$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa File: efc469f3-53eb-3fac-b9b5-6590ec834ada.roa (raw, json) Hash identifier: k0cjsmN3Ax0/E9EFZN7gZPKnclyVjbZ5F/VKFcok1Vk= Subject key identifier: 97:52:CB:F5:93:66:C8:03:1F:60:01:3E:45:BB:9F:6B:AD:7F:C4:ED Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Certificate serial: 010D0C9F4328584E0C1ED534E5B8081F156B3540 Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa Signing time: Wed 03 Jun 2026 09:00:13 +0000 ROA not before: Wed 03 Jun 2026 09:00:13 +0000 ROA not after: Tue 01 Sep 2026 09:00:13 +0000 asID: 393878 IP address blocks: 206.109.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Jun 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:0c:1e:d5:34:e5:b8:08:1f:15:6b:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f Validity Not Before: Jun 3 09:00:13 2026 GMT Not After : Sep 1 09:00:13 2026 GMT Subject: CN=a1aedae9-f9b9-4d6e-b440-17ed97546a8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:95:17:c2:4f:e4:f9:67:43:77:c5:5a:72: 77:51:bb:91:25:f4:fe:5b:12:fe:8f:e2:cd:ec:9e: 38:7b:18:03:fd:e9:92:5d:54:3d:92:4f:ab:0e:da: 0c:0f:4e:a5:8a:48:44:66:bd:c9:b6:1b:0d:66:17: 47:28:04:70:2f:a2:a7:06:93:3d:27:fe:d4:22:19: 45:c4:ee:0e:63:03:87:71:83:ee:10:99:5b:84:e8: 3b:4f:37:41:40:44:f5:94:5f:f7:63:9f:cf:46:e3: 1e:24:c1:4c:63:2b:49:f6:ad:72:fa:53:e5:72:94: ed:9c:04:38:77:27:e6:ba:ef:43:0d:40:76:1a:9e: c5:5d:34:6e:ab:bf:24:21:04:85:a5:ed:2b:87:62: 88:c7:fa:1e:3c:44:fa:d7:46:9a:97:7c:23:e9:d4: 98:1f:6b:c6:3d:33:d4:27:61:44:02:4e:0c:1f:24: 92:d3:47:14:18:6a:12:7b:83:17:10:c9:d5:6e:d3: f8:89:04:48:60:34:01:5d:f8:12:62:ee:94:62:2c: 40:4c:cc:a7:04:73:ac:18:50:c5:ba:ab:7c:0f:a1: ca:78:29:ed:5e:db:1d:1c:db:21:48:cc:5b:f6:c4: bc:54:8e:ce:06:0d:93:b2:af:d3:27:b9:d0:7f:8e: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:52:CB:F5:93:66:C8:03:1F:60:01:3E:45:BB:9F:6B:AD:7F:C4:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/efc469f3-53eb-3fac-b9b5-6590ec834ada.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl X509v3 Authority Key Identifier: keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer sbgp-ipAddrBlock: critical IPv4: 206.109.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:fd:d3:5f:e9:f7:2b:58:16:bb:57:60:d9:64:2e:6a:72:d8: de:58:66:e8:e0:be:a0:27:3f:82:e1:6b:35:28:a3:ae:ef:f4: d3:42:f4:2e:9c:1d:ca:59:8a:00:35:18:d8:fd:a9:c0:31:85: 18:a5:59:86:d8:ed:64:1c:bb:f4:eb:01:72:31:aa:6b:3a:fc: 37:f9:35:8f:09:b8:c0:e2:34:06:ee:ea:f2:6d:48:a0:6d:40: e5:1a:f5:dc:83:4a:af:65:e3:8e:60:aa:fd:20:57:61:51:dd: a5:95:47:05:72:e3:c0:11:52:99:a8:cc:dc:96:a5:43:45:9c: 59:b1:13:80:b6:db:c3:38:ac:1f:2d:9e:87:d6:37:32:cb:0d: db:9c:39:3c:e6:b6:42:5f:10:97:4f:03:6d:3d:f7:c4:f7:1c: 55:8d:40:f0:88:e4:29:a1:6c:fe:3f:00:71:cd:98:0e:77:1a: d0:e3:04:ba:ab:f1:4b:99:e7:8d:e3:dc:06:2f:83:c4:07:a8: 8c:f2:fd:40:09:ac:f7:74:d7:cd:b7:c3:d3:15:38:51:7e:5b: 10:3f:22:2e:c0:44:d1:cb:85:af:6d:d1:8b:5f:47:ed:ae:5d: b7:53:68:08:fa:02:92:04:6e:cb:c2:01:43:42:28:75:80:0f: 5a:03:df:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4MHtU05bgIHxVrNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcxZmYzOTItZGQzMy00ZWE4LTljMWItOGFmZGQ0Mjk5 NzdmMB4XDTI2MDYwMzA5MDAxM1oXDTI2MDkwMTA5MDAxM1owLzEtMCsGA1UEAxMk YTFhZWRhZTktZjliOS00ZDZlLWI0NDAtMTdlZDk3NTQ2YThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldeVF8JP5PlnQ3fFWnJ3UbuRJfT+WxL+j+LN 7J44exgD/emSXVQ9kk+rDtoMD06likhEZr3JthsNZhdHKARwL6KnBpM9J/7UIhlF xO4OYwOHcYPuEJlbhOg7TzdBQET1lF/3Y5/PRuMeJMFMYytJ9q1y+lPlcpTtnAQ4 dyfmuu9DDUB2Gp7FXTRuq78kIQSFpe0rh2KIx/oePET610aal3wj6dSYH2vGPTPU J2FEAk4MHySS00cUGGoSe4MXEMnVbtP4iQRIYDQBXfgSYu6UYixATMynBHOsGFDF uqt8D6HKeCntXtsdHNshSMxb9sS8VI7OBg2Tsq/TJ7nQf47lqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdSy/WTZsgDH2ABPkW7n2utf8TtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFm ZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZkZDQyOTk3N2YvZWZjNDY5ZjMtNTNlYi0z ZmFjLWI5YjUtNjU5MGVjODM0YWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTcxZmYzOTItZGQzMy00ZWE4LTlj MWItOGFmZGQ0Mjk5NzdmL2E3MWZmMzkyLWRkMzMtNGVhOC05YzFiLThhZmRkNDI5 OTc3Zi5jcmwwHwYDVR0jBBgwFoAUrknJUG2uUJbz62ommeoYPXRw8cUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNzFmZjM5Mi1kZDMzLTRlYTgtOWMxYi04YWZk ZDQyOTk3N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzm3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABz901/p9ytYFrtXYNlkLmpy2N5YZujgvqAnP4LhazUoo67v9NNC9C6c HcpZigA1GNj9qcAxhRilWYbY7WQcu/TrAXIxqms6/Df5NY8JuMDiNAbu6vJtSKBt QOUa9dyDSq9l445gqv0gV2FR3aWVRwVy48ARUpmozNyWpUNFnFmxE4C228M4rB8t nofWNzLLDducOTzmtkJfEJdPA20998T3HFWNQPCI5CmhbP4/AHHNmA53GtDjBLqr 8UuZ543j3AYvg8QHqIzy/UAJrPd01823w9MVOFF+WxA/Ii7ARNHLha9t0YtfR+2u XbdTaAj6ApIEbsvCAUNCKHWAD1oD30A= -----END CERTIFICATE-----Generated at Wed Jun 3 20:15:22 2026 by rpki-client