$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa File: 3ea35b96-597f-3b36-948c-33ee92db08a6.roa (raw, json) Hash identifier: +e39PtCB0ZUPYpCSqZ5Xr1wRwj1urCnRzzyzY8vUK3k= Subject key identifier: 73:D2:8D:FD:B8:0A:1E:2D:39:98:34:02:D4:5C:2A:A4:C5:2F:A4:1C Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584D8D8FFFD334C3A5A512FDAA40 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 31898 IP address blocks: 152.69.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:ff:d3:34:c3:a5:a5:12:fd:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=c26c82fd-e03e-4fe4-b935-d638e942de9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:95:ac:e1:6f:3f:e7:86:3e:2b:3b:03:7c:fb: 16:09:f5:ac:e2:18:ab:6e:53:fb:89:a9:1d:76:7a: 2a:bc:f5:2c:44:2d:1c:ec:07:21:d5:71:ef:99:b1: 5e:f1:47:ae:e6:f3:83:33:6f:36:fe:9f:71:00:d3: 9a:1b:39:29:b2:e4:8c:4f:1d:82:41:50:ab:ba:9e: d5:2b:2a:e1:92:05:6a:37:57:9e:3a:cd:77:66:68: d4:58:34:0e:75:3c:b8:cb:11:c7:c7:79:d5:de:f0: da:96:e4:b5:2d:8a:66:0c:49:60:3f:fa:5a:cc:a0: 16:79:9b:af:90:2e:33:3c:a1:1f:3b:72:6f:e5:2d: 6c:9e:4a:2d:e3:dd:4c:6a:b9:46:ea:b3:53:96:7b: 01:7f:dc:c0:4b:0c:da:32:a5:03:82:ee:8c:40:23: 21:ba:a6:3f:bd:5f:e8:5d:80:44:bb:76:41:83:1a: a2:00:b2:1c:1e:1a:d5:5c:fc:4f:24:30:c3:cc:86: ec:f0:f8:4d:37:b9:df:b6:97:34:77:5b:bd:99:9c: 86:86:11:88:77:03:ce:83:63:7c:6b:99:6d:d5:e9: c4:6a:b6:4c:c6:0f:f9:55:40:ef:dd:5a:56:82:e9: 47:e0:cf:4c:c6:d5:c1:62:c4:1a:82:31:49:cc:3a: c5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:D2:8D:FD:B8:0A:1E:2D:39:98:34:02:D4:5C:2A:A4:C5:2F:A4:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/3ea35b96-597f-3b36-948c-33ee92db08a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 152.69.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:fb:d8:9b:a1:2a:51:6f:5f:15:ac:c8:2d:3a:3b:7d:b7:3b: cb:37:f7:3c:69:82:38:5e:c2:3b:54:c8:4d:7e:69:ce:9b:80: 6a:f7:86:77:8f:af:01:93:6d:40:da:83:fc:0a:89:24:c8:09: 03:33:df:d1:ab:45:e8:ed:ba:69:e3:b3:0d:91:24:0c:d7:8c: ef:50:94:e8:ec:c2:df:69:35:13:73:9d:bb:49:5d:af:05:05: 75:3a:05:68:01:42:9d:cd:9f:30:dd:2f:26:90:d3:4c:2b:84: 7e:1c:29:d5:12:16:95:42:91:8c:88:94:7e:1d:7d:4b:f0:72: 8e:31:14:5f:20:e6:65:f3:6f:57:56:f7:31:82:24:55:cf:45: bd:18:db:78:24:a5:e5:2a:2c:73:62:96:b4:c8:b5:80:d8:3a: fc:0f:f8:b7:ec:c1:fc:2e:ed:4a:ae:49:c5:7c:0c:3d:e2:9f: 95:8a:58:45:2d:f6:e3:d5:ce:8a:62:d1:8f:72:16:9d:c0:be: d3:50:25:63:a4:c7:21:25:22:4d:ea:25:af:f0:55:d1:24:b3: 12:78:e9:8d:08:33:e9:6d:8e:ad:c9:91:c4:01:7b:9a:87:64: 18:43:59:f3:d7:c9:49:e1:5c:df:06:7b:95:e5:36:1d:43:a2: 7c:0d:5a:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj//TNMOlpRL9qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk YzI2YzgyZmQtZTAzZS00ZmU0LWI5MzUtZDYzOGU5NDJkZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZWs4W8/54Y+KzsDfPsWCfWs4hirblP7iakd dnoqvPUsRC0c7Ach1XHvmbFe8Ueu5vODM282/p9xANOaGzkpsuSMTx2CQVCrup7V KyrhkgVqN1eeOs13ZmjUWDQOdTy4yxHHx3nV3vDaluS1LYpmDElgP/pazKAWeZuv kC4zPKEfO3Jv5S1snkot491MarlG6rNTlnsBf9zASwzaMqUDgu6MQCMhuqY/vV/o XYBEu3ZBgxqiALIcHhrVXPxPJDDDzIbs8PhNN7nftpc0d1u9mZyGhhGIdwPOg2N8 a5lt1enEarZMxg/5VUDv3VpWgulH4M9MxtXBYsQagjFJzDrFYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPSjf24Ch4tOZg0AtRcKqTFL6QcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvM2VhMzViOTYtNTk3Zi0z YjM2LTk0OGMtMzNlZTkyZGIwOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmEXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACb72JuhKlFvXxWsyC06O323O8s39zxpgjhewjtUyE1+ac6bgGr3hneP rwGTbUDag/wKiSTICQMz39GrRejtumnjsw2RJAzXjO9QlOjswt9pNRNznbtJXa8F BXU6BWgBQp3NnzDdLyaQ00wrhH4cKdUSFpVCkYyIlH4dfUvwco4xFF8g5mXzb1dW 9zGCJFXPRb0Y23gkpeUqLHNilrTItYDYOvwP+Lfswfwu7UquScV8DD3in5WKWEUt 9uPVzopi0Y9yFp3AvtNQJWOkxyElIk3qJa/wVdEksxJ46Y0IM+ltjq3JkcQBe5qH ZBhDWfPXyUnhXN8Ge5XlNh1DonwNWsc= -----END CERTIFICATE-----Generated at Wed May 13 11:09:15 2026 by rpki-client