$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa File: b22abd72-0314-3d31-bb53-c6c482f407aa.roa (raw, json) Hash identifier: h3ysyGn1maUAYHhpBdXYHF//j7fV3aZ648MasXycw14= Subject key identifier: 89:84:13:FF:E0:E7:B0:6B:CD:FB:2E:EF:B8:8F:70:FF:CD:74:62:B0 Certificate issuer: /CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Certificate serial: 010D0C9F4328584D44FA34940496C0A81F1826F7 Authority key identifier: C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 16509 IP address blocks: 208.79.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:34:94:04:96:c0:a8:1f:18:26:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e34da42-753e-4b9a-ab76-37fd6cfd765d Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=3d6eb848-60fc-448f-8d28-c95de1acfae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c3:4e:d9:34:15:66:52:fa:8e:84:4c:87:04: 55:2f:5d:ae:01:57:ca:53:fa:86:3e:b6:69:16:4b: f1:68:28:4f:9b:84:dd:43:41:5a:14:60:fb:98:91: 47:93:66:2f:fe:a4:3d:f1:0b:ff:71:7d:81:33:31: 51:6f:b2:73:4e:f5:92:2b:c5:76:f2:92:26:81:19: a7:b3:c6:37:2e:34:b0:9f:57:e9:6f:ed:c2:cd:65: 67:d1:91:54:28:bc:1f:3d:f5:eb:9c:6c:96:31:58: df:84:cb:35:12:19:81:67:72:45:7b:99:8f:b9:47: 58:22:45:e1:e4:3f:66:4a:af:0e:0e:7f:49:56:89: 79:9f:f5:f7:3b:72:79:13:a9:4d:9c:91:5f:95:6d: e4:85:0a:14:12:ab:36:03:b3:aa:9d:f5:e0:3e:9b: 6a:f1:48:f2:2e:62:3c:c8:64:88:09:0b:31:ba:87: cc:ee:18:85:e3:f6:48:59:a6:c5:3c:ec:a9:e1:0e: 21:f7:84:cc:2b:e8:a4:d0:87:ba:24:8f:51:08:48: d2:3a:52:63:0d:a7:08:20:58:2d:e7:de:2a:dd:e7: 3c:37:10:85:4b:ca:13:c6:97:8c:ce:53:1e:2d:e9: f4:33:9a:9f:f7:0c:2d:0e:35:5e:4a:96:20:a4:ce: 94:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:84:13:FF:E0:E7:B0:6B:CD:FB:2E:EF:B8:8F:70:FF:CD:74:62:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/b22abd72-0314-3d31-bb53-c6c482f407aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d/3e34da42-753e-4b9a-ab76-37fd6cfd765d.crl X509v3 Authority Key Identifier: keyid:C9:CC:E4:04:C9:3C:51:BC:A5:61:45:56:E3:32:9A:FC:98:64:F8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e34da42-753e-4b9a-ab76-37fd6cfd765d.cer sbgp-ipAddrBlock: critical IPv4: 208.79.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f3:26:44:b7:ca:25:68:92:8f:58:56:c6:4a:f6:0d:44:aa: a7:5a:51:5f:4d:43:4a:2b:7b:4f:3d:e9:63:45:3e:23:11:f0: e5:cf:76:7c:cf:97:02:6f:b1:d5:4c:64:d5:87:0c:ae:b8:a9: 18:39:af:e1:c6:21:a4:01:b9:51:d2:cc:cd:b9:79:93:22:3c: 9e:a2:9f:b0:77:d1:62:73:8d:59:93:59:87:58:57:b6:03:c8: 6e:a0:95:bd:0b:33:91:0b:64:4f:3f:c3:e1:ae:ed:17:28:6e: 33:7e:1e:b9:b0:39:f6:4e:87:a9:9d:e8:b8:46:f9:a9:9d:15: 41:ae:1b:43:f0:4c:74:12:e3:1c:4a:22:88:c7:cc:02:d2:7b: fc:a3:5d:52:74:07:bd:9f:7e:04:92:b3:e0:8d:3b:db:20:5e: a2:92:f4:4f:dd:99:e2:2d:43:f6:a4:7e:f1:10:84:8d:4c:4b: 77:ea:a8:9a:5f:92:9a:9c:e9:92:56:55:86:05:40:20:df:76: 21:50:21:51:87:81:8c:b6:e0:05:92:43:bd:2b:47:8e:46:c4: b9:8f:26:54:69:67:66:18:4e:80:77:f2:52:1a:b5:8d:79:69: 85:e2:59:6b:59:69:05:12:29:8d:1e:b1:8a:02:a5:21:f1:b9: e0:e8:f4:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jSUBJbAqB8YJvcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2UzNGRhNDItNzUzZS00YjlhLWFiNzYtMzdmZDZjZmQ3 NjVkMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk M2Q2ZWI4NDgtNjBmYy00NDhmLThkMjgtYzk1ZGUxYWNmYWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8NO2TQVZlL6joRMhwRVL12uAVfKU/qGPrZp FkvxaChPm4TdQ0FaFGD7mJFHk2Yv/qQ98Qv/cX2BMzFRb7JzTvWSK8V28pImgRmn s8Y3LjSwn1fpb+3CzWVn0ZFUKLwfPfXrnGyWMVjfhMs1EhmBZ3JFe5mPuUdYIkXh 5D9mSq8ODn9JVol5n/X3O3J5E6lNnJFflW3khQoUEqs2A7OqnfXgPptq8UjyLmI8 yGSICQsxuofM7hiF4/ZIWabFPOyp4Q4h94TMK+ik0Ie6JI9RCEjSOlJjDacIIFgt 594q3ec8NxCFS8oTxpeMzlMeLen0M5qf9wwtDjVeSpYgpM6UVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImEE//g57Brzfsu77iPcP/NdGKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0 ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2ZkNmNmZDc2NWQvYjIyYWJkNzItMDMxNC0z ZDMxLWJiNTMtYzZjNDgyZjQwN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2UzNGRhNDItNzUzZS00YjlhLWFi NzYtMzdmZDZjZmQ3NjVkLzNlMzRkYTQyLTc1M2UtNGI5YS1hYjc2LTM3ZmQ2Y2Zk NzY1ZC5jcmwwHwYDVR0jBBgwFoAUyczkBMk8UbylYUVW4zKa/Jhk+IwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTM0ZGE0Mi03NTNlLTRiOWEtYWI3Ni0zN2Zk NmNmZDc2NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0E8sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTzJkS3yiVoko9YVsZK9g1EqqdaUV9NQ0ore0896WNFPiMR8OXPdnzP lwJvsdVMZNWHDK64qRg5r+HGIaQBuVHSzM25eZMiPJ6in7B30WJzjVmTWYdYV7YD yG6glb0LM5ELZE8/w+Gu7RcobjN+HrmwOfZOh6md6LhG+amdFUGuG0PwTHQS4xxK IojHzALSe/yjXVJ0B72ffgSSs+CNO9sgXqKS9E/dmeItQ/akfvEQhI1MS3fqqJpf kpqc6ZJWVYYFQCDfdiFQIVGHgYy24AWSQ70rR45GxLmPJlRpZ2YYToB38lIatY15 aYXiWWtZaQUSKY0esYoCpSHxueDo9Fg= -----END CERTIFICATE-----Generated at Thu Mar 26 02:05:28 2026 by rpki-client