$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa File: 828ae03b-a727-34a7-b93a-e90b4f4a563b.roa (raw, json) Hash identifier: ZnD+ToOlsH14uM26V6CGdsyE13Z3IxiiVqvEbK9gRao= Subject key identifier: 51:87:A6:BE:D4:2F:64:C5:0C:7B:5D:71:E1:D3:F1:DF:25:E2:23:2B Certificate issuer: /CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Certificate serial: 010D0C9F4328584D0EA7AA2A9449CC9EAE6B9B00 Authority key identifier: A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 142064 IP address blocks: 206.168.133.0/24 maxlen: 24 2602:fbd9:100::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:aa:2a:94:49:cc:9e:ae:6b:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c7a9179-b71c-4608-b6ad-37c021ece676 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=86bbf9fa-c126-49f2-a2d3-ec5e46478dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:63:53:83:9b:eb:28:26:1b:a1:06:a1:85: e3:e3:fe:3a:a0:38:3a:b1:7e:9d:94:e0:55:bc:82: 2d:b4:56:b8:c8:fe:92:a5:c1:6d:68:9b:fa:dd:e5: ae:bf:97:77:fd:78:27:57:97:fc:14:46:d2:aa:c8: 95:88:f7:6c:e4:1c:70:4a:bc:10:d2:e5:ff:dc:2c: e5:a0:54:07:12:7b:19:3e:0d:b1:ac:e8:46:1d:3a: 15:38:48:63:c2:e5:4d:5e:1b:6f:f0:96:b9:34:08: a1:4c:d1:08:26:b5:9e:cf:f6:e9:3b:e0:10:cb:a0: dc:37:ab:21:16:a7:c6:ce:a2:62:1e:e2:2b:db:f1: 99:a4:99:a7:cf:9c:38:bf:ba:a6:8d:23:60:b0:42: 47:e1:b6:7e:3a:11:fb:c7:77:7c:e4:d5:d2:44:ad: c4:49:0c:44:7c:41:5f:fc:e5:14:25:dc:f0:eb:61: 32:d1:e5:e9:b9:09:2d:cb:e7:0a:70:a9:bb:cb:84: dc:dc:19:da:dc:91:dc:cc:c2:cc:a2:57:d2:a0:06: 3e:f5:9a:3c:96:eb:e8:d2:0a:31:25:fa:94:e7:14: f0:5b:2e:ec:81:78:40:d2:cf:b7:95:52:5b:0d:a1: 81:bb:2a:ba:11:1d:90:bc:03:9d:6d:d2:0a:b2:e4: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:87:A6:BE:D4:2F:64:C5:0C:7B:5D:71:E1:D3:F1:DF:25:E2:23:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/828ae03b-a727-34a7-b93a-e90b4f4a563b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676/6c7a9179-b71c-4608-b6ad-37c021ece676.crl X509v3 Authority Key Identifier: keyid:A4:AA:05:6E:EC:2E:BF:7A:43:54:F8:C6:CF:73:36:6C:C3:8D:26:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6c7a9179-b71c-4608-b6ad-37c021ece676.cer sbgp-ipAddrBlock: critical IPv4: 206.168.133.0/24 IPv6: 2602:fbd9:100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:80:43:f4:61:d2:69:3e:68:0b:44:97:b5:52:d6:bb:ff:08: 16:d9:60:02:0e:1a:96:bb:d6:b0:00:c4:a6:3c:c5:54:05:47: 57:d8:9c:28:7c:b2:fb:d5:47:5f:bb:e6:02:d7:8b:9f:d6:21: 