$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa File: dfac5974-f75e-3282-b330-4ac930e4be2c.roa (raw, json) Hash identifier: p9cT3Gf/e7KTaa10EepJsP1/VJge8Anhxsfy/H2oV/g= Subject key identifier: 2D:D3:08:4B:EB:DB:57:50:D6:03:37:92:B5:6F:AA:3B:B1:3F:A6:C0 Certificate issuer: /CN=e0222b33-d953-40bd-9e16-838d515a3e80 Certificate serial: 010D0C9F4328584D44FA3710FEF96A4AD6817420 Authority key identifier: 53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 30708 IP address blocks: 208.86.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:37:10:fe:f9:6a:4a:d6:81:74:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0222b33-d953-40bd-9e16-838d515a3e80 Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=62847066-0851-4834-9c14-02fe23de56ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:d3:9e:86:9c:bc:55:79:a7:60:f1:ab:78: 0d:4f:8d:1b:77:cb:9f:99:3c:1d:7a:90:65:0e:8f: 55:50:d4:86:94:42:30:e6:43:fe:d4:b6:ea:3f:b2: b8:bc:a9:4b:6d:a6:63:76:5b:71:35:8c:ec:47:1b: 04:21:7a:df:7f:e2:f2:81:71:a8:9a:32:61:a3:5d: d4:71:96:6b:d5:01:c3:19:3b:36:30:93:8c:73:0f: 0a:ba:31:db:05:80:ac:05:c3:5c:a1:d6:67:fd:9f: 06:37:f2:82:bd:af:4f:dc:52:de:ea:29:97:bb:a7: bf:fd:aa:e1:01:fc:dd:f6:63:b6:58:3b:e8:b3:44: ab:3a:8a:1e:52:2c:fc:e4:d4:a8:57:2d:a6:fb:ec: ab:cc:36:0e:9d:f9:ac:c6:42:3d:98:3c:0a:b7:99: 2e:1d:c6:0a:46:79:11:aa:6d:c8:a4:13:4c:be:63: c4:41:79:ff:7e:75:79:07:d1:99:ea:fe:14:f6:71: 5b:50:d8:3b:9f:81:00:42:c2:ee:3c:60:63:80:5a: c1:7a:52:ae:58:01:45:e4:77:ad:ce:3f:2e:e8:c8: 6e:db:c4:90:0e:5e:01:88:26:17:39:d4:6e:4a:be: 65:b9:6b:78:e3:04:24:e6:67:c7:44:f0:f8:0f:81: b3:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:D3:08:4B:EB:DB:57:50:D6:03:37:92:B5:6F:AA:3B:B1:3F:A6:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/dfac5974-f75e-3282-b330-4ac930e4be2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80/e0222b33-d953-40bd-9e16-838d515a3e80.crl X509v3 Authority Key Identifier: keyid:53:EB:13:69:3B:D7:1E:45:8A:7B:81:DF:7C:FB:F4:D4:63:23:1C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e0222b33-d953-40bd-9e16-838d515a3e80.cer sbgp-ipAddrBlock: critical IPv4: 208.86.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ae:44:7f:38:ed:a7:af:74:9e:3e:8f:61:db:91:07:db:98: 65:dc:46:68:95:d5:75:35:e3:28:04:22:ca:e6:6c:79:ef:40: e3:1e:92:1a:7d:3c:e3:33:eb:52:99:82:ee:02:4e:f9:fc:96: bd:03:f3:24:14:2b:d9:be:68:ba:f2:19:6b:fb:59:cd:ab:b7: 80:f1:9d:07:22:87:2d:30:23:3c:f5:ba:31:53:b3:34:7e:95: 5a:39:6c:1a:2c:dd:7b:94:ea:70:18:56:7c:30:a0:69:db:36: e0:2a:2a:d0:db:69:b3:74:3f:cc:aa:83:4f:f4:98:ef:53:0c: e9:85:da:87:1b:b0:27:48:a0:a3:86:5e:24:e9:86:b0:68:24: a5:1c:bc:1e:b3:12:85:21:a9:8a:65:10:e3:db:90:18:12:3f: ed:d5:92:2f:da:e6:bf:e0:58:b1:6f:b9:24:99:ae:55:22:4c: 6d:c9:27:b2:a4:fd:5f:6c:3d:c3:40:35:36:0e:e2:56:5c:4e: 13:33:42:9a:eb:0a:9b:2e:86:05:69:d4:91:53:8c:54:21:a2: c6:6d:83:e3:6d:df:cd:3d:1d:a0:f6:43:e1:3c:44:6a:31:83: ee:a2:c6:b5:3b:c6:9e:3b:e2:ff:53:ac:88:1d:e4:c8:ae:0c: 3b:f4:e7:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+jcQ/vlqStaBdCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTAyMjJiMzMtZDk1My00MGJkLTllMTYtODM4ZDUxNWEz ZTgwMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk NjI4NDcwNjYtMDg1MS00ODM0LTljMTQtMDJmZTIzZGU1NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wvTnoacvFV5p2Dxq3gNT40bd8ufmTwdepBl Do9VUNSGlEIw5kP+1LbqP7K4vKlLbaZjdltxNYzsRxsEIXrff+LygXGomjJho13U cZZr1QHDGTs2MJOMcw8KujHbBYCsBcNcodZn/Z8GN/KCva9P3FLe6imXu6e//arh Afzd9mO2WDvos0SrOooeUiz85NSoVy2m++yrzDYOnfmsxkI9mDwKt5kuHcYKRnkR qm3IpBNMvmPEQXn/fnV5B9GZ6v4U9nFbUNg7n4EAQsLuPGBjgFrBelKuWAFF5Het zj8u6Mhu28SQDl4BiCYXOdRuSr5luWt44wQk5mfHRPD4D4GztQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3TCEvr21dQ1gM3krVvqjuxP6bAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIy MmIzMy1kOTUzLTQwYmQtOWUxNi04MzhkNTE1YTNlODAvZGZhYzU5NzQtZjc1ZS0z MjgyLWIzMzAtNGFjOTMwZTRiZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTAyMjJiMzMtZDk1My00MGJkLTll MTYtODM4ZDUxNWEzZTgwL2UwMjIyYjMzLWQ5NTMtNDBiZC05ZTE2LTgzOGQ1MTVh M2U4MC5jcmwwHwYDVR0jBBgwFoAUU+sTaTvXHkWKe4HffPv01GMjHOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lMDIyMmIzMy1kOTUzLTQwYmQtOWUxNi04Mzhk NTE1YTNlODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FZcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOuRH847aevdJ4+j2HbkQfbmGXcRmiV1XU14ygEIsrmbHnvQOMekhp9 POMz61KZgu4CTvn8lr0D8yQUK9m+aLryGWv7Wc2rt4DxnQcihy0wIzz1ujFTszR+ lVo5bBos3XuU6nAYVnwwoGnbNuAqKtDbabN0P8yqg0/0mO9TDOmF2ocbsCdIoKOG XiTphrBoJKUcvB6zEoUhqYplEOPbkBgSP+3Vki/a5r/gWLFvuSSZrlUiTG3JJ7Kk /V9sPcNANTYO4lZcThMzQprrCpsuhgVp1JFTjFQhosZtg+Nt3809HaD2Q+E8RGox g+6ixrU7xp474v9TrIgd5MiuDDv055s= -----END CERTIFICATE-----Generated at Thu Mar 26 03:57:37 2026 by rpki-client