$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/c67ddaf9-3268-3711-87b8-3f84d04852e2.roa File: c67ddaf9-3268-3711-87b8-3f84d04852e2.roa (raw, json) Hash identifier: aVquMzGefJqkGvHtA1gIlyvpvfkkwFTB3uQ22zdSR8E= Subject key identifier: EB:6D:4F:67:ED:79:E4:78:CF:9B:A2:64:C3:79:DD:F4:A1:2A:65:87 Certificate issuer: /CN=08f6ab66-eae4-4119-a436-4dd733e17ebd Certificate serial: 010D0C9F4328584D8C2AB10F1332AFC993AF4330 Authority key identifier: E7:94:6F:8C:07:83:D5:ED:3B:1A:27:5F:03:4C:42:30:37:37:E5:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/c67ddaf9-3268-3711-87b8-3f84d04852e2.roa Signing time: Sat 18 Apr 2026 13:00:30 +0000 ROA not before: Sat 18 Apr 2026 13:00:30 +0000 ROA not after: Fri 17 Jul 2026 13:00:30 +0000 asID: 205467 IP address blocks: 208.70.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8c:2a:b1:0f:13:32:af:c9:93:af:43:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f6ab66-eae4-4119-a436-4dd733e17ebd Validity Not Before: Apr 18 13:00:30 2026 GMT Not After : Jul 17 13:00:30 2026 GMT Subject: CN=f7bf779d-bc6b-4e96-997d-6caa3cea9a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ca:82:74:67:49:ee:36:de:44:1a:43:8c:1c: 75:a0:66:7b:10:06:33:3d:09:61:6a:a5:06:ec:93: 8a:67:8b:e6:0d:ac:c7:8d:95:23:77:d4:0b:95:9a: 98:bd:91:1c:be:70:6c:2b:2c:07:3b:85:c8:e1:e2: ff:ce:c1:ad:4b:9c:6f:3f:f2:07:96:ae:b8:14:93: a6:b0:ba:e6:25:30:5d:95:ed:9c:a0:a4:4e:a6:db: 05:cb:49:1f:4d:ff:c5:a5:bb:20:dd:09:d0:0c:27: 47:5b:a7:e2:81:ab:ee:5d:00:53:0b:94:a6:81:9b: bc:7c:46:51:b4:d0:2f:ec:cd:da:7c:67:a3:71:80: 03:7b:92:88:ef:e7:7f:32:f0:08:4d:7c:c9:7d:6b: c1:c4:b5:74:c0:aa:ee:f8:73:5c:92:68:d1:e5:e6: f4:8e:c9:af:fc:3a:60:34:64:37:ff:51:9c:f2:1d: 36:2c:d1:b1:26:54:a0:28:a4:30:02:52:58:40:e8: cf:2b:1f:7f:c7:ab:69:71:c3:2c:ac:e8:f0:d4:10: d1:c9:77:85:f1:00:0e:de:28:98:15:89:05:70:1e: ab:33:0c:78:ff:22:38:51:dc:cc:46:be:6c:6c:15: 95:7b:2d:d7:2e:26:11:a4:39:dc:16:36:54:7f:81: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6D:4F:67:ED:79:E4:78:CF:9B:A2:64:C3:79:DD:F4:A1:2A:65:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/c67ddaf9-3268-3711-87b8-3f84d04852e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd/08f6ab66-eae4-4119-a436-4dd733e17ebd.crl X509v3 Authority Key Identifier: keyid:E7:94:6F:8C:07:83:D5:ED:3B:1A:27:5F:03:4C:42:30:37:37:E5:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08f6ab66-eae4-4119-a436-4dd733e17ebd.cer sbgp-ipAddrBlock: critical IPv4: 208.70.