$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa File: d5ee5953-1179-38f3-9cd8-1324c853f484.roa (raw, json) Hash identifier: yJLzmdFjzagNhAjh3MfA4f1xKpKxZlVANo94nLIuPS8= Subject key identifier: 87:BB:08:C2:45:D5:9D:10:CD:82:2A:26:0E:37:CB:13:0B:22:CD:37 Certificate issuer: /CN=b02b2a27-63d2-435f-8114-d98e289edc6c Certificate serial: 010D0C9F4328584DD09058291797CF7D70099300 Authority key identifier: 68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa Signing time: Wed 13 May 2026 01:00:24 +0000 ROA not before: Wed 13 May 2026 01:00:24 +0000 ROA not after: Tue 11 Aug 2026 01:00:24 +0000 asID: 14618 IP address blocks: 208.71.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d0:90:58:29:17:97:cf:7d:70:09:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02b2a27-63d2-435f-8114-d98e289edc6c Validity Not Before: May 13 01:00:24 2026 GMT Not After : Aug 11 01:00:24 2026 GMT Subject: CN=893e2183-7e08-4b03-842b-d02e5d46efc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:62:a3:b1:15:e5:73:70:fb:ae:ea:f7:95:f2: f5:73:de:b6:eb:1a:27:ae:fe:cf:65:ae:fa:99:7e: 76:6a:29:b8:f5:26:41:14:07:51:3d:24:d6:79:d1: 42:39:44:2b:9c:d6:33:3f:02:48:2e:79:d2:86:dd: 07:03:aa:50:13:3d:3a:ae:27:a9:34:c6:e1:31:60: 48:78:a4:c5:5b:e4:47:85:b7:43:fb:52:a1:17:50: 87:e2:be:4f:94:8c:f6:f7:f0:d0:a1:91:23:a3:e5: e6:12:4a:d9:d6:c6:71:3f:11:0a:02:4c:9a:3f:c8: 54:99:e4:4e:98:49:9d:5a:7f:a3:4f:c3:62:dc:64: ce:37:8e:87:3f:81:d4:6d:de:d9:17:fb:65:e5:ea: db:de:a0:e4:05:38:ae:6e:d2:d3:e4:a5:68:25:22: 81:2b:14:86:4c:ce:d5:b8:86:95:c7:51:a2:19:61: a0:26:c4:89:f8:93:ae:84:57:84:13:a7:49:3d:be: 1c:64:3d:8a:b9:7a:0e:06:5d:15:d1:99:30:47:30: f2:d5:f3:e3:f9:b4:d5:bf:25:b0:d5:d2:56:82:8e: 13:22:42:3c:88:eb:5b:ff:d0:de:f6:5c:99:c9:92: a1:9b:54:42:05:5a:d4:c5:fb:8b:22:61:77:02:93: a2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:08:C2:45:D5:9D:10:CD:82:2A:26:0E:37:CB:13:0B:22:CD:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/d5ee5953-1179-38f3-9cd8-1324c853f484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c/b02b2a27-63d2-435f-8114-d98e289edc6c.crl X509v3 Authority Key Identifier: keyid:68:FD:10:A9:76:FA:09:AC:44:0A:CF:EB:95:4C:B2:32:BF:35:91:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b02b2a27-63d2-435f-8114-d98e289edc6c.cer sbgp-ipAddrBlock: critical IPv4: 208.71.