$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3759ce5-4b01-3bde-8b57-3019c0099ea0.roa File: a3759ce5-4b01-3bde-8b57-3019c0099ea0.roa (raw, json) Hash identifier: vqaAE9n+HRDRTqRqWPViJ31bSWTXmvoM8ZJAU6PlQI8= Subject key identifier: E7:0E:8E:7E:6C:69:5A:60:E4:4D:34:8F:AB:FB:B7:5E:DD:13:AB:DC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584DA8156E1786DC0ED834EDFC80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3759ce5-4b01-3bde-8b57-3019c0099ea0.roa Signing time: Tue 28 Apr 2026 13:00:30 +0000 ROA not before: Tue 28 Apr 2026 13:00:30 +0000 ROA not after: Mon 27 Jul 2026 13:00:30 +0000 asID: 0 IP address blocks: 208.214.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a8:15:6e:17:86:dc:0e:d8:34:ed:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 28 13:00:30 2026 GMT Not After : Jul 27 13:00:30 2026 GMT Subject: CN=1dceeb1f-510b-4f9c-b7a8-ac41f6750a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b5:af:05:cb:0a:95:0d:06:dc:21:f6:16:7d: 8e:25:10:87:1d:23:7d:1d:2e:bf:c2:bc:7a:e0:73: e9:b4:75:cc:d4:bf:94:0c:bc:3e:b8:e5:44:17:bc: 90:e2:d6:49:ec:07:c1:06:33:dd:cf:70:e6:c0:e0: 17:30:2c:0c:58:25:42:cf:b6:38:df:71:8d:f7:e6: 7a:6f:e1:89:00:29:d2:66:57:8e:c6:40:14:a6:30: 28:4c:3e:6b:ea:f6:e9:b1:78:54:a6:57:d0:01:f2: 5e:03:40:44:86:ac:e8:8f:3e:29:4e:c5:76:63:59: ab:03:db:7f:3f:56:0e:d4:e0:13:93:86:bd:9a:9b: 3d:ba:10:db:ba:f5:d9:32:5e:dc:32:81:0a:ed:3f: 3c:dd:6b:65:35:0b:21:50:15:00:cd:46:62:c1:5d: e3:07:9a:a2:05:a4:55:ba:fc:2e:85:74:b4:c9:03: bb:37:e6:83:55:65:bd:c5:45:ba:5f:39:18:bf:ab: 70:75:0f:fd:d3:d2:84:f2:0e:09:10:87:3e:bb:0c: 6f:ed:d3:13:62:f3:e2:08:50:d5:7b:f5:e0:38:8c: 26:0c:e3:f7:10:6e:1f:4a:18:50:a1:0e:2e:ac:69: e8:eb:9a:b5:df:94:43:a8:4d:92:83:97:8f:65:8c: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0E:8E:7E:6C:69:5A:60:E4:4D:34:8F:AB:FB:B7:5E:DD:13:AB:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a3759ce5-4b01-3bde-8b57-3019c0099ea0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.214.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7f:4a:61:45:b9:3e:d2:5b:1e:46:72:5d:71:b8:07:8c:c0: 6e:e3:8c:17:e5:21:d0:15:d6:13:8b:06:6b:cf:85:6c:66:10: 67:00:cc:4a:01:e8:e9:5b:09:f7:c4:33:5a:e1:6f:dc:04:13: 64:93:d1:e6:61:44:ed:72:c0:d5:94:b2:68:2a:cd:f4:97:4a: 20:3d:6d:0b:02:f0:4b:2e:23:d9:ad:45:55:02:eb:47:18:7a: da:74:cf:f0:6f:cd:f1:ed:0c:6b:72:c1:ff:da:d6:68:8f:38: c3:d1:e9:59:6d:1a:cb:15:53:30:82:f7:78:b0:5b:f2:0d:89: b6:16:81:6c:29:8a:14:0c:21:3b:b5:ea:90:00:07:ec:22:64: 7b:24:ab:aa:b7:df:96:7b:73:73:b6:32:ae:8c:30:f6:7c:b2: 82:e2:c6:ef:fa:04:59:1c:0c:5a:4f:b2:01:97:93:c2:8c:9d: 7f:90:65:ab:03:a8:ef:7e:bb:8d:7a:b5:0a:9b:15:f0:a2:ad: d7:ae:91:bd:b2:5e:4a:89:2a:3a:e3:6f:24:08:2f:98:3f:1f: a9:de:93:f5:44:a3:31:ee:6a:c6:f8:fa:ac:58:64:67:8f:19: bc:1e:19:06:63:9e:45:52:05:e8:65:49:14:3e:55:49:3e:5e: 52:9b:e1:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2oFW4XhtwO2DTt/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQyODEzMDAzMFoXDTI2MDcyNzEzMDAzMFowLzEtMCsGA1UEAxMk MWRjZWViMWYtNTEwYi00ZjljLWI3YTgtYWM0MWY2NzUwYTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7WvBcsKlQ0G3CH2Fn2OJRCHHSN9HS6/wrx6 4HPptHXM1L+UDLw+uOVEF7yQ4tZJ7AfBBjPdz3DmwOAXMCwMWCVCz7Y433GN9+Z6 b+GJACnSZleOxkAUpjAoTD5r6vbpsXhUplfQAfJeA0BEhqzojz4pTsV2Y1mrA9t/ P1YO1OATk4a9mps9uhDbuvXZMl7cMoEK7T883WtlNQshUBUAzUZiwV3jB5qiBaRV uvwuhXS0yQO7N+aDVWW9xUW6XzkYv6twdQ/909KE8g4JEIc+uwxv7dMTYvPiCFDV e/XgOIwmDOP3EG4fShhQoQ4urGno65q135RDqE2Sg5ePZYy1pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcOjn5saVpg5E00j6v7t17dE6vcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTM3NTljZTUtNGIwMS0z YmRlLThiNTctMzAxOWMwMDk5ZWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt/SmFFuT7SWx5Gcl1xuAeMwG7jjBflIdAV1hOLBmvPhWxmEGcAzEoB 6OlbCffEM1rhb9wEE2ST0eZhRO1ywNWUsmgqzfSXSiA9bQsC8EsuI9mtRVUC60cY etp0z/BvzfHtDGtywf/a1miPOMPR6VltGssVUzCC93iwW/INibYWgWwpihQMITu1 6pAAB+wiZHskq6q335Z7c3O2Mq6MMPZ8soLixu/6BFkcDFpPsgGXk8KMnX+QZasD qO9+u416tQqbFfCirdeukb2yXkqJKjrjbyQIL5g/H6nek/VEozHuasb4+qxYZGeP GbweGQZjnkVSBehlSRQ+VUk+XlKb4Ts= -----END CERTIFICATE-----Generated at Wed May 13 12:15:20 2026 by rpki-client