$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa File: 97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa (raw, json) Hash identifier: 6Af7jtMiDfOciAgYHNyMmdJ9d/E5624O10OiDoLcYQI= Subject key identifier: 8F:D8:F5:A5:31:94:75:B4:DD:4E:54:70:29:31:0F:97:A2:12:AE:9A Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Certificate serial: 010D0C9F4328584D3F64E683D1BDAE2F925296C0 Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 394346 IP address blocks: 206.220.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:e6:83:d1:bd:ae:2f:92:52:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=f33a9d58-d396-492c-995e-2d8faf4fd441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:f8:f7:5c:73:84:5f:3c:49:d8:26:af:3e:6a: 5a:39:28:9b:2d:c2:4d:eb:4a:03:b7:6c:5b:c4:8c: cb:1d:7a:4a:94:bf:79:1d:a1:ac:0a:94:6b:0a:ae: 3c:78:27:45:79:8c:14:dc:2f:02:1c:2d:ef:ed:83: 22:65:11:d6:26:15:37:be:9e:33:1d:55:5a:cb:78: 1f:37:78:f2:b3:e9:29:51:a0:f5:05:ed:33:c7:12: 06:19:6e:d7:ce:53:cd:de:16:3e:ca:4b:b0:82:82: 15:2b:be:f2:5e:b8:10:e7:71:9c:de:de:47:24:b0: 3d:ad:75:3d:24:6c:e7:b0:55:62:26:46:35:02:34: be:08:22:d6:81:09:78:fa:e4:55:54:bd:97:8c:9e: a3:da:b7:f2:1b:f4:e0:65:17:b3:7e:44:f1:4a:3d: 31:6d:93:0a:f5:9a:6f:f9:97:1f:df:4c:ed:15:d9: 3f:1f:0f:42:d0:5b:e8:26:ae:7a:bb:23:a1:e9:65: 2c:c2:26:2e:16:bd:e2:39:19:e2:36:a2:51:a0:f5: 67:18:6f:0d:cf:66:f6:cb:85:e9:fb:09:cc:13:ba: 0f:e6:e7:02:71:12:b7:6c:6e:6a:5b:f6:09:76:08: 2c:66:c8:62:3b:3d:73:8b:1b:3e:3f:0c:f7:29:b8: c7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:F5:A5:31:94:75:B4:DD:4E:54:70:29:31:0F:97:A2:12:AE:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/97bd35f0-5fa4-33c5-9b80-c056b4d88f91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl X509v3 Authority Key Identifier: keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer sbgp-ipAddrBlock: critical IPv4: 206.220.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:88:3a:a9:23:72:86:ac:30:25:78:3d:6b:53:25:bc:57:45: 0a:a2:cb:20:59:14:fe:f2:27:d5:30:0d:a3:5a:ee:66:f2:3b: 2a:25:2c:88:75:55:38:53:29:27:c2:f9:04:60:91:b5:39:1f: 59:7b:98:18:be:60:b1:df:68:33:a3:3c:c8:15:6f:55:72:c9: 89:76:6d:ab:66:89:18:a1:93:cc:46:2c:62:5e:85:11:18:ce: 71:f2:b1:02:f2:e8:be:64:b9:8b:4a:07:b2:7f:69:7b:63:c2: 56:8a:6b:ca:fb:cf:43:b0:f8:27:79:5a:5d:a3:95:e4:d5:b6: 84:9a:6a:e1:4d:b1:8a:53:fe:ec:11:74:29:2f:03:eb:fb:22: 44:fc:02:78:b0:8f:7e:fe:ee:42:dd:e0:85:3a:35:26:fc:8a: 06:1c:ad:b4:12:f0:4a:c1:1a:dd:ba:42:e2:4f:d2:ca:d6:a0: 84:83:24:f1:0c:7a:77:e1:25:79:82:ce:46:4d:de:10:91:50: e7:d9:70:e7:54:a7:52:bb:b6:1f:07:e7:e2:90:31:69:5f:54: 69:f2:80:6e:2d:f5:b2:34:5a:f2:10:43:72:b1:1b:9b:bf:30: 2e:82:1c:ad:7a:27:3b:50:b2:62:63:b7:45:dd:d0:9a:80:98: 68:cc:c0:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZOaD0b2uL5JSlsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3MGMzYTEtNmFkMC00Y2RkLWFhZDctNjEzMzgxZjBl NjBkMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZjMzYTlkNTgtZDM5Ni00OTJjLTk5NWUtMmQ4ZmFmNGZkNDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8/j3XHOEXzxJ2CavPmpaOSibLcJN60oDt2xb xIzLHXpKlL95HaGsCpRrCq48eCdFeYwU3C8CHC3v7YMiZRHWJhU3vp4zHVVay3gf N3jys+kpUaD1Be0zxxIGGW7XzlPN3hY+ykuwgoIVK77yXrgQ53Gc3t5HJLA9rXU9 JGznsFViJkY1AjS+CCLWgQl4+uRVVL2XjJ6j2rfyG/TgZRezfkTxSj0xbZMK9Zpv +Zcf30ztFdk/Hw9C0FvoJq56uyOh6WUswiYuFr3iORniNqJRoPVnGG8Nz2b2y4Xp +wnME7oP5ucCcRK3bG5qW/YJdggsZshiOz1zixs+Pwz3KbjHWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/Y9aUxlHW03U5UcCkxD5eiEq6aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcw YzNhMS02YWQwLTRjZGQtYWFkNy02MTMzODFmMGU2MGQvOTdiZDM1ZjAtNWZhNC0z M2M1LTliODAtYzA1NmI0ZDg4ZjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZGQ3MGMzYTEtNmFkMC00Y2RkLWFh ZDctNjEzMzgxZjBlNjBkL2RkNzBjM2ExLTZhZDAtNGNkZC1hYWQ3LTYxMzM4MWYw ZTYwZC5jcmwwHwYDVR0jBBgwFoAUMxtcGs7Weta/gi+QLvpGHMFRW2owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kZDcwYzNhMS02YWQwLTRjZGQtYWFkNy02MTMz ODFmMGU2MGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzty4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKIOqkjcoasMCV4PWtTJbxXRQqiyyBZFP7yJ9UwDaNa7mbyOyolLIh1 VThTKSfC+QRgkbU5H1l7mBi+YLHfaDOjPMgVb1VyyYl2batmiRihk8xGLGJehREY znHysQLy6L5kuYtKB7J/aXtjwlaKa8r7z0Ow+Cd5Wl2jleTVtoSaauFNsYpT/uwR dCkvA+v7IkT8Aniwj37+7kLd4IU6NSb8igYcrbQS8ErBGt26QuJP0srWoISDJPEM enfhJXmCzkZN3hCRUOfZcOdUp1K7th8H5+KQMWlfVGnygG4t9bI0WvIQQ3KxG5u/ MC6CHK16JztQsmJjt0Xd0JqAmGjMwM0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:50 2026 by rpki-client