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:41:b6:dd:2b:ba:24:74:53:a2:b0:77:87:fc:8f:f7:75:e2: 4a:68:04:79:d0:5a:e7:45:00:d4:03:fd:cb:fb:18:25:65:2c: 31:e9:e2:bd:ca:d8:9a:9a:5a:ac:e4:78:b2:fe:87:49:c7:51: fb:fe:13:64:1d:5b:e1:2b:78:40:ae:4d:0e:5a:92:46:1a:82: 81:c6:f8:5f:2e:bb:8d:43:34:9e:af:f8:96:0c:de:be:5b:c5: ed:be:ee:d5:e4:9c:73:26:a6:d7:e9:00:25:4a:ba:46:15:e4: 11:bf:78:e5:c4:89:35:70:8b:41:46:54:e1:b7:98:98:e3:30: 02:9f:b8:3d:ca:ab:ed:ff:0f:da:83:8f:e9:31:79:c6:34:97: a0:52:6c:20:39:4a:49:60:da:32:cd:83:40:f8:b6:63:7f:99: f9:e1:df:7e:42:23:69:e6:c8:94:db:19:c8:e0:21:84:6b:1b: b8:f6:20:e1:2e:b2:22:27:7d:7a:61:ee:43:f0:18:19:a9:e1: b4:ca:2a:54:c2:ff:23:ea:f9:2d:07:18:e9:a3:2c:6f:57:3e: bb:2d:e7:b0:92:8d:18:2a:1c:83:af:17:7b:46:ba:8f:aa:b6: e5:b2:a8:9b:de:e5:7c:71:18:c8:13:3f:ae:17:c9:ae:88:6c: 0c:94:81:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3QkFgpF5fPfXAJkwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyYjJhMjctNjNkMi00MzVmLTgxMTQtZDk4ZTI4OWVk YzZjMB4XDTI2MDUxMzAxMDAyNFoXDTI2MDgxMTAxMDAyNFowLzEtMCsGA1UEAxMk ODkzZTIxODMtN2UwOC00YjAzLTg0MmItZDAyZTVkNDZlZmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGKjsRXlc3D7rur3lfL1c9626xonrv7PZa76 mX52aim49SZBFAdRPSTWedFCOUQrnNYzPwJILnnSht0HA6pQEz06riepNMbhMWBI eKTFW+RHhbdD+1KhF1CH4r5PlIz29/DQoZEjo+XmEkrZ1sZxPxEKAkyaP8hUmeRO mEmdWn+jT8Ni3GTON46HP4HUbd7ZF/tl5erb3qDkBTiubtLT5KVoJSKBKxSGTM7V uIaVx1GiGWGgJsSJ+JOuhFeEE6dJPb4cZD2KuXoOBl0V0ZkwRzDy1fPj+bTVvyWw 1dJWgo4TIkI8iOtb/9De9lyZyZKhm1RCBVrUxfuLImF3ApOikQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe7CMJF1Z0QzYIqJg43yxMLIs03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJi MmEyNy02M2QyLTQzNWYtODExNC1kOThlMjg5ZWRjNmMvZDVlZTU5NTMtMTE3OS0z OGYzLTljZDgtMTMyNGM4NTNmNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjAyYjJhMjctNjNkMi00MzVmLTgx MTQtZDk4ZTI4OWVkYzZjL2IwMmIyYTI3LTYzZDItNDM1Zi04MTE0LWQ5OGUyODll ZGM2Yy5jcmwwHwYDVR0jBBgwFoAUaP0QqXb6CaxECs/rlUyyMr81kckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMDJiMmEyNy02M2QyLTQzNWYtODExNC1kOThl Mjg5ZWRjNmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNBtt0ruiR0U6Kwd4f8j/d14kpoBHnQWudFANQD/cv7GCVlLDHp4r3K 2JqaWqzkeLL+h0nHUfv+E2QdW+EreECuTQ5akkYagoHG+F8uu41DNJ6v+JYM3r5b xe2+7tXknHMmptfpACVKukYV5BG/eOXEiTVwi0FGVOG3mJjjMAKfuD3Kq+3/D9qD j+kxecY0l6BSbCA5Sklg2jLNg0D4tmN/mfnh335CI2nmyJTbGcjgIYRrG7j2IOEu siInfXph7kPwGBmp4bTKKlTC/yPq+S0HGOmjLG9XPrst57CSjRgqHIOvF3tGuo+q tuWyqJve5XxxGMgTP64Xya6IbAyUgcY= -----END CERTIFICATE-----Generated at Wed May 13 10:58:09 2026 by rpki-client