$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa File: 8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa (raw, json) Hash identifier: 1vnIONqWC6Cn8iORPPGqEHGIKGw1KB5nHEUUoSDQ7/4= Subject key identifier: 4B:46:E3:CF:0A:68:A8:4D:94:BA:B6:61:DF:EB:A0:87:8A:A3:0A:A1 Certificate issuer: /CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Certificate serial: 010D0C9F4328584D4A8F88E51BCCEA5181932500 Authority key identifier: 28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 22295 IP address blocks: 208.84.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:88:e5:1b:cc:ea:51:81:93:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f37bf68-67e7-4e67-a093-c88a3d7fe04d Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=d773fa9c-c40c-4bd2-9e14-6594aa585c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:20:99:97:cf:5a:0e:83:58:d9:9e:a2:dd:b8: a6:74:e6:ae:5d:7f:33:2e:7c:4d:69:77:c2:c1:d2: d9:c9:a8:07:44:49:68:ca:53:5e:6a:64:12:e1:e9: 5f:80:62:0f:14:60:7e:6d:5e:1f:ac:00:8b:32:37: 20:80:2a:5d:28:b7:7b:66:e8:20:1e:4b:08:2c:c8: 28:74:f9:e3:c2:dd:dd:21:60:e9:35:a9:c7:c5:3d: e5:f4:27:d7:ac:be:33:eb:b1:c2:45:80:12:ff:18: d9:2e:dd:0d:f1:9b:0e:f6:66:86:f4:83:16:1d:4a: ca:e1:fe:2a:db:7b:e3:28:e1:68:c3:50:22:7f:b2: 7a:6e:ae:48:61:a1:50:97:36:06:e6:e9:45:d5:14: b6:53:49:78:47:4d:1c:4d:b7:94:23:5b:df:e1:62: 56:95:48:8e:d6:69:19:c2:f5:51:e1:b1:77:58:fd: e7:da:df:82:e7:fa:de:62:91:4e:69:a7:ea:70:8e: 2d:b9:09:00:a1:4a:10:a8:c7:ea:c5:88:b4:be:2c: ba:81:f8:62:d4:a8:21:e0:81:11:53:5c:a3:b7:a1: f2:27:5e:31:1a:3b:f4:c3:83:20:47:0b:fe:82:65: 2a:ea:94:c8:25:a0:65:86:48:a1:35:76:8f:97:8c: 3f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:46:E3:CF:0A:68:A8:4D:94:BA:B6:61:DF:EB:A0:87:8A:A3:0A:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/8502887d-b3a6-3227-8f27-6e8c73f1d4a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.crl X509v3 Authority Key Identifier: keyid:28:4F:CF:92:96:C8:B0:BE:A6:99:D3:7F:06:B3:7E:9A:39:EA:8B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6f37bf68-67e7-4e67-a093-c88a3d7fe04d.cer sbgp-ipAddrBlock: critical IPv4: 208.84.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2f:82:b8:54:2c:b4:2e:c2:fc:b6:75:11:34:63:3c:c9:5b: f7:86:1b:4e:77:38:c3:26:48:d3:b2:b4:c3:e6:69:29:09:20: 05:b1:28:9f:81:e1:82:e6:9c:e4:9b:65:2f:19:20:b6:77:9c: d8:48:c4:3b:56:32:4b:64:78:fc:1e:e4:50:b9:ff:07:cb:34: 7e:c9:88:a5:0f:17:3b:0e:55:52:c0:2d:9a:c0:6a:6a:9e:c1: 2b:7f:6d:40:30:a6:b1:27:c7:6d:70:01:59:1d:cb:ba:8f:4a: a4:ca:12:de:9f:aa:fa:f2:3f:fa:8b:fe:78:3a:f6:6b:20:75: c1:70:a9:7f:59:a3:f2:22:5d:e1:c1:86:72:5e:9a:ec:00:54: 40:a5:57:61:c3:63:1c:0a:58:44:d2:ee:b6:29:05:de:e1:b4: b7:41:b4:ea:e7:bf:f8:b8:03:ed:2a:f3:6a:63:40:eb:c1:ef: 32:12:cc:58:0d:41:e6:a6:f3:b7:60:b1:02:0b:b0:47:11:7a: ab:29:c9:1f:f2:f9:8a:d9:de:fa:2d:9e:cb:c9:2f:b6:c0:57: d7:50:65:d8:d4:4b:19:5d:70:59:29:be:5b:c0:3c:f7:58:52: 43:db:f3:88:64:aa:02:e0:41:0d:c4:b4:ee:63:22:c3:79:56: 86:68:be:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj4jlG8zqUYGTJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmYzN2JmNjgtNjdlNy00ZTY3LWEwOTMtYzg4YTNkN2Zl MDRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk ZDc3M2ZhOWMtYzQwYy00YmQyLTllMTQtNjU5NGFhNTg1YzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyCZl89aDoNY2Z6i3bimdOauXX8zLnxNaXfC wdLZyagHREloylNeamQS4elfgGIPFGB+bV4frACLMjcggCpdKLd7ZuggHksILMgo dPnjwt3dIWDpNanHxT3l9CfXrL4z67HCRYAS/xjZLt0N8ZsO9maG9IMWHUrK4f4q 23vjKOFow1Aif7J6bq5IYaFQlzYG5ulF1RS2U0l4R00cTbeUI1vf4WJWlUiO1mkZ wvVR4bF3WP3n2t+C5/reYpFOaafqcI4tuQkAoUoQqMfqxYi0viy6gfhi1Kgh4IER U1yjt6HyJ14xGjv0w4MgRwv+gmUq6pTIJaBlhkihNXaPl4w/oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtG488KaKhNlLq2Yd/roIeKowqhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3 YmY2OC02N2U3LTRlNjctYTA5My1jODhhM2Q3ZmUwNGQvODUwMjg4N2QtYjNhNi0z MjI3LThmMjctNmU4YzczZjFkNGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmYzN2JmNjgtNjdlNy00ZTY3LWEw OTMtYzg4YTNkN2ZlMDRkLzZmMzdiZjY4LTY3ZTctNGU2Ny1hMDkzLWM4OGEzZDdm ZTA0ZC5jcmwwHwYDVR0jBBgwFoAUKE/PkpbIsL6mmdN/BrN+mjnqi7EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZjM3YmY2OC02N2U3LTRlNjctYTA5My1jODhh M2Q3ZmUwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkvgrhULLQuwvy2dRE0YzzJW/eGG053OMMmSNOytMPmaSkJIAWxKJ+B 4YLmnOSbZS8ZILZ3nNhIxDtWMktkePwe5FC5/wfLNH7JiKUPFzsOVVLALZrAamqe wSt/bUAwprEnx21wAVkdy7qPSqTKEt6fqvryP/qL/ng69msgdcFwqX9Zo/IiXeHB hnJemuwAVEClV2HDYxwKWETS7rYpBd7htLdBtOrnv/i4A+0q82pjQOvB7zISzFgN Qeam87dgsQILsEcReqspyR/y+YrZ3votnsvJL7bAV9dQZdjUSxldcFkpvlvAPPdY UkPb84hkqgLgQQ3EtO5jIsN5VoZovvw= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:11 2026 by rpki-client