$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa File: 68365f48-7c66-3b0a-9514-08444a5b126b.roa (raw, json) Hash identifier: b2V9EU5JKCA6rF4614+cTei0uOgfdeq9VBKg/jYDtW4= Subject key identifier: EF:E1:A8:CB:DA:56:97:0C:E3:4D:4B:AF:4B:0E:CF:6D:BB:B6:E9:B4 Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584D95EFECA24E6B868827763B80 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 33208 IP address blocks: 208.56.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:ec:a2:4e:6b:86:88:27:76:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=9cdff78f-a2ac-452c-92f7-e84dfc1dc279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:e1:35:bd:77:17:6f:a8:3e:92:da:92:cb: a8:9c:b2:98:a1:67:84:dd:fa:1d:c7:d7:8b:55:b4: 2a:98:e4:dc:0a:26:2c:a5:82:06:b1:2e:e8:51:11: 3b:85:41:1b:6c:c5:34:6c:1b:3c:73:8a:5a:85:35: 44:b6:90:34:56:b4:24:eb:08:6e:b7:b6:de:75:23: cc:dc:18:cd:d3:e2:f3:39:72:11:3d:a5:a9:27:8b: d2:dd:0b:4a:d2:a7:33:54:f7:57:ce:ce:ae:23:3b: 07:fa:a5:21:2e:f0:09:d3:2c:e8:b8:9f:fb:64:7d: cd:81:d8:35:6c:ce:8b:c2:e5:93:04:b3:4f:90:17: bc:4b:9a:ab:e4:d8:cc:47:b2:d5:c8:7d:14:8f:3e: 4e:6c:99:71:e7:e0:d9:d0:9e:c3:f2:b3:55:30:5d: e0:ed:a7:6b:bb:e2:6d:c1:00:e7:5e:c3:7e:b2:3f: 41:be:0c:1b:99:59:90:f7:96:f7:d1:19:8e:63:7d: dc:89:8a:f1:5d:93:a9:4a:fa:b4:74:48:25:1b:79: 6e:ed:6b:e6:78:a3:33:c1:1d:9d:8b:7c:14:8c:d4: fe:1e:b5:6c:c3:08:8a:e1:a6:7b:31:75:00:fd:4d: 12:c4:a3:ce:bd:35:b1:17:01:8f:00:a3:86:a8:04: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:E1:A8:CB:DA:56:97:0C:E3:4D:4B:AF:4B:0E:CF:6D:BB:B6:E9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 208.56.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:95:7a:96:73:12:d4:5c:80:e0:e0:58:9f:92:72:69:ef:fa: 76:39:36:1c:64:9a:25:88:23:72:11:0c:1a:cc:0c:d9:6e:97: d9:50:43:ce:98:d2:df:3f:c8:63:14:b3:b9:3a:36:5d:9d:a3: dd:f3:07:3c:3f:1a:32:b0:4f:91:eb:66:23:3b:66:b7:d2:32: 57:a2:e6:3d:a3:e0:80:16:5c:d0:0b:bf:a6:bd:d3:1b:27:37: c0:f4:84:38:89:09:39:be:52:63:a2:3e:ff:c4:54:26:fa:be: 62:ef:0a:56:24:94:d2:05:52:74:96:dc:4b:22:95:6e:a2:aa: a6:a2:8b:f4:bf:e1:53:5f:70:44:4b:a1:13:d0:50:47:d7:28: 75:4e:2a:23:0f:2f:da:04:f4:17:c6:05:e3:33:28:1a:45:46: ce:93:cc:f4:e2:da:a9:76:a1:00:ea:37:c0:3f:85:fc:5b:0c: 35:e8:71:a9:87:a6:25:cf:1e:d6:57:ae:67:f0:0b:bf:e1:17: 7c:3a:9a:db:d0:28:3c:f9:7f:7a:d4:7c:78:c6:85:b8:80:ba: ad:95:43:0c:0d:bb:d2:c7:41:0c:a2:2f:5a:3e:1d:97:e4:3b: 9b:ee:40:c3:3a:8b:e6:82:d5:9b:6b:6a:93:c2:6c:8d:82:89: 78:c6:67:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V7+yiTmuGiCd2O4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk OWNkZmY3OGYtYTJhYy00NTJjLTkyZjctZTg0ZGZjMWRjMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mDhNb13F2+oPpLaksuonLKYoWeE3fodx9eL VbQqmOTcCiYspYIGsS7oURE7hUEbbMU0bBs8c4pahTVEtpA0VrQk6whut7bedSPM 3BjN0+LzOXIRPaWpJ4vS3QtK0qczVPdXzs6uIzsH+qUhLvAJ0yzouJ/7ZH3Ngdg1 bM6LwuWTBLNPkBe8S5qr5NjMR7LVyH0Ujz5ObJlx5+DZ0J7D8rNVMF3g7adru+Jt wQDnXsN+sj9BvgwbmVmQ95b30RmOY33ciYrxXZOpSvq0dEglG3lu7WvmeKMzwR2d i3wUjNT+HrVswwiK4aZ7MXUA/U0SxKPOvTWxFwGPAKOGqATExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO/hqMvaVpcM401Lr0sOz227tum0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvNjgzNjVmNDgtN2M2Ni0z YjBhLTk1MTQtMDg0NDRhNWIxMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0DjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiVepZzEtRcgODgWJ+Scmnv+nY5NhxkmiWII3IRDBrMDNlul9lQQ86Y 0t8/yGMUs7k6Nl2do93zBzw/GjKwT5HrZiM7ZrfSMlei5j2j4IAWXNALv6a90xsn N8D0hDiJCTm+UmOiPv/EVCb6vmLvClYklNIFUnSW3EsilW6iqqaii/S/4VNfcERL oRPQUEfXKHVOKiMPL9oE9BfGBeMzKBpFRs6TzPTi2ql2oQDqN8A/hfxbDDXocamH piXPHtZXrmfwC7/hF3w6mtvQKDz5f3rUfHjGhbiAuq2VQwwNu9LHQQyiL1o+HZfk O5vuQMM6i+aC1ZtrapPCbI2CiXjGZy0= -----END CERTIFICATE-----Generated at Wed May 13 14:45:21 2026 by rpki-client