:4c:d7:98:5d:14:fb:37:34:6e:d7:6d: 16:a8:35:6b:39:46:c3:9c:d6:b2:6e:9a:bb:79:1e: 75:83:20:1d:ed:33:c4:d1:72:0b:db:23:65:c6:12: b9:60:ca:b2:19:b4:a1:33:59:60:83:e5:cc:ed:67: c3:a8:33:52:eb:a5:5c:f6:67:72:1b:55:4e:de:c4: 5a:dc:6d:08:92:e7:51:3f:fd:48:26:bb:b6:32:b6: c1:7c:a6:a2:7a:29:8b:61:6a:da:59:10:d8:5f:09: 96:5c:c6:90:bf:74:ee:a1:2e:a2:3d:41:aa:80:fa: 57:22:15:3f:80:22:ab:d0:15:50:94:81:02:20:6f: e9:27:40:99:57:c4:8e:a1:75:79:d5:f9:d7:c9:d2: 4d:68:cc:d0:a0:28:37:2d:be:aa:43:5b:91:50:9d: 28:44:c1:17:3b:38:6a:14:21:f1:fc:ac:be:85:09: 38:e6:35:25:e3:f2:0e:34:41:74:a3:d4:d7:f3:73: 89:15:af:98:7d:4f:df:c7:d4:b0:5c:14:bf:4e:1b: 81:dd:6a:81:f3:bb:9c:a5:05:1b:14:db:54:eb:1c: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3B:85:36:C1:72:9B:18:63:B2:D3:92:1A:37:54:D1:19:02:DE:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/dfd5a6d2-b508-3685-8fff-cf6ce2050d0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9/378928e8-c134-40aa-9858-3838053cbbe9.crl X509v3 Authority Key Identifier: keyid:05:84:E7:4E:37:9B:4A:5E:85:0B:E4:1C:93:61:B8:64:26:15:18:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/378928e8-c134-40aa-9858-3838053cbbe9.cer sbgp-ipAddrBlock: critical IPv4: 208.118.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:4a:22:37:80:bc:5a:bd:22:39:04:c2:62:2d:d0:48:c5:a2: 0c:96:21:91:cd:1a:82:38:4f:af:2d:9b:77:1c:09:9e:b6:25: dc:ef:8f:57:91:7f:bf:b6:19:78:5e:af:42:6c:c1:84:93:41: 1d:99:0b:c4:17:aa:ba:6d:21:42:8d:7a:c4:b2:19:02:24:77: c1:76:a9:ed:85:b5:00:fd:34:a6:dd:ee:18:cd:98:fd:42:d6: 09:78:02:77:61:ae:65:b3:57:59:c5:7b:48:3e:fb:a0:f4:11: b1:ab:b3:c3:67:dd:ea:f4:d4:06:8e:06:c7:f4:c8:c5:48:c5: 15:0f:eb:99:0b:c2:ad:87:e0:e7:b9:c2:e3:e9:f4:cc:8d:48: 99:48:82:d1:e9:e9:c5:aa:93:fa:ba:cc:5e:9a:df:f9:c9:6e: 6e:e3:a3:37:5a:54:f0:5b:d8:d5:92:51:3a:fd:7f:fd:c0:78: 69:03:d2:2a:d1:3b:e3:b5:42:ca:6f:5b:79:90:17:9e:f8:23: 41:17:c4:e3:67:0e:a4:e2:a1:58:61:f0:5d:37:24:ce:45:75: 29:13:57:62:7d:dc:a5:3f:e2:e7:cf:2d:b4:99:84:f1:07:6e: fe:6b:c4:23:8d:7b:51:9d:da:91:d7:b7:42:af:ee:9b:28:20: 82:3f:eb:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFX6eFdPLJFthT+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzc4OTI4ZTgtYzEzNC00MGFhLTk4NTgtMzgzODA1M2Ni YmU5MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk ZTVmNTQ4ZmUtODYxYS00MDZhLThjNGYtOWYzZTZiZjNkMWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvILFY2LjQRH8w5HLQ8pCFaiGjSN6LbtcIfF7 Z7YpeGSGTNeYXRT7NzRu120WqDVrOUbDnNaybpq7eR51gyAd7TPE0XIL2yNlxhK5 YMqyGbShM1lgg+XM7WfDqDNS66Vc9mdyG1VO3sRa3G0IkudRP/1IJru2MrbBfKai eimLYWraWRDYXwmWXMaQv3TuoS6iPUGqgPpXIhU/gCKr0BVQlIECIG/pJ0CZV8SO oXV51fnXydJNaMzQoCg3Lb6qQ1uRUJ0oRMEXOzhqFCHx/Ky+hQk45jUl4/IONEF0 o9TX83OJFa+YfU/fx9SwXBS/ThuB3WqB87ucpQUbFNtU6xz3GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBM7hTbBcpsYY7LTkho3VNEZAt4cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5 MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4MDUzY2JiZTkvZGZkNWE2ZDItYjUwOC0z Njg1LThmZmYtY2Y2Y2UyMDUwZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzc4OTI4ZTgtYzEzNC00MGFhLTk4 NTgtMzgzODA1M2NiYmU5LzM3ODkyOGU4LWMxMzQtNDBhYS05ODU4LTM4MzgwNTNj YmJlOS5jcmwwHwYDVR0jBBgwFoAUBYTnTjebSl6FC+Qck2G4ZCYVGJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8zNzg5MjhlOC1jMTM0LTQwYWEtOTg1OC0zODM4 MDUzY2JiZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0HbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKNKIjeAvFq9IjkEwmIt0EjFogyWIZHNGoI4T68tm3ccCZ62Jdzvj1eR f7+2GXher0JswYSTQR2ZC8QXqrptIUKNesSyGQIkd8F2qe2FtQD9NKbd7hjNmP1C 1gl4AndhrmWzV1nFe0g++6D0EbGrs8Nn3er01AaOBsf0yMVIxRUP65kLwq2H4Oe5 wuPp9MyNSJlIgtHp6cWqk/q6zF6a3/nJbm7jozdaVPBb2NWSUTr9f/3AeGkD0irR O+O1QspvW3mQF574I0EXxONnDqTioVhh8F03JM5FdSkTV2J93KU/4ufPLbSZhPEH bv5rxCONe1Gd2pHXt0Kv7psoIII/66s= -----END CERTIFICATE-----Generated at Wed May 13 13:39:16 2026 by rpki-client