$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa File: 3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa (raw, json) Hash identifier: /Vtwt4D38VzjAEiAx8jbNZn/HQPsPXgMy/HmQ58IoEc= Subject key identifier: 58:5A:F4:4B:73:1F:F5:00:AC:9A:F6:6E:02:14:D3:6A:93:1E:48:0F Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458F1E323D0E0D770A29BC Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 204.195.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8f:1e:32:3d:0e:0d:77:0a:29:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=8f31e542-46ac-4d17-a9d0-231fd89952d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:51:24:f6:af:75:d8:ca:86:a1:97:17:d7:32: 2d:8c:4f:9d:fb:d5:ab:7b:28:25:9c:7b:e1:0a:2f: 80:27:b5:1a:01:15:4b:70:cb:ba:23:eb:89:3e:db: fe:7c:a6:20:c6:9a:58:11:41:e3:bd:4f:a0:3b:df: 90:1b:8e:93:f4:7e:27:fa:28:e5:39:e2:af:0c:0a: 74:db:c4:32:c4:e0:0b:2a:93:eb:fe:19:3a:98:2a: bf:78:b4:90:db:40:1d:d3:1e:18:32:56:0a:87:82: ab:3b:54:56:8d:2e:4e:09:95:47:33:f9:2a:be:e4: 35:a4:4a:c1:23:9f:ab:f1:38:dc:b8:7b:95:0a:5f: b5:7d:f1:eb:ae:69:ca:9d:f9:e8:5e:f6:b3:3c:4c: db:9b:7c:83:04:7f:6f:2a:64:db:1c:55:60:2b:1d: ff:8a:bc:1f:b4:05:19:06:28:99:9b:81:d8:8c:47: 3f:72:f7:30:33:70:3d:8e:a3:a5:f5:cd:c0:cb:09: 2f:8b:a9:68:ad:79:bf:51:6e:35:0e:83:4a:1b:a0: fb:9c:4e:a5:f9:3c:00:2b:8a:bc:99:da:06:5c:d0: ac:a1:c3:62:b0:b8:45:11:ca:71:a0:e7:da:9c:90: 1f:8c:bd:25:3f:53:c8:cf:34:cc:5d:51:fc:5b:ec: 40:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:5A:F4:4B:73:1F:F5:00:AC:9A:F6:6E:02:14:D3:6A:93:1E:48:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/3ffbb94c-c2ac-3005-bb52-81e2ce62be16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 204.195.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:d6:a5:da:e8:e1:44:3c:c9:47:03:95:81:a8:cb:5f:bc:2f: 94:1c:a2:89:1a:92:7f:d6:38:e3:0d:13:ca:28:64:01:4e:a7: a7:d1:88:7a:cc:68:4b:34:ab:1b:18:a3:3c:dd:83:47:9a:e7: d6:0e:a2:18:a7:8d:ed:51:cb:ac:a3:0c:39:d1:9c:97:e0:0b: f9:e4:13:1a:ea:7b:2b:b7:13:c9:d7:92:e4:08:59:37:11:51: c3:06:47:88:ea:b2:69:05:8b:7e:5d:8a:79:48:00:05:1a:d8: 54:88:d2:c7:85:cf:8e:d9:a6:01:ed:1c:11:42:0e:32:ca:13: 8a:16:6a:03:f8:b9:fd:f2:a6:2e:5c:e3:21:0c:6e:7b:06:c4: a8:5d:36:da:f5:85:05:52:65:d4:e8:79:a5:51:d0:7d:9a:52: 28:0c:89:e7:ae:38:f6:20:7e:a2:9e:ab:6e:19:4f:53:d6:45: 2a:9f:96:81:de:f7:62:12:dc:e8:9b:a4:ca:2b:ed:3a:be:66: a4:00:51:83:f3:fc:bb:2e:3d:28:89:9a:98:a1:ca:8e:f0:19: 39:7b:dd:a9:72:ef:2c:ad:74:11:4b:05:33:73:75:40:30:bc: c6:9b:18:a0:1d:a4:6a:cd:a3:f3:cd:0f:0e:2b:d6:cf:28:55: 8e:a9:1c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRY8eMj0ODXcKKbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OGYzMWU1NDItNDZhYy00ZDE3LWE5ZDAtMjMxZmQ4OTk1MmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFEk9q912MqGoZcX1zItjE+d+9WreyglnHvh Ci+AJ7UaARVLcMu6I+uJPtv+fKYgxppYEUHjvU+gO9+QG46T9H4n+ijlOeKvDAp0 28QyxOALKpPr/hk6mCq/eLSQ20Ad0x4YMlYKh4KrO1RWjS5OCZVHM/kqvuQ1pErB I5+r8TjcuHuVCl+1ffHrrmnKnfnoXvazPEzbm3yDBH9vKmTbHFVgKx3/irwftAUZ BiiZm4HYjEc/cvcwM3A9jqOl9c3Aywkvi6lorXm/UW41DoNKG6D7nE6l+TwAK4q8 mdoGXNCsocNisLhFEcpxoOfanJAfjL0lP1PIzzTMXVH8W+xA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFha9EtzH/UArJr2bgIU02qTHkgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvM2ZmYmI5NGMtYzJhYy0z MDA1LWJiNTItODFlMmNlNjJiZTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzMMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLWpdro4UQ8yUcDlYGoy1+8L5Qcookakn/WOOMNE8ooZAFOp6fRiHrM aEs0qxsYozzdg0ea59YOohinje1Ry6yjDDnRnJfgC/nkExrqeyu3E8nXkuQIWTcR UcMGR4jqsmkFi35dinlIAAUa2FSI0seFz47ZpgHtHBFCDjLKE4oWagP4uf3ypi5c 4yEMbnsGxKhdNtr1hQVSZdToeaVR0H2aUigMieeuOPYgfqKeq24ZT1PWRSqfloHe 92IS3OibpMor7Tq+ZqQAUYPz/LsuPSiJmpihyo7wGTl73aly7yytdBFLBTNzdUAw vMabGKAdpGrNo/PNDw4r1s8oVY6pHNs= -----END CERTIFICATE-----Generated at Wed May 13 03:17:34 2026 by rpki-client