$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/d1420604-3d70-3ebf-a9b3-fba6a3533c1e.roa File: d1420604-3d70-3ebf-a9b3-fba6a3533c1e.roa (raw, json) Hash identifier: MI9Rt+rJovTzVtDsN6H9Hk16B5qyRCgCYoSz4f2A7ew= Subject key identifier: E4:3C:22:F8:07:DD:12:EE:70:B0:BD:15:28:06:8F:F0:EE:5D:58:D0 Certificate issuer: /CN=4ce48c56-e3a7-4306-aeb3-946a9bdde45b Certificate serial: 010D0C9F4328584D0D4267D1DCF76F2DC156C840 Authority key identifier: F8:FB:2C:A5:8D:4E:DF:CA:86:14:AE:E2:C4:6E:99:65:05:8F:96:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/d1420604-3d70-3ebf-a9b3-fba6a3533c1e.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 55002 IP address blocks: 204.11.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:67:d1:dc:f7:6f:2d:c1:56:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ce48c56-e3a7-4306-aeb3-946a9bdde45b Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=4f52167d-50a7-4be4-91f7-d71be47d802a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:23:5f:c9:dd:ab:d0:02:64:04:be:70:76:72: 7c:f1:4b:89:e9:94:f9:02:88:e5:fb:95:3a:c3:c9: da:46:5c:b8:7c:d2:e3:2d:4f:0d:68:f1:d9:9a:d9: 30:8a:aa:e3:59:d7:86:57:72:22:57:9a:05:c3:f5: f9:9a:56:26:2c:09:17:56:1b:eb:d3:c6:58:2e:3f: 6a:94:e7:e6:1a:a6:68:95:9c:88:37:a6:27:7f:7c: c4:c8:06:91:af:7a:f7:c0:6c:bb:cb:c7:aa:8b:5a: 0c:6d:57:44:9a:e8:27:a0:e8:f5:13:77:0b:96:03: a7:ad:6e:8e:3c:78:47:3d:53:53:a7:9b:07:dc:e3: 96:9e:d0:c1:49:04:26:9d:3f:a1:55:d6:19:6d:73: 91:3b:e2:1b:f1:1a:e9:01:54:16:68:5c:19:ef:e9: 1b:e1:c3:8c:14:73:28:d0:c3:76:75:53:12:b4:94: cb:22:ba:67:93:a9:d4:52:59:b2:48:c8:54:be:ff: 42:78:e8:fe:88:de:ad:4f:09:fb:a4:1b:e3:60:17: 7e:c1:7d:73:76:23:29:a8:f7:16:62:93:ce:c4:6d: bd:2c:9b:0f:d2:62:d7:ee:b2:91:05:0e:73:3f:6a: b5:85:83:88:7f:e8:15:fa:cc:a7:a9:cb:61:a8:d0: 21:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:3C:22:F8:07:DD:12:EE:70:B0:BD:15:28:06:8F:F0:EE:5D:58:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/d1420604-3d70-3ebf-a9b3-fba6a3533c1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.crl X509v3 Authority Key Identifier: keyid:F8:FB:2C:A5:8D:4E:DF:CA:86:14:AE:E2:C4:6E:99:65:05:8F:96:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ce48c56-e3a7-4306-aeb3-946a9bdde45b.cer sbgp-ipAddrBlock: critical IPv4: 204.11.