$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/871e5f9d-158f-36ed-84f6-846d122aeac5.roa File: 871e5f9d-158f-36ed-84f6-846d122aeac5.roa (raw, json) Hash identifier: qSBDqwFjcfWD7THao+MQVmHqBMAxHBtE/4NC2fzDNOY= Subject key identifier: ED:5B:7E:A8:4C:A6:C3:A6:B4:A6:97:F9:D3:66:B6:5B:F0:46:49:D9 Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Certificate serial: 010D0C9F4328584D3F64DCC2E2CE71D4D051E200 Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/871e5f9d-158f-36ed-84f6-846d122aeac5.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 27735 IP address blocks: 206.48.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:dc:c2:e2:ce:71:d4:d0:51:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=524b6f15-3663-4c0a-b1f8-fd81a1b6ba2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:87:b0:fe:1d:8f:f7:58:14:6a:af:76:30:65: f1:87:da:fb:31:c9:42:ce:ee:23:7e:22:cb:93:f6: 09:34:31:16:11:a7:6e:ee:fc:4b:24:d9:a7:57:78: ca:10:a0:6c:67:94:26:f1:42:94:f4:ad:14:37:fa: 00:7d:0e:cc:d7:4c:44:4a:9b:38:fe:ca:9b:b3:18: 41:5b:f5:c5:ad:72:bc:3c:13:8d:61:51:7f:01:f8: ce:8f:d3:d9:8c:a0:c1:9c:d2:ba:64:6e:1c:be:dd: 7a:bd:30:69:ba:d5:9a:c2:44:ec:65:9d:e0:b9:96: da:e3:0c:8a:50:26:e6:1b:6b:ac:4b:1e:0a:e8:69: 7f:94:12:46:4a:26:11:43:db:94:25:d9:97:66:c9: 86:19:61:b2:6e:c2:55:da:0c:ac:0f:83:5f:de:ff: 34:46:e8:a8:ba:09:d7:c7:90:e6:f6:1c:20:8e:05: 43:b3:39:e8:28:c8:d0:9d:6b:01:7d:68:ae:e0:5b: 2c:c5:7e:21:23:59:1d:47:49:95:5a:c9:80:bd:9f: 9f:53:c1:a7:e4:50:7f:0a:fd:ce:b0:00:09:10:50: d3:fc:83:94:62:6b:7b:19:a8:7d:5a:5b:f4:21:35: 0a:ae:1e:69:a8:ae:3e:43:85:10:7f:0b:40:60:26: d7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:5B:7E:A8:4C:A6:C3:A6:B4:A6:97:F9:D3:66:B6:5B:F0:46:49:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/871e5f9d-158f-36ed-84f6-846d122aeac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl X509v3 Authority Key Identifier: keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer sbgp-ipAddrBlock: critical IPv4: 206.48.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:ed:39:e3:93:57:48:b5:60:16:51:8d:04:2c:96:80:7d:f9: 13:fe:b1:07:8d:6a:c9:8f:38:74:6d:b3:92:b1:f7:13:f2:e0: da:58:34:c6:25:af:e8:c3:d2:11:61:15:3a:6b:36:9a:80:f0: 29:1f:41:13:3e:9d:a7:77:50:94:6a:73:ea:06:6a:50:93:c8: 60:d5:91:7b:4f:d9:9f:8f:09:ac:a5:06:91:2c:c0:c8:31:a5: 5d:1f:67:e0:1b:57:8c:81:7c:a1:00:52:07:20:dc:6e:bb:8b: 3b:b7:77:79:92:ed:c8:c4:38:09:79:0f:84:6c:d1:ae:7f:2b: 43:2d:83:40:ad:6d:31:72:ed:38:39:7d:57:6f:1e:12:ae:bc: 2a:b6:d2:3b:4d:94:c6:72:37:11:fd:9d:03:1f:21:4e:ce:e9: 52:b1:9a:85:ed:e4:c9:ed:4a:70:f7:f2:8a:dc:78:61:74:38: cb:d9:5b:91:84:4f:d5:f3:6d:e6:2b:1f:73:ad:cb:c7:29:90: 19:ed:fd:f7:40:08:75:fd:ac:bc:2f:b2:b5:d1:38:d4:c2:d5: 1f:9c:68:29:20:59:02:5b:67:b5:91:01:9e:52:cd:5d:32:c5: 3a:38:5b:17:45:b9:a3:7d:70:34:5c:77:b6:c4:c2:ce:70:14: 5e:ce:a5:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNzC4s5x1NBR4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjI0MGQ5MDItN2JhMy00YWVjLWI2NjMtNDcxZjBmYWJm ZTM3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NTI0YjZmMTUtMzY2My00YzBhLWIxZjgtZmQ4MWExYjZiYTJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoew/h2P91gUaq92MGXxh9r7MclCzu4jfiLL k/YJNDEWEadu7vxLJNmnV3jKEKBsZ5Qm8UKU9K0UN/oAfQ7M10xESps4/sqbsxhB W/XFrXK8PBONYVF/AfjOj9PZjKDBnNK6ZG4cvt16vTBputWawkTsZZ3guZba4wyK UCbmG2usSx4K6Gl/lBJGSiYRQ9uUJdmXZsmGGWGybsJV2gysD4Nf3v80RuiougnX x5Dm9hwgjgVDsznoKMjQnWsBfWiu4FssxX4hI1kdR0mVWsmAvZ+fU8Gn5FB/Cv3O sAAJEFDT/IOUYmt7Gah9Wlv0ITUKrh5pqK4+Q4UQfwtAYCbXUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1bfqhMpsOmtKaX+dNmtlvwRknZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQw ZDkwMi03YmEzLTRhZWMtYjY2My00NzFmMGZhYmZlMzcvODcxZTVmOWQtMTU4Zi0z NmVkLTg0ZjYtODQ2ZDEyMmFlYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjI0MGQ5MDItN2JhMy00YWVjLWI2 NjMtNDcxZjBmYWJmZTM3L2YyNDBkOTAyLTdiYTMtNGFlYy1iNjYzLTQ3MWYwZmFi ZmUzNy5jcmwwHwYDVR0jBBgwFoAU5FfVKAwJnCp+qKWAsW/2sLpM8R4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9mMjQwZDkwMi03YmEzLTRhZWMtYjY2My00NzFm MGZhYmZlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzjCLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALftOeOTV0i1YBZRjQQsloB9+RP+sQeNasmPOHRts5Kx9xPy4NpYNMYl r+jD0hFhFTprNpqA8CkfQRM+nad3UJRqc+oGalCTyGDVkXtP2Z+PCaylBpEswMgx pV0fZ+AbV4yBfKEAUgcg3G67izu3d3mS7cjEOAl5D4Rs0a5/K0Mtg0CtbTFy7Tg5 fVdvHhKuvCq20jtNlMZyNxH9nQMfIU7O6VKxmoXt5MntSnD38orceGF0OMvZW5GE T9XzbeYrH3Oty8cpkBnt/fdACHX9rLwvsrXRONTC1R+caCkgWQJbZ7WRAZ5SzV0y xTo4WxdFuaN9cDRcd7bEws5wFF7OpVQ= -----END CERTIFICATE-----Generated at Thu Mar 26 06:05:15 2026 by rpki-client