$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/a8d5a0b8-4ade-3ec8-a517-cab3c3cac56a.roa File: a8d5a0b8-4ade-3ec8-a517-cab3c3cac56a.roa (raw, json) Hash identifier: 1UI7kRZCxcY66saYSxQ3wy8IqJTaaNR6lrcA1rtnB4s= Subject key identifier: 40:CC:3F:7F:78:62:82:21:A2:A5:EF:09:DC:44:35:6A:0A:31:22:A0 Certificate issuer: /CN=2af9df74-e88e-4433-b765-051efef6177a Certificate serial: 010D0C9F4328584D32CD154363958535C71D1280 Authority key identifier: 8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/a8d5a0b8-4ade-3ec8-a517-cab3c3cac56a.roa Signing time: Tue 17 Mar 2026 12:45:13 +0000 ROA not before: Tue 17 Mar 2026 12:45:13 +0000 ROA not after: Mon 15 Jun 2026 12:45:13 +0000 asID: 13335 IP address blocks: 205.203.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:32:cd:15:43:63:95:85:35:c7:1d:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2af9df74-e88e-4433-b765-051efef6177a Validity Not Before: Mar 17 12:45:13 2026 GMT Not After : Jun 15 12:45:13 2026 GMT Subject: CN=d79679e6-32e6-43b4-be7f-f96ee8bcb91b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:9f:09:c9:35:89:97:7d:51:5b:eb:7a:3f:72: 88:6b:ff:18:be:24:2c:36:0a:50:3a:75:70:d4:0f: af:fa:01:a2:9a:84:3a:91:d1:d8:51:cc:9a:be:98: 44:55:3f:41:a4:a4:b7:c9:06:f3:96:d4:49:8e:d6: 22:10:92:00:4d:fb:bf:31:54:72:7e:b8:ad:92:1a: 62:5c:60:3a:75:f0:27:08:f7:a6:a7:0d:22:58:63: 79:36:c1:0b:88:b1:92:07:cb:4e:17:cd:4c:8f:5d: 65:b5:42:a8:8b:a8:d6:c4:e5:11:08:da:e1:60:a2: bd:18:c4:26:1b:3b:b8:91:1e:c9:e9:83:77:23:56: 21:63:ec:6b:cd:f8:b7:ef:f2:e5:73:62:bd:0e:b3: 0d:f2:f5:45:b2:28:39:ef:a6:65:f8:d2:dd:24:c1: 7e:cd:6b:68:0d:fc:c9:45:61:62:a2:f4:12:48:17: e8:b8:2c:e0:e3:96:b0:9f:91:93:94:b3:00:82:64: 34:3b:f0:03:4f:4c:f8:99:b4:61:18:74:b5:58:ac: 68:b4:e0:59:8e:e4:c1:dc:34:8e:fb:0c:ee:8d:ad: 82:5e:50:90:8c:bf:a6:6e:73:a3:d6:66:a0:ae:e3: 8c:07:73:2a:53:30:dc:d2:12:5a:fe:63:e4:95:94: 1e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:CC:3F:7F:78:62:82:21:A2:A5:EF:09:DC:44:35:6A:0A:31:22:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/a8d5a0b8-4ade-3ec8-a517-cab3c3cac56a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a/2af9df74-e88e-4433-b765-051efef6177a.crl X509v3 Authority Key Identifier: keyid:8B:26:5A:51:23:75:D8:53:0B:3B:F1:97:63:92:96:17:B0:22:10:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2af9df74-e88e-4433-b765-051efef6177a.cer sbgp-ipAddrBlock: critical IPv4: 205.203.