$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa File: 6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa (raw, json) Hash identifier: 7LAYPFpjgJDNTkWKiAScteAK5yQWgAqpa0pMo0S0XsA= Subject key identifier: FA:B6:7C:BC:CC:DF:AE:69:0D:6E:56:FD:AC:D4:DD:32:5A:27:98:AE Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584C4E0681F17A41FA08A2A6BF00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa Signing time: Thu 25 Dec 2025 14:00:39 +0000 ROA not before: Thu 25 Dec 2025 14:00:39 +0000 ROA not after: Wed 25 Mar 2026 13:00:39 +0000 asID: 2914 IP address blocks: 204.141.247.0/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4e:06:81:f1:7a:41:fa:08:a2:a6:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Dec 25 14:00:39 2025 GMT Not After : Mar 25 13:00:39 2026 GMT Subject: CN=f06cec24-1114-46fb-ab2d-8d32bc6cdcd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:55:9b:f4:eb:a9:86:e9:a5:45:db:4d:82:56: 81:4e:7e:b5:24:b6:48:ba:cb:dd:bb:5d:73:50:37: 09:f9:3f:58:b3:51:fe:c3:db:fc:ae:a6:7d:23:db: 8d:77:64:60:f1:24:e8:d8:1b:77:a6:e3:b7:3f:d3: a0:45:06:5e:51:1a:5e:98:f2:31:36:76:57:bc:69: c2:c5:46:d7:c0:a7:50:31:c6:64:eb:93:76:4b:7e: e1:c8:2b:ee:b4:02:ce:d8:bb:52:bd:fd:4e:c4:a8: a7:25:30:13:8e:ea:e8:5b:63:22:22:e5:74:0e:70: 63:72:44:ca:45:ad:0a:5b:9e:76:81:d7:2c:73:a8: 0e:ef:be:d2:0e:a6:b9:91:8f:9a:c1:e2:e3:02:3c: bb:3c:b1:39:0f:55:18:02:28:68:e6:e0:a3:3f:d9: 07:f8:84:40:d7:6f:4c:f8:bc:64:d4:83:18:87:91: 85:1f:47:f5:81:e4:0f:34:66:4f:6b:c6:21:60:c0: bd:ba:67:23:af:ad:6e:51:be:9d:dd:37:c9:45:37: 0a:85:2b:b4:be:a0:08:6c:08:90:4b:2e:df:b4:33: ca:c0:c5:bd:2c:34:64:7d:14:9d:56:89:16:f1:38: 99:fa:73:8d:1e:3b:f5:6e:1e:d1:6f:81:fc:f1:12: df:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B6:7C:BC:CC:DF:AE:69:0D:6E:56:FD:AC:D4:DD:32:5A:27:98:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/6b5fb706-eeae-3f1c-8f30-1af82d5f3f46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.141.247.0/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:12:38:9a:b4:2c:15:f3:7e:ac:b8:d2:a6:39:40:f9:33:ec: 24:a7:8c:71:19:89:99:c7:83:16:b6:b5:03:04:81:6d:a1:e5: 49:14:1c:ce:fb:53:99:2a:78:3f:da:74:fe:82:a3:1f:26:05: cb:5b:83:a9:34:2d:35:25:42:20:2c:ac:68:7d:4c:f8:56:81: 30:ba:54:29:16:70:e8:2e:7b:2c:15:5e:4d:18:7f:3e:08:b7: ab:6c:09:3f:09:5f:ad:8f:54:6c:6f:1d:9e:70:cd:09:d5:8f: 19:34:f2:21:0a:3f:ce:88:fa:f6:ac:66:0c:26:f3:6a:67:45: dc:98:b2:3b:8c:da:c5:d1:c4:71:a1:28:9a:c0:8c:0f:84:de: 46:29:b2:7f:8a:69:90:6d:86:c8:4c:2d:ec:f2:da:db:ba:8e: f3:60:fd:38:bf:4e:dc:46:ae:0a:13:85:a5:85:99:b2:44:16: 66:e1:44:e8:df:0e:de:ec:18:50:fd:42:01:08:f7:4d:75:4f: ba:fb:98:27:43:cd:27:86:38:45:b6:6f:0e:0a:2b:92:63:e4: 0b:a6:04:d0:a3:53:b7:2d:5b:47:64:83:9f:00:57:23:20:b8: 3f:b2:aa:f6:ac:1e:ad:6c:fa:a8:cf:82:79:d3:de:b5:45:8f: 87:29:dc:81 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExOBoHxekH6CKKmvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MTIyNTE0MDAzOVoXDTI2MDMyNTEzMDAzOVowLzEtMCsGA1UEAxMk ZjA2Y2VjMjQtMTExNC00NmZiLWFiMmQtOGQzMmJjNmNkY2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklWb9OuphumlRdtNglaBTn61JLZIusvdu11z UDcJ+T9Ys1H+w9v8rqZ9I9uNd2Rg8STo2Bt3puO3P9OgRQZeURpemPIxNnZXvGnC xUbXwKdQMcZk65N2S37hyCvutALO2LtSvf1OxKinJTATjuroW2MiIuV0DnBjckTK Ra0KW552gdcsc6gO777SDqa5kY+aweLjAjy7PLE5D1UYAiho5uCjP9kH+IRA129M +Lxk1IMYh5GFH0f1geQPNGZPa8YhYMC9umcjr61uUb6d3TfJRTcKhSu0vqAIbAiQ Sy7ftDPKwMW9LDRkfRSdVokW8TiZ+nONHjv1bh7Rb4H88RLffwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFPq2fLzM365pDW5W/azU3TJaJ5iuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvNmI1ZmI3MDYtZWVhZS0z ZjFjLThmMzAtMWFmODJkNWYzZjQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzI33ADBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBhEjiatCwV836suNKmOUD5M+wkp4xxGYmZx4MWtrUDBIFtoeVJFBzO +1OZKng/2nT+gqMfJgXLW4OpNC01JUIgLKxofUz4VoEwulQpFnDoLnssFV5NGH8+ CLerbAk/CV+tj1Rsbx2ecM0J1Y8ZNPIhCj/OiPr2rGYMJvNqZ0XcmLI7jNrF0cRx oSiawIwPhN5GKbJ/immQbYbITC3s8trbuo7zYP04v07cRq4KE4WlhZmyRBZm4UTo 3w7e7BhQ/UIBCPdNdU+6+5gnQ80nhjhFtm8OCiuSY+QLpgTQo1O3LVtHZIOfAFcj ILg/sqr2rB6tbPqoz4J50961RY+HKdyB -----END CERTIFICATE-----Generated at Sun Feb 22 14:12:03 2026 by rpki-client