$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa File: 13148eef-4aa6-3c89-b7e5-4a05427f013f.roa (raw, json) Hash identifier: f3qGfJS1NhfaJ6j+vtsTFjyx8kXQCUma9QeorC64nfo= Subject key identifier: FF:33:4D:37:FC:78:62:17:C0:56:30:57:71:3F:0A:CC:C3:E6:1F:79 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458F2AB6745391223A4500 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 208.76.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8f:2a:b6:74:53:91:22:3a:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=56ff75ce-46d4-4645-ae81-e69d29f713bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:33:b8:c9:84:3c:0c:8b:fa:33:ee:6b:89:cd: 20:cc:bf:71:ef:e7:82:b3:66:14:77:73:b4:1a:10: 5e:b8:bb:8a:0b:65:03:eb:e6:fa:81:79:d2:af:eb: 15:40:e9:a3:e1:d0:31:92:13:14:78:f3:3f:78:f0: 7e:00:c1:29:5e:6c:36:25:61:06:13:49:2e:c3:04: f2:d4:ff:a5:1f:a0:75:50:04:4a:98:dc:89:de:86: 9a:28:67:bb:d0:36:a5:d8:f8:15:1f:45:c4:4b:bd: 8f:7a:8e:e9:5f:72:09:5e:ae:a9:56:64:54:7b:a0: 3b:05:97:92:7f:5f:14:5b:1a:0b:36:5b:da:a9:a5: 0b:ce:7a:3b:f3:19:24:1d:2e:75:99:d6:2a:f9:b7: 25:64:4a:91:89:9b:6a:93:14:85:53:34:a3:ca:4b: 54:62:fc:89:47:f8:20:48:54:02:e0:85:70:fa:21: ed:56:63:5d:86:c5:22:56:ad:b2:6f:48:dc:b9:3d: 95:21:ba:1b:9b:01:e7:bb:cd:1f:0c:d3:91:c8:86: 0d:fe:31:9f:4e:33:dd:68:f0:c1:7e:93:16:b5:c1: 5e:f0:61:1d:2f:13:c8:35:07:53:e4:8c:c6:33:3c: aa:6a:ab:7b:ec:c6:42:b3:da:e9:ee:e9:a0:bb:33: da:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:33:4D:37:FC:78:62:17:C0:56:30:57:71:3F:0A:CC:C3:E6:1F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/13148eef-4aa6-3c89-b7e5-4a05427f013f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.76.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cb:d1:f1:fc:da:0d:cc:bf:16:ed:6c:8c:87:56:5a:9b:04: a5:64:ca:09:19:f1:ca:f9:d0:63:3a:18:b0:ec:43:79:00:93: 3f:87:24:51:49:c8:98:fc:a2:be:14:f4:82:bd:89:46:70:27: 36:ff:6c:89:a3:8e:22:9e:eb:e0:92:38:9d:f0:b6:67:2f:00: aa:30:5b:35:b9:e7:f3:cd:e0:67:b5:82:bc:8f:a3:4f:21:2f: 45:f4:24:cd:76:e1:5d:94:52:ac:b3:80:bb:d7:ab:eb:84:f2: 75:66:70:d0:68:fb:0e:9c:d7:58:bc:71:05:5a:55:11:94:c0: d1:84:79:de:79:99:55:28:38:be:37:46:91:05:a6:98:d8:de: 13:09:19:98:14:8a:a4:67:ff:cf:9f:36:6e:c5:f8:b3:02:3d: 95:25:35:4a:8f:6b:fb:48:29:d1:dd:94:31:b8:0d:7d:61:1d: da:46:23:be:fa:32:ad:2d:55:a1:2f:ab:aa:81:b5:e1:0c:5b: b0:56:1d:a1:16:20:ae:ce:9f:b9:da:9d:e9:d5:6e:65:0b:f5: f9:f9:3c:3e:af:09:a8:cd:75:6d:4f:4c:af:b4:fe:23:49:dc: 71:b6:5f:b3:b2:98:67:b6:de:8d:34:77:26:a7:18:32:10:ac: 58:88:b9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRY8qtnRTkSI6RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk NTZmZjc1Y2UtNDZkNC00NjQ1LWFlODEtZTY5ZDI5ZjcxM2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljO4yYQ8DIv6M+5ric0gzL9x7+eCs2YUd3O0 GhBeuLuKC2UD6+b6gXnSr+sVQOmj4dAxkhMUePM/ePB+AMEpXmw2JWEGE0kuwwTy 1P+lH6B1UARKmNyJ3oaaKGe70Dal2PgVH0XES72Peo7pX3IJXq6pVmRUe6A7BZeS f18UWxoLNlvaqaULzno78xkkHS51mdYq+bclZEqRiZtqkxSFUzSjyktUYvyJR/gg SFQC4IVw+iHtVmNdhsUiVq2yb0jcuT2VIbobmwHnu80fDNORyIYN/jGfTjPdaPDB fpMWtcFe8GEdLxPINQdT5IzGMzyqaqt77MZCs9rp7umguzPaDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8zTTf8eGIXwFYwV3E/CszD5h95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvMTMxNDhlZWYtNGFhNi0z Yzg5LWI3ZTUtNGEwNTQyN2YwMTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EyYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLL0fH82g3MvxbtbIyHVlqbBKVkygkZ8cr50GM6GLDsQ3kAkz+HJFFJ yJj8or4U9IK9iUZwJzb/bImjjiKe6+CSOJ3wtmcvAKowWzW55/PN4Ge1gryPo08h L0X0JM124V2UUqyzgLvXq+uE8nVmcNBo+w6c11i8cQVaVRGUwNGEed55mVUoOL43 RpEFppjY3hMJGZgUiqRn/8+fNm7F+LMCPZUlNUqPa/tIKdHdlDG4DX1hHdpGI776 Mq0tVaEvq6qBteEMW7BWHaEWIK7On7nanenVbmUL9fn5PD6vCajNdW1PTK+0/iNJ 3HG2X7OymGe23o00dyanGDIQrFiIufI= -----END CERTIFICATE-----Generated at Wed May 13 07:05:08 2026 by rpki-client