$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/3aeab8b8-71b4-3fe6-b1ee-4a379cad7c23.roa File: 3aeab8b8-71b4-3fe6-b1ee-4a379cad7c23.roa (raw, json) Hash identifier: RJDqr0V0KFgCXqChPanfvJ7lP2s8+owsvEmsByFBA9Y= Subject key identifier: 11:12:51:4A:65:4D:96:54:21:81:24:04:4A:98:F7:F5:17:CC:4E:D5 Certificate issuer: /CN=0d91c5f3-bd33-4005-85ef-85a756711335 Certificate serial: 010D0C9F4328584D15A251FAC96B926E45A47A00 Authority key identifier: D3:E5:CE:1A:88:26:E6:79:8A:95:CD:14:8A:28:97:BB:6C:62:99:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/3aeab8b8-71b4-3fe6-b1ee-4a379cad7c23.roa Signing time: Sat 07 Mar 2026 02:00:32 +0000 ROA not before: Sat 07 Mar 2026 02:00:32 +0000 ROA not after: Fri 05 Jun 2026 01:00:32 +0000 asID: 8070 IP address blocks: 208.68.130.0/24 maxlen: 24 208.68.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/0d91c5f3-bd33-4005-85ef-85a756711335.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/0d91c5f3-bd33-4005-85ef-85a756711335.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:15:a2:51:fa:c9:6b:92:6e:45:a4:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d91c5f3-bd33-4005-85ef-85a756711335 Validity Not Before: Mar 7 02:00:32 2026 GMT Not After : Jun 5 01:00:32 2026 GMT Subject: CN=5952cdb6-4d34-495a-9598-4b2664d76d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:cb:a2:42:fb:c6:56:02:0d:40:18:4d:c8: 2a:4f:d4:d1:63:76:49:32:76:1a:c2:22:21:06:00: 0e:17:e1:85:6e:f1:57:20:31:94:93:f9:a5:cd:85: a8:33:1c:cf:d5:44:44:1f:db:dc:cd:ca:48:73:44: cc:25:42:56:3a:42:5a:fd:c3:94:67:b6:6a:c7:1b: 6e:20:4d:de:ce:95:f0:f5:14:b5:20:c4:6b:c3:b1: ae:5c:d3:bc:33:b0:16:49:a8:7b:19:c6:f4:5d:38: 41:e5:28:5c:36:92:88:81:a6:65:79:48:41:07:0e: d8:a4:98:88:57:00:1f:ee:c2:d8:2e:24:77:b8:de: ab:66:15:fa:34:64:c4:ca:2b:f6:77:7b:c1:c2:20: da:7c:9b:a9:21:14:bf:5d:d3:74:39:07:54:e7:04: 38:46:a6:16:22:2a:a7:69:a5:20:e4:56:72:72:4b: 87:0b:f1:58:d0:43:51:0d:1b:3c:2d:92:3b:15:4d: 2c:8d:d0:e4:e4:9a:8e:d9:0b:38:a6:cd:1d:1a:21: f9:fa:34:43:09:e7:36:ab:8b:7a:e7:7f:c2:89:a7: 08:0f:7b:94:e0:74:92:7d:cd:86:5a:da:1a:33:34: b5:c1:ce:d1:4a:ee:aa:5e:02:6a:9f:a2:90:fc:ae: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:12:51:4A:65:4D:96:54:21:81:24:04:4A:98:F7:F5:17:CC:4E:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/3aeab8b8-71b4-3fe6-b1ee-4a379cad7c23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335/0d91c5f3-bd33-4005-85ef-85a756711335.crl X509v3 Authority Key Identifier: keyid:D3:E5:CE:1A:88:26:E6:79:8A:95:CD:14:8A:28:97:BB:6C:62:99:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0d91c5f3-bd33-4005-85ef-85a756711335.cer sbgp-ipAddrBlock: critical IPv4: 208.68.