$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce581118-9796-318a-b26f-79fe5e10b99d.roa File: ce581118-9796-318a-b26f-79fe5e10b99d.roa (raw, json) Hash identifier: rg2vyTP2dXbnv9h6bYrmBIvY7Q0ZBJsks1YZ4Ja44cs= Subject key identifier: 8A:0B:28:FE:E6:DC:78:F3:AE:04:F2:15:95:92:9A:F0:7A:42:28:98 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584DAC458EF9E6A8B08919101940 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce581118-9796-318a-b26f-79fe5e10b99d.roa Signing time: Thu 30 Apr 2026 01:00:26 +0000 ROA not before: Thu 30 Apr 2026 01:00:26 +0000 ROA not after: Wed 29 Jul 2026 01:00:26 +0000 asID: 11404 IP address blocks: 208.52.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ac:45:8e:f9:e6:a8:b0:89:19:10:19:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Apr 30 01:00:26 2026 GMT Not After : Jul 29 01:00:26 2026 GMT Subject: CN=8caafd0a-e421-46c5-90ee-84fca8a482b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f3:db:c6:ba:d4:dd:82:fe:4a:a1:57:ee:d3: 45:8d:9f:28:4f:35:7f:ce:0f:2f:eb:56:68:85:8d: 58:f3:70:c2:2d:96:b6:e1:53:06:fe:34:5e:83:dc: e6:89:09:87:78:28:f4:57:dc:eb:8f:fa:78:9c:14: 7f:8b:ec:1b:d4:6b:5d:82:24:ed:aa:37:78:71:e1: 41:c1:92:c2:68:cc:56:6e:45:16:6f:0d:bf:94:46: fe:34:3d:9d:13:58:6a:27:1f:27:53:30:ea:10:09: 8f:de:cd:90:66:34:7d:15:e4:45:fb:ee:21:2c:3b: 30:fa:cf:df:9a:c1:bc:ed:cd:4c:99:76:b0:8e:ec: 44:90:5b:39:f8:4f:94:f3:7f:55:17:92:84:97:61: 44:99:66:43:7b:fc:88:62:db:f6:93:1c:d8:ce:61: 91:b5:e2:87:f4:ae:12:41:33:e2:25:d1:7b:e1:62: c4:5a:cc:9e:2d:31:56:7b:b1:4d:8d:d7:56:5c:82: fb:d2:94:bb:be:f0:10:76:2e:8f:f0:5e:48:bc:48: f1:78:e8:0f:bc:db:d4:f2:21:7f:5d:98:26:f6:3e: ea:3f:f4:0b:f9:b6:cb:7e:8a:a3:7b:21:0f:49:1d: 03:57:fb:41:1d:0b:46:8f:d6:47:09:39:4b:59:2f: 05:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0B:28:FE:E6:DC:78:F3:AE:04:F2:15:95:92:9A:F0:7A:42:28:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/ce581118-9796-318a-b26f-79fe5e10b99d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 208.52.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f8:fd:14:f4:67:48:54:e5:73:1e:8d:ea:ce:ee:cf:e1:76: 72:7c:f4:40:a9:87:2e:44:ce:f9:f5:63:45:3f:89:65:a5:8b: ee:43:e3:51:7b:fb:96:36:e4:9c:74:3e:ae:55:89:92:27:13: bd:eb:8c:cb:b4:e6:17:42:b8:ee:e4:ab:ad:72:b0:b5:07:13: e1:1b:c5:fe:54:36:ae:ce:7f:3d:46:c8:45:32:df:53:6d:c2: 0d:80:da:c7:ac:98:ab:ac:8a:9e:e0:43:0b:49:3a:91:9b:28: 76:fb:15:5e:cb:c1:12:af:de:fb:5f:18:c2:cf:b5:30:03:94: 6b:18:b9:75:1a:24:ab:21:4d:ea:46:fc:d0:94:dd:6a:79:06: 23:0d:b5:b3:e3:33:de:d7:74:5e:25:de:0d:42:36:b0:89:af: 1d:39:36:bd:95:52:88:24:72:68:9a:06:33:41:40:c1:67:9c: 2e:49:0f:dc:66:c2:04:09:ae:71:7e:9e:9c:7c:3c:41:c8:f8: 6d:f9:1f:5c:f8:02:98:99:93:df:0e:b2:47:a4:94:33:14:7a: 79:96:8c:d2:ef:e9:a5:d2:7e:85:8d:18:1c:8f:f7:7c:00:09: c0:c0:d7:3d:72:ce:cf:53:9a:78:4a:85:47:01:a4:af:cf:d3: 5b:0f:00:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2sRY755qiwiRkQGUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk OGNhYWZkMGEtZTQyMS00NmM1LTkwZWUtODRmY2E4YTQ4MmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfPbxrrU3YL+SqFX7tNFjZ8oTzV/zg8v61Zo hY1Y83DCLZa24VMG/jReg9zmiQmHeCj0V9zrj/p4nBR/i+wb1GtdgiTtqjd4ceFB wZLCaMxWbkUWbw2/lEb+ND2dE1hqJx8nUzDqEAmP3s2QZjR9FeRF++4hLDsw+s/f msG87c1MmXawjuxEkFs5+E+U839VF5KEl2FEmWZDe/yIYtv2kxzYzmGRteKH9K4S QTPiJdF74WLEWsyeLTFWe7FNjddWXIL70pS7vvAQdi6P8F5IvEjxeOgPvNvU8iF/ XZgm9j7qP/QL+bbLfoqjeyEPSR0DV/tBHQtGj9ZHCTlLWS8FYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIoLKP7m3HjzrgTyFZWSmvB6QiiYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvY2U1ODExMTgtOTc5Ni0z MThhLWIyNmYtNzlmZTVlMTBiOTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH0DQAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX4/RT0Z0hU5XMejerO7s/hdnJ89ECphy5Ezvn1Y0U/iWWli+5D41F7 +5Y25Jx0Pq5ViZInE73rjMu05hdCuO7kq61ysLUHE+Ebxf5UNq7Ofz1GyEUy31Nt wg2A2sesmKusip7gQwtJOpGbKHb7FV7LwRKv3vtfGMLPtTADlGsYuXUaJKshTepG /NCU3Wp5BiMNtbPjM97XdF4l3g1CNrCJrx05Nr2VUogkcmiaBjNBQMFnnC5JD9xm wgQJrnF+npx8PEHI+G35H1z4ApiZk98OskeklDMUenmWjNLv6aXSfoWNGByP93wA CcDA1z1yzs9TmnhKhUcBpK/P01sPAEU= -----END CERTIFICATE-----Generated at Wed May 13 07:09:13 2026 by rpki-client