$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa File: 38e7bfbc-beb0-32a6-9f14-48077eca6287.roa (raw, json) Hash identifier: WADYyk814VYtfWGq55z+QsSKKqU+QuzPJUtuUQWafSc= Subject key identifier: 88:73:CF:B7:29:23:A7:E8:41:B5:9B:DE:C8:FB:85:76:14:66:FC:F2 Certificate issuer: /CN=fafea8ad-6b18-4909-8d73-a9987dd107f1 Certificate serial: 010D0C9F4328584DA280187BD26046B448A1F400 Authority key identifier: DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa Signing time: Sun 26 Apr 2026 13:00:30 +0000 ROA not before: Sun 26 Apr 2026 13:00:30 +0000 ROA not after: Sat 25 Jul 2026 13:00:30 +0000 asID: 376 IP address blocks: 204.19.80.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a2:80:18:7b:d2:60:46:b4:48:a1:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fafea8ad-6b18-4909-8d73-a9987dd107f1 Validity Not Before: Apr 26 13:00:30 2026 GMT Not After : Jul 25 13:00:30 2026 GMT Subject: CN=b78a7163-fec6-4998-802b-21032d18e306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:94:63:a8:14:1d:b1:00:0e:24:be:62:e7:cc: f0:b1:8c:71:bf:4b:1c:54:9e:0e:89:97:3a:9e:8a: 59:02:10:58:07:47:33:07:20:0c:3c:db:bd:41:cd: 71:5e:d5:9a:d5:dd:92:5f:6c:3c:24:31:d6:d6:a4: fd:d3:fb:57:69:6d:d3:d3:d4:3a:b6:4c:c7:13:47: 5f:eb:cf:ed:e8:4e:61:8f:ae:21:b3:0b:a3:aa:02: ee:a7:82:00:7a:0b:a1:77:0f:59:18:a1:51:fa:b3: 62:97:7f:ee:2b:5b:82:d0:5b:0c:71:55:27:71:c7: 88:83:2a:ce:5a:4e:46:ca:91:3b:a0:4e:d9:c9:8b: 36:80:8e:20:94:43:e2:c4:76:13:fc:00:d6:ad:2d: e1:b4:d9:71:82:f6:e4:dd:42:80:d6:98:93:01:67: bb:8b:c3:ac:f2:dc:ab:25:09:7e:04:54:11:bb:45: 16:22:47:51:e0:17:64:9c:c1:74:4c:2d:15:db:06: c7:b9:8e:d6:21:05:39:fa:41:82:42:a5:21:25:0b: 79:48:f7:90:0b:5a:46:3a:92:75:8d:b4:3f:f7:11: 7f:bb:50:6b:63:e4:b3:da:b2:dd:d6:8c:da:82:f0: 9d:b7:3c:56:07:56:d1:45:d6:1f:18:65:3c:42:0f: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:73:CF:B7:29:23:A7:E8:41:B5:9B:DE:C8:FB:85:76:14:66:FC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/38e7bfbc-beb0-32a6-9f14-48077eca6287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1/fafea8ad-6b18-4909-8d73-a9987dd107f1.crl X509v3 Authority Key Identifier: keyid:DC:4A:3D:3A:BD:B8:40:AB:D7:94:03:30:A1:66:07:CA:92:F6:67:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fafea8ad-6b18-4909-8d73-a9987dd107f1.cer sbgp-ipAddrBlock: critical IPv4: 204.19.80.