$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8dbea556-ecc7-3849-bcb2-247c6447de2b.roa File: 8dbea556-ecc7-3849-bcb2-247c6447de2b.roa (raw, json) Hash identifier: rNmOR7+X4X+t0M9OsTHXKyyumliv9BgSLTqnSjqfiAo= Subject key identifier: D3:DB:C3:EA:7C:CD:96:2E:69:BF:25:1B:45:D0:E7:04:46:3C:11:54 Certificate issuer: /CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Certificate serial: 010D0C9F4328584D0CEE38FDC33C43E1C5E1EB00 Authority key identifier: 5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8dbea556-ecc7-3849-bcb2-247c6447de2b.roa Signing time: Tue 03 Mar 2026 23:11:16 +0000 ROA not before: Tue 03 Mar 2026 23:11:16 +0000 ROA not after: Mon 01 Jun 2026 22:11:16 +0000 asID: 53959 IP address blocks: 207.171.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:ee:38:fd:c3:3c:43:e1:c5:e1:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c420fd9b-164b-4065-a5bd-1e09411dfa11 Validity Not Before: Mar 3 23:11:16 2026 GMT Not After : Jun 1 22:11:16 2026 GMT Subject: CN=c6fd9e25-f591-4e44-9954-ded5fad46c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:10:62:9b:4a:89:e8:e8:7c:5d:0b:87:74:29: 04:bb:63:8f:23:5e:3f:c1:cb:3b:1d:7b:5d:43:55: fc:63:a4:94:a4:53:5d:9a:d6:3e:dc:ea:8f:ec:6b: d2:ce:2d:fb:cc:d6:89:45:3f:70:be:ae:c7:b3:3c: a3:4d:39:95:7b:6a:d5:fa:b1:c5:23:09:8e:fa:40: f3:c5:d3:2b:98:94:e7:b9:19:f0:68:d0:4f:5e:8f: 59:ce:18:a8:dd:cc:8d:3f:dd:92:d2:6c:35:b5:c6: dd:33:11:e3:53:e3:c8:2f:9c:ab:d7:bf:f7:f3:04: 1e:d0:ef:f9:71:76:90:f0:fb:ee:ea:61:c1:05:fc: 01:60:c5:a5:61:c4:45:9e:c4:2f:7b:ba:04:b0:2b: 6e:22:f3:bd:94:4c:4f:8b:d5:95:4c:93:8f:29:c6: 9f:4a:8b:e0:8d:5c:44:52:82:f2:64:62:0a:d6:9a: 75:e8:ea:bc:91:cc:c2:5d:b2:4d:50:e2:86:1c:1d: 4f:13:a5:30:aa:01:27:0e:6b:7e:51:df:64:6f:1b: d8:49:23:18:04:28:f9:27:28:74:b5:32:ec:f6:80: f2:ef:e3:56:c7:09:9a:e1:a3:3c:8e:45:cb:a8:4b: de:31:b4:bc:02:8e:df:92:3e:8b:cb:99:fc:99:d0: bb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:DB:C3:EA:7C:CD:96:2E:69:BF:25:1B:45:D0:E7:04:46:3C:11:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/8dbea556-ecc7-3849-bcb2-247c6447de2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11/c420fd9b-164b-4065-a5bd-1e09411dfa11.crl X509v3 Authority Key Identifier: keyid:5E:87:C7:B4:2F:EE:ED:07:57:5E:DE:63:73:60:21:A5:A7:1C:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c420fd9b-164b-4065-a5bd-1e09411dfa11.cer sbgp-ipAddrBlock: critical IPv4: 207.171.