$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa File: 63d52020-fd63-3e4c-b974-456f989ef686.roa (raw, json) Hash identifier: R/j5icN6dltyTqH1pNCY6sfdUPwgP3qEzrRWHUHQr4E= Subject key identifier: 25:1F:6B:7E:48:EA:3F:3E:A4:F8:9D:EF:84:3F:2A:7A:DD:BF:A3:3B Certificate issuer: /CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Certificate serial: 010D0C9F4328584D0912671EE9ACF3F960228580 Authority key identifier: 5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 40321 IP address blocks: 206.53.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:67:1e:e9:ac:f3:f9:60:22:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=4c4cb352-40a4-4254-9f9e-bb13080b3307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:39:86:5a:34:10:c3:a4:db:f4:c4:41:c3:f3: b1:7e:b1:ae:96:e8:9d:eb:d8:fb:45:7b:f9:d1:21: 4d:4c:d9:59:0d:7e:5f:99:32:f9:4c:e4:fd:85:dd: 4b:fd:54:f9:06:86:8f:56:63:72:6d:89:05:a1:4b: d7:c2:ac:9d:7b:47:48:d6:78:46:3a:d6:14:51:b9: 19:ad:44:b1:fd:fa:e3:6d:94:99:e2:4d:0a:f3:f4: e1:35:2a:16:7b:e7:d4:b5:af:64:35:54:a7:3b:2d: 5e:90:8c:9d:d8:49:2d:90:ca:7e:f3:88:d6:32:2e: 61:0e:1c:32:71:36:f6:f2:c8:8b:d1:7c:10:2d:ba: 39:ed:ba:75:01:a7:5e:1d:77:7e:a0:08:c6:bf:dd: 48:74:1c:78:af:58:95:46:01:36:e2:5d:6a:d0:8d: cb:ef:66:73:0f:e0:ae:83:98:aa:88:57:58:82:f4: 14:dd:af:f7:6f:42:f8:7e:a9:b7:78:e6:7a:b0:95: 8f:38:15:3a:61:81:fb:0a:a6:54:f8:d8:76:58:b6: ec:85:e8:9b:ca:4e:af:0b:1e:3a:e6:85:19:64:38: 8e:89:51:3e:97:20:a8:5a:89:54:eb:5d:7a:3c:90: 4a:4a:80:88:08:9c:0e:c0:cc:40:62:3c:09:04:37: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:6B:7E:48:EA:3F:3E:A4:F8:9D:EF:84:3F:2A:7A:DD:BF:A3:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/63d52020-fd63-3e4c-b974-456f989ef686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.crl X509v3 Authority Key Identifier: keyid:5E:2C:07:78:47:BE:CE:0F:D3:6B:45:4A:CF:96:02:66:B8:69:E6:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8645b6e7-ac0b-470e-b54e-e38ed7f8c5a8.cer sbgp-ipAddrBlock: critical IPv4: 206.53.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:cd:5c:64:b3:02:78:a6:ea:1b:17:aa:c4:07:10:ef:3f:44: a8:19:b5:84:81:53:9a:66:21:84:ff:ee:4e:28:86:3e:f5:b0: 36:55:11:95:b0:49:14:de:86:27:6b:6b:1b:5b:27:a6:71:17: 2b:90:11:51:64:87:e4:7a:45:03:48:0e:0f:59:9b:be:6c:ca: 97:0e:1e:c0:d1:38:08:08:52:27:51:52:da:94:fb:26:88:a3: 2b:fc:b2:38:3b:48:29:2a:61:a2:f9:23:60:d7:20:cc:16:61: 8b:1f:b0:a7:f3:b7:09:10:1b:e5:f7:d1:66:5a:41:05:01:ed: e6:16:af:d3:39:54:1c:35:4e:ef:ef:14:47:7a:54:97:64:cc: 47:d5:70:2e:29:7d:b6:cd:98:0b:5e:38:10:a5:44:bf:84:bc: 64:79:a2:7f:20:85:22:5b:08:06:8e:8e:24:8f:24:ef:d7:38: 15:33:c6:c0:ab:a8:35:9f:3c:a0:c7:b6:f9:f0:1c:af:8e:e7: 89:e9:df:9a:98:4b:75:ef:77:ea:03:1a:74:89:bc:02:46:4f: 72:71:7c:f4:18:ac:cf:68:12:4b:11:b1:80:9a:25:c0:e2:da: 9b:cc:47:5b:63:eb:22:bb:e0:ef:b0:bc:cd:b8:26:02:3e:4d: 06:28:53:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmce6azz+WAihYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY0NWI2ZTctYWMwYi00NzBlLWI1NGUtZTM4ZWQ3Zjhj NWE4MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk NGM0Y2IzNTItNDBhNC00MjU0LTlmOWUtYmIxMzA4MGIzMzA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDmGWjQQw6Tb9MRBw/OxfrGuluid69j7RXv5 0SFNTNlZDX5fmTL5TOT9hd1L/VT5BoaPVmNybYkFoUvXwqyde0dI1nhGOtYUUbkZ rUSx/frjbZSZ4k0K8/ThNSoWe+fUta9kNVSnOy1ekIyd2EktkMp+84jWMi5hDhwy cTb28siL0XwQLbo57bp1AadeHXd+oAjGv91IdBx4r1iVRgE24l1q0I3L72ZzD+Cu g5iqiFdYgvQU3a/3b0L4fqm3eOZ6sJWPOBU6YYH7CqZU+Nh2WLbsheibyk6vCx46 5oUZZDiOiVE+lyCoWolU6116PJBKSoCICJwOwMxAYjwJBDe/xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUfa35I6j8+pPid74Q/Knrdv6M7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1 YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhlZDdmOGM1YTgvNjNkNTIwMjAtZmQ2My0z ZTRjLWI5NzQtNDU2Zjk4OWVmNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODY0NWI2ZTctYWMwYi00NzBlLWI1 NGUtZTM4ZWQ3ZjhjNWE4Lzg2NDViNmU3LWFjMGItNDcwZS1iNTRlLWUzOGVkN2Y4 YzVhOC5jcmwwHwYDVR0jBBgwFoAUXiwHeEe+zg/Ta0VKz5YCZrhp5rIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84NjQ1YjZlNy1hYzBiLTQ3MGUtYjU0ZS1lMzhl ZDdmOGM1YTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzjUEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHNXGSzAnim6hsXqsQHEO8/RKgZtYSBU5pmIYT/7k4ohj71sDZVEZWw SRTehidraxtbJ6ZxFyuQEVFkh+R6RQNIDg9Zm75sypcOHsDROAgIUidRUtqU+yaI oyv8sjg7SCkqYaL5I2DXIMwWYYsfsKfztwkQG+X30WZaQQUB7eYWr9M5VBw1Tu/v FEd6VJdkzEfVcC4pfbbNmAteOBClRL+EvGR5on8ghSJbCAaOjiSPJO/XOBUzxsCr qDWfPKDHtvnwHK+O54np35qYS3Xvd+oDGnSJvAJGT3JxfPQYrM9oEksRsYCaJcDi 2pvMR1tj6yK74O+wvM24JgI+TQYoU10= -----END CERTIFICATE-----Generated at Tue Mar 17 00:42:43 2026 by rpki-client