$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa File: 3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa (raw, json) Hash identifier: 0IJ4USEiNVUJrCsaenVWhf4W/z3BY5l/Kg0VvUBDRgw= Subject key identifier: 86:9A:B8:8D:6E:24:99:7B:5A:C9:0E:59:10:F2:E2:5F:81:30:B3:08 Certificate issuer: /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Certificate serial: 010D0C9F4328584D0A77A8A5483760E995F2E200 Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 399575 IP address blocks: 206.204.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:a8:a5:48:37:60:e9:95:f2:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=e3fc9efe-eebe-43fe-b62a-acc9d3beeef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:6c:7f:74:e5:84:ef:48:59:0c:80:1c:c7:33: 66:c4:d9:71:f3:98:23:78:c4:aa:03:1a:16:a5:0f: ea:36:3e:8f:41:3e:89:a4:ac:f1:f9:e3:8b:0b:c0: 2e:e4:11:5c:40:26:f9:bb:07:bf:fd:36:07:98:a2: b9:e5:60:43:d0:1a:48:1f:be:ea:ca:e9:67:ed:86: f8:f0:dd:31:65:16:f5:ac:19:42:40:8c:da:c9:94: b8:07:3d:1c:a0:b6:96:89:5d:82:ee:d6:90:b3:26: a3:32:2a:f6:c0:be:fe:48:c7:c6:6b:69:44:5b:fe: d4:0d:f9:57:5c:a2:5d:0e:33:2e:ad:cb:2f:ce:4e: 28:50:4b:e9:6b:d1:5c:63:42:12:ea:64:56:b9:81: d7:94:c8:d2:c0:87:6f:4b:fc:17:1c:a4:91:63:4b: af:f9:e6:5b:17:63:a1:42:42:4c:a1:f7:ee:0e:08: 4c:d0:c8:d6:5c:0f:b7:37:2a:6d:09:b5:4a:00:2f: c8:0c:1d:a5:b1:5c:1d:ec:95:e0:52:2d:d3:df:96: 49:ca:5f:14:0c:97:e4:85:c5:03:bb:4b:d7:48:24: 03:d1:ac:06:f6:b9:d5:4e:d7:d5:2f:d6:fd:f7:55: d2:ac:69:d4:7a:70:01:cb:77:62:27:c3:75:ec:24: c5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9A:B8:8D:6E:24:99:7B:5A:C9:0E:59:10:F2:E2:5F:81:30:B3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/3829f42c-17b7-3f18-bae5-171e7fa5c74e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl X509v3 Authority Key Identifier: keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer sbgp-ipAddrBlock: critical IPv4: 206.204.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:da:c4:eb:13:54:72:4b:54:66:9b:2c:96:e9:b7:16:c6:a5: 82:40:ae:f0:8d:2b:68:80:e9:38:e4:c7:57:f1:8f:16:68:02: da:cc:b4:77:37:0d:7b:4a:d7:af:c5:53:bd:80:46:66:01:7d: f8:9e:a0:2c:72:40:75:01:30:b4:f8:e7:9e:79:de:71:d8:4a: 17:45:aa:34:38:2e:c0:9a:66:3c:47:a9:de:13:d1:60:4b:6e: e8:47:8f:b4:74:95:6d:d5:d8:b6:9e:7b:46:76:d1:40:2b:74: bf:3e:68:98:5f:66:2f:11:59:8f:d6:c9:c4:fc:90:7c:81:08: cd:bf:79:0c:33:29:01:a6:69:d7:f2:1b:c3:d8:17:f9:51:a9: b6:c1:bf:d9:b2:a8:b6:ee:39:70:d7:e0:2e:66:8d:65:df:bf: d1:b7:98:67:85:73:c6:05:93:6c:e4:08:61:b8:88:59:5a:04: 76:67:35:fc:36:ab:a7:45:19:0d:68:c9:cf:04:3c:a7:f8:50: 86:f4:db:12:f5:f7:18:b9:64:c7:f2:06:83:18:9d:f8:69:a9: 19:cb:34:47:6c:e2:68:09:b4:88:7e:51:6d:2e:2e:6d:7d:cf: 33:63:a2:84:f7:34:92:99:7b:43:a5:8d:c3:68:91:88:92:bd: ec:94:bd:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd6ilSDdg6ZXy4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjVmODdmYzMtZmM3OS00ZGI5LTk1YmMtYjJkODRjNGNm OGNhMB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk ZTNmYzllZmUtZWViZS00M2ZlLWI2MmEtYWNjOWQzYmVlZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGx/dOWE70hZDIAcxzNmxNlx85gjeMSqAxoW pQ/qNj6PQT6JpKzx+eOLC8Au5BFcQCb5uwe//TYHmKK55WBD0BpIH77qyuln7Yb4 8N0xZRb1rBlCQIzayZS4Bz0coLaWiV2C7taQsyajMir2wL7+SMfGa2lEW/7UDflX XKJdDjMurcsvzk4oUEvpa9FcY0IS6mRWuYHXlMjSwIdvS/wXHKSRY0uv+eZbF2Oh QkJMoffuDghM0MjWXA+3NyptCbVKAC/IDB2lsVwd7JXgUi3T35ZJyl8UDJfkhcUD u0vXSCQD0awG9rnVTtfVL9b991XSrGnUenABy3diJ8N17CTF9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIaauI1uJJl7WskOWRDy4l+BMLMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82NWY4 N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4NGM0Y2Y4Y2EvMzgyOWY0MmMtMTdiNy0z ZjE4LWJhZTUtMTcxZTdmYTVjNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjVmODdmYzMtZmM3OS00ZGI5LTk1 YmMtYjJkODRjNGNmOGNhLzY1Zjg3ZmMzLWZjNzktNGRiOS05NWJjLWIyZDg0YzRj ZjhjYS5jcmwwHwYDVR0jBBgwFoAUu9W7tLEyrQwY0eYBEwMMwU00uMIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82NWY4N2ZjMy1mYzc5LTRkYjktOTViYy1iMmQ4 NGM0Y2Y4Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsziMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM3axOsTVHJLVGabLJbptxbGpYJArvCNK2iA6Tjkx1fxjxZoAtrMtHc3 DXtK16/FU72ARmYBffieoCxyQHUBMLT455553nHYShdFqjQ4LsCaZjxHqd4T0WBL buhHj7R0lW3V2Laee0Z20UArdL8+aJhfZi8RWY/WycT8kHyBCM2/eQwzKQGmadfy G8PYF/lRqbbBv9myqLbuOXDX4C5mjWXfv9G3mGeFc8YFk2zkCGG4iFlaBHZnNfw2 q6dFGQ1oyc8EPKf4UIb02xL19xi5ZMfyBoMYnfhpqRnLNEds4mgJtIh+UW0uLm19 zzNjooT3NJKZe0OljcNokYiSveyUvSQ= -----END CERTIFICATE-----Generated at Sun Mar 15 05:51:51 2026 by rpki-client