$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa File: 685237db-c4d0-36bb-974d-c4141e668c5d.roa (raw, json) Hash identifier: K8UK9ARH3ctZpTn1r0DB24UmjwIM5hguhSxLDqvXYO8= Subject key identifier: B1:E6:D3:14:D9:40:51:46:81:C0:EC:9C:B4:ED:57:32:7D:35:3E:12 Certificate issuer: /CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Certificate serial: 010D0C9F4328584D19B4AA07AC10A5D667F9F680 Authority key identifier: 6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 394141 IP address blocks: 206.57.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:aa:07:ac:10:a5:d6:67:f9:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088404f8-82fb-4330-8ac4-ad17a88d2e28 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=05b54e3d-8eb2-4687-ad7b-0c0f9f4b07c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c5:21:6d:01:98:32:56:fe:fb:fe:2f:0d:9e: dd:4c:dc:d4:69:52:6a:db:56:64:6d:5a:ab:b7:49: dd:98:20:12:23:27:80:50:f9:6a:85:f3:7b:03:64: 62:4c:82:8c:a4:28:31:fc:8e:ec:ba:e2:da:ff:cd: ff:52:79:52:83:f1:70:69:dd:cf:f6:cf:3b:61:59: 4a:dd:b3:1a:bb:d0:26:00:23:70:12:4f:88:4a:44: 9d:bb:a4:51:d9:b7:ec:2f:95:c7:c7:7d:d5:73:10: e2:1b:26:37:b1:37:47:74:6c:03:6d:82:97:43:2c: 98:6a:ff:7f:22:56:1f:31:be:e1:0b:c5:4e:ff:c7: c8:00:2a:e2:f7:f0:1b:69:3c:50:51:f0:e6:ac:db: c9:c4:af:fc:38:ff:60:6b:35:73:4b:56:21:4c:30: 4d:be:c1:5c:a9:85:1e:b0:4a:26:72:79:4b:33:d6: f1:a8:e6:2c:21:98:46:93:84:ae:68:38:b1:9d:83: 81:7f:61:67:d7:6f:ec:77:8f:ea:c1:79:57:21:b8: 6d:6a:26:16:18:3c:52:64:a9:56:e5:bc:d6:57:e9: f5:2a:6c:77:6c:d7:2b:82:40:35:ed:10:aa:55:5f: 12:2b:a9:7f:a8:42:b1:06:ce:ce:e8:90:06:09:c2: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:D3:14:D9:40:51:46:81:C0:EC:9C:B4:ED:57:32:7D:35:3E:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/685237db-c4d0-36bb-974d-c4141e668c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28/088404f8-82fb-4330-8ac4-ad17a88d2e28.crl X509v3 Authority Key Identifier: keyid:6B:16:38:96:60:AF:D5:52:94:DA:F2:61:9F:63:41:BA:32:F9:E4:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/088404f8-82fb-4330-8ac4-ad17a88d2e28.cer sbgp-ipAddrBlock: critical IPv4: 206.57.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:2b:f2:ed:04:0a:f9:7e:63:ea:a2:1f:79:f7:c2:23:4c:75: 79:a9:cd:ca:3a:be:da:2d:f3:d6:19:73:62:5d:64:fe:c1:1c: 4e:ab:b4:67:9b:cf:a9:35:cc:a2:ef:f1:02:3d:15:16:af:c2: 93:93:2a:2c:07:2f:24:36:ef:a0:92:54:fa:57:91:7d:fe:69: 21:c8:e1:3d:08:d8:61:d2:84:df:12:30:4f:ff:d0:f5:f8:ac: 52:6e:08:b3:0e:ab:13:20:3d:b5:44:e3:22:2e:28:f1:0c:8b: bc:91:99:7d:92:b9:91:9e:48:96:98:0d:c2:a6:d7:75:e4:31: 0a:24:41:d4:0b:03:79:eb:dd:1b:6e:22:00:06:a7:f1:b8:f0: e0:c1:8f:3e:31:42:ea:d6:77:6d:eb:30:25:44:d9:fd:5b:5b: e7:29:5e:47:52:4b:94:a0:05:20:88:fc:5b:5b:cb:ad:a5:1b: a6:68:39:d1:9e:39:17:ba:79:2e:0a:ff:af:9f:7f:b4:ea:4b: fc:57:83:d1:38:98:45:fe:f1:0f:75:db:1e:78:6e:38:ac:79: 4a:2b:33:3e:24:82:4c:28:d6:50:af:4d:2e:d5:17:bc:08:75: ba:81:af:e4:b4:d3:aa:56:b2:28:17:e2:73:98:e1:8f:9e:f7: 9a:f0:bf:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtKoHrBCl1mf59oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg4NDA0ZjgtODJmYi00MzMwLThhYzQtYWQxN2E4OGQy ZTI4MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MDViNTRlM2QtOGViMi00Njg3LWFkN2ItMGMwZjlmNGIwN2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsUhbQGYMlb++/4vDZ7dTNzUaVJq21ZkbVqr t0ndmCASIyeAUPlqhfN7A2RiTIKMpCgx/I7suuLa/83/UnlSg/Fwad3P9s87YVlK 3bMau9AmACNwEk+ISkSdu6RR2bfsL5XHx33VcxDiGyY3sTdHdGwDbYKXQyyYav9/ IlYfMb7hC8VO/8fIACri9/AbaTxQUfDmrNvJxK/8OP9gazVzS1YhTDBNvsFcqYUe sEomcnlLM9bxqOYsIZhGk4SuaDixnYOBf2Fn12/sd4/qwXlXIbhtaiYWGDxSZKlW 5bzWV+n1Kmx3bNcrgkA17RCqVV8SK6l/qEKxBs7O6JAGCcIjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHm0xTZQFFGgcDsnLTtVzJ9NT4SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wODg0 MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3YTg4ZDJlMjgvNjg1MjM3ZGItYzRkMC0z NmJiLTk3NGQtYzQxNDFlNjY4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDg4NDA0ZjgtODJmYi00MzMwLThh YzQtYWQxN2E4OGQyZTI4LzA4ODQwNGY4LTgyZmItNDMzMC04YWM0LWFkMTdhODhk MmUyOC5jcmwwHwYDVR0jBBgwFoAUaxY4lmCv1VKU2vJhn2NBujL55FwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8wODg0MDRmOC04MmZiLTQzMzAtOGFjNC1hZDE3 YTg4ZDJlMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjmYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKcr8u0ECvl+Y+qiH3n3wiNMdXmpzco6vtot89YZc2JdZP7BHE6rtGeb z6k1zKLv8QI9FRavwpOTKiwHLyQ276CSVPpXkX3+aSHI4T0I2GHShN8SME//0PX4 rFJuCLMOqxMgPbVE4yIuKPEMi7yRmX2SuZGeSJaYDcKm13XkMQokQdQLA3nr3Rtu IgAGp/G48ODBjz4xQurWd23rMCVE2f1bW+cpXkdSS5SgBSCI/Ftby62lG6ZoOdGe ORe6eS4K/6+ff7TqS/xXg9E4mEX+8Q912x54bjiseUorMz4kgkwo1lCvTS7VF7wI dbqBr+S006pWsigX4nOY4Y+e95rwv44= -----END CERTIFICATE-----Generated at Sun Mar 22 09:58:42 2026 by rpki-client