$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa File: 3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa (raw, json) Hash identifier: doM2M/M8shGYiMq2txZqerXpIN1KTzwWv2FbY7kTvHU= Subject key identifier: F0:41:1C:9A:A5:3F:0A:EF:07:8A:F4:B5:6A:4C:AA:A1:78:DA:9F:7A Certificate issuer: /CN=f01c98d6-0a7e-47d2-9b33-584d06920624 Certificate serial: 010D0C9F4328584D27AACBA953738A73DFCBC2B4 Authority key identifier: 92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa Signing time: Fri 13 Mar 2026 13:00:40 +0000 ROA not before: Fri 13 Mar 2026 13:00:40 +0000 ROA not after: Thu 11 Jun 2026 13:00:40 +0000 asID: 401610 IP address blocks: 206.168.104.0/24 maxlen: 24 206.168.105.0/24 maxlen: 24 206.168.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:27:aa:cb:a9:53:73:8a:73:df:cb:c2:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f01c98d6-0a7e-47d2-9b33-584d06920624 Validity Not Before: Mar 13 13:00:40 2026 GMT Not After : Jun 11 13:00:40 2026 GMT Subject: CN=e4a58fcd-8510-4ded-b272-57a7bcb827cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:74:36:d3:0a:d3:33:d5:68:0d:71:0d:35:21: 28:ec:02:45:6c:c5:fa:bc:50:aa:a0:70:52:3f:6f: 6d:75:c4:6e:a8:e4:00:99:d2:cb:92:82:de:5b:0c: 67:22:4f:b5:3b:c7:31:a5:a3:52:0c:4b:f5:f4:b5: c5:9d:91:9e:ad:7a:c1:58:68:3f:30:4b:c8:15:1f: 44:84:82:7b:7a:04:49:f4:6e:2d:d2:f3:15:bc:4c: 71:ef:5f:a7:18:bc:ab:17:0f:4f:4e:8e:54:82:9d: 10:7e:87:6f:cb:0c:04:d0:f3:40:44:07:cb:f9:a7: 50:f2:bd:81:81:1d:80:91:12:a5:d3:9d:5a:e8:27: 24:89:ae:97:18:db:9d:80:e4:e9:80:10:7d:22:80: c5:c9:e4:ee:6c:d3:a0:c4:96:4e:73:30:35:da:8c: 86:0f:91:88:47:db:4d:cb:42:96:56:6d:c6:0e:9c: 7a:24:68:ab:c3:65:e6:f4:b4:f8:af:d4:71:36:b4: e2:c7:c3:57:31:5e:0a:3b:91:b2:69:60:54:ce:04: 12:cc:7f:d0:1a:2b:d5:9b:df:bb:66:43:d3:4f:d7: 48:c0:98:99:73:39:be:12:83:4b:7b:44:d7:bb:56: 49:e8:f6:37:2e:c4:02:93:12:24:c1:80:60:eb:5e: 12:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:1C:9A:A5:3F:0A:EF:07:8A:F4:B5:6A:4C:AA:A1:78:DA:9F:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/3a0d71c0-f6ce-32d8-810b-ddacd56357bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624/f01c98d6-0a7e-47d2-9b33-584d06920624.crl X509v3 Authority Key Identifier: keyid:92:3D:A8:83:E8:CF:9B:E4:5F:A3:91:96:34:20:65:FD:22:96:CF:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f01c98d6-0a7e-47d2-9b33-584d06920624.cer sbgp-ipAddrBlock: critical IPv4: 206.168.104.0/23 206.168.