$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa File: 977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa (raw, json) Hash identifier: /JvboE/8qRmVZ3yVWumFI/4BWeocfkXedYwtzEvoduQ= Subject key identifier: 8E:F8:07:D0:26:76:DE:BB:A7:0D:D2:2E:17:FB:83:E5:84:44:79:23 Certificate issuer: /CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Certificate serial: 010D0C9F4328584DA6B01C6157F66DF8F3D3E500 Authority key identifier: E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 14270 IP address blocks: 208.70.104.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:1c:61:57:f6:6d:f8:f3:d3:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85306d90-0f37-49a8-b00e-068a8e4ff307 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=c27ccccd-63b0-4de9-9b34-488e8cc7cc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:98:86:df:8d:e0:0c:fc:b3:5b:46:20:e2:69: f6:d9:8a:a2:fa:0a:2e:33:c8:5f:eb:ea:55:ac:dd: fe:ca:8c:a8:77:be:41:7d:ec:46:c2:57:a5:37:68: fd:5f:9b:1b:81:9f:94:d8:8a:37:1b:33:6c:d6:37: 10:94:40:c3:9a:87:37:f0:82:f0:b9:10:a0:94:6b: ce:3e:8f:f7:e6:1b:e1:1d:8c:e7:4a:b2:b4:31:1e: d3:2f:0a:08:d3:32:38:64:90:c6:ec:a6:e1:6f:b7: fe:0e:6d:d4:da:97:f4:7b:fd:12:09:d0:28:2c:0e: f9:d9:82:0b:4e:24:76:7f:84:a7:36:e7:8c:b0:68: 24:19:2d:15:b9:4b:65:6c:61:0b:4c:e8:48:b7:68: 32:ee:d0:ed:98:5f:19:34:4b:72:2f:a4:2a:b2:12: 02:1a:cd:ff:fe:26:f4:ff:44:09:3e:97:63:96:98: ca:98:a7:ba:db:72:d4:7c:77:5d:57:b5:29:f6:63: 37:d1:cb:6f:89:b7:31:71:3c:b4:1a:da:a7:db:e0: e1:fb:f5:0b:6b:d5:b5:43:fc:0a:d1:0d:28:3d:26: 9e:32:e4:d4:85:b8:07:da:f3:4d:c8:6f:f6:22:03: 57:da:f6:c2:33:38:75:28:2c:7e:fc:c7:d9:c4:ef: e4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F8:07:D0:26:76:DE:BB:A7:0D:D2:2E:17:FB:83:E5:84:44:79:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/977faaf0-79c3-3ddd-8bbd-83a1aa772226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307/85306d90-0f37-49a8-b00e-068a8e4ff307.crl X509v3 Authority Key Identifier: keyid:E9:6F:AF:8E:4F:E2:8D:8F:F6:58:AD:38:CE:9F:0F:5C:D1:58:FF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85306d90-0f37-49a8-b00e-068a8e4ff307.cer sbgp-ipAddrBlock: critical IPv4: 208.70.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e6:9a:3c:57:56:ed:ab:47:ea:72:e6:e7:3d:bb:ec:be:5d: 73:81:40:48:53:b9:4d:b4:22:e6:aa:60:57:4a:80:9c:3a:28: 6f:62:0e:31:6e:98:aa:ed:36:08:77:e9:6e:21:d7:a8:f0:a4: 48:46:5b:f3:84:b4:3d:4b:4a:25:18:8e:90:1e:6c:d7:cc:29: e1:31:0d:76:07:cb:aa:e5:6b:8d:bd:04:d1:12:04:ee:d1:1a: cc:c7:e5:88:6a:aa:ba:f7:5a:88:70:65:b1:17:d5:91:d8:eb: cd:a8:c8:ed:d8:3b:a2:1e:c2:58:bc:32:10:cd:1f:d1:80:d3: c9:33:93:6a:83:b3:85:ce:13:97:47:89:de:58:d6:47:fd:52: 9d:96:e4:40:66:ec:90:62:7c:99:34:53:78:f5:9a:2a:22:7b: 50:47:c3:ba:05:fe:0b:b0:54:2e:d3:c8:d4:1d:82:16:17:6c: 1d:f3:73:52:6b:07:4a:f2:ea:d1:83:c0:e5:7c:f6:c2:49:d9: 08:70:7b:87:c3:d9:6c:ae:f2:4e:ba:5e:c8:4b:f0:8b:d4:98: fd:d2:4e:5a:7a:91:f2:16:2a:1e:2c:01:f2:9e:03:7d:a0:81: 86:25:50:5f:d9:93:33:47:55:73:cd:ef:62:e5:cd:6e:fc:05: 79:7e:7d:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBxhV/Zt+PPT5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODUzMDZkOTAtMGYzNy00OWE4LWIwMGUtMDY4YThlNGZm MzA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YzI3Y2NjY2QtNjNiMC00ZGU5LTliMzQtNDg4ZThjYzdjYzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJiG343gDPyzW0Yg4mn22Yqi+gouM8hf6+pV rN3+yoyod75BfexGwlelN2j9X5sbgZ+U2Io3GzNs1jcQlEDDmoc38ILwuRCglGvO Po/35hvhHYznSrK0MR7TLwoI0zI4ZJDG7Kbhb7f+Dm3U2pf0e/0SCdAoLA752YIL TiR2f4SnNueMsGgkGS0VuUtlbGELTOhIt2gy7tDtmF8ZNEtyL6QqshICGs3//ib0 /0QJPpdjlpjKmKe623LUfHddV7Up9mM30ctvibcxcTy0Gtqn2+Dh+/ULa9W1Q/wK 0Q0oPSaeMuTUhbgH2vNNyG/2IgNX2vbCMzh1KCx+/MfZxO/kPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI74B9Amdt67pw3SLhf7g+WERHkjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMw NmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhhOGU0ZmYzMDcvOTc3ZmFhZjAtNzljMy0z ZGRkLThiYmQtODNhMWFhNzcyMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODUzMDZkOTAtMGYzNy00OWE4LWIw MGUtMDY4YThlNGZmMzA3Lzg1MzA2ZDkwLTBmMzctNDlhOC1iMDBlLTA2OGE4ZTRm ZjMwNy5jcmwwHwYDVR0jBBgwFoAU6W+vjk/ijY/2WK04zp8PXNFY//gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NTMwNmQ5MC0wZjM3LTQ5YTgtYjAwZS0wNjhh OGU0ZmYzMDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0EZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLmmjxXVu2rR+py5uc9u+y+XXOBQEhTuU20IuaqYFdKgJw6KG9iDjFu mKrtNgh36W4h16jwpEhGW/OEtD1LSiUYjpAebNfMKeExDXYHy6rla429BNESBO7R GszH5Yhqqrr3WohwZbEX1ZHY682oyO3YO6Iewli8MhDNH9GA08kzk2qDs4XOE5dH id5Y1kf9Up2W5EBm7JBifJk0U3j1mioie1BHw7oF/guwVC7TyNQdghYXbB3zc1Jr B0ry6tGDwOV89sJJ2Qhwe4fD2Wyu8k66XshL8IvUmP3STlp6kfIWKh4sAfKeA32g gYYlUF/ZkzNHVXPN72LlzW78BXl+fZY= -----END CERTIFICATE-----Generated at Wed May 13 03:04:51 2026 by rpki-client