$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa File: bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa (raw, json) Hash identifier: 2Lje80PCd9g9WGtYc1JPSt72b6juspVZ6DcnVmXhREU= Subject key identifier: 72:9F:57:98:FB:35:C8:D2:F8:0C:B9:36:E9:08:FB:98:0E:76:EE:D8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0EA7E78D85C416D617306A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 23097 IP address blocks: 208.236.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:e7:8d:85:c4:16:d6:17:30:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=bc3a51e3-f483-482a-837e-417cfc10219b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:09:64:c2:39:db:7c:a2:f6:05:d5:3e:85:8b: b5:0e:ef:67:c9:49:a4:a3:28:7d:23:49:2d:83:d4: 56:00:44:b8:e8:9f:11:11:4b:9c:c8:fc:83:22:71: 7d:03:79:54:18:1a:d4:16:e5:d8:7c:30:03:37:0f: d9:a0:78:92:cb:50:ae:24:d7:3b:a9:61:82:24:2e: dd:b5:c5:e3:7a:97:0e:03:96:7b:23:b6:05:25:7e: 5f:27:21:38:bf:71:4b:e9:de:ed:6b:2d:1f:c2:94: 90:1e:2b:f5:15:ee:e0:4d:ac:78:d5:44:ca:a8:d8: de:b4:a4:61:3e:cd:ce:dd:bd:73:6d:c8:fb:81:55: 61:f7:37:9a:52:41:e2:1b:91:68:59:f5:03:13:09: dc:19:c9:1d:66:5a:14:f6:ac:37:44:d2:db:c0:8f: 7c:e5:1d:ec:e5:30:18:6d:a9:9a:d4:b0:4d:34:39: 3e:6c:95:66:45:c1:02:d4:20:4f:65:13:a8:59:91: 2c:73:ca:6e:46:ea:6f:fe:93:84:07:43:c4:2d:a6: 72:1e:a5:1d:b0:27:1b:bf:ef:75:2d:39:8f:50:1e: 01:35:de:aa:5e:75:f9:29:d5:3c:40:f5:67:ee:2d: 33:24:c7:bd:41:e2:f8:ac:98:60:56:d5:91:53:e8: 8f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9F:57:98:FB:35:C8:D2:F8:0C:B9:36:E9:08:FB:98:0E:76:EE:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/bd0e1a98-eebe-346b-b7b4-caf260a235e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.236.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:d4:c5:a3:05:b5:44:99:77:9a:8b:57:cb:95:97:c1:23:b8: 46:7f:13:9c:e9:4d:0f:0f:d3:12:68:01:45:79:69:33:13:0d: 3c:5f:65:ab:02:57:4e:2a:3c:4f:cf:40:62:b8:2d:96:f5:cf: 96:00:11:e2:2b:2d:63:5a:70:48:79:00:6e:85:a2:00:c0:2f: f2:d3:22:68:40:21:85:4f:89:f7:52:8d:bf:39:a4:fa:84:18: 9b:02:2a:4f:44:a7:59:95:e0:16:3c:a4:e5:2b:3b:f2:a8:1e: bb:b5:2b:a1:83:c5:49:3a:b8:3d:61:28:93:73:5c:48:3a:08: 1b:2b:b7:9b:0b:b5:f8:c6:ff:e2:68:82:12:34:9e:3c:c9:09: f8:1f:3d:16:78:05:ca:40:ca:b5:4c:e7:ba:64:e7:27:4d:b4: 31:6d:b0:cc:55:e2:38:ab:71:e6:53:18:be:3f:5e:33:13:10: 75:91:c4:d2:d2:06:6c:18:bb:46:28:d0:6c:c1:c2:b8:b9:22: d9:a8:7d:8a:d2:0d:0f:fe:15:e1:91:74:35:7d:7d:40:d3:11: 2e:87:d7:3a:3d:3c:9e:a2:33:ac:6a:60:c8:25:48:61:8d:2b: 4f:cf:e9:e8:ad:70:68:c3:df:dc:0d:07:ff:9a:73:c8:30:14: ce:0d:89:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op+eNhcQW1hcwaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YmMzYTUxZTMtZjQ4My00ODJhLTgzN2UtNDE3Y2ZjMTAyMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAlkwjnbfKL2BdU+hYu1Du9nyUmkoyh9I0kt g9RWAES46J8REUucyPyDInF9A3lUGBrUFuXYfDADNw/ZoHiSy1CuJNc7qWGCJC7d tcXjepcOA5Z7I7YFJX5fJyE4v3FL6d7tay0fwpSQHiv1Fe7gTax41UTKqNjetKRh Ps3O3b1zbcj7gVVh9zeaUkHiG5FoWfUDEwncGckdZloU9qw3RNLbwI985R3s5TAY bama1LBNNDk+bJVmRcEC1CBPZROoWZEsc8puRupv/pOEB0PELaZyHqUdsCcbv+91 LTmPUB4BNd6qXnX5KdU8QPVn7i0zJMe9QeL4rJhgVtWRU+iPnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKfV5j7NcjS+Ay5NukI+5gOdu7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmQwZTFhOTgtZWViZS0z NDZiLWI3YjQtY2FmMjYwYTIzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0OxrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTUxaMFtUSZd5qLV8uVl8EjuEZ/E5zpTQ8P0xJoAUV5aTMTDTxfZasC V04qPE/PQGK4LZb1z5YAEeIrLWNacEh5AG6FogDAL/LTImhAIYVPifdSjb85pPqE GJsCKk9Ep1mV4BY8pOUrO/KoHru1K6GDxUk6uD1hKJNzXEg6CBsrt5sLtfjG/+Jo ghI0njzJCfgfPRZ4BcpAyrVM57pk5ydNtDFtsMxV4jirceZTGL4/XjMTEHWRxNLS BmwYu0Yo0GzBwri5ItmofYrSDQ/+FeGRdDV9fUDTES6H1zo9PJ6iM6xqYMglSGGN K0/P6eitcGjD39wNB/+ac8gwFM4Nias= -----END CERTIFICATE-----Generated at Thu Mar 26 03:52:51 2026 by rpki-client