$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa File: bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa (raw, json) Hash identifier: IE5rsWxUMj7oUiKnL0WYzRdCPfpVWt6ivjtaDMzcExI= Subject key identifier: 25:C6:E3:3A:E6:7B:0C:44:FE:26:CD:6F:ED:12:EB:5D:CF:37:94:09 Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584D359FDF5D6DD013CD5141AF00 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 376 IP address blocks: 206.167.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:df:5d:6d:d0:13:cd:51:41:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=26c8eb4e-6fe3-48e5-a48b-ed0a12cf5c21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:49:b6:2f:0f:42:19:d0:2e:10:9f:2e:cc: 57:3b:e2:83:a7:26:ea:15:be:ed:91:7d:03:2c:0c: d4:cc:dc:47:6f:42:52:1a:32:9d:1f:0d:90:c6:84: fc:c6:42:fc:b6:24:f2:21:c0:11:42:93:59:ac:8e: 79:4a:2c:56:0a:62:14:d3:51:a9:e0:30:e3:72:49: 2a:79:b0:27:23:bb:38:f5:02:ac:b3:a1:01:ce:5c: 4a:79:a1:b4:5a:70:95:41:7b:09:d7:d2:08:4d:b2: e0:50:14:e4:3c:14:a8:28:54:0e:84:b6:34:92:17: 91:e7:23:6f:aa:9a:ae:de:ed:27:f6:e3:8a:68:db: d1:61:cc:3e:ef:b9:05:97:ef:4b:08:b1:dc:0d:f7: 4d:6d:06:ec:1b:f3:65:21:26:33:f6:4e:94:a4:d8: 4c:99:87:64:ca:a5:de:99:8e:3e:b8:dd:85:c9:1f: 12:d5:65:05:97:2b:32:49:c6:60:7f:02:0f:cb:55: d0:5f:58:a1:3d:fe:03:d2:4b:bd:74:46:48:7b:2a: b0:18:f9:27:5a:61:2d:32:74:99:ad:5e:0e:6a:ee: 00:d4:72:7b:9f:3c:d1:f9:c6:78:6d:6e:fc:6d:6b: 29:e9:13:29:93:05:8e:aa:c2:56:20:5e:0c:96:7f: 04:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C6:E3:3A:E6:7B:0C:44:FE:26:CD:6F:ED:12:EB:5D:CF:37:94:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bb3db11c-6dc9-3dc1-aad9-70cd5241e1a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:68:a7:8c:ce:bd:1d:fe:6a:61:c9:5e:7f:66:5f:17:30:3c: c9:dd:9e:05:5a:20:bf:6b:18:e8:d3:5f:79:a0:d1:63:92:2d: 28:33:e0:c4:c3:42:55:c3:87:26:19:43:3d:eb:cc:13:af:8d: 24:49:ec:b2:8b:e1:1e:c5:aa:26:a1:04:36:28:4a:77:0f:f9: a3:56:41:d5:9a:3c:7a:57:70:6f:20:0c:92:9e:be:0a:ac:50: 0b:88:8f:65:5f:5a:ae:86:a7:41:b4:42:61:d6:86:62:e6:8c: 69:32:fc:59:22:e3:3d:a9:8f:fc:4a:d2:0c:15:b8:40:21:93: 2e:80:b7:6a:90:2f:69:e6:a5:cd:c4:02:59:f6:5c:51:62:f6: 8b:a8:c6:d8:db:17:53:45:10:49:62:f8:6d:ec:c2:02:e9:f7: d9:94:a4:d1:96:fd:c4:b5:f7:a2:ab:8b:3a:b6:68:84:16:44: 3b:77:70:58:f3:bb:3c:f7:76:a7:a6:61:91:ae:dd:a9:54:ca: 3f:05:f5:6b:e1:58:14:2b:4d:0a:13:3a:58:e4:b4:64:69:db: 30:74:e2:f9:76:b4:39:d9:07:3e:8c:80:91:88:66:2d:1b:ef: 68:04:57:34:7d:1b:2a:6e:26:bc:53:f4:9b:53:ee:7c:10:f5: 87:f8:a6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n99dbdATzVFBrwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk MjZjOGViNGUtNmZlMy00OGU1LWE0OGItZWQwYTEyY2Y1YzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEVJti8PQhnQLhCfLsxXO+KDpybqFb7tkX0D LAzUzNxHb0JSGjKdHw2QxoT8xkL8tiTyIcARQpNZrI55SixWCmIU01Gp4DDjckkq ebAnI7s49QKss6EBzlxKeaG0WnCVQXsJ19IITbLgUBTkPBSoKFQOhLY0kheR5yNv qpqu3u0n9uOKaNvRYcw+77kFl+9LCLHcDfdNbQbsG/NlISYz9k6UpNhMmYdkyqXe mY4+uN2FyR8S1WUFlysyScZgfwIPy1XQX1ihPf4D0ku9dEZIeyqwGPknWmEtMnSZ rV4Oau4A1HJ7nzzR+cZ4bW78bWsp6RMpkwWOqsJWIF4Mln8EpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXG4zrmewxE/ibNb+0S613PN5QJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYmIzZGIxMWMtNmRjOS0z ZGMxLWFhZDktNzBjZDUyNDFlMWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClop4zOvR3+amHJXn9mXxcwPMndngVaIL9rGOjTX3mg0WOSLSgz4MTD QlXDhyYZQz3rzBOvjSRJ7LKL4R7FqiahBDYoSncP+aNWQdWaPHpXcG8gDJKevgqs UAuIj2VfWq6Gp0G0QmHWhmLmjGky/Fki4z2pj/xK0gwVuEAhky6At2qQL2nmpc3E Aln2XFFi9ouoxtjbF1NFEEli+G3swgLp99mUpNGW/cS196Krizq2aIQWRDt3cFjz uzz3dqemYZGu3alUyj8F9WvhWBQrTQoTOljktGRp2zB04vl2tDnZBz6MgJGIZi0b 72gEVzR9GypuJrxT9JtT7nwQ9Yf4pvc= -----END CERTIFICATE-----Generated at Thu Mar 26 16:37:26 2026 by rpki-client