$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa File: 4d21e3cc-251d-359f-9ce2-465d97234a8a.roa (raw, json) Hash identifier: Ja/VdWNbHRwW7s2P9OUrMIfbWdSkEdTUDetrTqh4LyI= Subject key identifier: 1C:EA:4C:34:3E:31:5E:DC:3A:97:1D:A5:75:D5:18:E2:E2:A8:72:FC Certificate issuer: /CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Certificate serial: 010D0C9F4328584D237A30A667A01FD549877D80 Authority key identifier: 0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 399668 IP address blocks: 204.10.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:30:a6:67:a0:1f:d5:49:87:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab85686b-bac3-40d2-b46e-f2593fb0bc6b Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=04da1f8c-625b-480c-a9ba-1b761971975b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:bc:ee:b2:73:f4:00:fc:8c:12:fe:f6:9f: 2d:19:9c:18:f1:5c:8e:68:7a:eb:e3:65:0c:3a:65: 20:9c:29:8a:17:1c:76:e6:81:d1:3a:17:24:8d:dd: 37:40:b8:d2:68:64:4c:8a:37:f1:90:7c:1c:66:60: b7:33:45:d9:9a:8d:d3:f0:54:2e:c2:a3:d8:06:32: 86:44:0d:dc:0a:fa:5d:4f:67:49:59:c1:d8:ee:8c: 78:aa:46:51:35:af:de:d2:9a:5d:17:d8:13:8b:95: 6e:98:86:c5:a3:b0:59:50:ef:03:01:f5:96:43:a9: d1:27:e9:1d:1f:0a:0b:2e:62:79:9c:20:9a:fe:ef: 42:c1:92:71:df:2f:3e:21:23:ff:5f:14:1e:9c:0d: 6a:e0:61:f1:b5:08:d4:75:68:07:ab:d9:3c:71:bb: be:ba:99:52:f4:90:4c:a1:61:2a:42:83:01:d6:97: a6:f4:63:c0:aa:92:e6:39:c4:15:46:1b:5c:ef:09: 21:3f:ef:00:c8:48:e8:16:f9:9e:ec:e9:9a:03:dd: 02:60:51:68:30:81:0b:8a:94:98:b6:c2:3c:1e:88: c3:6b:23:db:83:22:6e:30:5a:f4:89:61:db:6e:f5: b4:10:8e:9c:03:2f:89:db:de:41:8b:59:b3:04:b9: 0a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EA:4C:34:3E:31:5E:DC:3A:97:1D:A5:75:D5:18:E2:E2:A8:72:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/4d21e3cc-251d-359f-9ce2-465d97234a8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.crl X509v3 Authority Key Identifier: keyid:0E:5E:F6:3E:A7:FF:42:C0:84:5C:18:ED:96:19:B7:6D:8A:D9:86:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ab85686b-bac3-40d2-b46e-f2593fb0bc6b.cer sbgp-ipAddrBlock: critical IPv4: 204.10.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1f:2e:b3:94:0c:1a:87:84:fb:da:51:34:ac:37:37:7c:77: ec:e1:15:86:b0:fa:b8:8a:9c:51:03:85:31:c0:40:fa:ce:e8: 04:b9:c8:14:18:d1:a1:3a:26:94:8d:63:32:a2:f2:24:a7:07: 8f:3d:5b:f8:b0:09:03:c7:aa:77:ca:e2:f6:cc:c4:3f:fc:01: 8d:4f:b0:56:89:52:13:7d:4c:99:53:df:49:d1:97:3b:66:87: 12:5d:95:4d:ee:2e:86:55:be:79:d7:0d:5e:f0:1a:4c:95:b3: 29:59:d3:74:cf:12:cd:74:34:4a:ae:32:5e:0b:62:01:15:03: e5:5f:d4:6c:f0:00:34:5b:1f:a7:7b:6c:36:61:1c:be:3c:d8: c8:25:1a:2f:d2:62:f0:dd:26:bf:b0:3d:da:7a:97:ad:bf:c0: 43:f7:74:ae:70:e8:cf:8e:39:7b:ea:c2:b4:9f:15:0d:d0:cf: 96:10:62:6e:dd:93:f3:e2:3e:52:cb:b3:bb:2e:26:ec:9d:00: ac:22:69:05:fe:a7:28:a3:ff:9b:68:fe:26:56:a6:5b:25:81: b7:2d:5d:a9:aa:1f:78:c8:4b:17:9f:c9:12:66:c2:f1:65:df: 3d:a2:85:61:a3:40:35:07:b2:65:d1:16:e8:e4:01:c7:8f:ed: 3c:d7:6b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jejCmZ6Af1UmHfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI4NTY4NmItYmFjMy00MGQyLWI0NmUtZjI1OTNmYjBi YzZiMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk MDRkYTFmOGMtNjI1Yi00ODBjLWE5YmEtMWI3NjE5NzE5NzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5u87rJz9AD8jBL+9p8tGZwY8VyOaHrr42UM OmUgnCmKFxx25oHROhckjd03QLjSaGRMijfxkHwcZmC3M0XZmo3T8FQuwqPYBjKG RA3cCvpdT2dJWcHY7ox4qkZRNa/e0ppdF9gTi5VumIbFo7BZUO8DAfWWQ6nRJ+kd HwoLLmJ5nCCa/u9CwZJx3y8+ISP/XxQenA1q4GHxtQjUdWgHq9k8cbu+uplS9JBM oWEqQoMB1pem9GPAqpLmOcQVRhtc7wkhP+8AyEjoFvme7OmaA90CYFFoMIELipSY tsI8HojDayPbgyJuMFr0iWHbbvW0EI6cAy+J295Bi1mzBLkKuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzqTDQ+MV7cOpcdpXXVGOLiqHL8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1 Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5M2ZiMGJjNmIvNGQyMWUzY2MtMjUxZC0z NTlmLTljZTItNDY1ZDk3MjM0YThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWI4NTY4NmItYmFjMy00MGQyLWI0 NmUtZjI1OTNmYjBiYzZiL2FiODU2ODZiLWJhYzMtNDBkMi1iNDZlLWYyNTkzZmIw YmM2Yi5jcmwwHwYDVR0jBBgwFoAUDl72Pqf/QsCEXBjtlhm3bYrZhr4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYjg1Njg2Yi1iYWMzLTQwZDItYjQ2ZS1mMjU5 M2ZiMGJjNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzAppMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsfLrOUDBqHhPvaUTSsNzd8d+zhFYaw+riKnFEDhTHAQPrO6AS5yBQY 0aE6JpSNYzKi8iSnB489W/iwCQPHqnfK4vbMxD/8AY1PsFaJUhN9TJlT30nRlztm hxJdlU3uLoZVvnnXDV7wGkyVsylZ03TPEs10NEquMl4LYgEVA+Vf1GzwADRbH6d7 bDZhHL482MglGi/SYvDdJr+wPdp6l62/wEP3dK5w6M+OOXvqwrSfFQ3Qz5YQYm7d k/PiPlLLs7suJuydAKwiaQX+pyij/5to/iZWplslgbctXamqH3jISxefyRJmwvFl 3z2ihWGjQDUHsmXRFujkAceP7TzXazE= -----END CERTIFICATE-----Generated at Sat Mar 21 20:55:47 2026 by rpki-client