$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/b004f559-6773-32fd-a84c-69cadc8fc26a.roa File: b004f559-6773-32fd-a84c-69cadc8fc26a.roa (raw, json) Hash identifier: im9K0hdAZo3IEWTzQhy0SjHXm1+3qu64fn9uvTEv49s= Subject key identifier: 66:C2:E9:06:71:08:CA:B4:04:3C:C9:25:6E:AF:F9:F4:07:2B:A2:A1 Certificate issuer: /CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Certificate serial: 010D0C9F4328584DADAACD88CB673BE1DF0A6B00 Authority key identifier: CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/b004f559-6773-32fd-a84c-69cadc8fc26a.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 14831 IP address blocks: 208.123.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:cd:88:cb:67:3b:e1:df:0a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6f21d4-30bb-4323-bd07-2383bae60aac Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=161c0052-b21a-4919-93f2-d8a839ac094e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a5:55:72:22:a6:d4:ec:0e:2b:24:76:7e:7e: 09:e1:41:c6:dd:be:33:25:6f:af:03:6a:99:17:34: 97:1e:e6:52:f0:5d:3b:9c:17:80:02:aa:9a:dc:4f: cc:d4:9b:b5:5a:85:96:c4:86:27:b1:c5:4e:f4:d9: ad:63:41:a7:0f:9f:54:fd:b6:1f:b2:ae:cd:ce:53: dd:6b:05:fe:bc:92:0a:ad:6a:19:17:4d:33:bf:cd: 36:f2:38:1f:a3:5e:fa:ac:8d:f1:c8:89:90:d5:a9: 39:30:7d:e7:2c:b3:51:d5:b1:f6:80:8d:75:2a:fa: ee:60:1e:80:20:40:82:03:3b:4a:b6:06:8e:9e:fc: 9f:05:ef:c7:98:9f:11:0d:f3:2f:91:11:79:92:f2: 40:c3:5d:d5:73:73:29:b9:f8:8e:a3:04:56:bb:ad: 20:ab:c1:dd:ae:a7:27:9e:e0:38:95:32:ab:9c:7d: d8:d3:ad:e7:48:75:0f:9e:7a:1c:9a:f6:51:aa:a0: 60:f2:a6:f0:ec:18:4d:21:8f:98:e3:62:d3:2d:85: 9a:64:0a:80:fc:c9:c5:92:00:3d:04:72:a2:fb:e3: 30:da:4d:b4:3e:8d:6b:58:84:bc:59:14:30:76:2f: 0b:45:39:67:40:7f:e5:8c:a8:bc:3f:45:20:4c:76: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:E9:06:71:08:CA:B4:04:3C:C9:25:6E:AF:F9:F4:07:2B:A2:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/b004f559-6773-32fd-a84c-69cadc8fc26a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac/7f6f21d4-30bb-4323-bd07-2383bae60aac.crl X509v3 Authority Key Identifier: keyid:CB:76:9E:6D:40:34:B9:7F:A9:F4:17:2B:D3:79:9E:10:8A:BC:C1:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7f6f21d4-30bb-4323-bd07-2383bae60aac.cer sbgp-ipAddrBlock: critical IPv4: 208.123.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:f8:2d:ab:86:ad:fc:a9:63:03:b1:09:d8:8e:41:d4:28:db: 4d:95:aa:ed:85:a5:f3:96:45:bc:b7:1e:88:0c:85:12:a3:dd: e2:5d:a8:5b:e6:fa:3d:7a:3a:24:11:42:45:a8:25:1e:cd:19: 2e:f3:20:7b:11:82:c8:75:43:44:24:ad:82:25:af:a2:b4:a1: 9a:4a:25:48:72:09:e2:2c:67:54:9e:5d:80:cb:1b:4a:c3:b9: 18:2a:97:92:5d:b8:9d:7a:03:b0:06:27:73:c4:db:d1:f5:32: 96:e4:1b:2c:b4:b4:60:0d:fd:6f:3d:1b:ed:d7:fa:bf:50:37: bb:23:1a:67:05:d5:4c:99:e3:af:33:9b:09:0e:c9:5d:f4:c2: 68:1d:00:26:44:5d:04:3e:0c:70:7d:86:5d:7c:f4:d4:01:24: a1:5c:37:54:2c:7e:84:c2:92:d4:1c:2f:17:a0:6e:c8:ac:95: 0d:0f:c0:74:d4:7f:91:05:f5:92:ab:5e:5e:ac:9c:53:87:5b: 33:0b:2d:01:15:18:f5:64:90:d7:15:c2:ee:e1:20:e5:84:45: 0f:b1:35:a2:70:0a:03:28:de:8a:95:ce:db:76:a8:d3:1b:9b: 07:a5:31:88:10:39:b2:6c:b9:68:48:f7:af:ac:e4:29:a5:ff: 4d:ef:9d:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqs2Iy2c74d8KawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Y2ZjIxZDQtMzBiYi00MzIzLWJkMDctMjM4M2JhZTYw YWFjMB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk MTYxYzAwNTItYjIxYS00OTE5LTkzZjItZDhhODM5YWMwOTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26VVciKm1OwOKyR2fn4J4UHG3b4zJW+vA2qZ FzSXHuZS8F07nBeAAqqa3E/M1Ju1WoWWxIYnscVO9NmtY0GnD59U/bYfsq7NzlPd awX+vJIKrWoZF00zv8028jgfo176rI3xyImQ1ak5MH3nLLNR1bH2gI11KvruYB6A IECCAztKtgaOnvyfBe/HmJ8RDfMvkRF5kvJAw13Vc3MpufiOowRWu60gq8Hdrqcn nuA4lTKrnH3Y063nSHUPnnocmvZRqqBg8qbw7BhNIY+Y42LTLYWaZAqA/MnFkgA9 BHKi++Mw2k20Po1rWIS8WRQwdi8LRTlnQH/ljKi8P0UgTHYJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGbC6QZxCMq0BDzJJW6v+fQHK6KhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZm MjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgzYmFlNjBhYWMvYjAwNGY1NTktNjc3My0z MmZkLWE4NGMtNjljYWRjOGZjMjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2Y2ZjIxZDQtMzBiYi00MzIzLWJk MDctMjM4M2JhZTYwYWFjLzdmNmYyMWQ0LTMwYmItNDMyMy1iZDA3LTIzODNiYWU2 MGFhYy5jcmwwHwYDVR0jBBgwFoAUy3aebUA0uX+p9Bcr03meEIq8wRowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ZjZmMjFkNC0zMGJiLTQzMjMtYmQwNy0yMzgz YmFlNjBhYWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HtlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD4LauGrfypYwOxCdiOQdQo202Vqu2FpfOWRby3HogMhRKj3eJdqFvm +j16OiQRQkWoJR7NGS7zIHsRgsh1Q0QkrYIlr6K0oZpKJUhyCeIsZ1SeXYDLG0rD uRgql5JduJ16A7AGJ3PE29H1MpbkGyy0tGAN/W89G+3X+r9QN7sjGmcF1UyZ468z mwkOyV30wmgdACZEXQQ+DHB9hl189NQBJKFcN1QsfoTCktQcLxegbsislQ0PwHTU f5EF9ZKrXl6snFOHWzMLLQEVGPVkkNcVwu7hIOWERQ+xNaJwCgMo3oqVztt2qNMb mwelMYgQObJsuWhI96+s5Cml/03vnd0= -----END CERTIFICATE-----Generated at Wed May 13 15:11:05 2026 by rpki-client