$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa File: 5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa (raw, json) Hash identifier: adH+xg8ICRqdi+tjECcceIAYlhERDHKKQEknTejUUKI= Subject key identifier: 62:1C:1D:2F:05:35:36:40:F6:99:C4:BB:05:25:7F:F4:E1:50:4F:48 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584DCAFB18E73E281BF17057AD80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa Signing time: Mon 11 May 2026 01:00:24 +0000 ROA not before: Mon 11 May 2026 01:00:24 +0000 ROA not after: Sun 09 Aug 2026 01:00:24 +0000 asID: 20001 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ca:fb:18:e7:3e:28:1b:f1:70:57:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: May 11 01:00:24 2026 GMT Not After : Aug 9 01:00:24 2026 GMT Subject: CN=113c5a75-713f-4d06-b2ec-996f4cc83b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:6f:20:a4:33:df:0c:8f:7d:ee:1f:51:47:52: 29:e5:c2:9b:a9:3e:3e:22:0b:5c:5b:6c:c1:7c:b2: 70:e6:19:4d:6a:b1:64:60:cb:41:01:a7:b2:5d:f8: e2:cc:95:4c:2b:b9:f7:91:90:06:5f:5f:f9:6b:60: c4:d1:f5:31:6a:5c:4a:8a:8e:96:18:93:66:e3:72: a5:8a:87:b5:3e:c7:db:6f:cb:02:cd:ea:70:8d:9e: f2:b6:6f:1c:91:9d:91:d2:ad:fb:85:05:c8:45:34: 3a:af:b8:1e:1c:6b:07:bd:e0:fe:b8:53:cc:f2:0b: 04:62:d2:19:7a:b8:61:a0:25:30:8b:27:e3:48:1f: 8e:bb:53:1e:f4:97:2b:db:56:5f:30:38:72:88:2f: 33:5b:d4:0e:fa:41:3a:8b:2c:17:50:35:d1:8a:60: b4:0e:f2:5d:9b:3b:f4:1a:61:6d:80:17:99:af:21: 2c:90:ef:11:d5:c9:ff:f1:fc:cd:c3:e9:3e:69:68: c4:f7:28:8c:12:69:c5:fd:62:0c:46:a2:0f:43:e5: 6f:3a:9c:92:de:4b:04:f8:d1:28:31:a5:94:4b:89: 5f:da:78:12:2e:3a:42:63:37:e8:f8:78:1c:14:cc: cc:52:a2:d8:ec:5b:d9:62:f3:8a:5f:6e:c8:e3:a9: b0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1C:1D:2F:05:35:36:40:F6:99:C4:BB:05:25:7F:F4:E1:50:4F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/5c2c5cc4-b143-3b98-9aad-43a2772689e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:f1:8e:d3:05:68:a8:25:af:b7:0a:28:28:36:cb:d5:35:93: 28:c5:57:ad:04:32:cc:5d:4c:5b:83:41:98:4d:61:17:42:63: 57:82:22:d9:28:8d:65:5b:b9:ec:02:4d:30:17:27:55:33:d7: c9:8d:a8:b9:00:db:a3:bd:b5:09:bd:97:a3:96:d0:0a:62:88: 3b:64:7e:0a:2b:87:be:2c:a0:da:d7:cf:bc:76:40:e6:b1:fb: 37:e8:43:3e:7b:b3:30:2f:1d:2d:8c:3d:59:32:b9:cf:12:fd: 67:b0:f2:ca:3a:dc:6a:4d:d8:5b:89:f2:1a:65:85:c1:d9:2f: 9d:0e:9f:60:4f:8e:3b:ed:6f:3e:d4:5b:8a:86:b3:a0:d1:82: 91:3b:3a:ac:9d:00:77:80:17:83:b4:69:d2:a4:27:44:60:23: 26:19:d0:91:83:34:19:d4:75:fd:b6:cb:31:bb:a1:06:24:d8: 58:3a:55:75:98:19:9a:eb:d4:1c:90:5d:f6:a8:04:85:e4:8b: f4:3a:f1:2c:a0:5e:23:45:e2:7f:9d:6e:94:27:36:a2:64:2e: 40:48:f8:a8:4a:13:f5:42:5e:93:9b:f5:5a:6d:03:e3:40:60: ad:a7:40:c8:ca:c4:79:f4:24:09:1e:92:c9:51:11:37:3d:9f: 00:53:13:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3K+xjnPigb8XBXrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI2MDUxMTAxMDAyNFoXDTI2MDgwOTAxMDAyNFowLzEtMCsGA1UEAxMk MTEzYzVhNzUtNzEzZi00ZDA2LWIyZWMtOTk2ZjRjYzgzYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo28gpDPfDI997h9RR1Ip5cKbqT4+IgtcW2zB fLJw5hlNarFkYMtBAaeyXfjizJVMK7n3kZAGX1/5a2DE0fUxalxKio6WGJNm43Kl ioe1Psfbb8sCzepwjZ7ytm8ckZ2R0q37hQXIRTQ6r7geHGsHveD+uFPM8gsEYtIZ erhhoCUwiyfjSB+Ou1Me9Jcr21ZfMDhyiC8zW9QO+kE6iywXUDXRimC0DvJdmzv0 GmFtgBeZryEskO8R1cn/8fzNw+k+aWjE9yiMEmnF/WIMRqIPQ+VvOpyS3ksE+NEo MaWUS4lf2ngSLjpCYzfo+HgcFMzMUqLY7FvZYvOKX27I46mw2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIcHS8FNTZA9pnEuwUlf/ThUE9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNWMyYzVjYzQtYjE0My0z Yjk4LTlhYWQtNDNhMjc3MjY4OWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzxjtMFaKglr7cKKCg2y9U1kyjFV60EMsxdTFuDQZhNYRdCY1eCItko jWVbuewCTTAXJ1Uz18mNqLkA26O9tQm9l6OW0ApiiDtkfgorh74soNrXz7x2QOax +zfoQz57szAvHS2MPVkyuc8S/Wew8so63GpN2FuJ8hplhcHZL50On2BPjjvtbz7U W4qGs6DRgpE7OqydAHeAF4O0adKkJ0RgIyYZ0JGDNBnUdf22yzG7oQYk2Fg6VXWY GZrr1ByQXfaoBIXki/Q68SygXiNF4n+dbpQnNqJkLkBI+KhKE/VCXpOb9VptA+NA YK2nQMjKxHn0JAkekslRETc9nwBTE1Q= -----END CERTIFICATE-----Generated at Wed May 13 11:42:56 2026 by rpki-client