$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa File: c839d4eb-7aad-3290-9927-1223b842368b.roa (raw, json) Hash identifier: Oer+XlN/cmEHySp3p+Py3EP2E7ZRMSgho54KHeNXrRI= Subject key identifier: 70:54:6F:18:9C:99:9A:0C:C6:1F:02:62:85:AB:12:2A:02:FC:39:71 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0A779AEC7191D976AC7099C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 208.217.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:9a:ec:71:91:d9:76:ac:70:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=45ce4ba7-f50d-42db-9303-dee051ac010d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:76:b1:83:fa:fe:8d:de:db:a2:91:32:05:34: 37:ba:58:11:1c:45:32:cf:d9:0f:4b:fa:d7:23:9d: c4:dd:8d:7b:77:75:12:b5:00:c6:a9:ba:7e:2f:f0: 2d:0f:2d:0d:66:0b:c8:c8:04:36:d4:b2:ad:97:28: 54:97:ea:d0:ff:cf:94:9c:e2:44:15:35:4d:f5:f8: 7c:6f:c5:7b:6f:8a:25:5c:12:99:84:5f:f3:02:a3: 70:bf:ca:36:f0:eb:4a:9e:a2:55:e2:33:f8:50:6e: 0c:4e:b3:0f:a2:d6:9a:3d:dc:17:92:e4:8f:60:02: 03:36:5b:79:ea:2f:eb:78:bb:67:98:3d:6b:b7:4b: ca:6f:08:34:4c:73:a4:c3:dd:34:58:08:fb:32:df: 23:5b:5e:e9:95:39:10:9a:8c:fc:93:80:50:be:8d: e6:0d:3a:5a:09:40:43:8f:b7:68:fd:00:3a:97:3f: 2a:f3:a3:20:24:fe:1d:b2:70:2d:dc:c0:96:8a:e0: 3f:64:8f:bc:ed:46:fc:32:4d:3e:c1:9a:a4:27:04: 28:34:45:56:a2:95:2c:68:16:5d:6c:15:8f:7b:40: de:74:70:3c:c4:76:51:f4:3f:2f:f8:29:8c:a7:b9: 27:31:5e:27:21:82:ba:57:74:2e:59:3b:00:3b:6b: fe:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:54:6F:18:9C:99:9A:0C:C6:1F:02:62:85:AB:12:2A:02:FC:39:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c839d4eb-7aad-3290-9927-1223b842368b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.217.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c7:9f:32:b3:ce:60:9f:2f:ca:92:19:c9:44:6c:71:e6:95: 66:04:4b:64:fb:b9:60:ad:e1:11:68:c6:90:5b:25:39:3a:4d: 4b:9b:db:4d:87:15:c7:f9:7e:df:b5:57:95:cb:a9:5f:35:3b: e4:a2:15:09:f4:c8:8b:ec:7b:f2:80:cd:ca:e4:03:ce:66:2e: a9:dd:fd:fd:e5:f7:14:c7:2f:21:53:c3:87:56:ee:d5:59:7d: 1e:ba:46:55:b1:5d:af:4a:8f:04:c7:60:38:d5:8b:94:a1:c3: 67:af:37:28:c0:dd:cb:c9:4d:3f:90:0b:5e:99:50:6a:46:c1: 3c:ee:81:21:21:1a:df:d9:c5:b9:bc:6d:76:e5:97:ae:5c:63: 81:09:82:76:3b:d6:82:0c:c9:57:3e:65:f3:f6:47:f9:b1:b8: dc:23:bd:b4:67:6e:5f:db:5c:1b:b7:2d:a9:a5:b9:e3:a8:6b: 2d:fe:de:8d:d4:49:b3:34:70:35:43:56:cd:77:eb:69:b3:41: 0f:39:5d:bb:f9:43:24:d5:08:00:59:e3:d9:65:5f:d8:d4:f6: e2:38:8e:a1:3e:28:a9:9f:31:fb:9f:79:db:69:11:99:5d:80: b7:1a:ee:c3:78:a8:f3:66:2a:9c:b5:15:e1:22:24:b7:37:70: 4c:93:58:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd5rscZHZdqxwmcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk NDVjZTRiYTctZjUwZC00MmRiLTkzMDMtZGVlMDUxYWMwMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHaxg/r+jd7bopEyBTQ3ulgRHEUyz9kPS/rX I53E3Y17d3UStQDGqbp+L/AtDy0NZgvIyAQ21LKtlyhUl+rQ/8+UnOJEFTVN9fh8 b8V7b4olXBKZhF/zAqNwv8o28OtKnqJV4jP4UG4MTrMPotaaPdwXkuSPYAIDNlt5 6i/reLtnmD1rt0vKbwg0THOkw900WAj7Mt8jW17plTkQmoz8k4BQvo3mDTpaCUBD j7do/QA6lz8q86MgJP4dsnAt3MCWiuA/ZI+87Ub8Mk0+wZqkJwQoNEVWopUsaBZd bBWPe0DedHA8xHZR9D8v+CmMp7knMV4nIYK6V3QuWTsAO2v+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHBUbxicmZoMxh8CYoWrEioC/DlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzgzOWQ0ZWItN2FhZC0z MjkwLTk5MjctMTIyM2I4NDIzNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NnYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLHnzKzzmCfL8qSGclEbHHmlWYES2T7uWCt4RFoxpBbJTk6TUub202H Fcf5ft+1V5XLqV81O+SiFQn0yIvse/KAzcrkA85mLqnd/f3l9xTHLyFTw4dW7tVZ fR66RlWxXa9KjwTHYDjVi5Shw2evNyjA3cvJTT+QC16ZUGpGwTzugSEhGt/Zxbm8 bXbll65cY4EJgnY71oIMyVc+ZfP2R/mxuNwjvbRnbl/bXBu3LamlueOoay3+3o3U SbM0cDVDVs1362mzQQ85Xbv5QyTVCABZ49llX9jU9uI4jqE+KKmfMfufedtpEZld gLca7sN4qPNmKpy1FeEiJLc3cEyTWHw= -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:41 2026 by rpki-client