$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa File: a3942e48-3cb7-3034-9c5b-e50d782b704c.roa (raw, json) Hash identifier: 2WgSsyUF0bZgfrfjL5zgidzDseArg8XRyiXhasg99Gc= Subject key identifier: 6A:4C:E0:98:4C:2D:1B:0C:07:C6:43:3B:F1:27:2C:96:FC:11:52:CF Certificate issuer: /CN=647216b7-a938-45d2-8264-7d448a4eaad9 Certificate serial: 010D0C9F4328584D1707E6193DBBCE7402DCC6A0 Authority key identifier: 22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa Signing time: Sat 07 Mar 2026 14:00:41 +0000 ROA not before: Sat 07 Mar 2026 14:00:41 +0000 ROA not after: Fri 05 Jun 2026 13:00:41 +0000 asID: 398143 IP address blocks: 204.187.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:17:07:e6:19:3d:bb:ce:74:02:dc:c6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=647216b7-a938-45d2-8264-7d448a4eaad9 Validity Not Before: Mar 7 14:00:41 2026 GMT Not After : Jun 5 13:00:41 2026 GMT Subject: CN=356a70c2-c36b-4e6a-aff0-87a08c8aa813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:c9:39:b9:42:02:4d:5c:cf:70:76:d6:ed: 6d:62:90:2e:c5:13:46:c8:65:b4:75:69:93:0c:9b: 1d:9e:c8:d0:31:62:7c:1a:ae:eb:e6:58:73:47:39: ee:b9:db:48:f5:eb:67:d9:fb:2b:ce:21:27:2e:50: c7:07:fb:95:0c:88:f0:3c:68:57:af:fa:8e:ad:e1: ac:1a:2c:0c:d6:cc:3b:b7:c8:da:6b:13:5b:df:f5: 9d:5d:59:45:9b:54:2e:14:65:c4:1f:30:c7:8d:08: 65:9f:45:1b:32:a1:0f:5f:54:3d:97:32:80:3e:c1: 97:86:5f:4d:8b:4f:eb:65:6d:28:9d:cb:d1:c1:fe: f2:5f:be:7a:6d:df:aa:ed:08:da:df:20:b2:0c:cf: bd:64:12:a1:9a:10:c8:36:b6:7d:ac:dc:c9:94:39: a1:09:96:14:5c:5a:b5:4b:07:fd:ff:ff:4f:9f:8d: 68:d3:18:5e:f5:b4:e1:5d:9b:2f:9d:1a:13:be:40: 5b:26:59:06:21:f5:8f:39:b1:80:fe:47:82:19:82: c1:a2:4e:a4:bb:00:0d:0e:89:2c:3c:86:e1:f3:bd: c6:52:0e:d1:2c:4b:93:38:8c:a9:0e:ec:71:2f:cd: ce:33:64:2f:77:e8:2f:46:98:24:20:aa:24:3a:88: 08:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:E0:98:4C:2D:1B:0C:07:C6:43:3B:F1:27:2C:96:FC:11:52:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/a3942e48-3cb7-3034-9c5b-e50d782b704c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9/647216b7-a938-45d2-8264-7d448a4eaad9.crl X509v3 Authority Key Identifier: keyid:22:F2:0C:84:C3:0A:1A:BD:DE:8D:E1:DF:1C:5F:13:78:C3:D9:44:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/647216b7-a938-45d2-8264-7d448a4eaad9.cer sbgp-ipAddrBlock: critical IPv4: 204.187.