$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa File: d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa (raw, json) Hash identifier: RduNrJmhFtpQI3FhOi75vP+H9Qt801sWWK/NIqex6AM= Subject key identifier: 70:31:7B:D1:28:CD:56:E7:C1:8D:B4:32:A7:F9:9A:D7:9C:61:83:CF Certificate issuer: /CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Certificate serial: 010D0C9F4328584D492A5E06ADEF018AE6183300 Authority key identifier: 06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 16509 IP address blocks: 208.71.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:5e:06:ad:ef:01:8a:e6:18:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=c412c8a9-21af-4d72-82cd-c6958b074a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a3:fa:3d:df:2e:68:9c:20:29:a5:5e:03:34: 79:51:6e:4b:a8:96:27:69:e9:4d:9a:b1:e9:82:a4: 35:60:e7:ff:0d:79:d3:ac:b2:60:19:b2:78:06:a7: 5d:f4:82:13:4a:d1:3c:1a:31:15:9d:e8:f0:80:4c: 20:ec:0d:39:a3:fc:88:b7:f8:8e:72:55:5a:dd:83: f4:1f:5b:13:57:76:da:4b:72:2b:32:01:85:6a:f0: 91:3e:5b:16:4f:31:1d:a4:62:fe:73:ce:a2:bf:b8: 0e:75:84:bd:00:de:63:42:3a:38:4a:cf:4c:0a:3b: fa:63:d7:75:2a:a1:16:5c:8f:e4:0b:2f:49:e0:97: 69:5a:35:f3:5a:da:ca:ba:db:3b:4f:26:e6:ed:b2: a2:1e:05:ef:68:a5:bd:c1:38:d1:4b:7d:30:b1:42: 6e:df:b5:d9:c0:39:97:a5:37:dd:7e:bb:c2:8a:ac: 01:b7:76:50:99:c3:ee:1c:04:b1:d5:88:90:7b:0b: 70:03:87:61:34:12:7d:a9:27:92:95:27:78:fc:63: 57:43:76:f8:81:a4:ed:54:f4:1e:60:b6:2a:73:38: a9:41:ae:85:83:41:5c:80:46:c2:96:ca:c4:2b:de: 83:4d:d9:bb:27:85:ed:f7:48:a7:b5:39:18:e9:b2: 11:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:31:7B:D1:28:CD:56:E7:C1:8D:B4:32:A7:F9:9A:D7:9C:61:83:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/d05bcbae-9b64-30ee-b6b5-9346a3e2fd95.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.crl X509v3 Authority Key Identifier: keyid:06:3F:FA:8F:B3:60:BF:0E:82:0B:32:17:A7:CB:D3:6F:5A:44:13:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cbfe33a8-61b8-4e3d-ac75-6a3cde2f057a.cer sbgp-ipAddrBlock: critical IPv4: 208.71.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:98:ce:d0:d3:8f:33:15:95:29:d3:e2:af:0a:e7:ea:30:ab: 15:cd:25:55:97:cc:ff:0a:8f:ce:bd:fc:08:26:07:39:3c:7d: e7:de:df:10:10:fb:52:2f:d9:80:de:dd:70:8d:e0:1a:75:90: 1c:87:97:bb:26:8c:2b:c2:85:ca:d2:23:8e:0b:32:4f:6c:4e: f4:30:96:55:0d:8f:6f:d5:3f:03:b5:9a:92:26:3a:3c:a3:5e: 85:d6:5b:ba:5a:ee:d7:bb:f4:9e:88:28:3d:36:61:0d:44:17: f0:60:d5:ea:25:9b:e9:2e:ed:11:59:df:44:5d:69:d6:00:f9: bf:18:45:27:5a:31:89:8a:18:37:fe:ad:80:ed:bb:d1:27:4d: bc:e6:40:09:1c:ef:6d:2f:9c:8d:74:37:aa:06:be:9d:44:ff: 3c:5c:75:d7:b8:21:0d:73:ef:ef:7e:b9:b2:ea:c5:94:93:85: c0:ed:65:f2:eb:21:09:ab:b8:fd:c1:9b:f0:01:db:c4:a1:f4: b7:0c:73:0f:30:09:a3:d6:3e:d5:de:e6:6a:77:7b:1b:f3:eb: 15:0e:43:da:61:ac:8c:ef:56:0e:dc:c9:82:cd:21:2a:c0:d6: 61:a8:cb:13:81:65:c5:9a:36:33:1c:e5:2e:e5:db:16:94:ba: a3:23:08:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKl4Gre8BiuYYMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmZTMzYTgtNjFiOC00ZTNkLWFjNzUtNmEzY2RlMmYw NTdhMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk YzQxMmM4YTktMjFhZi00ZDcyLTgyY2QtYzY5NThiMDc0YTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqP6Pd8uaJwgKaVeAzR5UW5LqJYnaelNmrHp gqQ1YOf/DXnTrLJgGbJ4Bqdd9IITStE8GjEVnejwgEwg7A05o/yIt/iOclVa3YP0 H1sTV3baS3IrMgGFavCRPlsWTzEdpGL+c86iv7gOdYS9AN5jQjo4Ss9MCjv6Y9d1 KqEWXI/kCy9J4JdpWjXzWtrKuts7Tybm7bKiHgXvaKW9wTjRS30wsUJu37XZwDmX pTfdfrvCiqwBt3ZQmcPuHASx1YiQewtwA4dhNBJ9qSeSlSd4/GNXQ3b4gaTtVPQe YLYqczipQa6Fg0FcgEbClsrEK96DTdm7J4Xt90intTkY6bIRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHAxe9EozVbnwY20Mqf5mtecYYPPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZl MzNhOC02MWI4LTRlM2QtYWM3NS02YTNjZGUyZjA1N2EvZDA1YmNiYWUtOWI2NC0z MGVlLWI2YjUtOTM0NmEzZTJmZDk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2JmZTMzYTgtNjFiOC00ZTNkLWFj NzUtNmEzY2RlMmYwNTdhL2NiZmUzM2E4LTYxYjgtNGUzZC1hYzc1LTZhM2NkZTJm MDU3YS5jcmwwHwYDVR0jBBgwFoAUBj/6j7Ngvw6CCzIXp8vTb1pEE6owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYmZlMzNhOC02MWI4LTRlM2QtYWM3NS02YTNj ZGUyZjA1N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EcXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmYztDTjzMVlSnT4q8K5+owqxXNJVWXzP8Kj869/AgmBzk8fefe3xAQ +1Iv2YDe3XCN4Bp1kByHl7smjCvChcrSI44LMk9sTvQwllUNj2/VPwO1mpImOjyj XoXWW7pa7te79J6IKD02YQ1EF/Bg1eolm+ku7RFZ30RdadYA+b8YRSdaMYmKGDf+ rYDtu9EnTbzmQAkc720vnI10N6oGvp1E/zxcdde4IQ1z7+9+ubLqxZSThcDtZfLr IQmruP3Bm/AB28Sh9LcMcw8wCaPWPtXe5mp3exvz6xUOQ9phrIzvVg7cyYLNISrA 1mGoyxOBZcWaNjMc5S7l2xaUuqMjCPc= -----END CERTIFICATE-----Generated at Thu Mar 26 01:57:33 2026 by rpki-client