$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/b8c7dcbd-a8fc-385d-a87c-973ce7a554d0.roa File: b8c7dcbd-a8fc-385d-a87c-973ce7a554d0.roa (raw, json) Hash identifier: aMhas6h/rSPPDKagaxZBbAf8a4bGlgvSti9I4YYoTeQ= Subject key identifier: 8B:69:8E:73:65:D2:97:2E:BF:DA:EC:90:87:BC:3F:34:8D:C1:F8:C0 Certificate issuer: /CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Certificate serial: 010D0C9F4328584D19B4F0BCF810364C668A7680 Authority key identifier: 07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/b8c7dcbd-a8fc-385d-a87c-973ce7a554d0.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 8075 IP address blocks: 204.239.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:f0:bc:f8:10:36:4c:66:8a:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c799c313-5f2f-4c52-84c3-f723dee23f2a Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=6f6833b1-36b6-4edc-be68-e09aa4f1b3d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:65:da:42:d2:79:d8:d1:df:aa:c8:18:11:a0: 42:01:c0:ab:cd:d9:ed:32:29:4d:25:90:ef:21:e1: 5d:22:1a:21:49:bd:e9:8c:75:dc:fe:97:26:69:20: a2:e2:f4:47:65:fa:2a:86:a9:c2:bf:ae:53:c1:94: ce:fa:70:54:26:14:15:a8:64:4a:a6:e6:70:95:a9: 66:df:92:28:5e:4c:d2:bd:6d:a2:6d:d9:eb:d0:fe: 4d:7d:9b:45:1c:77:ab:58:40:99:54:ec:69:67:b9: 4b:e9:e9:c7:8a:ff:35:80:c5:06:17:bc:a7:6d:59: e0:fa:a0:f8:ad:1a:69:0e:31:15:cb:c7:91:63:6a: b8:76:4e:32:ec:d9:bb:aa:2e:b2:3a:48:01:79:1b: 30:1c:8d:96:d2:f2:a5:1f:0b:c7:e0:61:cd:d7:dc: 2a:5c:b8:ff:1e:7f:87:87:a1:b7:7a:a2:28:d5:36: 52:55:c2:09:b4:e7:79:8b:b5:98:c7:5c:1c:ca:2a: a9:9c:f4:9a:bb:31:d5:fe:94:db:39:8e:ae:8f:04: 41:28:a1:18:6d:e7:6b:70:64:e8:83:0d:35:b8:71: 8f:15:e1:aa:98:f2:cf:a4:e7:10:02:68:61:07:47: 19:0a:12:7e:88:07:a6:33:2d:f1:ba:c9:a8:41:b0: b1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:69:8E:73:65:D2:97:2E:BF:DA:EC:90:87:BC:3F:34:8D:C1:F8:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/b8c7dcbd-a8fc-385d-a87c-973ce7a554d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a/c799c313-5f2f-4c52-84c3-f723dee23f2a.crl X509v3 Authority Key Identifier: keyid:07:AA:E2:8B:A4:EC:F8:B4:81:9B:4E:25:D2:0C:21:C8:4C:E9:6E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c799c313-5f2f-4c52-84c3-f723dee23f2a.cer sbgp-ipAddrBlock: critical IPv4: 204.239.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:b9:13:31:59:49:26:07:d7:f4:b8:08:3a:8c:48:63:35:69: 13:dd:72:90:b0:6d:87:3a:da:ba:be:77:49:39:c9:5c:af:69: 86:af:a0:ee:da:c5:fe:bb:1d:a5:5a:a6:7d:66:c2:04:ba:35: 30:14:1d:e1:48:97:d0:36:a4:a1:4e:b2:5d:34:61:10:9a:2f: 97:ec:6c:08:c6:a8:ef:8f:d5:e1:a8:6b:b0:67:43:19:b8:27: 37:e9:fc:f4:27:6f:6d:90:ec:92:74:7b:f8:af:bb:8d:4e:c8: 97:70:d8:70:f4:a1:0e:0c:5a:20:1c:23:db:2d:3f:66:c0:ce: 0c:8b:9d:20:28:1a:3e:08:66:2b:04:26:e9:9d:c4:fa:e0:5c: d3:41:43:84:1a:82:28:c6:0c:0d:ca:06:04:f7:df:9f:fa:e4: 77:31:10:c3:92:9c:97:75:7c:79:17:ad:b4:3a:0d:86:97:c0: dd:38:e2:a5:a3:7e:61:bf:6a:a1:0a:5b:27:a0:58:6f:3f:28: fb:c2:8e:bb:5a:10:d2:c4:c5:e9:e3:ab:7a:42:4d:7e:08:03: d7:00:4a:db:cd:94:88:56:a1:94:9b:a0:03:1a:45:37:69:7c: 22:bd:d7:e7:41:1c:ed:47:dd:27:b1:5d:ad:1c:b5:55:a4:fd: cc:6a:1e:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtPC8+BA2TGaKdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzc5OWMzMTMtNWYyZi00YzUyLTg0YzMtZjcyM2RlZTIz ZjJhMB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NmY2ODMzYjEtMzZiNi00ZWRjLWJlNjgtZTA5YWE0ZjFiM2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmXaQtJ52NHfqsgYEaBCAcCrzdntMilNJZDv IeFdIhohSb3pjHXc/pcmaSCi4vRHZfoqhqnCv65TwZTO+nBUJhQVqGRKpuZwlalm 35IoXkzSvW2ibdnr0P5NfZtFHHerWECZVOxpZ7lL6enHiv81gMUGF7ynbVng+qD4 rRppDjEVy8eRY2q4dk4y7Nm7qi6yOkgBeRswHI2W0vKlHwvH4GHN19wqXLj/Hn+H h6G3eqIo1TZSVcIJtOd5i7WYx1wcyiqpnPSauzHV/pTbOY6ujwRBKKEYbedrcGTo gw01uHGPFeGqmPLPpOcQAmhhB0cZChJ+iAemMy3xusmoQbCxQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFItpjnNl0pcuv9rskIe8PzSNwfjAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5 YzMxMy01ZjJmLTRjNTItODRjMy1mNzIzZGVlMjNmMmEvYjhjN2RjYmQtYThmYy0z ODVkLWE4N2MtOTczY2U3YTU1NGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzc5OWMzMTMtNWYyZi00YzUyLTg0 YzMtZjcyM2RlZTIzZjJhL2M3OTljMzEzLTVmMmYtNGM1Mi04NGMzLWY3MjNkZWUy M2YyYS5jcmwwHwYDVR0jBBgwFoAUB6rii6Ts+LSBm04l0gwhyEzpbhcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jNzk5YzMxMy01ZjJmLTRjNTItODRjMy1mNzIz ZGVlMjNmMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzO8LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFe5EzFZSSYH1/S4CDqMSGM1aRPdcpCwbYc62rq+d0k5yVyvaYavoO7a xf67HaVapn1mwgS6NTAUHeFIl9A2pKFOsl00YRCaL5fsbAjGqO+P1eGoa7BnQxm4 Jzfp/PQnb22Q7JJ0e/ivu41OyJdw2HD0oQ4MWiAcI9stP2bAzgyLnSAoGj4IZisE JumdxPrgXNNBQ4QagijGDA3KBgT335/65HcxEMOSnJd1fHkXrbQ6DYaXwN044qWj fmG/aqEKWyegWG8/KPvCjrtaENLExenjq3pCTX4IA9cAStvNlIhWoZSboAMaRTdp fCK91+dBHO1H3SexXa0ctVWk/cxqHtg= -----END CERTIFICATE-----Generated at Thu Mar 26 03:45:44 2026 by rpki-client