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:74:4c:83:e9:e0:c9:2a:02:62:c8:40:1e:47:99:c4:2c:f4: 60:33:22:c0:53:31:35:fb:3e:df:bf:e3:6e:6a:ed:d4:fe:52: a5:9a:08:35:07:23:6d:50:e9:18:ef:55:61:d5:de:07:e9:3e: a6:67:3f:ec:43:bb:1e:ee:e0:7b:03:b3:99:f4:0b:5c:0f:ca: 78:49:28:fb:4b:e7:99:82:68:78:34:a0:f7:a1:0f:a0:97:2b: 76:70:21:6f:07:04:db:c2:cf:75:68:ce:3d:09:a9:b2:3d:25: ef:ac:2a:90:6a:11:3d:d5:de:2e:4c:fc:33:5a:41:24:46:e9: f4:68:b7:83:2a:e4:bb:81:11:bc:cf:ad:2f:8f:d0:0f:b4:6e: 26:26:ae:df:10:84:60:0e:bd:df:cc:78:c0:06:ec:74:91:66: 94:20:36:32:d0:18:1c:2a:c1:42:60:da:5e:5b:a7:45:bf:0a: 26:4f:be:58:fe:f7:f7:ab:c9:85:77:98:b1:06:97:eb:e7:cf: 77:8a:d4:c8:cd:4c:68:c6:9e:d2:0b:0e:fb:21:2e:3d:6c:69: 73:e2:8a:77:87:8b:51:70:b3:73:fb:a9:8c:f6:7f:ab:52:c5: 27:2f:67:28:c8:af:3a:e0:13:48:1a:f9:a9:23:0c:95:5e:c6: b3:d9:1a:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0M7jj9wzxD4cXh6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQyMGZkOWItMTY0Yi00MDY1LWE1YmQtMWUwOTQxMWRm YTExMB4XDTI2MDMwMzIzMTExNloXDTI2MDYwMTIyMTExNlowLzEtMCsGA1UEAxMk YzZmZDllMjUtZjU5MS00ZTQ0LTk5NTQtZGVkNWZhZDQ2YzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRBim0qJ6Oh8XQuHdCkEu2OPI14/wcs7HXtd Q1X8Y6SUpFNdmtY+3OqP7GvSzi37zNaJRT9wvq7HszyjTTmVe2rV+rHFIwmO+kDz xdMrmJTnuRnwaNBPXo9Zzhio3cyNP92S0mw1tcbdMxHjU+PIL5yr17/38wQe0O/5 cXaQ8Pvu6mHBBfwBYMWlYcRFnsQve7oEsCtuIvO9lExPi9WVTJOPKcafSovgjVxE UoLyZGIK1pp16Oq8kczCXbJNUOKGHB1PE6UwqgEnDmt+Ud9kbxvYSSMYBCj5Jyh0 tTLs9oDy7+NWxwma4aM8jkXLqEveMbS8Ao7fkj6Ly5n8mdC7iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPbw+p8zZYuab8lG0XQ5wRGPBFUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jNDIw ZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5NDExZGZhMTEvOGRiZWE1NTYtZWNjNy0z ODQ5LWJjYjItMjQ3YzY0NDdkZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYzQyMGZkOWItMTY0Yi00MDY1LWE1 YmQtMWUwOTQxMWRmYTExL2M0MjBmZDliLTE2NGItNDA2NS1hNWJkLTFlMDk0MTFk ZmExMS5jcmwwHwYDVR0jBBgwFoAUXofHtC/u7QdXXt5jc2AhpaccgZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jNDIwZmQ5Yi0xNjRiLTQwNjUtYTViZC0xZTA5 NDExZGZhMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6vOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF0TIPp4MkqAmLIQB5HmcQs9GAzIsBTMTX7Pt+/425q7dT+UqWaCDUH I21Q6RjvVWHV3gfpPqZnP+xDux7u4HsDs5n0C1wPynhJKPtL55mCaHg0oPehD6CX K3ZwIW8HBNvCz3Vozj0JqbI9Je+sKpBqET3V3i5M/DNaQSRG6fRot4Mq5LuBEbzP rS+P0A+0biYmrt8QhGAOvd/MeMAG7HSRZpQgNjLQGBwqwUJg2l5bp0W/CiZPvlj+ 9/eryYV3mLEGl+vnz3eK1MjNTGjGntILDvshLj1saXPiineHi1Fws3P7qYz2f6tS xScvZyjIrzrgE0ga+akjDJVexrPZGmA= -----END CERTIFICATE-----Generated at Sat Mar 14 20:46:22 2026 by rpki-client