$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa File: 9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa (raw, json) Hash identifier: SENA5uOkWKSjGhHMVqcS4Bu5w10A17DFhTXdnyCluJE= Subject key identifier: 2D:79:0A:76:62:E0:1D:64:9A:46:76:F5:E3:8A:2A:63:C8:BC:85:EE Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584E0C1EC8D44E903C7A9C7D8D50 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 10747 IP address blocks: 206.109.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:c8:d4:4e:90:3c:7a:9c:7d:8d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=25a5dab0-4f63-41f8-a302-070702e463f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c6:ae:b7:e8:49:1c:ab:fa:42:b2:75:8e:ef: f5:72:2c:c4:e9:02:56:d6:dd:c8:c5:5f:57:d2:9e: ae:88:df:1b:05:20:5f:df:f1:24:e6:79:ac:ff:a1: 43:64:6e:0a:fe:64:c6:d5:f9:dd:0f:c5:44:55:3f: a3:16:fb:61:80:3e:01:78:0b:14:2a:de:28:df:e7: e1:24:4b:84:72:fe:4b:cf:7d:26:dc:e0:fd:53:db: 71:b4:e1:cb:6e:47:76:9b:d7:90:58:c8:c6:d3:ec: 9c:96:52:c9:94:65:79:c0:8e:8f:6a:a7:a2:6b:95: 0b:a9:16:de:ea:0a:b5:6f:b2:5f:f5:58:f8:61:d1: 6b:b4:53:93:83:68:85:80:45:61:70:2f:df:56:27: 95:ec:b9:15:62:57:d5:91:73:04:cb:9a:3c:d2:8d: cd:a0:6a:2b:7d:93:be:f4:d4:c4:e7:0d:98:08:29: 10:12:58:40:1a:85:49:24:03:bb:bc:8b:b3:38:12: 47:47:0a:83:8e:57:2f:fe:e0:59:54:8b:1a:02:ad: a4:3c:fa:63:a2:14:6b:a4:40:70:80:93:76:cf:f9: 89:ec:7f:00:2c:d4:cf:0a:d6:be:80:30:20:08:bd: 8c:e7:67:93:8a:e8:cd:4c:d6:9c:2d:6b:e9:13:0e: 18:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:79:0A:76:62:E0:1D:64:9A:46:76:F5:E3:8A:2A:63:C8:BC:85:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/9839a028-6cd7-3ec6-b0b9-57aee83944c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 206.109.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:1d:40:d2:e0:fb:e2:dc:19:88:db:3c:e4:d7:37:c8:f3:3f: 86:ab:87:f8:a2:90:fc:43:d9:3f:09:bb:dd:f3:7e:9e:4e:d3: 18:7b:ac:70:a0:ed:3f:87:7a:c2:7a:c5:74:cf:50:27:58:a6: 43:88:93:69:d4:92:49:c1:b1:14:ac:ab:d2:95:70:67:c0:00: 37:6e:d5:f1:25:0f:8d:d9:18:71:32:98:54:f0:52:76:c1:b8: 66:e6:b0:54:d3:2d:7d:5b:6e:70:e3:a1:04:56:0d:48:4b:d1: 98:0f:04:7d:dd:7c:a5:5c:0e:dd:a7:be:f3:76:4a:69:e6:7f: 69:d3:81:4f:ee:f8:bf:50:42:d8:c1:96:5c:9f:ba:3d:8b:7c: 4a:30:ca:99:a9:de:f2:a5:cb:64:58:53:1f:40:05:f4:6c:64: 71:55:7f:d7:0a:df:ff:12:e6:94:4e:2e:38:fc:86:ce:d0:a1: 5d:82:14:aa:91:dc:6b:b3:b7:cf:a6:76:df:36:e8:ac:75:2b: 8f:dc:2b:3d:43:e4:5e:d2:92:e6:e3:2f:c3:60:ae:ab:55:d0: 05:d0:39:23:cd:dd:af:b8:a6:21:26:2a:92:32:4a:5e:a1:88: b7:53:01:cf:11:e4:26:d2:dc:cd:4d:80:58:36:28:d2:46:05: 68:3d:06:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHsjUTpA8epx9jVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk MjVhNWRhYjAtNGY2My00MWY4LWEzMDItMDcwNzAyZTQ2M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsaut+hJHKv6QrJ1ju/1cizE6QJW1t3IxV9X 0p6uiN8bBSBf3/Ek5nms/6FDZG4K/mTG1fndD8VEVT+jFvthgD4BeAsUKt4o3+fh JEuEcv5Lz30m3OD9U9txtOHLbkd2m9eQWMjG0+ycllLJlGV5wI6Paqeia5ULqRbe 6gq1b7Jf9Vj4YdFrtFOTg2iFgEVhcC/fVieV7LkVYlfVkXMEy5o80o3NoGorfZO+ 9NTE5w2YCCkQElhAGoVJJAO7vIuzOBJHRwqDjlcv/uBZVIsaAq2kPPpjohRrpEBw gJN2z/mJ7H8ALNTPCta+gDAgCL2M52eTiujNTNacLWvpEw4YUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC15CnZi4B1kmkZ29eOKKmPIvIXuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvOTgzOWEwMjgtNmNkNy0z ZWM2LWIwYjktNTdhZWU4Mzk0NGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwdQNLg++LcGYjbPOTXN8jzP4arh/iikPxD2T8Ju93zfp5O0xh7rHCg 7T+HesJ6xXTPUCdYpkOIk2nUkknBsRSsq9KVcGfAADdu1fElD43ZGHEymFTwUnbB uGbmsFTTLX1bbnDjoQRWDUhL0ZgPBH3dfKVcDt2nvvN2Smnmf2nTgU/u+L9QQtjB llyfuj2LfEowypmp3vKly2RYUx9ABfRsZHFVf9cK3/8S5pROLjj8hs7QoV2CFKqR 3Guzt8+mdt826Kx1K4/cKz1D5F7SkubjL8NgrqtV0AXQOSPN3a+4piEmKpIySl6h iLdTAc8R5CbS3M1NgFg2KNJGBWg9Bn8= -----END CERTIFICATE-----Generated at Wed Jun 3 20:15:22 2026 by rpki-client