$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa File: 8a3f049a-082e-37d8-a095-87f3ea292ab9.roa (raw, json) Hash identifier: NDG6l+Cm4TSBJz3IKLaLh3kpZotbvZZIHjrjMMOqV7Y= Subject key identifier: 6B:93:E3:B5:A6:7B:85:97:37:F7:11:46:95:BC:C4:36:34:AC:49:54 Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395 Certificate serial: 010D0C9F4328584D49573682650B068366A5AAA0 Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa Signing time: Wed 25 Mar 2026 14:31:18 +0000 ROA not before: Wed 25 Mar 2026 14:31:18 +0000 ROA not after: Tue 23 Jun 2026 14:31:18 +0000 asID: 401783 IP address blocks: 70.39.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:57:36:82:65:0b:06:83:66:a5:aa:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395 Validity Not Before: Mar 25 14:31:18 2026 GMT Not After : Jun 23 14:31:18 2026 GMT Subject: CN=6a40a8a1-7d87-46cd-a2c3-ba8824ba3c57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3c:b1:b7:9d:df:54:25:5d:fe:ba:92:28:b9: 2f:0d:c1:ed:f5:bb:6e:d0:f2:f2:81:3d:d6:47:13: 6d:b2:fe:dc:e7:fb:da:26:bd:86:a7:72:20:15:4f: 25:29:a2:4f:c3:6e:cd:72:f2:b2:36:cf:e1:3a:91: 66:73:54:a2:74:31:bf:8f:b2:a0:16:57:75:2b:c5: 18:22:1f:bd:e0:b0:8f:15:f4:46:e4:28:4f:ca:be: 37:94:66:d3:d2:28:5e:bb:ea:36:d8:df:37:aa:2c: 95:17:a3:61:6f:e8:d5:00:ce:60:fd:8a:22:4d:d5: 76:b6:69:26:20:6c:00:03:ab:83:6e:ca:3d:91:42: 3c:41:3f:b4:ad:24:57:f7:be:1f:ce:19:48:fd:1f: c4:75:05:03:62:c1:88:85:1d:59:41:ca:8a:79:bf: c6:63:d3:42:93:40:2a:84:05:77:a4:50:86:ab:cf: df:cc:1f:69:8a:e5:ab:11:3e:a1:8a:3f:11:3d:96: f3:19:b0:98:5d:1b:7a:aa:cc:19:78:3c:18:9a:e5: a8:22:2d:44:b3:c3:3d:60:e3:7b:cd:e8:10:1d:42: a1:70:07:7e:25:a8:7c:a0:f9:5d:ce:03:20:b1:51: 37:85:66:fa:e3:77:eb:be:12:53:69:d9:1d:46:4d: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:93:E3:B5:A6:7B:85:97:37:F7:11:46:95:BC:C4:36:34:AC:49:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8a3f049a-082e-37d8-a095-87f3ea292ab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl X509v3 Authority Key Identifier: keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer sbgp-ipAddrBlock: critical IPv4: 70.39.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:dc:cf:75:f4:cb:95:9e:e6:c0:fd:8f:ba:82:48:0a:ab:db: cf:3b:54:74:c3:76:e6:62:86:f4:b9:e1:3e:e4:71:6d:23:ce: 0d:9e:fa:e3:96:fc:f4:a1:7a:93:23:b2:7e:93:6b:3a:9f:e1: 07:df:35:d2:6f:0f:76:e7:4c:b8:e2:d1:29:e4:45:58:49:e9: da:58:94:80:92:4b:9a:3b:55:f9:3f:29:f2:86:7a:8e:cd:36: 9d:f1:2c:22:b0:58:7f:22:27:79:7f:43:29:1c:13:be:28:f9: f7:a8:56:bc:e0:7a:68:a6:c9:e7:a1:9d:69:bd:80:24:06:eb: 87:30:72:5f:27:b0:a2:a2:16:3c:41:01:1b:3a:aa:3d:01:0b: 42:36:7f:b4:98:23:ad:eb:ff:36:6b:89:62:98:dc:a2:49:63: df:2f:38:b7:77:7b:79:10:e5:2f:de:62:aa:dd:a4:c8:2c:dc: 3d:70:7f:80:7a:06:1b:1d:46:b5:02:2b:a9:8b:17:df:f2:8a: 09:19:10:cc:dd:e7:8c:a5:8f:b3:04:43:bb:07:48:48:90:5c: 1f:ff:91:46:4b:dc:1f:61:1a:5a:10:6f:fc:82:84:60:5b:cb: dc:a2:76:65:58:0f:d9:cd:a2:06:4f:6f:8a:5b:8e:e8:3c:98: 97:81:76:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JVzaCZQsGg2alqqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MDY2MGYtZTA2Yy00M2VlLTkxMGQtZDRiNDcyZmRj Mzk1MB4XDTI2MDMyNTE0MzExOFoXDTI2MDYyMzE0MzExOFowLzEtMCsGA1UEAxMk NmE0MGE4YTEtN2Q4Ny00NmNkLWEyYzMtYmE4ODI0YmEzYzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzyxt53fVCVd/rqSKLkvDcHt9btu0PLygT3W RxNtsv7c5/vaJr2Gp3IgFU8lKaJPw27NcvKyNs/hOpFmc1SidDG/j7KgFld1K8UY Ih+94LCPFfRG5ChPyr43lGbT0iheu+o22N83qiyVF6Nhb+jVAM5g/YoiTdV2tmkm IGwAA6uDbso9kUI8QT+0rSRX974fzhlI/R/EdQUDYsGIhR1ZQcqKeb/GY9NCk0Aq hAV3pFCGq8/fzB9piuWrET6hij8RPZbzGbCYXRt6qswZeDwYmuWoIi1Es8M9YON7 zegQHUKhcAd+Jah8oPldzgMgsVE3hWb643frvhJTadkdRk22nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGuT47Wme4WXN/cRRpW8xDY0rElUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84NDUw NjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0NzJmZGMzOTUvOGEzZjA0OWEtMDgyZS0z N2Q4LWEwOTUtODdmM2VhMjkyYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODQ1MDY2MGYtZTA2Yy00M2VlLTkx MGQtZDRiNDcyZmRjMzk1Lzg0NTA2NjBmLWUwNmMtNDNlZS05MTBkLWQ0YjQ3MmZk YzM5NS5jcmwwHwYDVR0jBBgwFoAUaSV1dwQ7lbF+FkhyBO8jrAqogc0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84NDUwNjYwZi1lMDZjLTQzZWUtOTEwZC1kNGI0 NzJmZGMzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARifzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGncz3X0y5We5sD9j7qCSAqr2887VHTDduZihvS54T7kcW0jzg2e+uOW /PShepMjsn6Tazqf4QffNdJvD3bnTLji0SnkRVhJ6dpYlICSS5o7Vfk/KfKGeo7N Np3xLCKwWH8iJ3l/QykcE74o+feoVrzgemimyeehnWm9gCQG64cwcl8nsKKiFjxB ARs6qj0BC0I2f7SYI63r/zZriWKY3KJJY98vOLd3e3kQ5S/eYqrdpMgs3D1wf4B6 BhsdRrUCK6mLF9/yigkZEMzd54ylj7MEQ7sHSEiQXB//kUZL3B9hGloQb/yChGBb y9yidmVYD9nNogZPb4pbjug8mJeBdhU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:37:08 2026 by rpki-client