$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa File: d24168f5-a980-3a14-a89b-7351a9920158.roa (raw, json) Hash identifier: 1RGvEGa8n7oQd8YE5TDhsDBUDByhw+sMSXoX5udNq/Q= Subject key identifier: BB:99:FD:3C:36:F9:10:68:E5:68:D3:D6:02:40:C2:D0:52:8B:C4:D5 Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Certificate serial: 010D0C9F4328584D4A8F9E95D15D64D7B12CE600 Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa Signing time: Thu 26 Mar 2026 01:00:32 +0000 ROA not before: Thu 26 Mar 2026 01:00:32 +0000 ROA not after: Wed 24 Jun 2026 01:00:32 +0000 asID: 22147 IP address blocks: 208.118.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4a:8f:9e:95:d1:5d:64:d7:b1:2c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd Validity Not Before: Mar 26 01:00:32 2026 GMT Not After : Jun 24 01:00:32 2026 GMT Subject: CN=95d7cbb8-4c6c-4530-80a5-46a03c9b73d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:17:34:9d:52:8e:01:e4:40:e8:95:9c:c8:3f: b1:66:ea:43:cf:2c:07:ec:16:0c:2f:b5:f5:be:cb: 24:91:11:59:c9:58:68:8d:9b:59:11:7b:c3:1c:e7: b9:eb:d1:94:91:66:62:af:11:b7:0f:b5:a1:0a:b4: 26:2f:0a:c9:b0:02:fe:1e:db:47:60:91:a3:bf:e2: db:83:fb:5d:e0:24:84:7f:91:24:c6:a5:e7:f0:81: f6:ba:e0:76:55:95:51:09:1f:4d:9a:05:3e:90:8c: 89:3b:ef:0f:8f:2f:a1:ed:c6:87:22:71:f3:73:5d: 5d:13:1f:50:12:a6:22:bf:1a:da:15:31:ba:ae:c4: 0f:16:f8:1e:c0:99:49:d2:e0:08:eb:c9:35:21:1b: ec:f6:7b:57:c5:4e:a6:48:76:e2:55:5e:cb:e3:68: b3:81:0e:95:bd:ca:1b:10:2a:ec:6b:89:1d:47:b6: d9:84:d5:1b:64:91:ae:d1:2f:c7:6e:1b:b1:85:54: f3:0a:69:b9:a4:ae:aa:20:0d:97:b6:eb:f5:61:b9: 0e:8e:22:71:8e:61:5e:ee:f8:9f:c4:5a:38:86:c8: 9a:25:00:0a:26:dd:0c:6b:b5:58:9d:c4:40:bf:c8: 7a:d1:b7:b5:3c:2b:32:b2:e5:e1:54:60:09:4f:1d: cf:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:99:FD:3C:36:F9:10:68:E5:68:D3:D6:02:40:C2:D0:52:8B:C4:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/d24168f5-a980-3a14-a89b-7351a9920158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl X509v3 Authority Key Identifier: keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer sbgp-ipAddrBlock: critical IPv4: 208.118.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:95:14:c6:74:ca:85:75:b4:dc:7c:02:c2:2e:63:2b:13:91: ad:93:fe:0a:7c:bc:38:48:36:5a:62:38:4e:71:3f:c1:cd:45: 6b:8b:dd:f9:ad:ec:d4:63:c8:2b:1e:80:49:e9:b0:57:d2:87: 24:03:96:43:a9:43:ce:92:7b:a8:4e:5f:27:46:80:d0:1e:23: a6:32:1b:15:6d:f6:1b:16:4b:93:65:c8:ea:af:07:e7:ee:21: 13:cd:7d:73:dd:e9:41:c0:31:a9:d1:ad:72:f6:25:2d:09:33: e3:3e:1f:89:63:f4:ed:db:df:76:b9:ea:c0:09:bd:71:9b:c2: 36:7e:64:38:35:43:7f:76:7e:fc:45:41:85:b6:c9:95:fd:3b: a3:3c:8f:66:0c:04:e4:96:f4:81:df:7e:aa:5f:21:51:9b:00: 47:0c:a6:ec:68:17:8e:6e:d2:79:d8:14:fa:31:41:71:c2:0a: c2:ad:64:37:19:cf:e1:d3:56:73:52:d6:35:e3:35:c0:23:32: 08:b2:6d:99:85:89:54:64:40:eb:10:70:35:52:cb:e2:06:b1: e5:be:16:d2:ff:b0:ac:e4:9e:75:2c:48:17:48:48:9f:b0:98: cb:94:37:24:0e:8a:61:f9:ea:ca:3a:7c:c5:4a:e2:80:9a:7a: 9f:c8:00:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Kj56V0V1k17Es5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5 MWRkMB4XDTI2MDMyNjAxMDAzMloXDTI2MDYyNDAxMDAzMlowLzEtMCsGA1UEAxMk OTVkN2NiYjgtNGM2Yy00NTMwLTgwYTUtNDZhMDNjOWI3M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxc0nVKOAeRA6JWcyD+xZupDzywH7BYML7X1 vsskkRFZyVhojZtZEXvDHOe569GUkWZirxG3D7WhCrQmLwrJsAL+HttHYJGjv+Lb g/td4CSEf5EkxqXn8IH2uuB2VZVRCR9NmgU+kIyJO+8Pjy+h7caHInHzc11dEx9Q EqYivxraFTG6rsQPFvgewJlJ0uAI68k1IRvs9ntXxU6mSHbiVV7L42izgQ6Vvcob ECrsa4kdR7bZhNUbZJGu0S/HbhuxhVTzCmm5pK6qIA2Xtuv1YbkOjiJxjmFe7vif xFo4hsiaJQAKJt0Ma7VYncRAv8h60be1PCsysuXhVGAJTx3PGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuZ/Tw2+RBo5WjT1gJAwtBSi8TVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2 MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvZDI0MTY4ZjUtYTk4MC0z YTE0LWE4OWItNzM1MWE5OTIwMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1 NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl ZGQ4MTkxZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HbsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCVFMZ0yoV1tNx8AsIuYysTka2T/gp8vDhINlpiOE5xP8HNRWuL3fmt 7NRjyCsegEnpsFfShyQDlkOpQ86Se6hOXydGgNAeI6YyGxVt9hsWS5NlyOqvB+fu IRPNfXPd6UHAManRrXL2JS0JM+M+H4lj9O3b33a56sAJvXGbwjZ+ZDg1Q392fvxF QYW2yZX9O6M8j2YMBOSW9IHffqpfIVGbAEcMpuxoF45u0nnYFPoxQXHCCsKtZDcZ z+HTVnNS1jXjNcAjMgiybZmFiVRkQOsQcDVSy+IGseW+FtL/sKzknnUsSBdISJ+w mMuUNyQOimH56so6fMVK4oCaep/IAFM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:33:02 2026 by rpki-client