$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa File: 1045fe8d-434a-36b5-a028-7e65810bf0b5.roa (raw, json) Hash identifier: AjBmSvVJasjKajZ3acgag6MZHJYvnown8jSoXKQswsw= Subject key identifier: D2:33:19:BC:02:21:EB:52:F5:EF:EE:1B:59:25:00:EF:F4:95:81:1E Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584D19B4B6D3980F7B33BC693B80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 393841 IP address blocks: 208.56.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:b6:d3:98:0f:7b:33:bc:69:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=a2ada870-6ffa-4eb6-baa3-aad67d90a463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d7:ff:a6:8b:c9:f7:89:95:d8:bc:17:54:81: ca:9b:18:92:08:07:04:47:10:7f:67:58:fc:7f:c3: ab:e5:d0:3a:07:c9:e6:b1:b3:96:73:e5:a3:66:ba: 19:96:d0:79:49:1a:3d:d7:8a:ee:8c:70:cf:8e:05: 86:51:f4:e8:86:70:8f:7f:cb:8e:3d:05:37:aa:e6: 10:1f:be:c8:fa:51:41:d7:f4:4a:5c:d1:fa:16:3e: d2:92:a0:26:0b:7b:52:76:31:f5:9e:aa:e2:28:2c: 91:37:7b:16:cc:72:80:fb:14:8f:e3:89:43:ab:9b: bf:0e:21:6c:7a:6b:c4:a0:29:9d:07:ac:7a:e3:2a: 44:de:e7:ff:c1:1c:9d:34:4b:f1:27:c2:e6:70:df: 7a:ea:f8:21:a1:5b:7c:d1:67:53:b8:d2:37:ae:db: c3:67:92:b6:8a:d6:c5:2e:e7:98:98:76:51:53:0c: 80:f7:6d:02:4a:75:56:5f:07:42:97:42:65:b1:ab: c8:65:99:ba:dd:26:00:fd:f7:5e:fa:77:79:48:60: 4d:40:00:7a:5a:6d:7c:3c:bf:fa:2c:10:1c:40:19: c8:b8:6d:2b:00:20:f0:15:cc:40:9f:a3:df:a8:45: 0e:51:95:75:ad:90:a9:e8:b7:73:7c:e9:60:13:6f: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:33:19:BC:02:21:EB:52:F5:EF:EE:1B:59:25:00:EF:F4:95:81:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/1045fe8d-434a-36b5-a028-7e65810bf0b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 208.56.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:7e:24:57:05:f6:f7:56:76:2f:a4:c4:0f:8d:2f:b5:f4:4d: 40:97:61:3f:f5:6e:fb:e3:34:06:21:1b:34:0e:1c:ad:fa:11: 6d:01:c7:1a:8b:98:e4:e5:da:39:17:5f:ef:c4:d9:57:85:00: 77:06:bb:91:1b:81:48:0c:5e:de:1a:26:df:95:71:55:2d:16: cf:26:1d:d3:d1:84:24:32:76:8d:e1:7f:ae:ef:22:cd:7d:2c: 67:53:c9:86:7e:f1:4f:4e:3f:a8:da:eb:84:be:4b:8b:0b:b2: e5:4a:e4:85:d9:35:7e:02:a4:54:ae:09:f6:14:74:53:9e:32: 38:f9:97:30:bf:ca:db:98:e6:d8:6c:94:7d:0f:5a:99:d4:3c: 54:a9:fc:f2:b4:bf:c2:de:49:23:71:e7:57:44:8a:3c:bc:d1: 15:32:1e:86:7e:47:5b:72:26:46:d4:6e:f8:bb:b0:e4:cc:b8: a1:f8:00:f3:ba:41:dd:ac:0a:69:99:5b:e3:e7:fb:13:d9:0a: 90:d0:c4:22:f8:0e:99:53:2e:80:32:60:05:90:da:9d:45:b5: 84:df:29:9f:6d:f7:37:52:e7:1e:94:1c:51:74:d9:98:b5:10: 61:61:6b:df:b5:14:41:9b:90:1f:34:17:1b:fc:d7:49:1f:e2: 24:19:85:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtLbTmA97M7xpO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk YTJhZGE4NzAtNmZmYS00ZWI2LWJhYTMtYWFkNjdkOTBhNDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNf/povJ94mV2LwXVIHKmxiSCAcERxB/Z1j8 f8Or5dA6B8nmsbOWc+WjZroZltB5SRo914rujHDPjgWGUfTohnCPf8uOPQU3quYQ H77I+lFB1/RKXNH6Fj7SkqAmC3tSdjH1nqriKCyRN3sWzHKA+xSP44lDq5u/DiFs emvEoCmdB6x64ypE3uf/wRydNEvxJ8LmcN966vghoVt80WdTuNI3rtvDZ5K2itbF LueYmHZRUwyA920CSnVWXwdCl0JlsavIZZm63SYA/fde+nd5SGBNQAB6Wm18PL/6 LBAcQBnIuG0rACDwFcxAn6PfqEUOUZV1rZCp6LdzfOlgE2/5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIzGbwCIetS9e/uG1klAO/0lYEeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvMTA0NWZlOGQtNDM0YS0z NmI1LWEwMjgtN2U2NTgxMGJmMGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0DjPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ+JFcF9vdWdi+kxA+NL7X0TUCXYT/1bvvjNAYhGzQOHK36EW0BxxqL mOTl2jkXX+/E2VeFAHcGu5EbgUgMXt4aJt+VcVUtFs8mHdPRhCQydo3hf67vIs19 LGdTyYZ+8U9OP6ja64S+S4sLsuVK5IXZNX4CpFSuCfYUdFOeMjj5lzC/ytuY5ths lH0PWpnUPFSp/PK0v8LeSSNx51dEijy80RUyHoZ+R1tyJkbUbvi7sOTMuKH4APO6 Qd2sCmmZW+Pn+xPZCpDQxCL4DplTLoAyYAWQ2p1FtYTfKZ9t9zdS5x6UHFF02Zi1 EGFha9+1FEGbkB80Fxv810kf4iQZhRg= -----END CERTIFICATE-----Generated at Thu Mar 26 23:47:21 2026 by rpki-client