$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa File: f8690b69-feea-3870-a431-f819071fa236.roa (raw, json) Hash identifier: tWVX/G5q2UN258l/MYUKBjoEXAaDwRCiKwEmmU/oQvo= Subject key identifier: 4E:DD:58:5C:4A:B5:B0:8C:48:41:CE:9E:9D:2C:47:D9:10:FA:E1:F4 Certificate issuer: /CN=355b6459-d3e6-4569-b278-aef1a714f5bf Certificate serial: 010D0C9F4328584D143D2CC44C079F293ED2B980 Authority key identifier: CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 1708 IP address blocks: 204.63.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:2c:c4:4c:07:9f:29:3e:d2:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=355b6459-d3e6-4569-b278-aef1a714f5bf Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=db253d65-d256-478c-bfbb-c007c133dc65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:06:4c:90:2a:77:71:05:50:69:bf:6b:2b:a0: 1f:7b:96:9a:df:b1:ba:b2:79:6b:33:d3:ca:c2:87: 18:e8:0f:e4:74:26:8c:ca:0e:c0:44:22:b5:a3:b9: 64:74:bf:5f:28:f3:d6:a9:51:9d:76:37:5b:dc:00: 56:7e:ee:06:95:e8:e4:48:ed:42:07:41:b5:d8:4f: 88:18:ec:7f:61:90:53:41:15:e3:d4:ef:48:a6:49: a3:25:b1:91:1d:c6:5d:00:9d:1a:aa:fd:5e:9a:8c: 69:11:75:f0:e0:20:95:49:56:45:c6:55:0e:c6:d8: bb:44:a6:50:8f:5b:fb:20:66:c2:c6:c7:7b:5a:a8: b6:13:12:0b:6d:b7:ca:cb:ff:0f:96:5c:26:af:07: a7:cc:7f:00:96:1d:74:fd:33:3e:3b:9f:34:44:ea: b4:31:15:9f:5a:b5:59:27:2b:e8:dc:8d:37:80:30: d4:16:1c:f7:a6:28:b2:c6:13:17:6c:a4:9f:99:5c: 5a:dd:c5:bf:cf:b3:7c:10:9a:6f:d9:a9:80:14:8d: 39:e2:11:03:55:83:7d:5f:74:43:b3:22:49:36:c3: 05:7f:d1:a0:c4:9a:32:e9:67:11:ef:a3:9b:fe:7b: 76:75:75:42:c1:55:eb:f9:8e:ee:47:51:73:05:5d: 7d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:DD:58:5C:4A:B5:B0:8C:48:41:CE:9E:9D:2C:47:D9:10:FA:E1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/f8690b69-feea-3870-a431-f819071fa236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf/355b6459-d3e6-4569-b278-aef1a714f5bf.crl X509v3 Authority Key Identifier: keyid:CA:AB:11:72:9B:80:C2:88:AF:C9:90:83:1D:EB:8C:04:46:04:18:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/355b6459-d3e6-4569-b278-aef1a714f5bf.cer sbgp-ipAddrBlock: critical IPv4: 204.63.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:8d:5d:5e:15:b0:50:00:d7:48:0a:75:ac:c7:d6:4f:4b:b9: 29:04:a8:f8:78:40:bf:70:d0:3c:d3:99:1e:5b:d8:83:7d:e6: 81:40:1e:bf:89:b5:53:22:1d:3d:b3:aa:13:2f:41:bb:9c:48: d7:48:0b:b6:11:79:ed:12:59:c5:76:ee:90:34:bc:a5:87:0f: 46:bc:b0:9e:83:40:73:28:52:08:4b:d3:85:03:43:7c:da:06: 2c:4e:c8:01:4a:9b:cb:7f:03:d4:db:a7:05:57:1a:3f:c7:b3: 24:d6:cf:a5:ad:ff:1b:b4:cf:ff:5a:f5:a5:df:76:dd:5d:13: 84:66:7a:73:1f:31:24:18:b2:a7:2d:7c:d9:f8:6a:6f:fc:64: b4:c9:d9:ce:1e:36:ae:c7:fa:36:f3:4f:b1:78:3d:a0:ea:aa: c5:3f:07:aa:c3:b1:c1:26:a3:35:7a:0d:b1:8c:5a:6d:0d:88: e7:1d:d7:5b:10:56:3f:b2:cf:90:a6:c7:3a:cf:58:cf:94:d6: 78:4b:2f:1f:bc:1b:b0:34:20:1b:87:7d:aa:d4:30:7c:e2:d9: 20:b7:d7:ad:bb:76:44:45:9b:aa:a9:34:76:14:53:bf:19:73: ee:b0:5d:fc:94:dc:ee:a8:89:83:62:37:9a:28:c6:af:d5:84: ed:12:5e:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPSzETAefKT7SuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzU1YjY0NTktZDNlNi00NTY5LWIyNzgtYWVmMWE3MTRm NWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZGIyNTNkNjUtZDI1Ni00NzhjLWJmYmItYzAwN2MxMzNkYzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgZMkCp3cQVQab9rK6Afe5aa37G6snlrM9PK wocY6A/kdCaMyg7ARCK1o7lkdL9fKPPWqVGddjdb3ABWfu4GlejkSO1CB0G12E+I GOx/YZBTQRXj1O9IpkmjJbGRHcZdAJ0aqv1emoxpEXXw4CCVSVZFxlUOxti7RKZQ j1v7IGbCxsd7Wqi2ExILbbfKy/8PllwmrwenzH8Alh10/TM+O580ROq0MRWfWrVZ Jyvo3I03gDDUFhz3piiyxhMXbKSfmVxa3cW/z7N8EJpv2amAFI054hEDVYN9X3RD syJJNsMFf9GgxJoy6WcR76Ob/nt2dXVCwVXr+Y7uR1FzBV19kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7dWFxKtbCMSEHOnp0sR9kQ+uH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNTVi NjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYxYTcxNGY1YmYvZjg2OTBiNjktZmVlYS0z ODcwLWE0MzEtZjgxOTA3MWZhMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzU1YjY0NTktZDNlNi00NTY5LWIy NzgtYWVmMWE3MTRmNWJmLzM1NWI2NDU5LWQzZTYtNDU2OS1iMjc4LWFlZjFhNzE0 ZjViZi5jcmwwHwYDVR0jBBgwFoAUyqsRcpuAwoivyZCDHeuMBEYEGMUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNTViNjQ1OS1kM2U2LTQ1NjktYjI3OC1hZWYx YTcxNGY1YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD+FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAONXV4VsFAA10gKdazH1k9LuSkEqPh4QL9w0DzTmR5b2IN95oFAHr+J tVMiHT2zqhMvQbucSNdIC7YRee0SWcV27pA0vKWHD0a8sJ6DQHMoUghL04UDQ3za BixOyAFKm8t/A9TbpwVXGj/HsyTWz6Wt/xu0z/9a9aXfdt1dE4RmenMfMSQYsqct fNn4am/8ZLTJ2c4eNq7H+jbzT7F4PaDqqsU/B6rDscEmozV6DbGMWm0NiOcd11sQ Vj+yz5CmxzrPWM+U1nhLLx+8G7A0IBuHfarUMHzi2SC31627dkRFm6qpNHYUU78Z c+6wXfyU3O6oiYNiN5ooxq/VhO0SXgc= -----END CERTIFICATE-----Generated at Fri Mar 13 16:49:27 2026 by rpki-client