$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa File: 408e275f-c077-3b66-9a3f-a4e43e87657a.roa (raw, json) Hash identifier: Lm+nKHTFvNkhyfFVYYH7n8XAJovTqubFB/qnMYchPPk= Subject key identifier: 6E:A0:7F:53:7C:80:61:5D:11:92:B8:AC:7B:75:14:2F:70:9F:19:31 Certificate issuer: /CN=5c24b227-71d8-4de3-9a17-e538fd673530 Certificate serial: 010D0C9F4328584D40CA57DC77AF55E837BBA980 Authority key identifier: 47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 22418 IP address blocks: 208.96.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:57:dc:77:af:55:e8:37:bb:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c24b227-71d8-4de3-9a17-e538fd673530 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=035356b8-4f1b-48a3-a5a8-a583a19fd63c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c9:8f:1b:80:dd:aa:4f:7c:dc:26:3d:13:6e: ef:7d:e4:d9:49:72:1f:ed:14:41:01:d4:68:04:7a: 62:2f:9b:d6:f7:41:2e:3d:fc:42:a7:52:52:e5:2a: e1:36:2c:78:07:8f:48:93:b8:08:73:05:01:01:a1: 78:b4:af:d4:60:e0:cc:d3:41:cd:74:0d:52:92:93: 19:a5:95:b0:a5:02:2d:cb:ad:66:d8:5c:52:1a:6a: 0a:fb:df:94:26:eb:31:8b:db:fe:f7:d1:62:d7:a0: 7a:e2:1c:30:a7:91:ad:1b:8c:1d:ba:7a:5d:8f:3f: 33:14:39:f6:f8:f5:e0:f5:f1:a6:4b:dd:84:8e:f8: 54:f5:55:eb:4a:fc:b1:8d:ab:e4:57:ec:06:8d:f1: 9a:bf:43:ee:9e:86:15:ec:e7:66:52:b8:67:0d:d4: 2d:17:d9:65:b6:b1:2d:c1:18:f4:04:43:c2:40:4d: f2:cc:a0:46:f8:e5:a5:8c:f4:71:cb:48:08:18:ea: 11:f5:e0:dd:11:0e:db:bf:16:85:20:a4:4e:9c:52: 70:50:35:73:78:fc:08:27:20:8c:ba:12:c8:2b:18: 4d:7c:ea:ca:f7:f9:f8:e4:e1:cd:42:04:be:49:f0: e2:c0:c3:7e:99:9b:6a:62:a4:84:73:ed:f9:13:1d: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A0:7F:53:7C:80:61:5D:11:92:B8:AC:7B:75:14:2F:70:9F:19:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/408e275f-c077-3b66-9a3f-a4e43e87657a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530/5c24b227-71d8-4de3-9a17-e538fd673530.crl X509v3 Authority Key Identifier: keyid:47:1C:36:F9:F2:BE:CC:7E:B9:E7:B7:F8:EA:51:AD:BC:CA:C2:D4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5c24b227-71d8-4de3-9a17-e538fd673530.cer sbgp-ipAddrBlock: critical IPv4: 208.96.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:5c:48:31:7c:ac:45:d1:41:41:33:74:22:29:5a:f5:ad:50: c7:6a:80:bd:c9:7b:a0:5b:b3:c1:19:8e:cb:8f:c8:6d:9f:d5: 6a:9b:ad:3e:ea:1a:cd:c6:2e:ce:89:c7:21:2c:a3:e4:4e:cf: 48:0d:7e:e6:2f:27:e1:ad:e9:fc:28:f4:c6:a4:49:cb:16:c6: 4b:30:88:e1:e4:07:82:9d:ac:99:3b:fe:c9:78:57:28:83:54: ac:49:26:d1:75:14:09:cf:69:ad:63:68:41:3f:3d:29:b2:a2: 8b:62:3c:6d:7b:05:b8:c9:1d:6c:36:fa:5e:75:3a:38:8b:ce: 62:78:2b:91:86:85:4b:d5:aa:8b:26:9b:08:ca:e0:2c:e8:84: 85:f9:1d:85:a7:83:6b:ce:05:6c:e2:8d:e2:5c:67:59:f7:d6: c0:f0:9d:bc:66:d7:22:8c:c2:d6:22:b4:68:ba:36:b8:5d:0c: dd:21:cf:5a:4a:bb:5b:66:2c:be:1e:2c:5c:05:df:5f:f7:36: 58:f7:0d:9c:dd:b0:49:0d:d6:b0:08:9a:52:19:a4:48:bc:e8: e2:6a:55:ce:e8:44:46:56:a0:9d:bf:3f:19:e9:a5:57:57:cb: 94:86:b7:50:89:20:6a:2e:9c:75:42:73:df:75:c1:a1:e1:92: d4:6a:b5:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Aylfcd69V6De7qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMyNGIyMjctNzFkOC00ZGUzLTlhMTctZTUzOGZkNjcz NTMwMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MDM1MzU2YjgtNGYxYi00OGEzLWE1YTgtYTU4M2ExOWZkNjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcmPG4Ddqk983CY9E27vfeTZSXIf7RRBAdRo BHpiL5vW90EuPfxCp1JS5SrhNix4B49Ik7gIcwUBAaF4tK/UYODM00HNdA1SkpMZ pZWwpQIty61m2FxSGmoK+9+UJusxi9v+99Fi16B64hwwp5GtG4wdunpdjz8zFDn2 +PXg9fGmS92EjvhU9VXrSvyxjavkV+wGjfGav0PunoYV7OdmUrhnDdQtF9lltrEt wRj0BEPCQE3yzKBG+OWljPRxy0gIGOoR9eDdEQ7bvxaFIKROnFJwUDVzePwIJyCM uhLIKxhNfOrK9/n45OHNQgS+SfDiwMN+mZtqYqSEc+35Ex2X4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6gf1N8gGFdEZK4rHt1FC9wnxkxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YzI0 YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4ZmQ2NzM1MzAvNDA4ZTI3NWYtYzA3Ny0z YjY2LTlhM2YtYTRlNDNlODc2NTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWMyNGIyMjctNzFkOC00ZGUzLTlh MTctZTUzOGZkNjczNTMwLzVjMjRiMjI3LTcxZDgtNGRlMy05YTE3LWU1MzhmZDY3 MzUzMC5jcmwwHwYDVR0jBBgwFoAURxw2+fK+zH6557f46lGtvMrC1B8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YzI0YjIyNy03MWQ4LTRkZTMtOWExNy1lNTM4 ZmQ2NzM1MzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE0GCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1cSDF8rEXRQUEzdCIpWvWtUMdqgL3Je6Bbs8EZjsuPyG2f1WqbrT7q Gs3GLs6JxyEso+ROz0gNfuYvJ+Gt6fwo9MakScsWxkswiOHkB4KdrJk7/sl4VyiD VKxJJtF1FAnPaa1jaEE/PSmyootiPG17BbjJHWw2+l51OjiLzmJ4K5GGhUvVqosm mwjK4CzohIX5HYWng2vOBWzijeJcZ1n31sDwnbxm1yKMwtYitGi6NrhdDN0hz1pK u1tmLL4eLFwF31/3Nlj3DZzdsEkN1rAImlIZpEi86OJqVc7oREZWoJ2/PxnppVdX y5SGt1CJIGounHVCc991waHhktRqtXQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:20:31 2026 by rpki-client