$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa File: 949687e0-ba33-340c-8c9c-e72a6b17addd.roa (raw, json) Hash identifier: 4VIrh5zuBdbqfCKEnajqOZ9QFP4Ov7lG1TMXkfMCMBg= Subject key identifier: D0:EF:B5:3B:7E:13:D7:CB:11:09:2B:EE:0E:57:11:FE:A0:67:5A:88 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D40CA39F4E79A670AC4B7AFC0 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 28458 IP address blocks: 206.135.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:39:f4:e7:9a:67:0a:c4:b7:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=663c1e19-189b-4154-9d7b-bba139a6310d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:49:c9:82:3f:dc:78:89:94:b9:0e:ff:bb:0b: 1e:21:60:df:62:64:2f:ab:5e:63:e7:3e:54:98:9a: 75:ae:8c:0f:6f:a4:6c:2f:26:8e:16:56:1d:42:0c: 42:86:01:5e:c0:0d:24:81:6a:87:ef:23:af:f2:0f: 8c:b2:a8:0a:10:14:47:f2:57:38:f6:89:5e:f7:14: dc:f7:a8:6f:08:0e:3c:70:24:9f:0c:52:1c:f1:e6: 11:c6:ac:d4:34:a7:87:c4:87:ee:5e:82:ba:2a:23: a6:d6:84:6a:cc:a9:24:1c:a0:5d:94:c2:d7:d0:b6: ec:6f:2f:ce:8f:ff:c3:a7:27:df:62:52:5a:26:73: 27:41:97:98:3b:86:24:26:fc:b5:37:ca:7d:ed:8f: 2a:ea:4e:52:58:62:0b:68:f3:4b:a6:10:fb:d6:e5: 28:17:e8:cf:54:9b:a1:1c:6a:e2:24:f5:8b:b0:87: ea:35:07:81:b2:81:a6:b7:07:0a:db:e9:41:28:f7: 90:ca:2f:50:40:1e:a1:89:93:7a:c4:47:0d:48:e6: 81:dd:b0:70:05:09:55:14:3d:e7:68:0f:84:03:57: de:b9:28:1c:7c:4f:fd:60:72:4b:4e:18:95:4f:15: 09:bb:51:cf:de:2d:52:5b:9e:24:af:30:79:a0:a4: 52:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:EF:B5:3B:7E:13:D7:CB:11:09:2B:EE:0E:57:11:FE:A0:67:5A:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/949687e0-ba33-340c-8c9c-e72a6b17addd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 206.135.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:92:17:05:5f:9f:cb:56:81:8b:68:6f:0d:45:46:ba:fc:f4: aa:cb:9e:17:83:02:e6:c6:0a:d1:62:b3:41:21:b0:39:67:8f: 97:40:95:fe:1d:92:bf:e5:e8:3b:d8:bd:a1:57:89:7d:fa:e6: bf:0d:5a:64:a1:8d:85:9c:95:04:6c:97:d0:93:90:42:d9:bd: c4:af:d6:8b:fc:4a:12:98:f9:94:aa:ce:de:5a:5c:7e:f9:98: 38:ac:a6:cc:7d:6c:e0:12:24:9b:dc:29:bc:d5:2d:da:2f:61: 2e:8c:b8:7b:78:9d:34:77:3f:7b:a0:ec:18:9e:12:23:af:8b: 37:0a:f0:45:04:2d:30:f7:e5:e0:2c:b3:de:89:2e:78:1f:85: 06:31:33:a4:be:99:92:03:cf:b8:42:59:05:fd:33:7a:75:b0: dc:a7:f6:46:23:e6:5a:14:6f:35:1c:5e:92:85:d6:63:94:f1: b1:5c:8f:c9:7b:84:1b:bb:c1:d6:c2:2e:11:73:d3:d6:7b:72: 99:d0:61:50:89:c3:18:d4:eb:7d:8a:96:af:65:3d:24:80:10: 71:88:44:1b:2e:d1:d0:94:08:5d:8d:9e:74:39:83:93:e8:86: ec:0e:31:a0:67:e8:87:49:dc:38:f2:c9:fd:e2:16:51:d1:7c: 60:a5:80:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ayjn055pnCsS3r8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NjYzYzFlMTktMTg5Yi00MTU0LTlkN2ItYmJhMTM5YTYzMTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhknJgj/ceImUuQ7/uwseIWDfYmQvq15j5z5U mJp1rowPb6RsLyaOFlYdQgxChgFewA0kgWqH7yOv8g+MsqgKEBRH8lc49ole9xTc 96hvCA48cCSfDFIc8eYRxqzUNKeHxIfuXoK6KiOm1oRqzKkkHKBdlMLX0Lbsby/O j//DpyffYlJaJnMnQZeYO4YkJvy1N8p97Y8q6k5SWGILaPNLphD71uUoF+jPVJuh HGriJPWLsIfqNQeBsoGmtwcK2+lBKPeQyi9QQB6hiZN6xEcNSOaB3bBwBQlVFD3n aA+EA1feuSgcfE/9YHJLThiVTxUJu1HP3i1SW54krzB5oKRScwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDvtTt+E9fLEQkr7g5XEf6gZ1qIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOTQ5Njg3ZTAtYmEzMy0z NDBjLThjOWMtZTcyYTZiMTdhZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHzocAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKSFwVfn8tWgYtobw1FRrr89KrLnheDAubGCtFis0EhsDlnj5dAlf4d kr/l6DvYvaFXiX365r8NWmShjYWclQRsl9CTkELZvcSv1ov8ShKY+ZSqzt5aXH75 mDispsx9bOASJJvcKbzVLdovYS6MuHt4nTR3P3ug7BieEiOvizcK8EUELTD35eAs s96JLngfhQYxM6S+mZIDz7hCWQX9M3p1sNyn9kYj5loUbzUcXpKF1mOU8bFcj8l7 hBu7wdbCLhFz09Z7cpnQYVCJwxjU632Klq9lPSSAEHGIRBsu0dCUCF2NnnQ5g5Po huwOMaBn6IdJ3Djyyf3iFlHRfGClgHs= -----END CERTIFICATE-----Generated at Tue Mar 24 19:02:07 2026 by rpki-client