$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bd70c2e-ce8f-3161-969b-6d1608b24893.roa File: 8bd70c2e-ce8f-3161-969b-6d1608b24893.roa (raw, json) Hash identifier: wvsFTkqYGlooVKz2rGTPXw2aCyvUSupIcXUnvqyllWQ= Subject key identifier: A8:8B:34:FC:B2:C5:C6:CA:12:FD:DD:81:F1:C1:C9:B0:66:A9:40:CF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D237A34CA2FEE74F28A10AF60 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bd70c2e-ce8f-3161-969b-6d1608b24893.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 20940 IP address blocks: 204.8.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:34:ca:2f:ee:74:f2:8a:10:af:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=bf5841f6-24a6-4314-a44a-05712056ede6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e8:06:d1:b6:4c:91:af:14:b5:89:36:b1:f3: 2e:84:44:2c:88:56:fe:6a:d2:e4:69:49:2d:60:b6: 76:8c:90:8b:00:af:d4:6e:5f:69:ae:7a:ef:06:c9: a0:e7:aa:0b:d5:61:5e:f5:e0:98:01:86:dc:d3:3c: 4d:6c:c4:63:7c:89:78:bb:13:86:dd:90:f1:6e:f5: 5b:73:44:f0:9c:09:46:5c:c1:fa:8c:c9:72:27:c7: 17:ec:a6:b0:1e:de:51:99:72:14:39:f8:ab:75:69: d2:85:0d:3e:d7:ed:04:87:b5:9e:f0:ea:ab:45:b5: b5:0a:a0:d0:86:2b:7a:4d:90:6e:24:fb:53:e2:fa: 7f:b3:32:09:2c:a9:1f:ad:6a:b1:ae:88:ac:0d:0a: 01:07:f1:bf:d0:5e:20:89:61:c5:71:fc:f3:0c:d1: f3:bd:05:f8:9a:51:2c:e3:a5:db:9d:d4:65:48:25: fe:c2:b0:b1:cf:4d:41:6d:47:45:b4:c4:76:ec:02: cb:7e:aa:fc:a4:1c:94:f0:d9:d3:72:03:e5:25:e9: b7:47:c4:07:82:3b:e8:66:d5:3f:5e:11:f5:4b:38: dd:d9:3f:67:e2:e5:df:34:9f:81:bb:06:31:f4:58: 9f:35:23:36:1b:e5:37:e5:94:29:51:69:d7:95:42: aa:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:34:FC:B2:C5:C6:CA:12:FD:DD:81:F1:C1:C9:B0:66:A9:40:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8bd70c2e-ce8f-3161-969b-6d1608b24893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 204.8.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:95:d1:69:58:2d:9c:d1:f4:83:de:a4:2b:67:a2:e0:e3:0f: b0:ab:8b:ac:77:4b:4b:f5:5f:63:c5:92:a3:dc:cd:be:9c:56: 39:ac:74:4d:4b:c8:a3:cf:c3:84:6e:ff:79:13:08:b2:17:e7: e3:81:dd:74:8d:ce:be:db:07:c4:c9:59:7e:b5:e7:e4:69:3d: 08:35:7d:62:0d:53:37:03:c5:2a:de:59:a4:f1:d7:63:18:3f: 41:6f:a3:fd:5f:7d:e7:08:6a:fb:50:a6:dd:ca:f1:41:41:53: d2:5c:48:15:7a:d6:e7:5c:bf:57:6a:1d:45:01:29:78:62:85: 8b:36:94:0b:07:23:db:cd:3e:a3:2a:d1:f1:ce:0c:9c:d3:e7: 0d:cb:2a:6c:03:9d:d4:92:2d:56:fc:11:d3:a7:da:ab:1e:45: fe:2b:df:cd:8d:a4:93:66:9a:24:20:71:0d:6a:21:c9:b4:9f: fb:b9:c7:da:12:52:42:8a:49:67:b6:04:a8:ea:c5:65:e5:c9: ee:9e:ed:db:1e:0a:4c:b5:a5:74:26:1c:f2:44:67:bf:ef:60: 2f:00:20:5f:d4:07:7f:d8:6c:c0:30:1f:a0:b8:55:65:51:66: b0:30:20:34:2c:65:38:dc:fc:f6:1f:ee:9a:25:11:62:7c:91: e0:3e:6d:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejTKL+508ooQr2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk YmY1ODQxZjYtMjRhNi00MzE0LWE0NGEtMDU3MTIwNTZlZGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+gG0bZMka8UtYk2sfMuhEQsiFb+atLkaUkt YLZ2jJCLAK/Ubl9prnrvBsmg56oL1WFe9eCYAYbc0zxNbMRjfIl4uxOG3ZDxbvVb c0TwnAlGXMH6jMlyJ8cX7KawHt5RmXIUOfirdWnShQ0+1+0Eh7We8OqrRbW1CqDQ hit6TZBuJPtT4vp/szIJLKkfrWqxroisDQoBB/G/0F4giWHFcfzzDNHzvQX4mlEs 46XbndRlSCX+wrCxz01BbUdFtMR27ALLfqr8pByU8NnTcgPlJem3R8QHgjvoZtU/ XhH1Szjd2T9n4uXfNJ+BuwYx9FifNSM2G+U35ZQpUWnXlUKqSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiLNPyyxcbKEv3dgfHBybBmqUDPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGJkNzBjMmUtY2U4Zi0z MTYxLTk2OWItNmQxNjA4YjI0ODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAgwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASV0WlYLZzR9IPepCtnouDjD7Cri6x3S0v1X2PFkqPczb6cVjmsdE1L yKPPw4Ru/3kTCLIX5+OB3XSNzr7bB8TJWX615+RpPQg1fWINUzcDxSreWaTx12MY P0Fvo/1ffecIavtQpt3K8UFBU9JcSBV61udcv1dqHUUBKXhihYs2lAsHI9vNPqMq 0fHODJzT5w3LKmwDndSSLVb8EdOn2qseRf4r382NpJNmmiQgcQ1qIcm0n/u5x9oS UkKKSWe2BKjqxWXlye6e7dseCky1pXQmHPJEZ7/vYC8AIF/UB3/YbMAwH6C4VWVR ZrAwIDQsZTjc/PYf7polEWJ8keA+bXc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:44:53 2026 by rpki-client