$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa File: df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa (raw, json) Hash identifier: gg/zXaYQEpSsF9suwAkzz8pOgEdUMpF2pgkoI0gathA= Subject key identifier: 90:6F:BD:D1:90:DD:AB:6B:DC:5B:0A:C7:A4:F8:AC:98:01:A9:25:BE Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584D3DFFACD3C6AB765E762EBA80 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 396952 IP address blocks: 204.238.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:ac:d3:c6:ab:76:5e:76:2e:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=4204ce81-c934-46b2-a765-dd7bcafe4832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8a:d9:7d:7c:d9:13:98:15:9e:73:92:ae:53: ea:64:61:a1:72:2c:3d:d3:5a:2d:79:1c:70:8f:9e: 68:68:89:0e:c2:b9:bf:7c:bc:f7:1d:6a:7b:50:6a: a5:95:14:4c:63:a1:15:4d:6a:19:c5:98:5f:52:84: 58:d9:11:cd:36:1f:53:e2:5f:04:9d:84:c5:2e:b3: 61:ea:e5:14:85:91:18:d1:4b:2e:e9:96:e7:70:cb: 29:a2:58:ff:0f:76:4c:15:06:fd:fd:cc:6a:40:49: ec:f3:30:be:82:c4:1b:05:d5:08:5b:56:f2:ef:56: f6:2b:0f:a9:cd:d6:5e:1a:08:22:1b:a3:aa:30:8f: 1e:0f:68:ba:c9:43:8d:c3:75:38:92:15:28:99:44: df:8a:b9:76:c3:29:a5:a9:80:21:62:4e:2c:05:c3: 94:ea:b5:62:c3:14:9f:9b:9a:06:6b:cd:86:1c:f1: e5:9d:85:5c:3c:3b:c7:0a:62:97:e3:5a:6b:b2:77: db:ec:fb:a9:ad:f8:d5:5b:f9:f0:bf:35:c5:56:cb: f8:b3:3f:f6:07:c9:91:bf:dc:9c:d9:47:53:bf:60: 5c:2f:7c:2d:73:2a:6f:7a:d9:4b:f8:13:87:29:ba: 6c:82:c5:bf:fd:a5:a1:db:b9:4f:46:ec:84:18:41: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6F:BD:D1:90:DD:AB:6B:DC:5B:0A:C7:A4:F8:AC:98:01:A9:25:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/df37cc8f-ca63-33dd-9e96-34bd2cd31343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 204.238.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:29:1d:ad:e0:ef:ab:f1:e2:ea:52:e7:5d:10:59:87:e8:75: 9a:5a:04:96:0c:b7:97:9d:56:3e:e6:ad:5d:73:9f:49:df:bc: fa:20:98:19:fb:65:50:ba:8e:cc:88:fe:3b:e1:9b:e9:da:76: 2b:f9:02:f4:a1:fa:d7:00:5a:6b:78:f9:f8:71:ef:e7:ad:84: fd:74:22:06:93:a1:b2:ae:da:ba:72:e2:31:79:df:72:27:6d: 39:0b:fe:e9:65:87:a3:ee:2d:49:32:5d:33:1c:01:33:04:a4: f6:4c:a9:9b:e5:90:c5:a9:c3:5b:54:51:6c:5d:dd:99:b7:47: 46:73:dc:6e:48:9c:d3:cc:01:24:bb:80:0f:a7:7b:a5:d0:15: da:ec:3d:cf:56:08:00:c2:4d:d2:34:11:3e:a7:71:00:3d:ac: 84:8f:29:f9:c6:e6:e5:5f:cd:ea:7c:90:3d:20:3f:38:1a:5d: 7d:bd:1b:39:3d:d6:1e:ea:6a:35:97:c7:58:90:05:dd:bc:31: 64:f3:7d:98:1d:e8:84:f0:99:e9:4e:9c:5d:75:c6:ed:61:e1: 7f:97:ee:e3:63:59:62:c8:f1:dd:fb:87:c2:f3:6a:59:39:e1: 11:b0:70:44:c7:ed:ff:62:56:42:00:6f:c9:86:d7:6f:d6:d2: 12:e4:9e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6zTxqt2XnYuuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk NDIwNGNlODEtYzkzNC00NmIyLWE3NjUtZGQ3YmNhZmU0ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlorZfXzZE5gVnnOSrlPqZGGhciw901oteRxw j55oaIkOwrm/fLz3HWp7UGqllRRMY6EVTWoZxZhfUoRY2RHNNh9T4l8EnYTFLrNh 6uUUhZEY0Usu6ZbncMspolj/D3ZMFQb9/cxqQEns8zC+gsQbBdUIW1by71b2Kw+p zdZeGggiG6OqMI8eD2i6yUONw3U4khUomUTfirl2wymlqYAhYk4sBcOU6rViwxSf m5oGa82GHPHlnYVcPDvHCmKX41prsnfb7PuprfjVW/nwvzXFVsv4sz/2B8mRv9yc 2UdTv2BcL3wtcypvetlL+BOHKbpsgsW//aWh27lPRuyEGEF6+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBvvdGQ3atr3FsKx6T4rJgBqSW+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvZGYzN2NjOGYtY2E2My0z M2RkLTllOTYtMzRiZDJjZDMxMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO4IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHYpHa3g76vx4upS510QWYfodZpaBJYMt5edVj7mrV1zn0nfvPogmBn7 ZVC6jsyI/jvhm+nadiv5AvSh+tcAWmt4+fhx7+ethP10IgaTobKu2rpy4jF533In bTkL/ullh6PuLUkyXTMcATMEpPZMqZvlkMWpw1tUUWxd3Zm3R0Zz3G5InNPMASS7 gA+ne6XQFdrsPc9WCADCTdI0ET6ncQA9rISPKfnG5uVfzep8kD0gPzgaXX29Gzk9 1h7qajWXx1iQBd28MWTzfZgd6ITwmelOnF11xu1h4X+X7uNjWWLI8d37h8Lzalk5 4RGwcETH7f9iVkIAb8mG12/W0hLknvc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:42:19 2026 by rpki-client