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d3:26:88:47:a1:49:89:3f:77:66:f4:dc:7e:55:8e:1d:73: b7:8c:5a:ae:c5:b1:42:64:2b:1f:df:c5:58:0f:0c:60:60:64: f4:0e:7d:a1:bc:d3:b5:87:db:9e:7d:26:88:ec:fc:86:ee:df: 4c:81:b3:30:f3:bc:9e:6b:bf:57:9a:ad:90:3f:8c:95:8f:6f: 6b:13:47:27:3f:2f:f7:fb:91:51:13:bb:f9:62:0e:ef:19:62: 0c:07:9e:47:e6:23:bf:d0:62:17:a5:e9:34:a4:5f:1c:fa:cc: ee:ed:a5:2e:05:dd:d1:4a:85:27:c0:94:b9:fc:f0:d3:05:68: d1:07:a2:ce:f7:6c:32:d7:78:a3:63:8a:f8:aa:85:ef:c7:5e: 67:f1:bd:f4:09:01:7b:f8:a2:54:d8:41:fb:a7:52:49:38:77: 85:fb:d5:1b:19:70:a8:c3:f2:d1:42:78:a1:d5:73:4a:a8:a5: 69:29:77:24:24:4a:89:dd:f3:c0:99:6d:12:af:8e:0d:84:eb: 38:85:b1:4c:90:0b:24:8f:81:e2:e6:ed:b5:15:aa:ee:63:e5: 4f:cd:bf:f8:52:34:b3:92:82:2d:9d:d1:e2:b7:d1:9d:0f:b7: 01:0d:e6:6d:42:19:7e:ed:55:eb:b9:50:14:78:80:14:81:9d: 87:b9:9a:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0XB+YZPbvOdALcxqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQ3MjE2YjctYTkzOC00NWQyLTgyNjQtN2Q0NDhhNGVh YWQ5MB4XDTI2MDMwNzE0MDA0MVoXDTI2MDYwNTEzMDA0MVowLzEtMCsGA1UEAxMk MzU2YTcwYzItYzM2Yi00ZTZhLWFmZjAtODdhMDhjOGFhODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrDJOblCAk1cz3B21u1tYpAuxRNGyGW0dWmT DJsdnsjQMWJ8Gq7r5lhzRznuudtI9etn2fsrziEnLlDHB/uVDIjwPGhXr/qOreGs GiwM1sw7t8jaaxNb3/WdXVlFm1QuFGXEHzDHjQhln0UbMqEPX1Q9lzKAPsGXhl9N i0/rZW0oncvRwf7yX756bd+q7Qja3yCyDM+9ZBKhmhDINrZ9rNzJlDmhCZYUXFq1 Swf9//9Pn41o0xhe9bThXZsvnRoTvkBbJlkGIfWPObGA/keCGYLBok6kuwANDoks PIbh873GUg7RLEuTOIypDuxxL83OM2Qvd+gvRpgkIKokOogIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpM4JhMLRsMB8ZDO/EnLJb8EVLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82NDcy MTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0OGE0ZWFhZDkvYTM5NDJlNDgtM2NiNy0z MDM0LTljNWItZTUwZDc4MmI3MDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjQ3MjE2YjctYTkzOC00NWQyLTgy NjQtN2Q0NDhhNGVhYWQ5LzY0NzIxNmI3LWE5MzgtNDVkMi04MjY0LTdkNDQ4YTRl YWFkOS5jcmwwHwYDVR0jBBgwFoAUIvIMhMMKGr3ejeHfHF8TeMPZRF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC82NDcyMTZiNy1hOTM4LTQ1ZDItODI2NC03ZDQ0 OGE0ZWFhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzLteMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzTJohHoUmJP3dm9Nx+VY4dc7eMWq7FsUJkKx/fxVgPDGBgZPQOfaG8 07WH2559Jojs/Ibu30yBszDzvJ5rv1earZA/jJWPb2sTRyc/L/f7kVETu/liDu8Z YgwHnkfmI7/QYhel6TSkXxz6zO7tpS4F3dFKhSfAlLn88NMFaNEHos73bDLXeKNj iviqhe/HXmfxvfQJAXv4olTYQfunUkk4d4X71RsZcKjD8tFCeKHVc0qopWkpdyQk Sond88CZbRKvjg2E6ziFsUyQCySPgeLm7bUVqu5j5U/Nv/hSNLOSgi2d0eK30Z0P twEN5m1CGX7tVeu5UBR4gBSBnYe5mpQ= -----END CERTIFICATE-----Generated at Tue Mar 17 11:34:02 2026 by rpki-client