$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa File: 2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa (raw, json) Hash identifier: 6Y3s1mup0iffq4XbWQFv85rT5BPkx1mb9t0JUP79dVI= Subject key identifier: E4:42:CC:0E:8B:88:7D:60:E9:2F:15:9B:21:40:DD:86:AC:04:3C:23 Certificate issuer: /CN=a8825ed0-210f-48ae-8970-c92773afbb48 Certificate serial: 010D0C9F4328584D1B19E885BEB6ACC27B53CF00 Authority key identifier: BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 16766 IP address blocks: 208.122.32.0/21 maxlen: 24 208.122.40.0/23 maxlen: 24 208.122.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:e8:85:be:b6:ac:c2:7b:53:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8825ed0-210f-48ae-8970-c92773afbb48 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=96515a55-6023-4cd5-a2cc-68646c126fa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:70:e2:94:25:05:8c:78:2c:a1:18:0f:83:de: bb:cf:16:2f:0b:53:a8:34:b3:1e:32:36:cb:95:1b: a0:82:9d:56:d2:e2:3e:14:0b:f4:27:f6:ed:69:11: 53:92:2b:03:98:dc:f3:8c:bc:e0:89:66:29:c5:0c: 83:e9:c5:ce:88:0a:b8:56:27:f0:5f:48:86:d8:8f: fc:1d:bb:f5:49:19:52:98:8b:a7:7d:1d:9e:1b:0f: 43:a3:91:e8:fb:53:22:95:64:28:71:d2:11:92:84: f8:25:6e:83:ff:52:a7:e6:d6:8a:6f:f2:3c:f7:78: df:c1:39:34:b0:d7:1e:fe:3d:32:40:d6:21:53:bd: 74:32:e2:49:f1:77:01:29:e9:b7:f5:1c:01:db:c7: e0:e4:fc:43:fb:c0:e7:b2:d1:6c:f4:4a:53:b2:a7: 85:54:af:36:22:33:c3:20:a4:1e:4a:28:c4:cd:30: ab:46:fa:2f:71:71:09:a9:ce:0a:9e:9f:e3:04:fa: 34:3b:a3:5d:b4:9e:85:19:3a:e2:10:16:ed:04:52: 6f:67:5a:ed:d4:59:b0:ac:26:67:8f:49:ab:4a:83: 4b:73:de:73:35:3d:d2:2c:2a:e6:55:cd:84:ed:36: e6:7b:52:04:55:38:eb:0c:82:49:48:90:cd:34:a9: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:42:CC:0E:8B:88:7D:60:E9:2F:15:9B:21:40:DD:86:AC:04:3C:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/2ea7cf59-7a14-391b-9bfc-a46d16cc748b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48/a8825ed0-210f-48ae-8970-c92773afbb48.crl X509v3 Authority Key Identifier: keyid:BB:05:A6:DB:1E:78:00:E8:BE:0B:20:56:D5:A8:DD:B9:18:E2:3F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a8825ed0-210f-48ae-8970-c92773afbb48.cer sbgp-ipAddrBlock: critical IPv4: 208.122.32.0-208.122.42.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9c:18:4d:fb:59:ff:11:ac:03:be:49:54:59:dc:d2:5a:9a: 97:93:67:02:09:85:1a:b2:e3:a9:d7:d5:c8:09:54:95:cd:30: 6d:7d:2c:00:e2:15:1a:df:dc:a7:44:5d:05:2b:62:d7:e6:c5: a9:b5:21:33:ab:de:9e:3c:bc:94:33:9c:61:7a:26:97:b0:b8: 3c:4d:68:d2:d7:77:a4:bf:be:81:ee:fe:58:30:01:1c:ef:90: 02:f5:91:5b:4d:93:62:6c:84:7c:0b:a4:5f:32:8d:45:0f:c5: 0f:97:30:3b:f2:60:a9:e0:55:b3:b8:ae:1f:b3:22:d0:92:0e: ff:95:eb:52:73:ee:15:25:47:5a:40:94:ed:12:9c:91:9f:b5: c7:8e:ef:19:79:4d:e6:73:65:db:67:aa:be:ef:cc:f9:3f:71: 2b:52:af:ce:71:b8:7d:52:d3:d9:37:15:64:c0:5d:03:34:b7: d5:03:c5:a4:9b:93:1c:d8:18:49:da:b0:8a:75:9f:64:dd:b0: a8:dc:cb:e8:c1:58:9c:db:29:20:39:45:dc:d5:e1:6e:ff:f9: 82:fa:4d:52:f3:9b:97:b6:8e:88:24:43:5e:d9:92:19:75:bf: e8:f8:e9:a1:45:72:db:4e:91:9f:cf:b8:e9:74:df:02:46:33: e8:57:b6:f7 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE0bGeiFvraswntTzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTg4MjVlZDAtMjEwZi00OGFlLTg5NzAtYzkyNzczYWZi YjQ4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk OTY1MTVhNTUtNjAyMy00Y2Q1LWEyY2MtNjg2NDZjMTI2ZmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHDilCUFjHgsoRgPg967zxYvC1OoNLMeMjbL lRuggp1W0uI+FAv0J/btaRFTkisDmNzzjLzgiWYpxQyD6cXOiAq4VifwX0iG2I/8 Hbv1SRlSmIunfR2eGw9Do5Ho+1MilWQocdIRkoT4JW6D/1Kn5taKb/I893jfwTk0 sNce/j0yQNYhU710MuJJ8XcBKem39RwB28fg5PxD+8DnstFs9EpTsqeFVK82IjPD IKQeSijEzTCrRvovcXEJqc4Knp/jBPo0O6NdtJ6FGTriEBbtBFJvZ1rt1FmwrCZn j0mrSoNLc95zNT3SLCrmVc2E7Tbme1IEVTjrDIJJSJDNNKl+rQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFORCzA6LiH1g6S8VmyFA3YasBDwjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgy NWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3NzNhZmJiNDgvMmVhN2NmNTktN2ExNC0z OTFiLTliZmMtYTQ2ZDE2Y2M3NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTg4MjVlZDAtMjEwZi00OGFlLTg5 NzAtYzkyNzczYWZiYjQ4L2E4ODI1ZWQwLTIxMGYtNDhhZS04OTcwLWM5Mjc3M2Fm YmI0OC5jcmwwHwYDVR0jBBgwFoAUuwWm2x54AOi+CyBW1ajduRjiP2UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hODgyNWVkMC0yMTBmLTQ4YWUtODk3MC1jOTI3 NzNhZmJiNDguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXQeiAD BADQeiowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAY5wYTftZ/xGsA75JVFnc0lqal5NnAgmFGrLjqdfVyAlU lc0wbX0sAOIVGt/cp0RdBSti1+bFqbUhM6venjy8lDOcYXoml7C4PE1o0td3pL++ ge7+WDABHO+QAvWRW02TYmyEfAukXzKNRQ/FD5cwO/JgqeBVs7iuH7Mi0JIO/5Xr UnPuFSVHWkCU7RKckZ+1x47vGXlN5nNl22eqvu/M+T9xK1KvznG4fVLT2TcVZMBd AzS31QPFpJuTHNgYSdqwinWfZN2wqNzL6MFYnNspIDlF3NXhbv/5gvpNUvObl7aO iCRDXtmSGXW/6PjpoUVy206Rn8+46XTfAkYz6Fe29w== -----END CERTIFICATE-----Generated at Sat Mar 28 10:44:14 2026 by rpki-client