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:8a:a9:8b:82:be:90:0c:58:5f:bc:46:91:e2:74:5a:e6: aa:ef:a6:18:55:2f:5d:e8:44:01:d8:4e:aa:b1:12:c7:54:37: af:1c:65:35:88:1a:39:c2:f9:8c:a0:d1:b7:bd:cc:72:55:1b: 0e:84:92:ad:3a:97:58:15:ea:16:c4:db:25:f2:d0:82:d2:12: 65:37:be:3f:4c:9c:b1:84:ed:6e:18:66:0d:f8:1d:f2:32:6c: 39:0b:a9:7e:51:7b:b4:ad:79:76:4f:ea:3e:e2:be:28:59:66: ee:3d:9a:03:a0:5e:d2:37:27:1d:11:a0:98:d3:19:b8:77:9a: df:45:82:7f:4f:3e:f8:d9:1c:d1:80:a2:61:5d:7f:08:cd:bf: ef:be:48:90:ab:37:28:b5:1b:da:94:79:49:7f:e0:54:e5:8c: 46:07:1b:da:f5:87:32:c5:52:27:c8:40:d2:13:ce:9f:03:57: be:82:82:44:1b:8f:d5:71:0e:3f:82:e2:25:4b:f6:bd:b0:d1: d8:9d:ae:e6:f6:ac:09:48:bb:11:66:3d:e4:71:10:e3:a2:0c: e8:06:90:91:7a:93:02:b2:eb:96:d8:5b:dc:e0:7c:1e:5d:bf: 05:e3:5e:3f:fc:73:6f:bf:64:5b:2a:2d:7d:22:dc:58:a8:f8: b1:c4:cf:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2MKrEPEzKvyZOvQzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDhmNmFiNjYtZWFlNC00MTE5LWE0MzYtNGRkNzMzZTE3 ZWJkMB4XDTI2MDQxODEzMDAzMFoXDTI2MDcxNzEzMDAzMFowLzEtMCsGA1UEAxMk ZjdiZjc3OWQtYmM2Yi00ZTk2LTk5N2QtNmNhYTNjZWE5YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMqCdGdJ7jbeRBpDjBx1oGZ7EAYzPQlhaqUG 7JOKZ4vmDazHjZUjd9QLlZqYvZEcvnBsKywHO4XI4eL/zsGtS5xvP/IHlq64FJOm sLrmJTBdle2coKROptsFy0kfTf/Fpbsg3QnQDCdHW6figavuXQBTC5SmgZu8fEZR tNAv7M3afGejcYADe5KI7+d/MvAITXzJfWvBxLV0wKru+HNckmjR5eb0jsmv/Dpg NGQ3/1Gc8h02LNGxJlSgKKQwAlJYQOjPKx9/x6tpccMsrOjw1BDRyXeF8QAO3iiY FYkFcB6rMwx4/yI4UdzMRr5sbBWVey3XLiYRpDncFjZUf4EcgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOttT2fteeR4z5uiZMN53fShKmWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGY2 YWI2Ni1lYWU0LTQxMTktYTQzNi00ZGQ3MzNlMTdlYmQvYzY3ZGRhZjktMzI2OC0z NzExLTg3YjgtM2Y4NGQwNDg1MmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDhmNmFiNjYtZWFlNC00MTE5LWE0 MzYtNGRkNzMzZTE3ZWJkLzA4ZjZhYjY2LWVhZTQtNDExOS1hNDM2LTRkZDczM2Ux N2ViZC5jcmwwHwYDVR0jBBgwFoAU55RvjAeD1e07GidfA0xCMDc35eMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wOGY2YWI2Ni1lYWU0LTQxMTktYTQzNi00ZGQ3 MzNlMTdlYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMNiqmLgr6QDFhfvEaR4nRa5qrvphhVL13oRAHYTqqxEsdUN68cZTWI GjnC+Yyg0be9zHJVGw6Ekq06l1gV6hbE2yXy0ILSEmU3vj9MnLGE7W4YZg34HfIy bDkLqX5Re7SteXZP6j7ivihZZu49mgOgXtI3Jx0RoJjTGbh3mt9Fgn9PPvjZHNGA omFdfwjNv+++SJCrNyi1G9qUeUl/4FTljEYHG9r1hzLFUifIQNITzp8DV76CgkQb j9VxDj+C4iVL9r2w0didrub2rAlIuxFmPeRxEOOiDOgGkJF6kwKy65bYW9zgfB5d vwXjXj/8c2+/ZFsqLX0i3Fio+LHEz0Y= -----END CERTIFICATE-----Generated at Wed May 13 05:28:24 2026 by rpki-client