$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/b68cef90-1daf-3111-94ca-1fd15d475ee4.roa File: b68cef90-1daf-3111-94ca-1fd15d475ee4.roa (raw, json) Hash identifier: 944u4cRqD1VzrM7ar0FULmxjs5WieiTJFb6MUIp3Pzs= Subject key identifier: 51:CB:6E:CF:5E:57:E1:58:E7:CF:4F:62:DA:8E:F5:1D:DA:EC:8C:87 Certificate issuer: /CN=9fde02ef-cdf9-4039-9a38-4cb7df59e516 Certificate serial: 010D0C9F4328584DFA70A19EC48CD33BC12ED580 Authority key identifier: 8C:B0:BF:CA:90:9F:31:2D:6A:86:ED:1A:79:3B:10:00:98:B4:2C:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/b68cef90-1daf-3111-94ca-1fd15d475ee4.roa Signing time: Thu 28 May 2026 01:00:10 +0000 ROA not before: Thu 28 May 2026 01:00:10 +0000 ROA not after: Wed 26 Aug 2026 01:00:10 +0000 asID: 7341 IP address blocks: 206.180.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/9fde02ef-cdf9-4039-9a38-4cb7df59e516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/9fde02ef-cdf9-4039-9a38-4cb7df59e516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fa:70:a1:9e:c4:8c:d3:3b:c1:2e:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fde02ef-cdf9-4039-9a38-4cb7df59e516 Validity Not Before: May 28 01:00:10 2026 GMT Not After : Aug 26 01:00:10 2026 GMT Subject: CN=67b2f1f1-ef94-4b36-ac87-56b1f011b3f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c0:cc:41:27:63:a2:84:66:fa:fe:5f:d1:32: 93:31:a0:97:b7:ee:df:38:4f:42:31:d9:55:91:e1: 5a:95:80:41:eb:80:7e:db:eb:5d:a4:82:8d:95:bc: 1e:f4:e8:5e:6e:38:c7:fc:bc:a3:30:e4:42:a2:23: 80:71:00:e3:c1:18:b6:48:f9:4a:6b:8a:96:e6:f3: b5:57:f4:ff:60:cf:1c:5a:30:f4:18:a5:b7:cd:77: 06:58:d1:f8:f1:ae:93:a0:ad:1e:19:64:1f:14:46: 81:d5:50:9e:9b:8b:b0:22:1c:f2:12:b4:38:a7:9a: 13:de:41:41:d0:f7:1f:8f:f5:c7:58:f1:c6:c5:c7: 7d:3f:dc:ac:9c:10:ba:81:2a:18:23:8f:1c:66:28: df:d7:e5:86:ff:f6:12:d0:12:30:65:bb:6a:c2:e1: 43:d2:b6:49:3d:76:1e:02:81:24:2f:1f:a7:ce:f6: 84:10:25:0b:69:cf:97:c1:44:19:5c:10:28:c0:7a: 34:b1:b0:95:c7:cd:d5:5d:39:d8:ac:31:8c:9d:55: 7e:06:be:17:b0:c0:5a:3e:0e:35:ef:b9:f8:cc:15: eb:53:0d:7e:22:b9:b8:84:54:86:20:d5:73:9e:f5: 58:23:20:7f:f5:43:75:cf:25:b3:e4:13:f1:41:80: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:CB:6E:CF:5E:57:E1:58:E7:CF:4F:62:DA:8E:F5:1D:DA:EC:8C:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/b68cef90-1daf-3111-94ca-1fd15d475ee4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516/9fde02ef-cdf9-4039-9a38-4cb7df59e516.crl X509v3 Authority Key Identifier: keyid:8C:B0:BF:CA:90:9F:31:2D:6A:86:ED:1A:79:3B:10:00:98:B4:2C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9fde02ef-cdf9-4039-9a38-4cb7df59e516.cer sbgp-ipAddrBlock: critical IPv4: 206.180.