$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa File: 8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa (raw, json) Hash identifier: Oe3MZMK6FX9gZ7C3vtPQ+kzLzfh4NDdlHjUMxvHtn40= Subject key identifier: 14:85:C7:44:56:71:99:4B:B9:18:85:A1:32:E4:C5:A6:A5:60:38:87 Certificate issuer: /CN=1add3b23-5fb0-4412-be17-98450d352516 Certificate serial: 010D0C9F4328584D0D425A8713BC977567C04F60 Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 14740 IP address blocks: 206.210.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:5a:87:13:bc:97:75:67:c0:4f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=dc3813fa-44ef-4c88-b651-d80162537b49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a6:44:9b:07:84:ee:bd:b3:7c:29:ab:36:31: fa:70:81:76:10:21:78:a4:9f:39:0b:e3:1a:b6:79: a6:a4:3f:6f:6f:fa:d7:ac:d5:c6:9b:ab:9a:c4:f2: e6:05:0f:c6:cf:43:02:42:7a:5d:8f:37:6f:b2:42: ed:ed:64:f5:b4:3d:b3:0f:f7:f6:de:62:15:cb:3c: e3:e4:ef:8f:5a:95:c0:04:f9:0a:d1:51:f0:7f:04: dc:81:df:da:51:f4:bf:c7:35:b0:36:c4:d4:4d:69: 1c:33:cf:67:c9:61:da:14:bc:02:c0:46:fe:6b:4f: 2d:fa:ee:c9:0b:0b:c5:8e:08:b9:86:5d:fb:96:85: 22:68:5b:44:34:49:c7:7d:35:ea:fd:7e:9f:39:7d: b0:6e:ee:21:16:dc:e3:ec:87:25:5e:e4:15:1e:b6: b5:55:93:1b:63:1c:fc:75:be:d2:cf:25:99:e5:61: d9:9b:d8:e7:b4:c0:d9:33:4d:88:36:f2:bf:6a:a6: 4f:07:23:b2:83:2c:f0:f0:d5:65:b1:fe:0c:2c:4b: ab:7f:37:c3:b0:07:2b:a9:d3:1c:42:5b:97:8c:59: e8:57:d4:60:90:39:95:b5:40:ff:79:0a:b5:d0:88: 6f:c2:6a:f5:40:da:fc:74:48:3c:1b:30:76:d2:9d: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:85:C7:44:56:71:99:4B:B9:18:85:A1:32:E4:C5:A6:A5:60:38:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/8b94d123-1e6e-39b2-b8ac-f9e7d42bee26.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl X509v3 Authority Key Identifier: keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer sbgp-ipAddrBlock: critical IPv4: 206.210.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:83:9f:1d:77:11:1d:15:1e:44:86:67:45:2d:61:d8:89:b7: 52:f8:ae:d1:a2:eb:f8:9f:e9:9b:97:e4:5b:c3:1e:18:bf:0d: f4:c4:ac:15:9f:fb:54:50:bc:e5:29:64:b9:c4:68:fe:10:fd: 9c:eb:98:5d:ab:95:e5:0a:72:dc:8b:dc:62:ce:39:0e:53:19: 77:38:47:e8:1b:ff:43:ea:30:65:2b:94:48:ea:1b:b2:84:b6: 33:47:3d:91:f8:97:0f:40:35:2a:61:f3:a4:62:17:1c:79:45: e1:69:b4:6c:29:8c:7e:ac:30:81:ee:41:7a:d7:d7:5a:ea:96: 4f:8f:07:ef:84:c7:11:b7:e5:49:11:84:fe:5c:87:f2:e6:ef: a7:cb:f5:e0:8e:bd:4f:9c:b7:20:46:8a:1e:4e:95:ac:61:f9: ce:8a:6c:1c:96:57:69:d5:9d:02:2a:ae:1a:2c:bd:0c:b5:db: 0f:50:6a:18:5a:79:24:ce:88:66:50:3a:29:f1:6b:70:5e:07: 5b:b5:a0:2a:24:99:15:f2:6f:0a:3b:2e:09:68:da:93:55:fb: c0:fe:b7:e7:52:ec:b6:01:fc:2a:f0:21:f7:25:49:2b:71:a6: 86:2b:7a:2a:98:22:16:e9:cd:57:d1:06:fe:6a:c6:0d:97:45: 1a:6c:53:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQlqHE7yXdWfAT2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFkZDNiMjMtNWZiMC00NDEyLWJlMTctOTg0NTBkMzUy NTE2MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGMzODEzZmEtNDRlZi00Yzg4LWI2NTEtZDgwMTYyNTM3YjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaZEmweE7r2zfCmrNjH6cIF2ECF4pJ85C+Ma tnmmpD9vb/rXrNXGm6uaxPLmBQ/Gz0MCQnpdjzdvskLt7WT1tD2zD/f23mIVyzzj 5O+PWpXABPkK0VHwfwTcgd/aUfS/xzWwNsTUTWkcM89nyWHaFLwCwEb+a08t+u7J CwvFjgi5hl37loUiaFtENEnHfTXq/X6fOX2wbu4hFtzj7IclXuQVHra1VZMbYxz8 db7SzyWZ5WHZm9jntMDZM02INvK/aqZPByOygyzw8NVlsf4MLEurfzfDsAcrqdMc QluXjFnoV9RgkDmVtUD/eQq10Ihvwmr1QNr8dEg8GzB20p3clQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSFx0RWcZlLuRiFoTLkxaalYDiHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYWRk M2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1MGQzNTI1MTYvOGI5NGQxMjMtMWU2ZS0z OWIyLWI4YWMtZjllN2Q0MmJlZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWFkZDNiMjMtNWZiMC00NDEyLWJl MTctOTg0NTBkMzUyNTE2LzFhZGQzYjIzLTVmYjAtNDQxMi1iZTE3LTk4NDUwZDM1 MjUxNi5jcmwwHwYDVR0jBBgwFoAU39arNQjEZ6Npjktd6od4wHodjiYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYWRkM2IyMy01ZmIwLTQ0MTItYmUxNy05ODQ1 MGQzNTI1MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAztJVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiDnx13ER0VHkSGZ0UtYdiJt1L4rtGi6/if6ZuX5FvDHhi/DfTErBWf +1RQvOUpZLnEaP4Q/ZzrmF2rleUKctyL3GLOOQ5TGXc4R+gb/0PqMGUrlEjqG7KE tjNHPZH4lw9ANSph86RiFxx5ReFptGwpjH6sMIHuQXrX11rqlk+PB++ExxG35UkR hP5ch/Lm76fL9eCOvU+ctyBGih5Olaxh+c6KbByWV2nVnQIqrhosvQy12w9Qahha eSTOiGZQOinxa3BeB1u1oCokmRXybwo7Lglo2pNV+8D+t+dS7LYB/CrwIfclSStx poYreiqYIhbpzVfRBv5qxg2XRRpsU2A= -----END CERTIFICATE-----Generated at Fri Mar 13 13:16:42 2026 by rpki-client