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f3:8b:6c:32:96:dc:eb:3b:01:ec:65:15:ff:09:91:03:bd: 90:e1:74:c6:da:c3:cb:6f:2b:90:10:cb:f3:44:33:5f:dd:f9: be:96:11:2e:f8:aa:f3:56:9e:15:35:9e:7b:0b:af:3d:0e:53: f0:ed:ea:5a:f4:62:99:66:c2:9a:c8:0e:68:0b:eb:21:68:e4: 42:56:b7:23:ae:dc:3c:e4:d8:62:b6:67:bd:1a:2b:64:41:07: ab:31:68:54:40:79:e0:ed:e0:f2:48:c7:f2:af:8c:cb:89:3c: e1:ea:82:14:3c:f6:f7:3f:94:bc:19:90:f4:11:b0:48:d5:3b: a6:11:86:b1:cf:5a:be:1b:0e:da:98:ac:dc:f4:3e:dc:60:fe: e4:90:71:45:18:c6:95:c5:ba:99:91:92:42:23:ab:50:3f:7e: 14:91:7c:98:3b:61:10:bd:e5:4c:81:df:b0:3a:b6:ed:df:e6: e3:dd:c7:46:b1:25:bc:ca:62:d9:24:d9:0d:7a:b3:b3:f2:04: 03:a8:88:2c:ec:5d:f0:68:36:c9:64:96:49:09:b6:07:fd:28: 1b:b6:62:2a:bf:78:94:57:28:cc:6b:f3:80:3c:56:8d:9b:ac: 18:1c:d6:03:d3:ca:11:53:70:a5:d9:81:ab:ea:b1:47:86:7f: 62:e3:4d:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQmfR3PdvLcFWyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGNlNDhjNTYtZTNhNy00MzA2LWFlYjMtOTQ2YTliZGRl NDViMB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk NGY1MjE2N2QtNTBhNy00YmU0LTkxZjctZDcxYmU0N2Q4MDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiNfyd2r0AJkBL5wdnJ88UuJ6ZT5Aojl+5U6 w8naRly4fNLjLU8NaPHZmtkwiqrjWdeGV3IiV5oFw/X5mlYmLAkXVhvr08ZYLj9q lOfmGqZolZyIN6Ynf3zEyAaRr3r3wGy7y8eqi1oMbVdEmugnoOj1E3cLlgOnrW6O PHhHPVNTp5sH3OOWntDBSQQmnT+hVdYZbXORO+Ib8RrpAVQWaFwZ7+kb4cOMFHMo 0MN2dVMStJTLIrpnk6nUUlmySMhUvv9CeOj+iN6tTwn7pBvjYBd+wX1zdiMpqPcW YpPOxG29LJsP0mLX7rKRBQ5zP2q1hYOIf+gV+synqcthqNAhgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOQ8IvgH3RLucLC9FSgGj/DuXVjQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80Y2U0 OGM1Ni1lM2E3LTQzMDYtYWViMy05NDZhOWJkZGU0NWIvZDE0MjA2MDQtM2Q3MC0z ZWJmLWE5YjMtZmJhNmEzNTMzYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNGNlNDhjNTYtZTNhNy00MzA2LWFl YjMtOTQ2YTliZGRlNDViLzRjZTQ4YzU2LWUzYTctNDMwNi1hZWIzLTk0NmE5YmRk ZTQ1Yi5jcmwwHwYDVR0jBBgwFoAU+PsspY1O38qGFK7ixG6ZZQWPliIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80Y2U0OGM1Ni1lM2E3LTQzMDYtYWViMy05NDZh OWJkZGU0NWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3zi2wyltzrOwHsZRX/CZEDvZDhdMbaw8tvK5AQy/NEM1/d+b6WES74 qvNWnhU1nnsLrz0OU/Dt6lr0YplmwprIDmgL6yFo5EJWtyOu3Dzk2GK2Z70aK2RB B6sxaFRAeeDt4PJIx/KvjMuJPOHqghQ89vc/lLwZkPQRsEjVO6YRhrHPWr4bDtqY rNz0Ptxg/uSQcUUYxpXFupmRkkIjq1A/fhSRfJg7YRC95UyB37A6tu3f5uPdx0ax JbzKYtkk2Q16s7PyBAOoiCzsXfBoNslklkkJtgf9KBu2Yiq/eJRXKMxr84A8Vo2b rBgc1gPTyhFTcKXZgavqsUeGf2LjTck= -----END CERTIFICATE-----Generated at Sat Mar 7 22:58:15 2026 by rpki-client