$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/243a72d3-7d39-3997-817f-f11f9148788a.roa File: 243a72d3-7d39-3997-817f-f11f9148788a.roa (raw, json) Hash identifier: Ri7Diaekp9CclZJJlw8JhVibN+Bi3hQ78Un5NCBwZL4= Subject key identifier: C0:F7:B9:40:E4:50:52:5A:DD:5D:09:CA:72:8D:0B:AC:4A:C2:68:32 Certificate issuer: /CN=6c6981fd-28f4-4238-8558-d3d7498f0af2 Certificate serial: 010D0C9F4328584D23AFC32842D64B5A2B2A9340 Authority key identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/243a72d3-7d39-3997-817f-f11f9148788a.roa Signing time: Thu 12 Mar 2026 02:49:00 +0000 ROA not before: Thu 12 Mar 2026 02:49:00 +0000 ROA not after: Wed 10 Jun 2026 02:49:00 +0000 asID: 6364 IP address blocks: 208.117.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:af:c3:28:42:d6:4b:5a:2b:2a:93:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2 Validity Not Before: Mar 12 02:49:00 2026 GMT Not After : Jun 10 02:49:00 2026 GMT Subject: CN=0b4abc31-ab6c-4136-919c-cd8d93620eb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d6:d0:6a:67:ba:0b:ca:7c:85:8a:85:20:44: 38:28:32:4c:e6:16:94:d2:8b:1d:10:a3:8e:a7:7a: a6:1f:c1:5b:03:5e:7a:54:e8:18:b3:f3:2c:3b:56: 34:23:79:15:29:52:33:3e:a8:ed:d2:d9:a4:70:6a: d9:07:bd:e6:a7:f1:f8:93:0f:dd:39:c6:20:6e:0e: 11:02:71:2d:a7:7d:1b:57:24:30:18:fc:76:a6:91: c0:ae:4f:8a:e6:95:99:3e:0b:70:c4:76:88:55:00: df:f1:5e:bb:df:ce:85:0e:ea:84:d6:87:33:43:ae: 03:22:81:65:a8:9d:3d:08:68:0a:c5:12:57:5e:16: 2b:d7:6e:e5:cc:10:8c:37:ed:86:08:14:45:45:59: fd:0f:1f:d6:7f:b0:be:c2:e7:03:74:2d:1c:79:a6: e4:b8:92:4f:52:29:7c:d3:48:14:b8:c4:73:55:e0: 52:94:14:8d:28:cb:b1:58:69:69:ab:a1:64:d7:8a: b1:9f:5c:21:80:79:26:2c:99:66:9a:d9:70:e2:92: bc:2a:e0:27:6b:50:18:1b:a1:a1:b8:3a:16:2b:6b: 38:9b:f6:27:5c:fa:ec:23:72:ad:8e:ae:fd:0d:78: 42:71:44:da:71:df:ef:aa:76:79:71:63:b0:8f:ab: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F7:B9:40:E4:50:52:5A:DD:5D:09:CA:72:8D:0B:AC:4A:C2:68:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/243a72d3-7d39-3997-817f-f11f9148788a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl X509v3 Authority Key Identifier: keyid:B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer sbgp-ipAddrBlock: critical IPv4: 208.117.