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3f:9c:f9:1a:0a:45:65:2b:87:f7:02:a6:b5:87:5a:10:26: 66:ae:7d:e1:eb:58:3d:32:94:3a:b8:04:23:2c:0b:c1:7b:f0: 73:04:ce:96:84:cb:55:29:07:a6:fe:33:7d:ed:bf:f0:e1:92: 57:92:50:9d:98:8a:f1:25:c4:5a:8e:1f:2e:f1:f3:b8:e4:db: bc:5c:52:be:04:35:fb:4a:20:9e:c0:13:d2:fc:07:1d:73:9e: a4:97:13:70:58:0b:73:1e:58:b7:ef:12:a1:15:97:67:79:c9: 05:14:89:b7:c6:33:50:ce:b5:f0:ac:0c:a3:7c:84:46:d5:36: 62:90:1b:c5:37:a3:b0:8b:31:ef:4a:ca:a0:d0:34:6c:7f:e6: 1c:f8:76:0b:8f:85:a3:b2:2d:e9:0f:e0:2c:ef:a8:5f:a1:1e: 02:fc:4a:11:47:67:6b:b6:55:3e:05:a6:5e:9e:07:26:b7:0d: 0f:d3:93:fe:af:90:ba:67:08:9a:e1:01:4a:c1:ac:8d:af:e5: 77:0a:90:4b:57:94:31:88:13:8d:1a:03:0b:bf:31:15:c2:8b: d7:1d:04:a2:e8:4a:49:73:07:98:c0:da:a5:f7:71:7a:ff:79: 5b:7d:dc:8c:89:cc:b6:44:d0:87:f3:8a:b4:c0:34:85:91:88: 96:ef:9f:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0VolH6yWuSbkWkegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ5MWM1ZjMtYmQzMy00MDA1LTg1ZWYtODVhNzU2NzEx MzM1MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk NTk1MmNkYjYtNGQzNC00OTVhLTk1OTgtNGIyNjY0ZDc2ZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYLLokL7xlYCDUAYTcgqT9TRY3ZJMnYawiIh BgAOF+GFbvFXIDGUk/mlzYWoMxzP1UREH9vczcpIc0TMJUJWOkJa/cOUZ7Zqxxtu IE3ezpXw9RS1IMRrw7GuXNO8M7AWSah7Gcb0XThB5ShcNpKIgaZleUhBBw7YpJiI VwAf7sLYLiR3uN6rZhX6NGTEyiv2d3vBwiDafJupIRS/XdN0OQdU5wQ4RqYWIiqn aaUg5FZyckuHC/FY0ENRDRs8LZI7FU0sjdDk5JqO2Qs4ps0dGiH5+jRDCec2q4t6 53/CiacID3uU4HSSfc2GWtoaMzS1wc7RSu6qXgJqn6KQ/K5ZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBESUUplTZZUIYEkBEqY9/UXzE7VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wZDkx YzVmMy1iZDMzLTQwMDUtODVlZi04NWE3NTY3MTEzMzUvM2FlYWI4YjgtNzFiNC0z ZmU2LWIxZWUtNGEzNzljYWQ3YzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGQ5MWM1ZjMtYmQzMy00MDA1LTg1 ZWYtODVhNzU2NzExMzM1LzBkOTFjNWYzLWJkMzMtNDAwNS04NWVmLTg1YTc1Njcx MTMzNS5jcmwwHwYDVR0jBBgwFoAU0+XOGogm5nmKlc0UiiiXu2ximQUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wZDkxYzVmMy1iZDMzLTQwMDUtODVlZi04NWE3 NTY3MTEzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0ESCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM/nPkaCkVlK4f3Aqa1h1oQJmaufeHrWD0ylDq4BCMsC8F78HMEzpaE y1UpB6b+M33tv/DhkleSUJ2YivElxFqOHy7x87jk27xcUr4ENftKIJ7AE9L8Bx1z nqSXE3BYC3MeWLfvEqEVl2d5yQUUibfGM1DOtfCsDKN8hEbVNmKQG8U3o7CLMe9K yqDQNGx/5hz4dguPhaOyLekP4CzvqF+hHgL8ShFHZ2u2VT4Fpl6eBya3DQ/Tk/6v kLpnCJrhAUrBrI2v5XcKkEtXlDGIE40aAwu/MRXCi9cdBKLoSklzB5jA2qX3cXr/ eVt93IyJzLZE0IfzirTANIWRiJbvn2o= -----END CERTIFICATE-----Generated at Thu Mar 26 10:19:46 2026 by rpki-client