$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa File: 39513945-055b-3a6e-9469-b137911850c1.roa (raw, json) Hash identifier: PbNK5ZO7jVQVOcqfSxsPcNfyh6opPxE+rlIlxRLGHpo= Subject key identifier: 0D:93:AF:6C:E3:D9:B0:6C:24:C5:48:5D:79:D9:FE:94:C5:B9:EF:38 Certificate issuer: /CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Certificate serial: 010D0C9F4328584D2A74C475EC30D9EA1106A240 Authority key identifier: CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 398420 IP address blocks: 206.71.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:c4:75:ec:30:d9:ea:11:06:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ff3f61c-87f6-48c2-84e0-26403bc47959 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=14137d3a-fa36-403f-8d63-38fdf8e03841 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a1:6e:c6:a1:d1:5a:75:68:e9:79:11:94:96: d3:9e:90:c7:d5:9a:80:42:9f:d9:1b:14:d0:2e:80: 3e:60:99:ee:c5:4f:58:70:9f:51:7a:04:17:17:eb: 5c:12:59:52:5a:2c:0a:55:be:07:36:ab:f8:a6:9c: ee:4e:2c:42:8e:a1:95:96:20:44:ba:c0:d2:86:d2: 31:a7:c3:d0:11:c7:97:9c:4f:23:fa:1b:4c:db:73: 71:8e:11:0a:86:fe:e2:9a:98:1d:95:38:07:31:69: d3:2f:29:0c:f2:56:da:39:44:74:c3:d9:32:9c:63: b1:e2:8c:36:28:3b:2a:b6:8f:78:e4:6e:71:e3:df: 78:12:2a:92:fb:a3:d6:50:70:69:86:f4:6f:ca:d3: 0f:8c:27:b5:7f:c8:e1:bd:c2:3a:49:23:02:20:25: 6a:08:29:dd:19:3f:05:75:ac:7a:5d:f1:82:64:69: 1f:f3:ec:a4:41:26:ce:5e:72:3f:60:69:51:b5:d2: bf:88:ab:c7:45:9a:07:16:77:4c:4c:87:d0:3c:95: 4f:20:44:48:69:f6:2a:90:1b:15:b0:37:37:20:cd: d6:ab:04:d2:1c:48:f4:9b:d9:59:5d:d9:89:e3:a4: 17:4d:1c:e4:9b:dc:08:08:c0:d9:ab:df:27:e2:8a: fb:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:93:AF:6C:E3:D9:B0:6C:24:C5:48:5D:79:D9:FE:94:C5:B9:EF:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/39513945-055b-3a6e-9469-b137911850c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959/1ff3f61c-87f6-48c2-84e0-26403bc47959.crl X509v3 Authority Key Identifier: keyid:CF:00:FF:8A:8D:1A:73:D7:6A:9B:87:10:5E:7F:75:63:09:5A:13:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1ff3f61c-87f6-48c2-84e0-26403bc47959.cer sbgp-ipAddrBlock: critical IPv4: 206.71.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:64:94:cb:27:0d:8c:88:7b:4f:92:ab:ef:81:e2:27:5a:54: 7a:41:aa:97:01:bc:c4:16:97:fa:4f:04:da:2f:24:83:df:28: 1f:a0:37:0c:bc:2e:b2:01:8b:ab:50:26:3c:04:0d:8a:43:27: 55:2c:19:2f:95:d0:3c:62:35:7f:58:4a:b2:09:fb:6c:0a:ca: 43:4e:b9:c9:d8:64:d9:f2:36:72:b8:7d:a9:fb:92:4f:7e:ff: b3:09:94:fa:c4:f5:0d:e9:82:d3:a1:35:47:b1:6e:01:4c:17: 13:b0:73:f3:fa:1d:b8:bd:04:b9:06:07:5e:0b:59:e3:db:74: c0:9f:8a:3f:1f:81:01:6f:0f:45:a6:f9:2b:73:8c:c0:8d:88: 33:28:56:dd:70:46:a3:99:ee:ab:6d:8b:fa:8e:01:32:1b:6b: 03:1f:9c:5e:38:be:0f:cb:fb:a2:ae:0e:ab:d1:cb:e5:61:3d: 10:1c:62:e1:e2:16:42:81:1e:2a:d1:bc:d5:bf:c5:a4:0f:d5: 37:54:9a:f4:69:22:66:54:ef:fb:cb:0d:46:c6:03:d6:07:f5: 1a:16:b7:47:2f:d3:50:4a:65:23:e1:70:73:8d:6f:82:6d:ac: 69:a7:74:2b:82:ab:07:16:44:74:e8:9a:cd:3c:36:5d:b9:e2: 7e:4d:be:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdMR17DDZ6hEGokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZmM2Y2MWMtODdmNi00OGMyLTg0ZTAtMjY0MDNiYzQ3 OTU5MB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk MTQxMzdkM2EtZmEzNi00MDNmLThkNjMtMzhmZGY4ZTAzODQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKFuxqHRWnVo6XkRlJbTnpDH1ZqAQp/ZGxTQ LoA+YJnuxU9YcJ9RegQXF+tcEllSWiwKVb4HNqv4ppzuTixCjqGVliBEusDShtIx p8PQEceXnE8j+htM23NxjhEKhv7impgdlTgHMWnTLykM8lbaOUR0w9kynGOx4ow2 KDsqto945G5x4994EiqS+6PWUHBphvRvytMPjCe1f8jhvcI6SSMCICVqCCndGT8F dax6XfGCZGkf8+ykQSbOXnI/YGlRtdK/iKvHRZoHFndMTIfQPJVPIERIafYqkBsV sDc3IM3WqwTSHEj0m9lZXdmJ46QXTRzkm9wICMDZq98n4or7OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2Tr2zj2bBsJMVIXXnZ/pTFue84MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYz ZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQwM2JjNDc5NTkvMzk1MTM5NDUtMDU1Yi0z YTZlLTk0NjktYjEzNzkxMTg1MGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWZmM2Y2MWMtODdmNi00OGMyLTg0 ZTAtMjY0MDNiYzQ3OTU5LzFmZjNmNjFjLTg3ZjYtNDhjMi04NGUwLTI2NDAzYmM0 Nzk1OS5jcmwwHwYDVR0jBBgwFoAUzwD/io0ac9dqm4cQXn91YwlaEzIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZmYzZjYxYy04N2Y2LTQ4YzItODRlMC0yNjQw M2JjNDc5NTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzkeQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZklMsnDYyIe0+Sq++B4idaVHpBqpcBvMQWl/pPBNovJIPfKB+gNwy8 LrIBi6tQJjwEDYpDJ1UsGS+V0DxiNX9YSrIJ+2wKykNOucnYZNnyNnK4fan7kk9+ /7MJlPrE9Q3pgtOhNUexbgFMFxOwc/P6Hbi9BLkGB14LWePbdMCfij8fgQFvD0Wm +StzjMCNiDMoVt1wRqOZ7qtti/qOATIbawMfnF44vg/L+6KuDqvRy+VhPRAcYuHi FkKBHirRvNW/xaQP1TdUmvRpImZU7/vLDUbGA9YH9RoWt0cv01BKZSPhcHONb4Jt rGmndCuCqwcWRHToms08Nl254n5Nvms= -----END CERTIFICATE-----Generated at Thu Mar 26 22:14:40 2026 by rpki-client