$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa File: 975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa (raw, json) Hash identifier: nTX0Io+eRQJRJ7oTFC5VwJfDekeHs+geMlmAmYmFbKQ= Subject key identifier: 95:26:83:1E:FE:A5:95:C1:A6:57:FC:7A:1A:94:5C:47:29:97:74:FF Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F9330C300B552A4DECB70 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 395213 IP address blocks: 208.118.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:93:30:c3:00:b5:52:a4:de:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=cd5987b2-689e-4010-82d4-4d89141b8d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:43:a9:2a:d5:bf:cf:5b:df:46:41:49:f2: aa:d7:70:60:0f:d8:b7:b6:d4:6e:1d:4c:c8:2c:0d: 86:9c:3c:74:ca:c5:d0:04:1d:a7:07:44:74:fb:fa: 8e:88:59:0b:89:eb:35:b0:1f:9e:d0:61:3d:1b:90: 67:86:e5:fb:ee:63:0b:19:9d:6f:e2:3e:d3:bf:00: 7f:92:76:09:7b:40:41:ae:19:e5:46:fb:30:19:fc: 93:0e:71:f6:a7:f1:cb:9d:4d:ce:ca:6c:3e:49:9a: e4:48:a5:a8:0e:c7:5a:66:99:76:e5:f2:f8:20:3c: 71:1f:36:08:0d:c7:c8:ee:25:64:aa:7b:9d:b0:10: 9b:10:ad:35:6c:7b:8e:e3:f1:7d:07:21:66:11:34: d7:98:17:c7:5e:b6:76:63:22:51:16:66:09:cb:0f: 8f:2b:24:46:bb:b8:e4:be:65:4c:b9:f3:c3:20:c9: f6:68:f1:63:8c:ed:64:17:5b:6a:62:88:d4:cb:cb: 11:a0:f4:14:b0:65:d9:52:cf:da:ca:16:a6:e9:f4: 4f:5f:fa:cf:f6:31:b9:bf:9e:21:66:00:8f:16:98: bf:de:51:58:74:42:44:d4:8a:38:ee:d5:1e:9f:b8: 5e:58:dc:4d:18:3a:20:e3:b2:b5:a2:df:bd:88:88: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:26:83:1E:FE:A5:95:C1:A6:57:FC:7A:1A:94:5C:47:29:97:74:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/975fe1e6-b0f2-3517-bae5-1e51fd63c635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:bb:c8:1a:7a:1e:48:41:87:01:fd:4c:aa:69:0b:5d:15:f6: 68:05:e1:b6:9c:10:fc:6c:52:16:69:92:92:ac:92:b0:39:38: e4:40:9f:bc:7c:a4:5b:1b:87:ba:9d:c2:21:9e:57:68:74:e1: 60:9c:09:5e:4e:fe:53:de:03:14:7f:1f:80:67:a2:df:c2:aa: b3:ae:f0:8d:59:d1:fe:78:44:f0:06:b4:2a:1e:01:33:2c:ba: 0d:1c:68:17:4a:12:e9:50:25:29:24:da:c4:24:c0:b7:01:8f: e1:30:bd:c7:09:fe:8f:42:a5:e7:16:87:6a:c0:03:a2:47:1b: e4:4d:f6:e2:d6:1b:d2:ee:7d:ed:55:59:a3:a3:b5:ed:af:ff: 1b:02:25:23:0a:e7:06:1f:09:ee:26:bc:aa:bc:ee:52:51:25: 9c:49:ed:ae:6a:31:b7:a0:29:32:ee:61:5d:52:15:8e:37:1c: a5:5e:5e:f7:e0:9d:12:54:01:8b:d1:08:30:bd:98:21:fb:5e: 7c:8a:8d:cb:cf:b6:9b:af:94:a8:7d:30:07:ad:c8:fc:63:8c: 40:ec:33:e9:e4:d7:61:d7:e4:fa:cf:06:50:1f:f3:73:26:b3: 54:9f:e7:66:ba:e5:5a:6a:0b:cf:2a:81:94:56:db:41:76:26: 8f:af:88:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj5MwwwC1UqTey3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk Y2Q1OTg3YjItNjg5ZS00MDEwLTgyZDQtNGQ4OTE0MWI4ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApttDqSrVv89b30ZBSfKq13BgD9i3ttRuHUzI LA2GnDx0ysXQBB2nB0R0+/qOiFkLies1sB+e0GE9G5BnhuX77mMLGZ1v4j7TvwB/ knYJe0BBrhnlRvswGfyTDnH2p/HLnU3Oymw+SZrkSKWoDsdaZpl25fL4IDxxHzYI DcfI7iVkqnudsBCbEK01bHuO4/F9ByFmETTXmBfHXrZ2YyJRFmYJyw+PKyRGu7jk vmVMufPDIMn2aPFjjO1kF1tqYojUy8sRoPQUsGXZUs/ayham6fRPX/rP9jG5v54h ZgCPFpi/3lFYdEJE1Io47tUen7heWNxNGDog47K1ot+9iIgLIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUmgx7+pZXBplf8ehqUXEcpl3T/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvOTc1ZmUxZTYtYjBmMi0z NTE3LWJhZTUtMWU1MWZkNjNjNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE67yBp6HkhBhwH9TKppC10V9mgF4bacEPxsUhZpkpKskrA5OORAn7x8 pFsbh7qdwiGeV2h04WCcCV5O/lPeAxR/H4Bnot/CqrOu8I1Z0f54RPAGtCoeATMs ug0caBdKEulQJSkk2sQkwLcBj+EwvccJ/o9CpecWh2rAA6JHG+RN9uLWG9Lufe1V WaOjte2v/xsCJSMK5wYfCe4mvKq87lJRJZxJ7a5qMbegKTLuYV1SFY43HKVeXvfg nRJUAYvRCDC9mCH7XnyKjcvPtpuvlKh9MAetyPxjjEDsM+nk12HX5PrPBlAf83Mm s1Sf52a65VpqC88qgZRW20F2Jo+viH8= -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:26 2026 by rpki-client