$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a3b2063-9d0a-30ec-acc3-0430e5827960.roa File: 8a3b2063-9d0a-30ec-acc3-0430e5827960.roa (raw, json) Hash identifier: 494yZVERqpOeX/pYdf0HDQWbrh6N0xdjB9FmdqpuL34= Subject key identifier: B2:EB:82:75:2C:E0:7D:D0:A8:FC:76:4E:AD:39:E8:69:00:C0:3E:40 Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Certificate serial: 010D0C9F4328584D44FA73D1E1EB5816853D5280 Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a3b2063-9d0a-30ec-acc3-0430e5827960.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 203217 IP address blocks: 204.157.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:73:d1:e1:eb:58:16:85:3d:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=4ece69ce-1105-4426-92ab-86321ceea551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:49:f3:f4:5c:0e:0c:8d:a1:24:64:d3:39: b9:1a:9c:ca:7d:f4:92:6f:aa:44:10:99:07:33:5d: a6:94:a7:b4:19:84:63:0e:2d:ea:7f:c8:cb:64:5a: 1b:f5:b9:d3:b3:c6:31:a9:cc:f1:ab:fe:22:0b:4e: 70:94:0c:7e:0a:8a:83:77:08:75:38:43:7b:58:c6: a1:32:96:ea:29:22:a3:c9:05:0b:be:82:d1:24:31: f0:1d:69:f6:54:c7:6f:58:d3:64:4d:62:bd:79:b2: 7a:24:30:fb:52:14:22:ce:a9:97:5d:7e:ce:07:db: ee:38:b3:fb:7b:bd:7d:4a:2f:3e:08:8c:ea:fc:c9: d8:9a:ed:62:c8:37:3d:b8:1e:3a:a0:5e:c1:c1:7e: 12:2e:59:43:ec:9b:f5:d4:a7:a0:e6:2c:7e:c4:11: 6b:78:20:63:8f:5b:b2:93:b0:d8:8a:91:c1:97:d3: 3a:77:d6:9e:05:75:4e:f8:cc:45:8d:fa:62:75:90: e7:96:c0:21:e9:43:c5:34:54:55:2c:b8:44:bb:3c: 61:76:3d:84:55:ab:e1:36:f6:c9:1b:99:4f:df:1f: 60:76:19:b5:7d:15:36:1b:be:ce:e3:97:a1:1d:39: da:4e:72:e2:41:90:35:f8:77:7a:ab:8c:6b:81:7d: 72:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EB:82:75:2C:E0:7D:D0:A8:FC:76:4E:AD:39:E8:69:00:C0:3E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/8a3b2063-9d0a-30ec-acc3-0430e5827960.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl X509v3 Authority Key Identifier: keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer sbgp-ipAddrBlock: critical IPv4: 204.157.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:da:b7:5c:ae:bc:36:c0:52:5b:dc:fa:4c:a4:e2:7a:de:b3: 97:34:bd:46:de:0c:17:5e:6a:9f:50:03:3c:0e:21:75:11:1d: 0b:36:3f:ff:ce:18:00:c0:91:e6:41:99:bb:98:17:6f:0a:b0: 46:e3:aa:21:f1:b4:57:ee:7d:40:ad:d8:86:be:8e:3b:47:59: 55:de:64:94:b8:fb:94:87:16:eb:e8:35:6f:77:4a:a3:1d:c4: 3e:a9:80:9e:6f:18:e5:8b:7a:ff:be:a1:e2:b1:b1:b9:80:ed: 73:fa:31:06:70:79:f5:f8:c9:41:99:56:0d:0d:25:49:19:cd: 7b:a1:a4:f1:eb:6e:a0:49:91:b1:71:b9:cf:de:19:d9:09:f0: d0:74:e7:f6:ba:74:0e:ca:42:62:82:ae:6d:d2:ec:17:18:34: c8:66:fd:11:98:07:e0:fd:00:cf:ea:8a:d3:f5:11:8f:0b:1e: 57:31:96:ef:e6:8c:7a:e2:ac:dc:f6:7b:c4:bd:25:7d:8c:0d: 9d:81:65:eb:65:57:07:b7:76:ab:92:2a:b2:19:10:98:3c:5a: 0f:73:fd:3f:41:78:31:e0:f6:bd:10:1c:42:ad:1d:14:61:bc: a5:94:99:2a:4c:b2:b9:46:c9:9a:76:6e:0f:ee:85:76:74:79: de:8e:44:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+nPR4etYFoU9UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0 MDI0MB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NGVjZTY5Y2UtMTEwNS00NDI2LTkyYWItODYzMjFjZWVhNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgJJ8/RcDgyNoSRk0zm5GpzKffSSb6pEEJkH M12mlKe0GYRjDi3qf8jLZFob9bnTs8Yxqczxq/4iC05wlAx+CoqDdwh1OEN7WMah MpbqKSKjyQULvoLRJDHwHWn2VMdvWNNkTWK9ebJ6JDD7UhQizqmXXX7OB9vuOLP7 e719Si8+CIzq/MnYmu1iyDc9uB46oF7BwX4SLllD7Jv11Keg5ix+xBFreCBjj1uy k7DYipHBl9M6d9aeBXVO+MxFjfpidZDnlsAh6UPFNFRVLLhEuzxhdj2EVavhNvbJ G5lP3x9gdhm1fRU2G77O45ehHTnaTnLiQZA1+Hd6q4xrgX1yJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLrgnUs4H3QqPx2Tq056GkAwD5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3 YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvOGEzYjIwNjMtOWQwYS0z MGVjLWFjYzMtMDQzMGU1ODI3OTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzJ2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjat1yuvDbAUlvc+kyk4nres5c0vUbeDBdeap9QAzwOIXURHQs2P//O GADAkeZBmbuYF28KsEbjqiHxtFfufUCt2Ia+jjtHWVXeZJS4+5SHFuvoNW93SqMd xD6pgJ5vGOWLev++oeKxsbmA7XP6MQZwefX4yUGZVg0NJUkZzXuhpPHrbqBJkbFx uc/eGdkJ8NB05/a6dA7KQmKCrm3S7BcYNMhm/RGYB+D9AM/qitP1EY8LHlcxlu/m jHrirNz2e8S9JX2MDZ2BZetlVwe3dquSKrIZEJg8Wg9z/T9BeDHg9r0QHEKtHRRh vKWUmSpMsrlGyZp2bg/uhXZ0ed6ORGM= -----END CERTIFICATE-----Generated at Thu Mar 26 03:48:28 2026 by rpki-client