$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa File: 5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa (raw, json) Hash identifier: DF4HxrmrgbRrSk4mVhpA+P5/HTknRZwe/2yLgWZsIhg= Subject key identifier: 32:81:E5:C1:96:29:DE:D4:DE:23:17:22:B6:E2:CC:43:51:E2:16:8D Certificate issuer: /CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Certificate serial: 010D0C9F4328584D386A4A1C79449E3ADDA45000 Authority key identifier: 1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 394333 IP address blocks: 204.69.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:4a:1c:79:44:9e:3a:dd:a4:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c6110af-3017-4d96-90e3-d18a76894aa0 Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=08df3573-2e37-4f9e-8993-a9606b74366b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:36:72:6a:71:cf:45:93:00:7c:03:8f:e8:9d: 3d:82:7e:4b:db:c9:33:d0:db:ce:5e:27:1c:56:e2: dc:6a:bb:f6:46:32:8f:63:16:46:97:aa:f1:cc:ef: 78:9b:0b:0c:8b:5c:ca:cc:38:0f:56:07:49:bf:9b: 01:eb:fb:eb:64:8e:ef:ba:a9:ad:ba:9d:5f:af:de: 66:c9:0b:89:78:55:17:34:e8:b9:b1:4e:55:90:f2: 07:10:8c:08:69:97:88:b2:16:4a:30:42:e9:6b:8e: a0:36:28:b7:a6:25:10:cd:7a:7a:26:0b:f0:70:83: 9d:26:00:18:bf:db:da:f3:19:fc:bc:d9:c5:6a:8b: ee:58:fb:75:57:a6:a8:27:3d:df:6c:29:08:1c:9f: 64:58:f4:7b:1c:ae:e9:8e:6d:b1:9b:04:db:66:2f: d0:4b:16:4c:04:97:4a:75:06:9f:af:ce:e6:3a:4b: 71:11:4f:3a:93:39:75:78:32:93:33:e9:48:37:fc: 29:8b:f4:7a:11:b7:e5:8b:43:19:1e:d1:c8:f4:34: d9:6d:ea:0c:df:3f:ca:32:e5:5d:b9:da:e8:23:ba: 09:b1:2e:5b:7f:4f:b6:69:12:f9:f0:9b:f0:4b:74: c6:cc:95:f9:f0:f9:59:15:4c:d5:de:43:d2:52:df: 66:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:81:E5:C1:96:29:DE:D4:DE:23:17:22:B6:E2:CC:43:51:E2:16:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/5110946f-b7d0-3871-9b20-3fcf19a61eb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0/4c6110af-3017-4d96-90e3-d18a76894aa0.crl X509v3 Authority Key Identifier: keyid:1D:4E:47:BB:5F:EB:81:68:82:A9:C5:B9:31:12:69:9E:F7:7D:28:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c6110af-3017-4d96-90e3-d18a76894aa0.cer sbgp-ipAddrBlock: critical IPv4: 204.69.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:76:c1:52:ca:36:76:c0:ff:8a:67:4e:41:9f:c6:ef:bf:0b: 77:a8:4a:ae:d6:f4:29:78:1a:73:2f:e6:6d:c3:a5:ac:14:59: fd:09:cf:da:0b:c4:2b:dc:a9:68:fd:87:62:94:42:1b:83:84: a6:af:83:34:8e:4e:3e:0e:c9:5d:7e:ca:bd:e3:43:42:ef:46: a8:a1:ed:93:25:c0:6b:67:18:6c:69:ff:db:96:3d:36:08:3f: fd:78:d5:fe:b0:3c:c8:ac:ec:ab:fb:95:18:0d:76:dd:46:fb: f8:a7:69:45:fa:38:87:8e:99:f5:72:03:0e:b7:bc:8a:cf:2d: 41:80:76:d6:aa:e1:e8:05:d5:a4:ad:81:4f:c4:d5:2d:ae:6c: 50:8b:16:cb:e0:b1:a1:c2:50:c4:3c:dc:13:7f:4d:47:51:ee: 04:0a:15:2d:52:39:06:f5:4d:6a:70:68:d2:00:71:9d:6d:d9: b2:ce:03:9c:fd:17:31:c1:0d:d5:92:9b:68:2c:24:f4:26:e6: ca:96:da:e5:b1:32:68:e2:e4:7d:33:6c:1b:7c:de:1c:0a:d8: c2:d0:9a:5c:39:1e:6f:dc:7a:b2:06:c1:8a:1c:35:44:07:3f: 62:5e:bb:2d:f9:76:84:ac:bc:a3:31:5b:26:f2:df:2e:49:fe: c5:c4:a6:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04akoceUSeOt2kUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGM2MTEwYWYtMzAxNy00ZDk2LTkwZTMtZDE4YTc2ODk0 YWEwMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk MDhkZjM1NzMtMmUzNy00ZjllLTg5OTMtYTk2MDZiNzQzNjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzZyanHPRZMAfAOP6J09gn5L28kz0NvOXicc VuLcarv2RjKPYxZGl6rxzO94mwsMi1zKzDgPVgdJv5sB6/vrZI7vuqmtup1fr95m yQuJeFUXNOi5sU5VkPIHEIwIaZeIshZKMELpa46gNii3piUQzXp6JgvwcIOdJgAY v9va8xn8vNnFaovuWPt1V6aoJz3fbCkIHJ9kWPR7HK7pjm2xmwTbZi/QSxZMBJdK dQafr87mOktxEU86kzl1eDKTM+lIN/wpi/R6Ebfli0MZHtHI9DTZbeoM3z/KMuVd udroI7oJsS5bf0+2aRL58JvwS3TGzJX58PlZFUzV3kPSUt9mCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKB5cGWKd7U3iMXIrbizENR4haNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzYx MTBhZi0zMDE3LTRkOTYtOTBlMy1kMThhNzY4OTRhYTAvNTExMDk0NmYtYjdkMC0z ODcxLTliMjAtM2ZjZjE5YTYxZWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGM2MTEwYWYtMzAxNy00ZDk2LTkw ZTMtZDE4YTc2ODk0YWEwLzRjNjExMGFmLTMwMTctNGQ5Ni05MGUzLWQxOGE3Njg5 NGFhMC5jcmwwHwYDVR0jBBgwFoAUHU5Hu1/rgWiCqcW5MRJpnvd9KHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YzYxMTBhZi0zMDE3LTRkOTYtOTBlMy1kMThh NzY4OTRhYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIl2wVLKNnbA/4pnTkGfxu+/C3eoSq7W9Cl4GnMv5m3DpawUWf0Jz9oL xCvcqWj9h2KUQhuDhKavgzSOTj4OyV1+yr3jQ0LvRqih7ZMlwGtnGGxp/9uWPTYI P/141f6wPMis7Kv7lRgNdt1G+/inaUX6OIeOmfVyAw63vIrPLUGAdtaq4egF1aSt gU/E1S2ubFCLFsvgsaHCUMQ83BN/TUdR7gQKFS1SOQb1TWpwaNIAcZ1t2bLOA5z9 FzHBDdWSm2gsJPQm5sqW2uWxMmji5H0zbBt83hwK2MLQmlw5Hm/cerIGwYocNUQH P2Jeuy35doSsvKMxWyby3y5J/sXEpkg= -----END CERTIFICATE-----Generated at Tue Mar 24 14:27:00 2026 by rpki-client