$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa File: ffb3da79-e26f-3955-a998-a0f724c9166d.roa (raw, json) Hash identifier: 67/xO3HcOgehVGhloCDT1czxwa2NyInRPqoX1VAogDA= Subject key identifier: 48:2C:5E:CB:91:3A:7E:27:57:41:CB:CE:2A:23:1C:F0:3D:36:8C:D9 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584D143D472285A951E31578EAAC Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 35953 IP address blocks: 204.2.154.192/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:47:22:85:a9:51:e3:15:78:ea:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=bb31b820-f9ff-4351-a851-4e559d5a8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bd:6e:c7:31:b6:6a:1b:be:e2:13:b2:bf:99: cd:f4:62:4c:26:9e:ae:10:94:e1:50:22:15:2a:22: 55:7c:96:e4:ca:e0:64:75:24:ac:70:a2:28:62:54: 14:42:70:60:86:69:4d:8c:41:ac:e0:6a:09:b1:39: d1:6f:35:cc:d6:27:dc:e5:9f:aa:ae:8c:2d:d7:cb: c4:12:8d:28:f4:a0:2d:12:cc:72:47:39:30:0f:7b: c7:77:91:36:de:31:54:1a:9d:17:09:b4:d4:e9:6d: 1d:92:28:9f:c4:2f:87:ab:79:8a:7e:4a:84:a3:26: 87:a6:7a:3b:19:3c:61:2a:05:0f:fb:aa:f4:37:70: 3b:2a:2d:7d:54:e0:dd:22:90:81:ce:bd:a5:ed:50: eb:9a:cc:3d:94:2f:67:ae:54:a7:2f:2c:76:d3:ca: 41:c7:63:8e:a0:3c:84:a0:fe:09:ad:cc:12:71:56: 2f:17:00:23:9a:51:cb:67:3a:d8:fe:79:a4:b9:57: 6d:03:dd:5b:87:ed:9f:f9:95:4d:4d:4c:b4:8f:e9: 79:b7:27:ea:75:8e:46:2e:82:bb:7d:ce:5c:70:1e: 8d:6b:90:3d:9b:18:c2:82:97:01:57:f9:71:10:44: 60:aa:51:c3:94:ce:f6:bd:16:c5:51:c0:93:5c:9a: 6b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:2C:5E:CB:91:3A:7E:27:57:41:CB:CE:2A:23:1C:F0:3D:36:8C:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/ffb3da79-e26f-3955-a998-a0f724c9166d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 204.2.154.192/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:05:ef:fd:d5:46:63:0b:4a:a4:68:a2:d5:71:fe:4f:73:4e: c8:f8:93:b6:86:a5:b3:5b:e8:19:d1:d7:dd:f9:fc:25:b6:81: 45:f3:92:53:c8:87:90:d0:d3:48:b5:1c:98:0b:95:56:b1:70: bf:09:8c:4c:95:62:49:8f:19:88:2a:6a:d7:8f:d3:3f:6f:22: c3:0a:f2:70:1e:3a:a8:a4:ef:46:35:aa:11:97:8a:96:d1:ab: a4:b9:04:78:79:7a:59:bc:58:52:2e:9c:02:95:06:d1:15:14: 2c:d5:6b:8c:36:da:c6:f8:50:d6:0a:21:06:c3:d5:58:c9:b8: 63:f8:18:91:94:7c:67:da:a5:e1:44:e7:9d:38:87:79:0e:4f: d0:51:0e:80:fb:ca:1f:71:de:35:74:70:21:1f:93:90:02:94: 86:d3:b8:ff:61:5c:2f:5a:50:ae:34:14:41:a1:1b:9d:c2:ca: 2c:f1:55:e2:15:45:77:88:eb:f4:cf:2d:67:ea:1e:36:c4:b5: 3b:59:f3:df:31:5c:b3:c5:e5:f9:fe:46:67:1e:ac:8b:55:4e: 45:c2:4f:4b:bf:0b:d0:0d:ec:fc:7f:9f:1d:29:d1:22:cf:92: f8:33:92:68:2b:69:31:0e:24:28:6b:58:b7:36:18:af:5a:1a: fa:17:9b:5f -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE0UPUcihalR4xV46qwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YmIzMWI4MjAtZjlmZi00MzUxLWE4NTEtNGU1NTlkNWE4YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr71uxzG2ahu+4hOyv5nN9GJMJp6uEJThUCIV KiJVfJbkyuBkdSSscKIoYlQUQnBghmlNjEGs4GoJsTnRbzXM1ifc5Z+qrowt18vE Eo0o9KAtEsxyRzkwD3vHd5E23jFUGp0XCbTU6W0dkiifxC+Hq3mKfkqEoyaHpno7 GTxhKgUP+6r0N3A7Ki19VODdIpCBzr2l7VDrmsw9lC9nrlSnLyx208pBx2OOoDyE oP4JrcwScVYvFwAjmlHLZzrY/nmkuVdtA91bh+2f+ZVNTUy0j+l5tyfqdY5GLoK7 fc5ccB6Na5A9mxjCgpcBV/lxEERgqlHDlM72vRbFUcCTXJprEwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFEgsXsuROn4nV0HLziojHPA9NozZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZmZiM2RhNzktZTI2Zi0z OTU1LWE5OTgtYTBmNzI0YzkxNjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUEzAKawDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQBABe/91UZjC0qkaKLVcf5Pc07I+JO2hqWzW+gZ0dfd+fwltoFF85JT yIeQ0NNItRyYC5VWsXC/CYxMlWJJjxmIKmrXj9M/byLDCvJwHjqopO9GNaoRl4qW 0aukuQR4eXpZvFhSLpwClQbRFRQs1WuMNtrG+FDWCiEGw9VYybhj+BiRlHxn2qXh ROedOId5Dk/QUQ6A+8ofcd41dHAhH5OQApSG07j/YVwvWlCuNBRBoRudwsos8VXi FUV3iOv0zy1n6h42xLU7WfPfMVyzxeX5/kZnHqyLVU5Fwk9LvwvQDez8f58dKdEi z5L4M5JoK2kxDiQoa1i3NhivWhr6F5tf -----END CERTIFICATE-----Generated at Thu Mar 26 05:47:59 2026 by rpki-client