$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa File: 940897aa-37fe-3fcf-805a-63ddb933a32a.roa (raw, json) Hash identifier: 6xZD1/6B2nd4neBMHyaVvpJlo8wGtJMsDxk9DQX0gSA= Subject key identifier: CA:32:3A:D4:D5:A8:5C:BC:CA:9A:3D:6E:15:58:32:C8:F0:58:83:F2 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC45860CF6774386E9AC0080 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 54858 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:86:0c:f6:77:43:86:e9:ac:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=00a72a0a-2470-462c-baee-bd1b04df6896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0f:a9:94:ad:03:af:57:9c:7b:8c:92:0c:10: aa:f8:95:67:bb:56:f7:a8:0a:90:30:b9:7f:97:7e: cc:5d:83:bb:e7:fa:35:b5:ab:8a:2c:cd:0d:77:51: 39:e3:e2:75:66:1b:44:e1:4f:e2:d0:14:52:eb:f3: 22:84:08:9a:5d:dc:95:5c:07:17:2d:b9:b0:1c:43: d8:dc:39:c8:6c:de:8c:b4:8c:96:54:24:a6:c2:5e: be:8d:92:20:58:bb:3d:f2:fc:97:f5:fa:01:5d:1a: 3e:04:e1:ef:fe:9d:c4:f0:29:19:f7:aa:de:4b:75: 75:f1:55:96:51:6d:7a:a1:96:4c:ec:e3:5b:a1:41: 7e:18:ba:ee:90:2a:6b:fc:d9:75:8d:58:42:da:42: bd:55:77:48:48:78:9d:05:a6:b5:22:8d:e3:80:af: f8:83:a6:64:54:5d:bb:73:1a:df:52:45:22:c3:a9: 64:d9:89:27:53:e1:59:db:a9:2c:59:1f:c4:ff:9b: 9e:2a:2f:16:14:82:53:ec:57:c8:e6:78:91:4f:e0: 0e:c3:34:70:87:90:e6:76:24:ef:f1:63:99:5a:a3: 8d:ab:fc:84:6a:0f:4e:3e:98:97:18:39:52:dc:61: 63:4c:ac:a5:24:f4:aa:00:23:69:25:e6:c0:13:b6: 9f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:32:3A:D4:D5:A8:5C:BC:CA:9A:3D:6E:15:58:32:C8:F0:58:83:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/940897aa-37fe-3fcf-805a-63ddb933a32a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:b6:2e:20:1e:08:87:08:95:ba:cc:18:bd:cb:78:39:30:78: 2d:da:e1:2b:59:e6:48:ea:e5:f7:42:40:b1:83:4a:f5:0b:41: ca:a2:dd:9d:f2:52:9b:5e:f7:39:9e:fa:4b:c3:06:f2:5e:79: e9:fc:7f:5e:36:7e:0b:3d:77:54:09:67:89:2b:a0:f6:6e:18: f4:1b:87:ca:30:46:7c:a8:5e:84:39:b8:b5:81:48:45:95:7e: ff:33:49:f4:4a:1c:55:a7:54:89:c4:01:24:08:fa:7c:09:10: d7:45:0d:e4:ec:1f:45:b4:be:3e:65:22:4e:eb:ac:4c:97:73: de:75:50:35:5d:b9:4d:29:ed:ea:ed:22:6d:26:47:70:ce:57: c1:00:b4:36:6e:97:97:f3:c9:56:bf:0b:aa:bd:29:b3:c4:df: 43:35:d0:dc:db:f8:32:1f:81:0e:72:83:c2:4b:bf:2a:fe:26: 60:4a:ee:c6:f4:b4:56:92:1e:59:9a:14:fb:d4:ba:68:29:eb: 87:f2:4f:ed:46:d1:a3:da:e8:5c:51:80:50:34:25:c4:00:9a: d4:ce:33:59:7d:95:1d:e6:83:04:44:9f:73:12:fd:ca:e9:af: 73:d0:63:1c:15:2a:64:84:af:cc:2c:cd:82:e2:bb:2d:fe:f6: e1:a1:c8:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRYYM9ndDhumsAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk MDBhNzJhMGEtMjQ3MC00NjJjLWJhZWUtYmQxYjA0ZGY2ODk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ+plK0Dr1ece4ySDBCq+JVnu1b3qAqQMLl/ l37MXYO75/o1tauKLM0Nd1E54+J1ZhtE4U/i0BRS6/MihAiaXdyVXAcXLbmwHEPY 3DnIbN6MtIyWVCSmwl6+jZIgWLs98vyX9foBXRo+BOHv/p3E8CkZ96reS3V18VWW UW16oZZM7ONboUF+GLrukCpr/Nl1jVhC2kK9VXdISHidBaa1Io3jgK/4g6ZkVF27 cxrfUkUiw6lk2YknU+FZ26ksWR/E/5ueKi8WFIJT7FfI5niRT+AOwzRwh5DmdiTv 8WOZWqONq/yEag9OPpiXGDlS3GFjTKylJPSqACNpJebAE7afcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoyOtTVqFy8ypo9bhVYMsjwWIPyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvOTQwODk3YWEtMzdmZS0z ZmNmLTgwNWEtNjNkZGI5MzNhMzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFW2LiAeCIcIlbrMGL3LeDkweC3a4StZ5kjq5fdCQLGDSvULQcqi3Z3y Upte9zme+kvDBvJeeen8f142fgs9d1QJZ4kroPZuGPQbh8owRnyoXoQ5uLWBSEWV fv8zSfRKHFWnVInEASQI+nwJENdFDeTsH0W0vj5lIk7rrEyXc951UDVduU0p7ert Im0mR3DOV8EAtDZul5fzyVa/C6q9KbPE30M10Nzb+DIfgQ5yg8JLvyr+JmBK7sb0 tFaSHlmaFPvUumgp64fyT+1G0aPa6FxRgFA0JcQAmtTOM1l9lR3mgwREn3MS/crp r3PQYxwVKmSEr8wszYLiuy3+9uGhyIo= -----END CERTIFICATE-----Generated at Wed May 13 04:10:16 2026 by rpki-client