$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa File: 1c21a477-f490-34ce-8019-0e5a15944ec6.roa (raw, json) Hash identifier: PMCr85Pfu+q4WukojYu6X4PYmSmJ3BSCxL8wzVrvEh0= Subject key identifier: FA:F1:49:AD:1D:B9:ED:B6:CE:A6:CB:B2:75:20:02:1E:85:34:36:EA Certificate issuer: /CN=06795d2e-ca43-4b22-8995-31898670bf14 Certificate serial: 010D0C9F4328584D75D5406530DC037327736580 Authority key identifier: C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 396982 IP address blocks: 204.10.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:40:65:30:dc:03:73:27:73:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06795d2e-ca43-4b22-8995-31898670bf14 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=c80a9f1e-8dc6-47e1-890b-ea6c7db472fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7a:b6:80:88:4f:15:81:66:b9:ba:71:c5:01: 1c:f9:b9:12:9e:21:b0:8c:3c:6f:29:27:03:d2:a8: c4:18:38:c3:31:27:e5:00:53:13:ac:44:0a:db:85: c2:c8:a4:1f:aa:37:df:5a:f1:fc:1b:a9:5b:84:c6: 96:df:14:df:a8:a9:3a:64:7e:47:b3:32:9d:aa:0f: e3:40:f9:66:6f:be:fc:43:30:73:1d:f3:2f:63:5f: 4c:fe:79:f9:d9:56:a2:f7:42:5e:e9:15:8d:dc:5e: 11:86:20:de:8a:ec:93:d4:8b:98:f7:60:43:22:0c: c9:7b:b2:55:d3:ec:3f:e4:3b:52:96:f3:7f:6c:b6: e8:f6:f4:30:50:1f:78:fe:dc:88:90:68:70:3d:4b: 78:ed:9a:ac:89:4e:8a:e3:20:44:b9:fb:4f:ea:b6: 79:24:37:8b:01:d5:ed:89:eb:07:02:88:c5:24:7b: 11:87:20:a0:d8:b7:3c:e6:85:bc:10:22:d3:9d:fa: 5a:25:8d:82:5a:03:0e:0f:2b:51:80:23:90:4c:2e: 94:b3:40:98:f9:ed:cb:1d:01:2d:a1:9b:c5:81:05: ce:0d:29:ca:37:8b:c6:f8:b8:5b:f9:83:98:9f:d3: bb:66:ca:17:6d:2a:05:12:05:15:ab:9c:b9:a2:6c: 3a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F1:49:AD:1D:B9:ED:B6:CE:A6:CB:B2:75:20:02:1E:85:34:36:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/1c21a477-f490-34ce-8019-0e5a15944ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14/06795d2e-ca43-4b22-8995-31898670bf14.crl X509v3 Authority Key Identifier: keyid:C8:8F:F3:C8:20:79:E3:65:D4:EF:EB:46:00:40:5B:2C:47:62:FE:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/06795d2e-ca43-4b22-8995-31898670bf14.cer sbgp-ipAddrBlock: critical IPv4: 204.10.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:89:7c:fb:46:0c:8d:ab:c0:3c:4a:5e:71:eb:13:8e:54:f4: b7:93:cf:3d:ac:e2:6d:d1:c1:8d:cb:3d:ad:7d:65:64:ad:52: 87:eb:0e:55:c5:ca:5e:7d:0b:af:a0:92:db:d5:a5:0d:06:44: 2d:6b:39:1e:65:22:9f:fe:cd:4f:01:23:c8:67:9f:49:7d:69: 1b:c1:2a:2b:40:5c:d3:ae:b4:7b:d3:ed:24:9f:23:90:64:a0: ed:46:83:3e:54:7d:e0:bb:c5:21:73:e0:b8:3b:0a:a0:db:ad: 59:81:b0:58:39:7c:3c:4b:e5:8e:10:ef:7c:07:b1:9f:06:ea: c1:12:c5:4a:f0:26:8f:d6:77:38:5e:54:72:e5:a3:6f:a9:8a: b8:e5:eb:c2:46:e5:32:e9:65:ac:04:d5:c1:0d:8c:cf:ca:19: ef:d5:31:46:31:1d:93:16:87:1f:4a:7b:6b:d7:10:25:f3:ac: 4b:03:63:4b:a1:ad:40:ca:68:ad:94:10:1c:3b:07:b2:86:4d: e7:83:25:94:cd:c1:b0:bd:16:db:8e:f6:41:ba:c1:68:49:5c: 7d:5b:f7:5a:1f:02:25:04:0c:e5:70:79:d7:6c:62:34:1c:37: 95:26:e4:e9:9e:b2:be:01:c1:c4:e2:fc:af:70:af:64:c0:93: ed:6d:28:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE111UBlMNwDcydzZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDY3OTVkMmUtY2E0My00YjIyLTg5OTUtMzE4OTg2NzBi ZjE0MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YzgwYTlmMWUtOGRjNi00N2UxLTg5MGItZWE2YzdkYjQ3MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXq2gIhPFYFmubpxxQEc+bkSniGwjDxvKScD 0qjEGDjDMSflAFMTrEQK24XCyKQfqjffWvH8G6lbhMaW3xTfqKk6ZH5HszKdqg/j QPlmb778QzBzHfMvY19M/nn52Vai90Je6RWN3F4RhiDeiuyT1IuY92BDIgzJe7JV 0+w/5DtSlvN/bLbo9vQwUB94/tyIkGhwPUt47ZqsiU6K4yBEuftP6rZ5JDeLAdXt iesHAojFJHsRhyCg2Lc85oW8ECLTnfpaJY2CWgMODytRgCOQTC6Us0CY+e3LHQEt oZvFgQXODSnKN4vG+Lhb+YOYn9O7ZsoXbSoFEgUVq5y5omw6dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrxSa0due22zqbLsnUgAh6FNDbqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5 NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5ODY3MGJmMTQvMWMyMWE0NzctZjQ5MC0z NGNlLTgwMTktMGU1YTE1OTQ0ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDY3OTVkMmUtY2E0My00YjIyLTg5 OTUtMzE4OTg2NzBiZjE0LzA2Nzk1ZDJlLWNhNDMtNGIyMi04OTk1LTMxODk4Njcw YmYxNC5jcmwwHwYDVR0jBBgwFoAUyI/zyCB542XU7+tGAEBbLEdi/iMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wNjc5NWQyZS1jYTQzLTRiMjItODk5NS0zMTg5 ODY3MGJmMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzAo0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2JfPtGDI2rwDxKXnHrE45U9LeTzz2s4m3RwY3LPa19ZWStUofrDlXF yl59C6+gktvVpQ0GRC1rOR5lIp/+zU8BI8hnn0l9aRvBKitAXNOutHvT7SSfI5Bk oO1Ggz5UfeC7xSFz4Lg7CqDbrVmBsFg5fDxL5Y4Q73wHsZ8G6sESxUrwJo/Wdzhe VHLlo2+pirjl68JG5TLpZawE1cENjM/KGe/VMUYxHZMWhx9Ke2vXECXzrEsDY0uh rUDKaK2UEBw7B7KGTeeDJZTNwbC9FtuO9kG6wWhJXH1b91ofAiUEDOVweddsYjQc N5Um5Omesr4BwcTi/K9wr2TAk+1tKIA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:48:31 2026 by rpki-client