$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa File: 00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa (raw, json) Hash identifier: FFC8A7/0+UKbZxRqirCrMcaNTRh7C4QA/TjBM72YExo= Subject key identifier: F3:21:6D:EB:C9:00:E4:8E:F1:FB:EE:36:39:32:5F:A3:B3:00:C0:18 Certificate issuer: /CN=6be678b8-74cc-4a67-8700-5a07f5c20f62 Certificate serial: 010D0C9F4328584D0EA7B6D3CC1A7D9FF231F880 Authority key identifier: 07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 17120 IP address blocks: 204.81.0.0/16 maxlen: 18 204.82.0.0/16 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:b6:d3:cc:1a:7d:9f:f2:31:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6be678b8-74cc-4a67-8700-5a07f5c20f62 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=7bcaf27a-357e-45e3-bd85-3bec6782c14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3f:1c:36:cd:5a:72:f3:62:72:9e:73:59:5a: 42:f9:42:ea:e9:0c:e8:b8:81:3e:13:07:c5:92:34: af:4f:4b:87:de:53:04:cd:fa:bc:ce:c8:bf:dc:63: 1a:a4:64:29:2d:75:70:bd:ac:d1:88:65:60:d8:de: 97:70:a4:28:93:9d:dd:4a:a6:a8:ed:2b:6b:e0:73: fb:ba:75:15:60:22:48:08:30:43:34:a8:46:c7:9e: bc:b1:7c:55:50:6d:95:0d:7e:be:ec:6c:cc:88:68: d6:6f:cb:29:84:84:99:13:99:fd:88:67:56:0b:47: 33:38:b4:b4:25:7b:87:b7:c6:c1:2c:bb:fa:1e:0b: 28:1c:fd:f5:e6:8a:19:24:22:7b:96:6d:c0:90:34: fd:21:81:fe:e4:24:6e:57:b7:94:b7:c1:d9:2e:28: 3d:71:23:5f:e1:8a:93:37:8f:99:2a:64:09:49:6b: f1:e6:26:68:02:5e:3a:20:38:64:e3:c4:45:e3:61: 1d:ae:cb:11:3c:d3:4c:bf:51:af:ce:e7:29:79:4c: d7:8a:5c:53:68:68:ad:78:47:a3:34:06:c9:9b:ab: e4:6b:4f:38:62:7c:f7:e9:d9:a2:71:20:0c:e5:c6: 1b:e3:f6:c3:a9:7b:a4:f3:f2:49:25:cd:60:6d:df: 4d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:6D:EB:C9:00:E4:8E:F1:FB:EE:36:39:32:5F:A3:B3:00:C0:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/00d5f446-6317-3dbc-8a74-8f0118ef4b02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62/6be678b8-74cc-4a67-8700-5a07f5c20f62.crl X509v3 Authority Key Identifier: keyid:07:15:A1:D8:29:0B:E1:62:53:76:F4:0C:3B:E3:44:85:EE:8C:D1:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6be678b8-74cc-4a67-8700-5a07f5c20f62.cer sbgp-ipAddrBlock: critical IPv4: 204.81.0.0-204.82.255.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:89:f1:db:7a:e0:9f:ef:2d:f3:91:b7:6c:00:cd:21:04:f0: 4e:23:3a:d4:28:7c:7a:13:b3:70:28:01:32:b2:e0:1b:35:84: ce:db:25:a3:a5:31:6c:ff:16:00:71:bc:1a:75:55:b4:fd:ab: 4c:82:8c:f6:f2:bf:e3:33:73:2f:20:c2:cf:95:a4:87:88:b8: 9f:06:1c:e7:5e:9e:b0:c3:d8:03:95:1c:3d:46:04:22:d8:b0: 20:4c:3c:4b:2b:d7:77:10:a7:6e:28:31:ae:6a:26:11:a5:ee: 1e:c8:68:04:9d:68:7f:ae:1e:a3:03:c0:8b:57:37:e9:ca:b9: b0:ef:b4:3b:4d:19:b8:2b:c5:33:06:63:82:46:d4:11:76:63: 78:a9:bd:d3:09:38:4f:16:56:20:5e:58:a1:6b:11:dc:db:85: a8:e6:e9:b7:b9:dd:e0:a4:e6:96:bb:b7:07:2f:c5:36:51:a4: 0b:9f:cf:11:7a:91:1b:b4:4c:21:90:a0:7d:44:9c:1a:99:fd: e6:93:a2:95:29:4b:63:22:f2:0f:8a:c3:63:b3:91:15:96:90: 1c:ab:60:63:8d:16:0e:0f:24:6d:74:26:41:78:ff:46:37:07: 68:94:5c:3c:a3:83:94:80:fc:eb:ca:76:77:18:65:0e:63:f8: 1c:e7:b5:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0Op7bTzBp9n/Ix+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmJlNjc4YjgtNzRjYy00YTY3LTg3MDAtNWEwN2Y1YzIw ZjYyMB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk N2JjYWYyN2EtMzU3ZS00NWUzLWJkODUtM2JlYzY3ODJjMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij8cNs1acvNicp5zWVpC+ULq6QzouIE+EwfF kjSvT0uH3lMEzfq8zsi/3GMapGQpLXVwvazRiGVg2N6XcKQok53dSqao7Str4HP7 unUVYCJICDBDNKhGx568sXxVUG2VDX6+7GzMiGjWb8sphISZE5n9iGdWC0czOLS0 JXuHt8bBLLv6HgsoHP315ooZJCJ7lm3AkDT9IYH+5CRuV7eUt8HZLig9cSNf4YqT N4+ZKmQJSWvx5iZoAl46IDhk48RF42EdrssRPNNMv1GvzucpeUzXilxTaGiteEej NAbJm6vka084Ynz36dmicSAM5cYb4/bDqXuk8/JJJc1gbd9NiwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPMhbevJAOSO8fvuNjkyX6OzAMAYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82YmU2 NzhiOC03NGNjLTRhNjctODcwMC01YTA3ZjVjMjBmNjIvMDBkNWY0NDYtNjMxNy0z ZGJjLThhNzQtOGYwMTE4ZWY0YjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNmJlNjc4YjgtNzRjYy00YTY3LTg3 MDAtNWEwN2Y1YzIwZjYyLzZiZTY3OGI4LTc0Y2MtNGE2Ny04NzAwLTVhMDdmNWMy MGY2Mi5jcmwwHwYDVR0jBBgwFoAUBxWh2CkL4WJTdvQMO+NEhe6M0YowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82YmU2NzhiOC03NGNjLTRhNjctODcwMC01YTA3 ZjVjMjBmNjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMMAoDAwDMUQMD AMxSMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGyJ8dt64J/vLfORt2wAzSEE8E4jOtQofHoTs3AoATKy4Bs1 hM7bJaOlMWz/FgBxvBp1VbT9q0yCjPbyv+Mzcy8gws+VpIeIuJ8GHOdenrDD2AOV HD1GBCLYsCBMPEsr13cQp24oMa5qJhGl7h7IaASdaH+uHqMDwItXN+nKubDvtDtN GbgrxTMGY4JG1BF2Y3ipvdMJOE8WViBeWKFrEdzbhajm6be53eCk5pa7twcvxTZR pAufzxF6kRu0TCGQoH1EnBqZ/eaTopUpS2Mi8g+Kw2OzkRWWkByrYGONFg4PJG10 JkF4/0Y3B2iUXDyjg5SA/OvKdncYZQ5j+BzntXc= -----END CERTIFICATE-----Generated at Sun Mar 22 09:45:14 2026 by rpki-client