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:1d:9f:3c:ce:cf:9d:17:85:a3:19:69:eb:bc:d2:0a:61:34: 71:15:51:42:9f:b7:f4:95:d2:fa:9e:f5:27:cf:c0:5f:2c:dc: e5:37:1c:92:dc:12:09:44:05:74:5c:ad:3e:96:9a:7a:d6:fb: 6b:80:03:0d:ff:7c:2b:ea:81:8e:11:23:5d:01:f0:ad:91:b3: ba:95:eb:bf:06:4f:fb:56:52:f7:43:1d:37:48:0b:9d:a0:ff: 3c:87:a1:d5:b4:2f:72:27:10:3c:cd:70:5e:42:de:70:43:be: 9d:9b:1f:94:2f:43:53:81:a2:d3:49:c7:f1:f1:03:95:b0:5a: 80:b5:23:31:d1:1e:19:85:8c:b8:f8:48:32:fb:e2:2f:a2:f4: 01:1f:80:c3:68:84:e1:f4:00:7f:4f:30:33:11:23:8f:45:5e: bd:33:17:d2:e9:99:b6:cf:fe:10:43:2c:f9:21:41:e3:d5:b3: a1:2e:49:65:26:51:48:af:25:d4:11:f7:df:5a:2d:50:33:89: c1:8c:f8:35:ad:1c:d0:bc:93:d5:23:33:95:40:20:4b:6b:28: 6b:d4:95:45:e4:76:7b:9c:63:c9:bf:a8:52:60:cc:98:63:b9: e4:c9:e4:bc:02:39:02:c8:bd:6b:34:43:5c:4f:b7:f9:96:9b: 41:10:73:77 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0nqsupU3OKc9/LwrQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjAxYzk4ZDYtMGE3ZS00N2QyLTliMzMtNTg0ZDA2OTIw NjI0MB4XDTI2MDMxMzEzMDA0MFoXDTI2MDYxMTEzMDA0MFowLzEtMCsGA1UEAxMk ZTRhNThmY2QtODUxMC00ZGVkLWIyNzItNTdhN2JjYjgyN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHQ20wrTM9VoDXENNSEo7AJFbMX6vFCqoHBS P29tdcRuqOQAmdLLkoLeWwxnIk+1O8cxpaNSDEv19LXFnZGerXrBWGg/MEvIFR9E hIJ7egRJ9G4t0vMVvExx71+nGLyrFw9PTo5Ugp0QfodvywwE0PNARAfL+adQ8r2B gR2AkRKl051a6Cckia6XGNudgOTpgBB9IoDFyeTubNOgxJZOczA12oyGD5GIR9tN y0KWVm3GDpx6JGirw2Xm9LT4r9RxNrTix8NXMV4KO5GyaWBUzgQSzH/QGivVm9+7 ZkPTT9dIwJiZczm+EoNLe0TXu1ZJ6PY3LsQCkxIkwYBg614SzwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPBBHJqlPwrvB4r0tWpMqqF42p96MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDFj OThkNi0wYTdlLTQ3ZDItOWIzMy01ODRkMDY5MjA2MjQvM2EwZDcxYzAtZjZjZS0z MmQ4LTgxMGItZGRhY2Q1NjM1N2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjAxYzk4ZDYtMGE3ZS00N2QyLTli MzMtNTg0ZDA2OTIwNjI0L2YwMWM5OGQ2LTBhN2UtNDdkMi05YjMzLTU4NGQwNjky MDYyNC5jcmwwHwYDVR0jBBgwFoAUkj2og+jPm+Rfo5GWNCBl/SKWz4owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDFjOThkNi0wYTdlLTQ3ZDItOWIzMy01ODRk MDY5MjA2MjQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzqhoAwQA zqhrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG8dnzzOz50XhaMZaeu80gphNHEVUUKft/SV0vqe9SfPwF8s 3OU3HJLcEglEBXRcrT6WmnrW+2uAAw3/fCvqgY4RI10B8K2Rs7qV678GT/tWUvdD HTdIC52g/zyHodW0L3InEDzNcF5C3nBDvp2bH5QvQ1OBotNJx/HxA5WwWoC1IzHR HhmFjLj4SDL74i+i9AEfgMNohOH0AH9PMDMRI49FXr0zF9LpmbbP/hBDLPkhQePV s6EuSWUmUUivJdQR999aLVAzicGM+DWtHNC8k9UjM5VAIEtrKGvUlUXkdnucY8m/ qFJgzJhjueTJ5LwCOQLIvWs0Q1xPt/mWm0EQc3c= -----END CERTIFICATE-----Generated at Sun Mar 22 09:59:17 2026 by rpki-client