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:f3:b5:9f:72:1e:36:c5:f0:c9:dc:b4:ff:b5:4b:ed:33:da: 41:f2:47:7a:33:c2:7a:28:6c:e4:17:0b:0e:e3:4e:90:3d:f2: fe:97:5c:0e:c2:3e:de:c6:f2:81:49:21:5d:f4:e8:4f:56:92: ec:0b:cc:d5:86:8e:59:5f:ac:6b:6c:dc:48:6e:e7:ba:d4:4b: aa:b3:04:7c:2b:e7:89:9b:df:09:e3:27:7c:01:c0:bc:2b:f6: a8:a2:d9:b1:91:a7:77:39:fe:b2:28:ed:73:c5:23:1d:11:b9: 06:f4:23:1d:3d:85:66:9d:1a:05:55:6d:f7:04:77:20:63:b0: 35:57:b4:f3:16:68:88:8a:6d:15:da:e0:d4:a4:6c:cc:86:41: cb:b8:33:9b:8e:c6:18:57:1d:4e:7b:8b:f6:00:38:d2:20:cf: bd:72:5c:51:ca:7f:d6:f7:05:b1:25:7b:94:1e:67:8a:8b:c9: dc:bc:6b:59:89:d5:c0:b4:85:b7:09:29:8d:2a:cb:db:b7:5d: 30:8b:28:d6:3f:15:4a:5d:45:3c:f6:40:3b:9b:61:ab:7c:40: b5:23:f1:c5:3e:03:1b:e0:87:81:0b:c0:82:23:6c:81:16:81: 29:b2:53:43:6c:44:c6:7e:01:b8:92:82:40:de:46:6e:0e:18: 5c:54:7f:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2igBh70mBGtEih9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmFmZWE4YWQtNmIxOC00OTA5LThkNzMtYTk5ODdkZDEw N2YxMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk Yjc4YTcxNjMtZmVjNi00OTk4LTgwMmItMjEwMzJkMThlMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA85RjqBQdsQAOJL5i58zwsYxxv0scVJ4OiZc6 nopZAhBYB0czByAMPNu9Qc1xXtWa1d2SX2w8JDHW1qT90/tXaW3T09Q6tkzHE0df 68/t6E5hj64hswujqgLup4IAeguhdw9ZGKFR+rNil3/uK1uC0FsMcVUncceIgyrO Wk5GypE7oE7ZyYs2gI4glEPixHYT/ADWrS3htNlxgvbk3UKA1piTAWe7i8Os8tyr JQl+BFQRu0UWIkdR4BdknMF0TC0V2wbHuY7WIQU5+kGCQqUhJQt5SPeQC1pGOpJ1 jbQ/9xF/u1BrY+Sz2rLd1ozagvCdtzxWB1bRRdYfGGU8Qg8Z5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhzz7cpI6foQbWb3sj7hXYUZvzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mYWZl YThhZC02YjE4LTQ5MDktOGQ3My1hOTk4N2RkMTA3ZjEvMzhlN2JmYmMtYmViMC0z MmE2LTlmMTQtNDgwNzdlY2E2Mjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZmFmZWE4YWQtNmIxOC00OTA5LThk NzMtYTk5ODdkZDEwN2YxL2ZhZmVhOGFkLTZiMTgtNDkwOS04ZDczLWE5OTg3ZGQx MDdmMS5jcmwwHwYDVR0jBBgwFoAU3Eo9Or24QKvXlAMwoWYHypL2Z8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mYWZlYThhZC02YjE4LTQ5MDktOGQ3My1hOTk4 N2RkMTA3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzBNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnztZ9yHjbF8MnctP+1S+0z2kHyR3ozwnoobOQXCw7jTpA98v6XXA7C Pt7G8oFJIV306E9WkuwLzNWGjllfrGts3Ehu57rUS6qzBHwr54mb3wnjJ3wBwLwr 9qii2bGRp3c5/rIo7XPFIx0RuQb0Ix09hWadGgVVbfcEdyBjsDVXtPMWaIiKbRXa 4NSkbMyGQcu4M5uOxhhXHU57i/YAONIgz71yXFHKf9b3BbEle5QeZ4qLydy8a1mJ 1cC0hbcJKY0qy9u3XTCLKNY/FUpdRTz2QDubYat8QLUj8cU+Axvgh4ELwIIjbIEW gSmyU0NsRMZ+AbiSgkDeRm4OGFxUf/c= -----END CERTIFICATE-----Generated at Wed May 13 11:04:16 2026 by rpki-client