$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa File: 19ef7954-6449-382b-9f58-1bc212e37279.roa (raw, json) Hash identifier: hc3qsbsJxMGr5m2cAmDmeTSrWjvEA3uBsfWUsXw13AU= Subject key identifier: D5:B6:E9:CE:BF:87:B4:35:C1:F5:1C:24:F0:F0:6F:56:1B:07:31:5C Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F932195694027D6639FC0 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 22147 IP address blocks: 208.118.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:93:21:95:69:40:27:d6:63:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=3bf2c329-2119-49c3-a731-0b164745a68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:97:c5:0c:fe:63:e9:70:c4:cd:b3:0b:1e:73: 41:70:18:50:ea:b0:98:e2:22:4d:ca:57:06:2d:85: ff:0a:15:73:9e:5d:96:77:d7:28:8e:bc:29:9f:dd: 27:75:a9:44:7e:df:3c:7f:16:f8:79:bf:02:0b:ea: d4:bb:4c:01:de:20:fc:cd:48:0f:b9:f5:0f:10:8e: 80:0f:35:cf:a8:52:0e:6c:cd:4b:08:4d:ee:69:5d: 17:01:35:85:b1:36:47:eb:5f:a1:26:97:88:e6:83: b4:67:a1:98:47:53:0c:b0:48:09:e9:bd:dd:0a:b2: 59:04:35:13:16:e9:38:2a:c5:ef:21:85:82:4b:e9: 53:80:a8:76:e4:08:09:79:32:03:86:2f:ce:5c:a8: 99:9e:8a:de:e5:e7:37:cc:4b:a9:e4:f3:be:6a:fd: cd:25:75:24:a8:8e:30:96:40:03:84:2f:37:7d:75: 3a:23:d9:a2:71:40:31:c7:0d:9e:75:e7:ca:b1:38: 0e:ca:32:73:da:06:4d:c6:1f:14:44:a3:ad:9e:12: c9:53:92:c8:2c:83:4c:bc:41:7c:12:c8:a5:2b:3e: 5e:b9:2d:b1:d9:78:00:ae:5d:ec:d0:e5:b3:08:0f: a3:4c:18:7f:32:2e:ba:0a:63:90:ed:ca:34:40:3e: cf:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B6:E9:CE:BF:87:B4:35:C1:F5:1C:24:F0:F0:6F:56:1B:07:31:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/19ef7954-6449-382b-9f58-1bc212e37279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:e4:35:74:46:13:ab:c1:c6:c8:fa:55:41:1f:89:aa:53:dd: c1:43:de:be:27:5f:5d:82:5f:b2:25:8f:10:12:69:2a:94:ab: 33:eb:09:8e:07:60:d8:01:97:ba:a9:eb:55:bb:96:0c:83:7f: 0d:6c:88:eb:e3:be:ac:48:7c:25:07:55:52:d8:d1:15:9e:d2: 89:ba:e1:04:09:ad:aa:92:c2:4a:6f:39:3a:91:a5:5e:d2:52: 67:38:48:49:c7:02:37:2c:a9:8b:e7:94:3d:c5:2e:d5:c0:7e: 88:40:57:7a:d2:a9:9a:8c:83:27:73:f2:cb:c5:35:5b:39:67: 02:47:ab:ff:96:0e:f3:00:d3:4f:b0:e7:ec:e0:01:62:9a:c9: 20:38:0d:ba:dd:aa:49:37:4e:a2:09:b4:9d:5e:98:34:5f:7f: db:26:76:3e:07:89:2d:aa:cb:d8:dc:2c:a0:91:4f:66:e6:5d: 4e:b0:31:52:3b:9d:bb:b4:22:06:18:50:2f:8e:3f:3d:54:1b: a6:56:fb:a1:76:ab:d6:11:db:ee:ed:62:cf:63:0e:4e:0b:49: 80:b3:0c:6d:84:20:d7:8c:da:28:38:4a:43:49:ef:92:78:18: c7:fb:11:93:94:a4:73:1a:2f:e3:bf:c8:91:1f:ef:a1:39:f4: 65:eb:00:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5MhlWlAJ9Zjn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk M2JmMmMzMjktMjExOS00OWMzLWE3MzEtMGIxNjQ3NDVhNjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZfFDP5j6XDEzbMLHnNBcBhQ6rCY4iJNylcG LYX/ChVznl2Wd9cojrwpn90ndalEft88fxb4eb8CC+rUu0wB3iD8zUgPufUPEI6A DzXPqFIObM1LCE3uaV0XATWFsTZH61+hJpeI5oO0Z6GYR1MMsEgJ6b3dCrJZBDUT Fuk4KsXvIYWCS+lTgKh25AgJeTIDhi/OXKiZnore5ec3zEup5PO+av3NJXUkqI4w lkADhC83fXU6I9micUAxxw2edefKsTgOyjJz2gZNxh8URKOtnhLJU5LILINMvEF8 EsilKz5euS2x2XgArl3s0OWzCA+jTBh/Mi66CmOQ7co0QD7PWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNW26c6/h7Q1wfUcJPDwb1YbBzFcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvMTllZjc5NTQtNjQ0OS0z ODJiLTlmNTgtMWJjMjEyZTM3Mjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzkNXRGE6vBxsj6VUEfiapT3cFD3r4nX12CX7IljxASaSqUqzPrCY4H YNgBl7qp61W7lgyDfw1siOvjvqxIfCUHVVLY0RWe0om64QQJraqSwkpvOTqRpV7S Umc4SEnHAjcsqYvnlD3FLtXAfohAV3rSqZqMgydz8svFNVs5ZwJHq/+WDvMA00+w 5+zgAWKaySA4Dbrdqkk3TqIJtJ1emDRff9smdj4HiS2qy9jcLKCRT2bmXU6wMVI7 nbu0IgYYUC+OPz1UG6ZW+6F2q9YR2+7tYs9jDk4LSYCzDG2EINeM2ig4SkNJ75J4 GMf7EZOUpHMaL+O/yJEf76E59GXrAEE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:15:58 2026 by rpki-client