$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa File: 7d87e36f-8b7d-3ba6-80db-6624533414f3.roa (raw, json) Hash identifier: yZsl8GKvzVPBFQyPL793IvvWhUyc8322VUCYkqlyQJ4= Subject key identifier: C0:9E:1C:77:93:42:DB:90:6F:AF:43:4A:C3:F5:FF:5B:7E:35:B0:69 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC459155D4084F6AD4038400 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 208.53.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:91:55:d4:08:4f:6a:d4:03:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=8a91b904-7a01-431c-a8f6-493157e55217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:f8:3d:e6:f8:52:0d:04:78:3b:7c:ba:4b: 81:58:da:4d:83:07:f4:20:45:21:26:2f:f0:d3:8b: 77:86:ec:e3:9e:3a:5b:f3:88:7b:cf:c7:aa:3a:06: 83:a6:9d:c1:74:80:88:c5:a2:81:bc:09:83:21:9a: 56:bf:76:d2:92:f2:a3:8f:46:6a:86:b5:25:83:5d: 63:58:34:bb:70:28:19:70:c1:c3:f7:00:00:85:db: 4e:7f:34:35:d1:76:07:26:36:7c:9b:69:33:43:a0: fb:bb:b9:13:03:37:99:ed:5c:62:48:9d:b7:d9:a0: 2c:20:c2:5a:7e:b3:7f:74:19:d3:36:a8:47:4e:ec: de:0b:96:c5:fe:69:2f:79:c3:67:0c:b0:6b:75:3c: b6:5d:dc:cd:0a:a0:23:93:31:65:15:3c:fd:de:aa: bf:1e:de:64:2c:18:39:53:e8:53:bc:1c:db:20:de: ef:11:f1:1d:33:60:b5:f8:92:f8:65:bf:1b:bf:66: f2:4e:09:c8:17:56:57:46:28:18:79:72:57:5f:83: 27:d4:1e:0c:21:73:da:2d:5e:19:0b:05:81:d0:20: f9:0e:72:9b:ff:3f:eb:82:53:54:33:63:1c:1d:50: 08:60:80:20:1d:d1:c3:92:e2:43:cf:c1:c7:b6:a7: 28:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9E:1C:77:93:42:DB:90:6F:AF:43:4A:C3:F5:FF:5B:7E:35:B0:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7d87e36f-8b7d-3ba6-80db-6624533414f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.53.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:bd:16:85:ef:ae:b4:98:bc:b1:82:89:04:9a:94:f4:78:64: c1:33:ea:86:6b:59:92:a7:6c:ec:12:9e:20:b6:61:24:23:34: 27:18:4d:81:a5:42:8a:b2:ee:08:92:2b:72:be:cf:61:9f:41: 26:ad:d1:61:82:37:dd:00:e7:bf:34:33:08:95:62:19:b4:a4: 86:57:ad:3b:6f:ac:5e:83:0b:21:c1:54:fa:4b:de:da:2a:5b: 0d:20:3f:83:72:86:7c:c0:15:f8:8d:58:1e:64:9e:d5:1f:d5: 55:2c:ae:11:5a:c5:c0:87:da:53:01:3c:c8:53:b7:56:de:c2: db:1c:0b:73:1f:85:f9:a6:c1:c8:4d:bc:18:fd:ce:78:4d:c9: 19:05:64:bc:5a:79:13:91:05:73:67:fe:22:75:91:a3:45:bc: 17:76:65:1b:48:a5:ec:c4:01:f8:c7:59:02:3a:6a:a6:fc:e3: 28:e4:c1:f2:4c:5b:a8:be:32:60:3c:17:2d:ad:f4:2b:9d:0b: 9c:44:f2:dc:36:6d:d9:cb:52:97:f4:9b:26:82:ca:4a:f1:fe: ed:35:02:5f:c7:f1:bc:05:3e:25:21:96:65:f1:99:5a:c9:9a: c5:1f:3b:05:f6:c9:e6:e7:20:f9:8e:28:b8:99:10:21:c3:96: 6b:95:76:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRZFV1AhPatQDhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OGE5MWI5MDQtN2EwMS00MzFjLWE4ZjYtNDkzMTU3ZTU1MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgij4Peb4Ug0EeDt8ukuBWNpNgwf0IEUhJi/w 04t3huzjnjpb84h7z8eqOgaDpp3BdICIxaKBvAmDIZpWv3bSkvKjj0ZqhrUlg11j WDS7cCgZcMHD9wAAhdtOfzQ10XYHJjZ8m2kzQ6D7u7kTAzeZ7VxiSJ232aAsIMJa frN/dBnTNqhHTuzeC5bF/mkvecNnDLBrdTy2XdzNCqAjkzFlFTz93qq/Ht5kLBg5 U+hTvBzbIN7vEfEdM2C1+JL4Zb8bv2byTgnIF1ZXRigYeXJXX4Mn1B4MIXPaLV4Z CwWB0CD5DnKb/z/rglNUM2McHVAIYIAgHdHDkuJDz8HHtqcoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCeHHeTQtuQb69DSsP1/1t+NbBpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvN2Q4N2UzNmYtOGI3ZC0z YmE2LTgwZGItNjYyNDUzMzQxNGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0DVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+9FoXvrrSYvLGCiQSalPR4ZMEz6oZrWZKnbOwSniC2YSQjNCcYTYGl Qoqy7giSK3K+z2GfQSat0WGCN90A5780MwiVYhm0pIZXrTtvrF6DCyHBVPpL3toq Ww0gP4NyhnzAFfiNWB5kntUf1VUsrhFaxcCH2lMBPMhTt1bewtscC3MfhfmmwchN vBj9znhNyRkFZLxaeRORBXNn/iJ1kaNFvBd2ZRtIpezEAfjHWQI6aqb84yjkwfJM W6i+MmA8Fy2t9CudC5xE8tw2bdnLUpf0myaCykrx/u01Al/H8bwFPiUhlmXxmVrJ msUfOwX2yebnIPmOKLiZECHDlmuVdmY= -----END CERTIFICATE-----Generated at Wed May 13 04:46:47 2026 by rpki-client