$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa File: 1a06f661-94dc-3859-a9e2-bf46059fef60.roa (raw, json) Hash identifier: QfdJelRgOIKxh5z7IxRCOD22+RqLXOrCoJj022rENW0= Subject key identifier: 28:32:57:BD:59:C2:95:2B:F2:82:D2:93:00:D1:6D:AF:A9:C1:26:81 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584D2D3F7C83762611C2E2BBE180 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 33442 IP address blocks: 157.235.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:7c:83:76:26:11:c2:e2:bb:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=ecb213b6-70a3-451e-a969-d2069e403559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:81:a7:0c:a4:1b:76:c2:19:f4:58:c6:0f: 8d:ae:6d:cb:5d:c4:2f:55:ee:aa:5b:13:93:d1:a9: d2:f9:cd:f4:8a:08:f2:b8:33:59:71:76:79:41:5d: 4a:ca:da:98:0a:cd:5a:90:cd:5e:da:79:2c:f1:80: 11:59:9c:93:6a:09:13:7e:c4:99:cc:c5:4e:78:64: ff:55:60:12:67:ab:b6:ac:9e:17:7b:28:65:62:0a: 03:b0:79:1d:31:de:58:1c:d6:55:70:eb:ed:7a:65: 71:be:1f:ac:17:d9:00:a9:df:32:4d:30:e5:00:67: 13:2c:60:3f:0d:e2:74:28:fc:95:23:c9:44:72:40: bd:4b:c4:06:14:7f:c3:f3:c6:09:04:5f:70:c9:80: b8:2d:fc:0c:bf:4e:fc:b0:04:60:64:36:62:90:8d: e4:30:2d:f8:72:98:d4:03:4a:f7:d4:d7:0a:42:db: cb:54:d6:bb:77:25:d4:28:a3:8a:f8:b9:d0:93:48: bb:ff:13:2f:09:68:08:d8:bc:a6:40:3e:1d:f2:bd: ca:37:db:c1:05:c0:42:61:b4:05:36:92:f2:cf:c6: 74:64:4d:9f:cd:80:e1:68:08:fb:8a:b8:82:bc:2a: 88:a8:72:a3:7d:0b:e4:b7:f0:35:2b:47:1b:ef:4d: ab:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:32:57:BD:59:C2:95:2B:F2:82:D2:93:00:D1:6D:AF:A9:C1:26:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/1a06f661-94dc-3859-a9e2-bf46059fef60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:1e:63:e0:6f:b9:f0:bb:4d:f2:12:6b:d5:33:68:e4:b9:87: 43:04:be:8d:13:64:02:09:85:13:5a:81:cd:09:ae:28:9e:aa: 6e:ea:70:d2:1c:cc:19:51:bd:37:2d:14:dd:c0:12:9f:24:1a: 58:ca:1d:7d:da:13:3d:c5:09:11:6c:90:b1:be:8f:fb:77:65: bd:b7:80:4b:9c:6b:83:6f:6b:3c:22:db:1b:59:38:98:6f:0e: ff:0f:d5:cf:8a:e4:25:53:5f:b1:ba:41:16:04:c2:71:53:13: 76:d7:9b:51:19:0a:bc:7b:91:f9:fe:fe:18:4f:c5:01:f7:2b: 3d:2a:cb:1b:b1:b4:64:d0:64:5c:63:2b:1f:27:88:f4:e2:ab: e2:13:d6:43:70:8f:1f:ea:c1:49:99:3c:50:40:84:5c:d4:22: 16:6a:fe:98:e1:a1:d0:a5:76:84:91:42:9f:bf:1d:38:63:ed: 99:4e:62:ae:5f:87:cc:74:b8:5a:03:43:e9:0c:9e:ef:e9:6e: fe:6b:8f:75:7a:b6:48:c1:41:95:51:e5:6a:e2:20:45:68:13: de:ae:72:06:43:88:f9:0f:51:e1:38:51:2a:16:fe:d2:2b:bb: 78:aa:63:47:92:75:7f:78:7b:bc:b9:d9:67:ff:10:4c:12:7e: d1:4c:06:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3yDdiYRwuK74YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk ZWNiMjEzYjYtNzBhMy00NTFlLWE5NjktZDIwNjllNDAzNTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG2BpwykG3bCGfRYxg+Nrm3LXcQvVe6qWxOT 0anS+c30igjyuDNZcXZ5QV1KytqYCs1akM1e2nks8YARWZyTagkTfsSZzMVOeGT/ VWASZ6u2rJ4XeyhlYgoDsHkdMd5YHNZVcOvtemVxvh+sF9kAqd8yTTDlAGcTLGA/ DeJ0KPyVI8lEckC9S8QGFH/D88YJBF9wyYC4LfwMv078sARgZDZikI3kMC34cpjU A0r31NcKQtvLVNa7dyXUKKOK+LnQk0i7/xMvCWgI2LymQD4d8r3KN9vBBcBCYbQF NpLyz8Z0ZE2fzYDhaAj7iriCvCqIqHKjfQvkt/A1K0cb702r+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgyV71ZwpUr8oLSkwDRba+pwSaBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMWEwNmY2NjEtOTRkYy0z ODU5LWE5ZTItYmY0NjA1OWZlZjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkeY+BvufC7TfISa9UzaOS5h0MEvo0TZAIJhRNagc0Jriieqm7qcNIc zBlRvTctFN3AEp8kGljKHX3aEz3FCRFskLG+j/t3Zb23gEuca4Nvazwi2xtZOJhv Dv8P1c+K5CVTX7G6QRYEwnFTE3bXm1EZCrx7kfn+/hhPxQH3Kz0qyxuxtGTQZFxj Kx8niPTiq+IT1kNwjx/qwUmZPFBAhFzUIhZq/pjhodCldoSRQp+/HThj7ZlOYq5f h8x0uFoDQ+kMnu/pbv5rj3V6tkjBQZVR5WriIEVoE96ucgZDiPkPUeE4USoW/tIr u3iqY0eSdX94e7y52Wf/EEwSftFMBlU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:34:16 2026 by rpki-client