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:e6:9a:81:c8:5a:ba:40:57:9c:f0:cb:a2:62:91:83:ce: 90:d4:a9:88:a7:00:a3:04:85:78:a5:75:db:56:43:31:88:fc: 7d:5d:04:77:55:27:59:c1:5d:79:79:be:19:b0:a6:1c:d4:f5: 64:c6:ea:45:a8:04:51:7f:ff:79:c1:9c:0c:3a:89:f4:b8:dd: 38:20:ed:ed:28:47:00:de:1b:cf:fa:d9:db:05:a0:14:39:27: a6:5a:cf:40:e8:9f:a4:1a:43:95:17:bd:97:97:65:c0:0d:5f: ac:eb:79:d6:de:2d:cb:9f:d1:25:1c:cc:33:aa:31:8d:05:8b: c0:8f:2e:42:4d:32:42:8b:15:b8:43:93:4e:e1:af:b7:a1:f6: 1f:74:9e:b3:de:73:29:cd:86:d9:40:4d:ad:08:b5:f0:98:13: 73:bc:17:08:3a:19:89:30:9e:a1:01:08:a8:4b:08:9f:e0:78: 6a:0d:b2:39:26:3f:aa:d4:50:6e:62:fa:08:3f:d8:45:7a:e0: db:e0:e3:df:11:cd:86:e1:56:a3:ef:82:0f:4a:df:51:d5:18: 07:69:0d:0b:d7:d5:f0:79:65:a9:55:b4:e2:a1:6e:9d:0f:43: 19:ca:fa:66:a4:55:d2:50:73:1a:01:68:02:ea:26:6a:95:0c: 3f:c4:22:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0yzRVDY5WFNccdEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFmOWRmNzQtZTg4ZS00NDMzLWI3NjUtMDUxZWZlZjYx NzdhMB4XDTI2MDMxNzEyNDUxM1oXDTI2MDYxNTEyNDUxM1owLzEtMCsGA1UEAxMk ZDc5Njc5ZTYtMzJlNi00M2I0LWJlN2YtZjk2ZWU4YmNiOTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr58JyTWJl31RW+t6P3KIa/8YviQsNgpQOnVw 1A+v+gGimoQ6kdHYUcyavphEVT9BpKS3yQbzltRJjtYiEJIATfu/MVRyfritkhpi XGA6dfAnCPempw0iWGN5NsELiLGSB8tOF81Mj11ltUKoi6jWxOURCNrhYKK9GMQm Gzu4kR7J6YN3I1YhY+xrzfi37/Llc2K9DrMN8vVFsig576Zl+NLdJMF+zWtoDfzJ RWFiovQSSBfouCzg45awn5GTlLMAgmQ0O/ADT0z4mbRhGHS1WKxotOBZjuTB3DSO +wzuja2CXlCQjL+mbnOj1magruOMB3MqUzDc0hJa/mPklZQeOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEDMP394YoIhoqXvCdxENWoKMSKgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5 ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFlZmVmNjE3N2EvYThkNWEwYjgtNGFkZS0z ZWM4LWE1MTctY2FiM2MzY2FjNTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMmFmOWRmNzQtZTg4ZS00NDMzLWI3 NjUtMDUxZWZlZjYxNzdhLzJhZjlkZjc0LWU4OGUtNDQzMy1iNzY1LTA1MWVmZWY2 MTc3YS5jcmwwHwYDVR0jBBgwFoAUiyZaUSN12FMLO/GXY5KWF7AiEBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yYWY5ZGY3NC1lODhlLTQ0MzMtYjc2NS0wNTFl ZmVmNjE3N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzctOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSx5pqByFq6QFec8MuiYpGDzpDUqYinAKMEhXilddtWQzGI/H1dBHdV J1nBXXl5vhmwphzU9WTG6kWoBFF//3nBnAw6ifS43Tgg7e0oRwDeG8/62dsFoBQ5 J6Zaz0Don6QaQ5UXvZeXZcANX6zredbeLcuf0SUczDOqMY0Fi8CPLkJNMkKLFbhD k07hr7eh9h90nrPecynNhtlATa0ItfCYE3O8Fwg6GYkwnqEBCKhLCJ/geGoNsjkm P6rUUG5i+gg/2EV64Nvg498RzYbhVqPvgg9K31HVGAdpDQvX1fB5ZalVtOKhbp0P QxnK+makVdJQcxoBaALqJmqVDD/EIqE= -----END CERTIFICATE-----Generated at Thu Mar 26 01:47:36 2026 by rpki-client