$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa File: 0affa3ca-5e84-377e-8612-b0e2003b6f16.roa (raw, json) Hash identifier: o3lHUBihGN4/6xsSrZfnH3XYy2F9TmMOwUHJK8szpjU= Subject key identifier: BB:AE:BE:8A:0E:39:15:5A:0F:13:CE:9F:35:D4:2E:C1:B2:83:5B:E9 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584D44FA34A8A5E34D1C0896E900 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:34:a8:a5:e3:4d:1c:08:96:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=9e3f0056-efa3-4c84-a01a-b749c2a4746f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c8:4c:c1:89:27:60:c5:6f:13:db:66:e5:81: 85:2a:2f:a0:9a:a4:2a:da:f8:c6:62:da:25:2f:7c: 3e:29:5a:76:0f:20:3c:a8:ed:c5:f8:56:97:6c:50: d0:a5:6f:d0:3a:9d:37:ee:a1:7a:23:39:7e:03:11: 65:2d:d4:db:93:b5:29:40:03:6b:86:98:f8:2c:6a: da:58:31:8a:27:2f:a0:74:7a:b2:d5:26:8b:ff:04: 5c:6b:9b:c0:59:0d:95:ab:5e:f9:39:0c:f9:d6:db: a9:81:49:9e:43:37:49:6b:8a:4c:b2:96:f3:46:97: be:e9:1e:4e:5a:cd:1f:d7:75:cd:82:66:e6:97:c2: 3c:fe:bc:11:00:11:e4:eb:e9:e1:ae:27:25:b0:39: 56:ee:6a:69:51:1f:42:e4:8d:78:85:9c:8c:2f:3e: da:37:08:11:58:58:e2:f9:a2:d7:6e:09:97:07:46: 72:0a:70:56:cf:7c:65:6a:e7:aa:91:bd:8d:3b:dc: ba:a8:6f:51:e2:32:81:7a:8a:50:30:a2:36:e1:ff: 55:1c:ca:63:53:f8:2d:1c:c7:46:8f:61:f2:a4:68: ac:25:38:f2:95:98:75:76:3c:78:46:7e:36:b1:8b: d9:a2:26:fd:ba:7e:19:44:72:88:57:59:e2:82:b7: ac:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AE:BE:8A:0E:39:15:5A:0F:13:CE:9F:35:D4:2E:C1:B2:83:5B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/0affa3ca-5e84-377e-8612-b0e2003b6f16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:de:42:6f:47:e0:b9:4b:3d:63:84:c3:d2:be:16:fb:fa:fa: 74:a7:0f:94:c2:06:2e:2d:b3:48:a9:84:a1:30:cb:25:86:2b: 17:fd:66:e6:4e:05:5f:7a:2f:87:09:3d:a3:de:ed:a4:b3:70: 9f:51:c0:33:7b:a0:93:16:af:76:26:f2:0b:3f:88:e7:75:ca: 00:e2:0e:19:2b:5c:15:b6:fb:37:cc:22:54:ea:9c:44:77:16: 7c:9e:02:41:04:87:42:d1:d9:4f:3c:7d:7e:d8:17:bc:a5:9a: b3:aa:44:35:93:7f:70:92:d6:7a:2c:53:4f:0b:a1:06:ba:ce: cf:f0:67:e1:6e:21:eb:aa:2e:6e:1c:c4:ed:e2:26:9e:40:85: 6b:97:a6:8c:ac:c1:e5:5a:e2:fc:19:a1:45:4a:aa:2c:7b:69: 17:2b:b5:7e:46:bd:1f:6c:eb:b7:cc:a1:15:68:e9:32:df:17: ad:1b:f8:cc:3f:fc:e6:f2:4a:4a:a6:97:60:d8:ab:c9:89:72: 6a:09:ec:eb:d0:65:34:44:48:a9:00:c6:83:65:71:0e:02:ce: 22:d3:34:f5:79:0a:13:61:63:ac:f7:8a:5e:3e:af:be:83:eb: e2:83:74:15:d5:50:31:e1:0f:a2:3d:dd:a7:c7:ca:fb:33:73: c9:e0:c5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jSopeNNHAiW6QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OWUzZjAwNTYtZWZhMy00Yzg0LWEwMWEtYjc0OWMyYTQ3NDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8hMwYknYMVvE9tm5YGFKi+gmqQq2vjGYtol L3w+KVp2DyA8qO3F+FaXbFDQpW/QOp037qF6Izl+AxFlLdTbk7UpQANrhpj4LGra WDGKJy+gdHqy1SaL/wRca5vAWQ2Vq175OQz51tupgUmeQzdJa4pMspbzRpe+6R5O Ws0f13XNgmbml8I8/rwRABHk6+nhriclsDlW7mppUR9C5I14hZyMLz7aNwgRWFji +aLXbgmXB0ZyCnBWz3xlaueqkb2NO9y6qG9R4jKBeopQMKI24f9VHMpjU/gtHMdG j2HypGisJTjylZh1djx4Rn42sYvZoib9un4ZRHKIV1nigresOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuuvooOORVaDxPOnzXULsGyg1vpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvMGFmZmEzY2EtNWU4NC0z NzdlLTg2MTItYjBlMjAwM2I2ZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDeQm9H4LlLPWOEw9K+Fvv6+nSnD5TCBi4ts0iphKEwyyWGKxf9ZuZO BV96L4cJPaPe7aSzcJ9RwDN7oJMWr3Ym8gs/iOd1ygDiDhkrXBW2+zfMIlTqnER3 FnyeAkEEh0LR2U88fX7YF7ylmrOqRDWTf3CS1nosU08LoQa6zs/wZ+FuIeuqLm4c xO3iJp5AhWuXpoysweVa4vwZoUVKqix7aRcrtX5GvR9s67fMoRVo6TLfF60b+Mw/ /ObySkqml2DYq8mJcmoJ7OvQZTRESKkAxoNlcQ4CziLTNPV5ChNhY6z3il4+r76D 6+KDdBXVUDHhD6I93afHyvszc8ngxfk= -----END CERTIFICATE-----Generated at Thu Mar 26 03:40:50 2026 by rpki-client