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:4b:5e:d6:21:64:b4:37:4c:50:46:d6:53:1c:9b:38:50:08: 6c:a4:80:e0:3e:94:7e:8e:08:d9:8c:d5:62:d7:cf:70:97:f4: 17:46:45:29:38:cd:8e:ca:8f:40:d1:05:2e:b9:ff:29:b6:33: 65:63:71:0f:48:a7:66:cc:7f:40:27:2b:38:e0:5b:ce:52:15: 7d:0a:fb:d1:b2:d2:28:ad:b1:7e:ec:a3:ad:64:06:bd:e0:d0: e2:b2:5d:03:ca:87:f4:d4:bf:aa:63:78:e5:1c:21:df:de:9e: 42:3c:29:29:9f:13:60:53:98:b9:1d:cb:0b:44:16:bc:3a:d9: 5b:bd:cf:75:21:85:db:f3:7c:da:ef:7e:e9:4e:ad:2f:38:98: 5d:b8:65:cd:ba:52:cd:57:81:73:a3:7e:fd:33:5f:1e:7e:14: 4f:34:bd:65:a4:f3:90:0b:6e:ce:15:88:2e:73:b0:31:08:a2: 6a:1a:59:99:ea:df:dc:c2:6a:00:57:bf:1f:1b:a7:08:a8:7f: 71:fc:1d:38:15:40:d7:4a:30:eb:96:b0:69:8f:08:ea:a4:7a: 3f:2c:46:eb:ce:ca:7e:68:99:67:e3:e6:06:d0:55:2a:96:ce: 75:05:7e:5d:70:25:6a:2d:70:26:bf:97:54:32:5a:e2:55:1b: 52:a9:5e:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE36cKGexIzTO8Eu1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZkZTAyZWYtY2RmOS00MDM5LTlhMzgtNGNiN2RmNTll NTE2MB4XDTI2MDUyODAxMDAxMFoXDTI2MDgyNjAxMDAxMFowLzEtMCsGA1UEAxMk NjdiMmYxZjEtZWY5NC00YjM2LWFjODctNTZiMWYwMTFiM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMDMQSdjooRm+v5f0TKTMaCXt+7fOE9CMdlV keFalYBB64B+2+tdpIKNlbwe9OhebjjH/LyjMORCoiOAcQDjwRi2SPlKa4qW5vO1 V/T/YM8cWjD0GKW3zXcGWNH48a6ToK0eGWQfFEaB1VCem4uwIhzyErQ4p5oT3kFB 0Pcfj/XHWPHGxcd9P9ysnBC6gSoYI48cZijf1+WG//YS0BIwZbtqwuFD0rZJPXYe AoEkLx+nzvaEECULac+XwUQZXBAowHo0sbCVx83VXTnYrDGMnVV+Br4XsMBaPg41 77n4zBXrUw1+Irm4hFSGINVznvVYIyB/9UN1zyWz5BPxQYBuawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHLbs9eV+FY589PYtqO9R3a7IyHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZmRl MDJlZi1jZGY5LTQwMzktOWEzOC00Y2I3ZGY1OWU1MTYvYjY4Y2VmOTAtMWRhZi0z MTExLTk0Y2EtMWZkMTVkNDc1ZWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOWZkZTAyZWYtY2RmOS00MDM5LTlh MzgtNGNiN2RmNTllNTE2LzlmZGUwMmVmLWNkZjktNDAzOS05YTM4LTRjYjdkZjU5 ZTUxNi5jcmwwHwYDVR0jBBgwFoAUjLC/ypCfMS1qhu0aeTsQAJi0LOIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85ZmRlMDJlZi1jZGY5LTQwMzktOWEzOC00Y2I3 ZGY1OWU1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzrTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZLXtYhZLQ3TFBG1lMcmzhQCGykgOA+lH6OCNmM1WLXz3CX9BdGRSk4 zY7Kj0DRBS65/ym2M2VjcQ9Ip2bMf0AnKzjgW85SFX0K+9Gy0iitsX7so61kBr3g 0OKyXQPKh/TUv6pjeOUcId/enkI8KSmfE2BTmLkdywtEFrw62Vu9z3UhhdvzfNrv fulOrS84mF24Zc26Us1XgXOjfv0zXx5+FE80vWWk85ALbs4ViC5zsDEIomoaWZnq 39zCagBXvx8bpwiof3H8HTgVQNdKMOuWsGmPCOqkej8sRuvOyn5omWfj5gbQVSqW znUFfl1wJWotcCa/l1QyWuJVG1KpXuk= -----END CERTIFICATE-----Generated at Thu May 28 13:40:18 2026 by rpki-client