$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa File: 6aca919f-7194-3657-a9cd-84082ad16747.roa (raw, json) Hash identifier: 3GgdwEqYsf6AkWguACTMt+TOhiug9fh/H7KoJeHorL0= Subject key identifier: 55:AE:95:23:C8:E7:EF:EA:A9:24:76:D2:A4:FF:0E:42:EA:11:84:91 Certificate issuer: /CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968 Certificate serial: 010D0C9F4328584D3F64D0B3A755FFE9FF2EB780 Authority key identifier: C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 19048 IP address blocks: 209.160.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d0:b3:a7:55:ff:e9:ff:2e:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2e5d70-fbb5-4b45-baa3-0763c26d4968 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=ffb1dd7c-83f9-4999-8192-426e2f1781b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:f2:85:31:e0:a0:70:c3:f9:d9:46:ba:34: 58:a5:1a:40:a5:bb:3a:e5:bd:ab:ab:70:cc:ce:5c: 39:71:e0:1c:01:91:e9:d8:d3:54:6c:ae:01:c0:1e: b5:56:66:45:61:2d:b8:75:51:29:26:2c:a1:e9:46: c5:eb:c2:a8:a2:2a:18:c5:84:d5:92:c6:d4:5e:17: 87:d0:35:b3:b5:6a:4e:62:59:f7:7a:d7:39:5e:ab: 54:ac:ff:7e:6d:fc:64:77:53:26:84:fd:be:16:aa: 91:27:ab:ae:62:2b:55:e3:62:18:20:9f:39:e4:d6: da:9e:86:91:18:e2:18:ec:a2:00:f4:7d:70:36:f7: 4b:87:ed:6b:a3:f0:84:47:58:91:cf:6d:0e:6b:01: 7a:d8:bd:80:b2:6e:36:2e:9e:41:f4:a6:d7:16:44: 64:4a:94:1a:c9:ec:14:1e:61:42:fb:52:e2:05:92: a9:37:3b:18:c7:64:27:01:9a:41:44:7e:f1:7f:7e: 07:10:d6:f7:39:a7:93:ac:76:7b:ab:a6:45:af:5e: de:4f:02:fd:44:ae:01:2b:20:9c:7f:f9:cf:b9:2e: 28:52:0b:3c:15:1f:45:f7:c8:e6:0f:7f:e0:8a:b0: 83:24:6e:bc:77:23:7f:00:57:07:a3:ad:17:68:f8: b6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:95:23:C8:E7:EF:EA:A9:24:76:D2:A4:FF:0E:42:EA:11:84:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/6aca919f-7194-3657-a9cd-84082ad16747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.crl X509v3 Authority Key Identifier: keyid:C8:B7:6E:20:04:83:AE:CE:D1:D1:DB:F7:E8:EC:7F:B0:D4:F3:76:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cd2e5d70-fbb5-4b45-baa3-0763c26d4968.cer sbgp-ipAddrBlock: critical IPv4: 209.160.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:55:3f:7e:88:50:1a:cd:23:20:99:dd:cc:2c:be:41:b3:6d: a5:18:f8:33:19:9a:21:1a:d5:a6:8d:8a:21:db:73:cb:ed:b8: 62:90:55:b8:ef:2a:fc:c0:ac:a1:6c:24:2b:60:da:7e:08:f2: 50:16:40:67:ef:42:1a:28:19:ef:df:da:bb:4b:1d:83:33:9f: 64:4c:d3:05:21:90:8b:b4:9f:f3:22:3e:de:d0:25:d2:b5:04: c8:1d:65:0b:5e:b5:ce:35:61:ee:82:fa:c0:59:1d:4e:1e:87: eb:a6:e9:77:dd:56:4b:bf:90:c2:1c:c4:2a:85:41:9b:ab:92: c3:23:11:42:1f:c0:51:4e:f8:bd:b4:5e:b9:c5:43:67:cb:66: 69:4b:9a:d9:29:de:c0:99:f0:49:bf:99:df:e6:3e:5e:69:af: 80:45:4c:0e:4c:d4:16:21:e8:c2:96:a4:50:4d:e6:fd:f3:89: c9:a7:bd:66:0e:68:90:d4:6f:97:8a:31:bf:eb:e2:9c:7e:ac: ce:9e:8a:c7:59:b8:0f:16:96:94:00:54:f0:41:f2:b3:06:f2: 0a:35:53:f6:44:58:ff:f1:97:40:9d:77:78:02:c4:2b:1b:b8: 19:a7:bc:68:4d:fd:21:45:dc:24:f7:3d:96:4a:2b:1c:2e:d6: e5:a7:31:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNCzp1X/6f8ut4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QyZTVkNzAtZmJiNS00YjQ1LWJhYTMtMDc2M2MyNmQ0 OTY4MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZmZiMWRkN2MtODNmOS00OTk5LTgxOTItNDI2ZTJmMTc4MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqvyhTHgoHDD+dlGujRYpRpApbs65b2rq3DM zlw5ceAcAZHp2NNUbK4BwB61VmZFYS24dVEpJiyh6UbF68KooioYxYTVksbUXheH 0DWztWpOYln3etc5XqtUrP9+bfxkd1MmhP2+FqqRJ6uuYitV42IYIJ855NbanoaR GOIY7KIA9H1wNvdLh+1ro/CER1iRz20OawF62L2Asm42Lp5B9KbXFkRkSpQayewU HmFC+1LiBZKpNzsYx2QnAZpBRH7xf34HENb3OaeTrHZ7q6ZFr17eTwL9RK4BKyCc f/nPuS4oUgs8FR9F98jmD3/girCDJG68dyN/AFcHo60XaPi2WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWulSPI5+/qqSR20qT/DkLqEYSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJl NWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYzYzI2ZDQ5NjgvNmFjYTkxOWYtNzE5NC0z NjU3LWE5Y2QtODQwODJhZDE2NzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2QyZTVkNzAtZmJiNS00YjQ1LWJh YTMtMDc2M2MyNmQ0OTY4L2NkMmU1ZDcwLWZiYjUtNGI0NS1iYWEzLTA3NjNjMjZk NDk2OC5jcmwwHwYDVR0jBBgwFoAUyLduIASDrs7R0dv36Ox/sNTzdnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZDJlNWQ3MC1mYmI1LTRiNDUtYmFhMy0wNzYz YzI2ZDQ5NjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0aBsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtVP36IUBrNIyCZ3cwsvkGzbaUY+DMZmiEa1aaNiiHbc8vtuGKQVbjv KvzArKFsJCtg2n4I8lAWQGfvQhooGe/f2rtLHYMzn2RM0wUhkIu0n/MiPt7QJdK1 BMgdZQtetc41Ye6C+sBZHU4eh+um6XfdVku/kMIcxCqFQZurksMjEUIfwFFO+L20 XrnFQ2fLZmlLmtkp3sCZ8Em/md/mPl5pr4BFTA5M1BYh6MKWpFBN5v3zicmnvWYO aJDUb5eKMb/r4px+rM6eisdZuA8WlpQAVPBB8rMG8go1U/ZEWP/xl0Cdd3gCxCsb uBmnvGhN/SFF3CT3PZZKKxwu1uWnMZI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:22:07 2026 by rpki-client