$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/16784a9b-b887-3811-a940-8e636f627e4f.roa File: 16784a9b-b887-3811-a940-8e636f627e4f.roa (raw, json) Hash identifier: fJLjfDDzx6H+4L6NerdQRpU/kZQbXeO9S7zNzJF7pUs= Subject key identifier: 2D:85:34:6D:92:17:66:D8:37:64:13:39:E0:82:70:15:16:53:BE:12 Certificate issuer: /CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1 Certificate serial: 010D0C9F4328584D316F64DCC90A3F02C09D1340 Authority key identifier: 82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/16784a9b-b887-3811-a940-8e636f627e4f.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 199527 IP address blocks: 205.207.160.0/24 maxlen: 24 205.207.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:64:dc:c9:0a:3f:02:c0:9d:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690d3e4c-3927-4ce0-a787-35ad7dbecaa1 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=7b6dd615-bb5e-442c-be60-94c76d2b426d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:21:1c:0d:85:e5:79:e5:0a:b3:ac:64:ca:09: c7:df:4e:97:43:c0:5c:ac:d8:a3:5d:8f:a4:e3:1e: c3:d7:f6:da:7b:58:e6:9f:f8:76:b3:6d:b1:bf:e7: 8b:01:d1:ab:4d:27:bd:c3:02:bd:90:9e:d7:d0:10: 1e:c3:f3:4c:1d:ca:40:ce:35:b4:74:ca:f3:ca:c0: 3d:a2:80:1d:09:36:a7:cd:e4:c1:af:65:97:f2:15: 80:7c:a8:1c:32:16:62:41:b1:a0:6a:6b:7d:df:65: e1:c7:78:ec:29:86:7e:7c:86:c0:e5:7a:42:aa:c8: ec:60:8e:40:3a:43:fc:4c:42:7b:0c:1c:d4:86:53: bd:21:87:3b:b7:a7:a3:27:0a:36:9d:7c:bf:55:22: 89:fa:2f:0a:a5:3f:35:fe:4f:ad:b8:9c:eb:37:91: 38:8d:d8:6b:bf:63:35:59:2f:61:36:27:7f:e6:15: 43:65:2c:bf:81:da:7a:10:43:8b:b1:f9:a2:41:27: 92:01:89:84:2e:4e:29:e9:eb:ef:a0:20:6e:df:01: 8a:62:bb:da:59:5f:bc:de:9b:ea:67:c4:6a:df:19: e6:cc:80:11:4d:63:8b:c5:d3:68:73:ec:93:13:b5: f7:1d:3a:13:eb:d6:2c:28:d0:8c:9d:ea:5a:51:39: 1d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:85:34:6D:92:17:66:D8:37:64:13:39:E0:82:70:15:16:53:BE:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/16784a9b-b887-3811-a940-8e636f627e4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.crl X509v3 Authority Key Identifier: keyid:82:8F:AF:9A:53:49:2B:74:29:45:D4:70:D8:A5:2A:60:AE:BB:8C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/690d3e4c-3927-4ce0-a787-35ad7dbecaa1.cer sbgp-ipAddrBlock: critical IPv4: 205.207.160.0/24 205.207.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:65:e3:0b:41:93:ea:88:35:30:23:5a:cf:f1:b3:26:21:20: e7:c9:77:3d:41:d0:05:36:3d:f8:47:2b:8c:53:88:6e:9e:b0: c4:a1:68:f2:14:99:ee:8e:28:0a:d4:6d:16:67:ef:b2:ca:d2: 54:6e:0e:3c:31:ac:1b:d9:c6:69:37:ec:85:2a:54:34:a2:ad: 6f:92:ca:90:32:ab:6a:e5:f9:46:00:ab:fc:7a:2c:55:ee:a5: 89:04:8b:c7:b0:36:70:e9:fd:83:18:1b:3a:de:eb:e6:ed:49: f4:64:87:9e:0b:d5:b8:51:67:13:b4:eb:d9:2e:18:ec:c4:71: 8a:91:2c:13:10:fb:ae:3d:49:64:8e:cb:81:4a:7d:0d:7c:b0: f0:41:8d:17:97:de:aa:b5:8a:95:a6:b4:2d:56:87:dd:e6:06: 0e:57:0b:93:df:47:42:2b:ba:8e:93:59:9d:ee:86:20:a6:02: 03:46:43:e1:71:ad:8c:9c:a5:84:7d:d4:98:3e:bb:e2:08:c6: 0d:96:dc:5b:cf:77:2e:90:a5:92:1e:1e:d6:5d:e2:33:81:60: d4:c2:66:4a:e8:ab:76:a8:ac:5f:de:78:b4:37:9c:4f:9f:52: 9f:84:22:a4:8e:51:6d:71:c7:bb:ca:5e:1a:a6:0c:17:f6:d7: 57:d7:5a:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0xb2TcyQo/AsCdE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjkwZDNlNGMtMzkyNy00Y2UwLWE3ODctMzVhZDdkYmVj YWExMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk N2I2ZGQ2MTUtYmI1ZS00NDJjLWJlNjAtOTRjNzZkMmI0MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCEcDYXleeUKs6xkygnH306XQ8BcrNijXY+k 4x7D1/bae1jmn/h2s22xv+eLAdGrTSe9wwK9kJ7X0BAew/NMHcpAzjW0dMrzysA9 ooAdCTanzeTBr2WX8hWAfKgcMhZiQbGgamt932Xhx3jsKYZ+fIbA5XpCqsjsYI5A OkP8TEJ7DBzUhlO9IYc7t6ejJwo2nXy/VSKJ+i8KpT81/k+tuJzrN5E4jdhrv2M1 WS9hNid/5hVDZSy/gdp6EEOLsfmiQSeSAYmELk4p6evvoCBu3wGKYrvaWV+83pvq Z8Rq3xnmzIARTWOLxdNoc+yTE7X3HToT69YsKNCMnepaUTkdfQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFC2FNG2SF2bYN2QTOeCCcBUWU74SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82OTBk M2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFkN2RiZWNhYTEvMTY3ODRhOWItYjg4Ny0z ODExLWE5NDAtOGU2MzZmNjI3ZTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNjkwZDNlNGMtMzkyNy00Y2UwLWE3 ODctMzVhZDdkYmVjYWExLzY5MGQzZTRjLTM5MjctNGNlMC1hNzg3LTM1YWQ3ZGJl Y2FhMS5jcmwwHwYDVR0jBBgwFoAUgo+vmlNJK3QpRdRw2KUqYK67jNowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82OTBkM2U0Yy0zOTI3LTRjZTAtYTc4Ny0zNWFk N2RiZWNhYTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzc+gAwQB zc+oMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD1l4wtBk+qINTAjWs/xsyYhIOfJdz1B0AU2PfhHK4xTiG6e sMShaPIUme6OKArUbRZn77LK0lRuDjwxrBvZxmk37IUqVDSirW+SypAyq2rl+UYA q/x6LFXupYkEi8ewNnDp/YMYGzre6+btSfRkh54L1bhRZxO069kuGOzEcYqRLBMQ +649SWSOy4FKfQ18sPBBjReX3qq1ipWmtC1Wh93mBg5XC5PfR0Iruo6TWZ3uhiCm AgNGQ+FxrYycpYR91Jg+u+IIxg2W3FvPdy6QpZIeHtZd4jOBYNTCZkroq3aorF/e eLQ3nE+fUp+EIqSOUW1xx7vKXhqmDBf211fXWtE= -----END CERTIFICATE-----Generated at Sat Mar 21 17:55:55 2026 by rpki-client