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:b5:2f:5e:ad:00:3d:da:96:90:38:6d:6d:e1:d8:d5:cb:8c: 80:16:74:f8:9a:3c:b3:ff:ef:0e:45:69:ed:98:70:d4:34:b1: 4b:90:ec:6a:67:d7:78:47:78:84:9c:5f:33:b4:af:aa:db:00: 73:c2:a9:b2:17:9c:56:29:ca:32:b1:74:27:37:22:b3:bf:25: 56:f3:86:03:3b:54:a1:73:7f:63:32:bf:e8:19:bd:21:16:f7: 3a:6b:f5:48:56:3c:05:c4:d1:cb:3c:cb:52:ab:3a:fa:54:59: 84:0c:00:f6:ce:74:c3:b1:dc:27:2d:1d:cf:00:cb:22:6f:75: db:2f:54:48:10:d1:d5:80:4d:37:60:5a:5a:9d:ea:ff:1b:23: 7f:78:85:44:a0:17:60:3e:85:a8:3d:6f:84:a1:9f:6d:0b:62: 3f:0b:eb:a2:ee:af:76:2d:ba:85:e3:ce:80:fc:52:b5:3b:3e: 55:6e:6a:a0:36:df:ec:33:81:c7:22:17:4a:55:f6:69:6a:9d: ec:9b:8e:67:82:99:db:67:4e:c5:a8:43:5f:cb:61:e6:01:fc: 1e:67:aa:ee:d0:8e:28:a5:38:ef:96:6d:4a:a1:b0:f0:27:30: 7e:64:58:f8:ae:0a:cb:b2:e8:de:b9:2c:f8:f9:8d:24:a8:6f: 90:e5:f4:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jr8MoQtZLWisqk0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM2OTgxZmQtMjhmNC00MjM4LTg1NTgtZDNkNzQ5OGYw YWYyMB4XDTI2MDMxMjAyNDkwMFoXDTI2MDYxMDAyNDkwMFowLzEtMCsGA1UEAxMk MGI0YWJjMzEtYWI2Yy00MTM2LTkxOWMtY2Q4ZDkzNjIwZWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtbQame6C8p8hYqFIEQ4KDJM5haU0osdEKOO p3qmH8FbA156VOgYs/MsO1Y0I3kVKVIzPqjt0tmkcGrZB73mp/H4kw/dOcYgbg4R AnEtp30bVyQwGPx2ppHArk+K5pWZPgtwxHaIVQDf8V67386FDuqE1oczQ64DIoFl qJ09CGgKxRJXXhYr127lzBCMN+2GCBRFRVn9Dx/Wf7C+wucDdC0ceabkuJJPUil8 00gUuMRzVeBSlBSNKMuxWGlpq6Fk14qxn1whgHkmLJlmmtlw4pK8KuAna1AYG6Gh uDoWK2s4m/YnXPrsI3Ktjq79DXhCcUTacd/vqnZ5cWOwj6sVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD3uUDkUFJa3V0JynKNC6xKwmgyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YzY5 ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3NDk4ZjBhZjIvMjQzYTcyZDMtN2QzOS0z OTk3LTgxN2YtZjExZjkxNDg3ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmM2OTgxZmQtMjhmNC00MjM4LTg1 NTgtZDNkNzQ5OGYwYWYyLzZjNjk4MWZkLTI4ZjQtNDIzOC04NTU4LWQzZDc0OThm MGFmMi5jcmwwHwYDVR0jBBgwFoAUuXbnzBCz2yzKlyoV2+00YOqB5TQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YzY5ODFmZC0yOGY0LTQyMzgtODU1OC1kM2Q3 NDk4ZjBhZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0HVeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAq1L16tAD3alpA4bW3h2NXLjIAWdPiaPLP/7w5Fae2YcNQ0sUuQ7Gpn 13hHeIScXzO0r6rbAHPCqbIXnFYpyjKxdCc3IrO/JVbzhgM7VKFzf2Myv+gZvSEW 9zpr9UhWPAXE0cs8y1KrOvpUWYQMAPbOdMOx3CctHc8AyyJvddsvVEgQ0dWATTdg Wlqd6v8bI394hUSgF2A+hag9b4Shn20LYj8L66Lur3YtuoXjzoD8UrU7PlVuaqA2 3+wzgcciF0pV9mlqneybjmeCmdtnTsWoQ1/LYeYB/B5nqu7QjiilOO+WbUqhsPAn MH5kWPiuCsuy6N65LPj5jSSob5Dl9E4= -----END CERTIFICATE-----Generated at Thu Mar 26 23:00:58 2026 by rpki-client