$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa File: f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa (raw, json) Hash identifier: P4kvQYZqyUs59YKOGKqpoZvTM7lDAgQ/h2NMSVSiV7c= Subject key identifier: A2:4C:DC:E6:23:FF:5A:A1:EB:DC:6F:00:4F:58:F7:2A:63:E5:59:85 Certificate issuer: /CN=8ac31463-974b-4676-9328-200202ae4d6e Certificate serial: 010D0C9F4328584D3F64F201C9699FF36B1F9EF0 Authority key identifier: 66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 33211 IP address blocks: 206.41.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f2:01:c9:69:9f:f3:6b:1f:9e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ac31463-974b-4676-9328-200202ae4d6e Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=14d9b47d-fe64-411f-81dd-9efc0bd8f7dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:71:d5:ea:42:be:2d:97:cb:99:06:72:3a:24: 72:ce:32:26:d8:72:95:4e:d1:4a:5c:d1:8b:03:08: 62:44:5f:27:ea:9d:16:9b:88:64:ca:fd:5b:d6:35: 1e:cd:95:6b:ea:a3:ed:93:2d:f5:ca:3b:dd:91:f7: cb:f6:4e:ad:06:cc:d8:db:fc:3f:75:ed:98:9d:b4: ba:7b:bb:83:9f:3a:fc:02:c8:ff:69:19:e0:81:9d: a4:b7:51:c0:22:45:78:66:6e:0c:cb:dd:61:94:8d: 92:1c:0a:0e:76:e7:af:c3:3b:58:68:2e:cd:b7:d2: 76:24:cf:af:e3:18:12:2f:7b:12:5a:09:6a:ba:88: 80:06:c3:4f:ae:38:58:ef:a4:7c:ca:de:e2:86:34: 9b:6a:f3:f3:70:f6:be:c0:36:53:80:32:cc:cf:ba: de:42:61:29:95:03:a1:ef:43:e0:96:eb:11:10:8d: ed:19:2d:da:95:78:0e:53:d7:a6:21:7f:5c:c5:20: e7:79:88:3f:ee:03:00:b2:3f:99:46:45:88:3b:73: b8:0e:26:97:4a:b1:45:a4:80:dd:6b:71:52:fc:05: 7e:13:ae:07:62:fb:fc:a3:92:28:4a:4d:d4:8b:e3: 99:4a:7e:20:bf:3c:cd:bb:8a:86:53:53:04:78:91: 30:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4C:DC:E6:23:FF:5A:A1:EB:DC:6F:00:4F:58:F7:2A:63:E5:59:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/f481cb5a-0e74-37fe-95ff-6b8867a6fdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e/8ac31463-974b-4676-9328-200202ae4d6e.crl X509v3 Authority Key Identifier: keyid:66:4A:CF:7A:87:80:2E:D5:96:69:93:6E:0E:BD:6C:EA:41:57:66:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ac31463-974b-4676-9328-200202ae4d6e.cer sbgp-ipAddrBlock: critical IPv4: 206.41.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:09:2c:6b:b0:1f:ca:c7:57:cf:b2:d1:6e:09:19:bf:bf:44: 11:77:3d:b6:d8:ae:2b:66:e7:99:e0:01:cb:75:cc:1d:74:03: da:d6:02:fa:f8:59:ec:02:8a:d8:c7:13:3c:42:b6:41:6c:9b: 49:c8:38:f0:39:ef:4b:0a:f0:59:1f:b3:2c:c5:ad:aa:37:2b: 0c:f5:f2:15:60:ca:8c:70:36:0e:45:74:03:69:a4:20:8b:2e: dd:64:27:a2:be:77:b6:b4:9e:ac:01:87:43:c0:2b:0a:10:ee: b3:43:f2:74:72:33:da:e6:d6:a3:a1:21:e6:e7:d9:ce:ae:2a: 9a:9b:af:82:93:39:1f:67:d8:1d:cd:0f:83:5d:14:80:17:af: c4:28:6b:d5:32:92:e0:8d:ac:8a:98:ab:bf:c6:c6:4f:99:07: ce:f6:03:c6:ae:2b:aa:91:d8:f8:c9:07:e7:fc:ba:bf:af:cb: 81:4f:92:8c:69:55:6b:4d:7d:79:f0:9c:8f:e1:e9:2a:2c:8f: ad:33:3f:10:31:4f:d8:13:6e:0e:f9:f7:3c:22:d8:5a:0e:e9: 74:0c:11:2a:78:ea:cb:98:02:96:9d:fe:03:37:6f:83:cd:7c: 03:a0:bc:77:8e:24:85:0a:65:d4:22:13:d4:e0:05:ba:68:7b: 30:27:80:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPIByWmf82sfnvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFjMzE0NjMtOTc0Yi00Njc2LTkzMjgtMjAwMjAyYWU0 ZDZlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MTRkOWI0N2QtZmU2NC00MTFmLTgxZGQtOWVmYzBiZDhmN2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHHV6kK+LZfLmQZyOiRyzjIm2HKVTtFKXNGL AwhiRF8n6p0Wm4hkyv1b1jUezZVr6qPtky31yjvdkffL9k6tBszY2/w/de2YnbS6 e7uDnzr8Asj/aRnggZ2kt1HAIkV4Zm4My91hlI2SHAoOduevwztYaC7Nt9J2JM+v 4xgSL3sSWglquoiABsNPrjhY76R8yt7ihjSbavPzcPa+wDZTgDLMz7reQmEplQOh 70PglusREI3tGS3alXgOU9emIX9cxSDneYg/7gMAsj+ZRkWIO3O4DiaXSrFFpIDd a3FS/AV+E64HYvv8o5IoSk3Ui+OZSn4gvzzNu4qGU1MEeJEwOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJM3OYj/1qh69xvAE9Y9ypj5VmFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWMz MTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAyMDJhZTRkNmUvZjQ4MWNiNWEtMGU3NC0z N2ZlLTk1ZmYtNmI4ODY3YTZmZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFjMzE0NjMtOTc0Yi00Njc2LTkz MjgtMjAwMjAyYWU0ZDZlLzhhYzMxNDYzLTk3NGItNDY3Ni05MzI4LTIwMDIwMmFl NGQ2ZS5jcmwwHwYDVR0jBBgwFoAUZkrPeoeALtWWaZNuDr1s6kFXZvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWMzMTQ2My05NzRiLTQ2NzYtOTMyOC0yMDAy MDJhZTRkNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzil/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcJLGuwH8rHV8+y0W4JGb+/RBF3PbbYritm55ngAct1zB10A9rWAvr4 WewCitjHEzxCtkFsm0nIOPA570sK8FkfsyzFrao3Kwz18hVgyoxwNg5FdANppCCL Lt1kJ6K+d7a0nqwBh0PAKwoQ7rND8nRyM9rm1qOhIebn2c6uKpqbr4KTOR9n2B3N D4NdFIAXr8Qoa9UykuCNrIqYq7/Gxk+ZB872A8auK6qR2PjJB+f8ur+vy4FPkoxp VWtNfXnwnI/h6Sosj60zPxAxT9gTbg759zwi2FoO6XQMESp46suYApad/gM3b4PN fAOgvHeOJIUKZdQiE9TgBbpoezAngIw= -----END CERTIFICATE-----Generated at Fri Mar 27 06:42:15 2026 by rpki-client