$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa File: 08907099-391f-3bc0-aa7a-ec8730b3de2a.roa (raw, json) Hash identifier: oRKkGB7NWsT5qBaJTlTMaz9lb3RZ0pm9poaZSau21BE= Subject key identifier: 33:85:00:6F:F7:27:AF:90:70:5A:03:53:0B:8A:9B:B1:B2:17:53:18 Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Certificate serial: 010D0C9F4328584D4A8FAC5B1A2038E50597B240 Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 208.81.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:ac:5b:1a:20:38:e5:05:97:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74 Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=d43bacf3-4cf4-448a-ab77-f56fb5e98000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2a:ac:08:2c:c9:f8:0d:79:b9:28:ef:63:e8: f1:20:34:08:83:81:b6:9d:46:11:28:84:44:43:41: 1e:25:5f:e2:f1:a7:64:82:e9:e7:88:35:e0:80:2e: 9b:35:6f:13:7c:2e:fe:f7:97:e7:9a:fa:b4:11:5e: e7:34:6e:40:c3:0d:40:82:47:ec:8e:56:0f:c5:59: 6b:f7:43:37:b4:df:2a:70:ce:cf:3d:bd:9b:e6:d2: b8:50:7b:09:5b:74:d0:11:09:7a:8c:f9:10:22:6c: 13:81:70:96:2f:65:f7:e7:cc:07:74:f3:4e:1e:b7: e1:26:f5:fb:15:1b:48:f1:6f:a9:36:03:c7:68:11: 8a:da:e9:27:95:14:52:c6:b4:bd:e0:5b:ce:22:f8: db:0b:a4:1b:1b:9d:18:1c:6e:7e:fd:94:72:12:85: c1:89:41:1f:29:6c:3f:55:d4:89:aa:3c:a2:15:b3: 79:1a:b2:4d:4b:c9:43:46:43:ca:24:af:db:bb:a7: ed:b6:78:3b:73:b0:22:50:55:82:2a:a1:57:6e:99: 7b:af:35:19:02:4f:f5:81:24:b0:ff:d4:f0:34:c4: cd:db:19:c1:80:39:6a:c8:22:0b:ae:41:5d:0e:1d: cb:07:9a:07:8a:48:89:c1:98:cf:5f:cc:2c:35:fc: 1f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:85:00:6F:F7:27:AF:90:70:5A:03:53:0B:8A:9B:B1:B2:17:53:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/08907099-391f-3bc0-aa7a-ec8730b3de2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl X509v3 Authority Key Identifier: keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer sbgp-ipAddrBlock: critical IPv4: 208.81.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a6:2f:45:59:60:d8:09:b7:d3:e8:9e:d0:bf:41:a3:7a:ca: df:9f:47:49:7d:2a:79:c4:0f:aa:4f:82:91:ec:11:fd:c8:8c: 67:ba:01:43:21:54:5b:1c:1a:bb:94:ed:72:f2:de:2a:d2:74: d5:c5:c1:dc:35:37:0d:e1:d4:c8:37:eb:27:d9:09:55:a0:3e: 7c:fe:12:b4:2b:22:69:a8:16:fe:fe:a9:90:3a:d6:44:80:b3: fe:1d:ed:74:e2:0c:c2:19:fd:81:5d:c4:37:8e:e7:2b:42:f7: 99:49:28:60:60:7f:2a:f0:e5:3d:1d:33:03:41:0d:45:62:d3: ea:14:18:c0:50:62:4b:3f:a8:76:37:07:00:94:12:93:b7:1f: 97:2a:0c:37:97:71:4d:ea:38:5a:4e:cb:67:a5:61:fb:bc:e0: f6:92:63:4c:0f:b9:52:1d:7e:09:99:77:60:ac:23:a6:86:51: 53:5b:50:22:21:c5:37:00:eb:71:f4:9d:2f:2f:67:bf:55:f9: 25:3d:26:77:e7:3a:f1:f3:73:0f:65:be:7b:ab:3e:e3:12:df: e3:2b:5d:e7:9f:fa:4d:8b:db:53:f8:54:db:b3:14:8b:8d:af: 52:0d:0e:c8:23:28:b5:a8:ff:5f:48:41:ad:99:ff:19:be:45: dc:8d:29:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj6xbGiA45QWXskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE5OTE2ZDUtMTE0NC00ZmVhLThlZTUtNTA5ZThkODk3 Yjc0MB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZDQzYmFjZjMtNGNmNC00NDhhLWFiNzctZjU2ZmI1ZTk4MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyqsCCzJ+A15uSjvY+jxIDQIg4G2nUYRKIRE Q0EeJV/i8adkgunniDXggC6bNW8TfC7+95fnmvq0EV7nNG5Aww1AgkfsjlYPxVlr 90M3tN8qcM7PPb2b5tK4UHsJW3TQEQl6jPkQImwTgXCWL2X358wHdPNOHrfhJvX7 FRtI8W+pNgPHaBGK2uknlRRSxrS94FvOIvjbC6QbG50YHG5+/ZRyEoXBiUEfKWw/ VdSJqjyiFbN5GrJNS8lDRkPKJK/bu6fttng7c7AiUFWCKqFXbpl7rzUZAk/1gSSw /9TwNMTN2xnBgDlqyCILrkFdDh3LB5oHikiJwZjPX8wsNfwffQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOFAG/3J6+QcFoDUwuKm7GyF1MYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YTk5 MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDllOGQ4OTdiNzQvMDg5MDcwOTktMzkxZi0z YmMwLWFhN2EtZWM4NzMwYjNkZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWE5OTE2ZDUtMTE0NC00ZmVhLThl ZTUtNTA5ZThkODk3Yjc0LzlhOTkxNmQ1LTExNDQtNGZlYS04ZWU1LTUwOWU4ZDg5 N2I3NC5jcmwwHwYDVR0jBBgwFoAUvNYefeULuN7ELAYLMsx8gHspgoAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85YTk5MTZkNS0xMTQ0LTRmZWEtOGVlNS01MDll OGQ4OTdiNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FFFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2mL0VZYNgJt9PontC/QaN6yt+fR0l9KnnED6pPgpHsEf3IjGe6AUMh VFscGruU7XLy3irSdNXFwdw1Nw3h1Mg36yfZCVWgPnz+ErQrImmoFv7+qZA61kSA s/4d7XTiDMIZ/YFdxDeO5ytC95lJKGBgfyrw5T0dMwNBDUVi0+oUGMBQYks/qHY3 BwCUEpO3H5cqDDeXcU3qOFpOy2elYfu84PaSY0wPuVIdfgmZd2CsI6aGUVNbUCIh xTcA63H0nS8vZ79V+SU9JnfnOvHzcw9lvnurPuMS3+MrXeef+k2L21P4VNuzFIuN r1INDsgjKLWo/19IQa2Z/xm+RdyNKdQ= -----END CERTIFICATE-----Generated at Thu Mar 26 04:26:51 2026 by rpki-client