37:d4:c8:d6:e9:f9:cc:23:cd:f1:23:ea:57:37:6e:3d:4a:42: c4:ab:54:c7:27:49:0f:ef:b9:85:22:21:dc:56:d4:8c:a6:dd: af:3d:b1:fc:27:c4:38:96:7f:89:62:21:e9:a1:66:00:ac:3e: c4:56:10:1f:fe:22:dc:31:99:7f:ea:22:5c:9b:c3:d3:60:d4: 1d:ac:10:0c:f5:b7:2f:b9:d0:50:b9:5f:ca:c1:f0:01:bb:cc: 7c:c6:be:36:7e:5d:3f:0d:07:c5:c9:52:0d:24:9a:c1:3d:8a: 1f:45:d2:e6:b3:e9:20:e3:9e:ab:47:79:dc:23:b2:c4:c2:50: 48:0d:45:aa:78:ee:5e:2f:0b:85:61:13:bc:44:43:2a:23:7e: 25:ea:3c:35:3c:25:64:57:f8:88:2f:28:b3:d4:9a:23:61:d5: 8c:b3:d3:e5:45:25:4b:0b:4e:ea:74:54:b8:86:0e:37:ae:97: 3f:8c:15:b5:05:d9:92:5a:cc:66:ab:e7:d8:5b:ae:06:77:a6: 7a:a2:e2:bc -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE0Op6oqlEnMnq5rmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmM3YTkxNzktYjcxYy00NjA4LWI2YWQtMzdjMDIxZWNl Njc2MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk ODZiYmY5ZmEtYzEyNi00OWYyLWEyZDMtZWM1ZTQ2NDc4ZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxNjU4Ob6ygmG6EGoYXj4/46oDg6sX6dlOBV vIIttFa4yP6SpcFtaJv63eWuv5d3/XgnV5f8FEbSqsiViPds5BxwSrwQ0uX/3Czl oFQHEnsZPg2xrOhGHToVOEhjwuVNXhtv8Ja5NAihTNEIJrWez/bpO+AQy6DcN6sh FqfGzqJiHuIr2/GZpJmnz5w4v7qmjSNgsEJH4bZ+OhH7x3d85NXSRK3ESQxEfEFf /OUUJdzw62Ey0eXpuQkty+cKcKm7y4Tc3Bna3JHczMLMolfSoAY+9Zo8luvo0gox JfqU5xTwWy7sgXhA0s+3lVJbDaGBuyq6ER2QvAOdbdIKsuSOVQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFFGHpr7UL2TFDHtdceHT8d8l4iMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Yzdh OTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2MwMjFlY2U2NzYvODI4YWUwM2ItYTcyNy0z NGE3LWI5M2EtZTkwYjRmNGE1NjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmM3YTkxNzktYjcxYy00NjA4LWI2 YWQtMzdjMDIxZWNlNjc2LzZjN2E5MTc5LWI3MWMtNDYwOC1iNmFkLTM3YzAyMWVj ZTY3Ni5jcmwwHwYDVR0jBBgwFoAUpKoFbuwuv3pDVPjGz3M2bMONJo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82YzdhOTE3OS1iNzFjLTQ2MDgtYjZhZC0zN2Mw MjFlY2U2NzYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqiFMA8E AgACMAkDBwQmAvvZAQAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAb4BD9GHSaT5oC0SXtVLWu/8IFtlgAg4a lrvWsADEpjzFVAVHV9icKHyy+9VHX7vmAteLn9YhN9TI1un5zCPN8SPqVzduPUpC xKtUxydJD++5hSIh3FbUjKbdrz2x/CfEOJZ/iWIh6aFmAKw+xFYQH/4i3DGZf+oi XJvD02DUHawQDPW3L7nQULlfysHwAbvMfMa+Nn5dPw0HxclSDSSawT2KH0XS5rPp IOOeq0d53COyxMJQSA1FqnjuXi8LhWETvERDKiN+Jeo8NTwlZFf4iC8os9SaI2HV jLPT5UUlSwtO6nRUuIYON66XP4wVtQXZklrMZqvn2FuuBnemeqLivA== -----END CERTIFICATE-----Generated at Wed Mar 25 23:26:15 2026 by rpki-client