$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa File: bf475d03-436a-3341-a882-e4bd4a170795.roa (raw, json) Hash identifier: dMFiUFNjuoMPFtYtYAVgyI2YAbFQSSJ4ORKBsc0LJOo= Subject key identifier: 11:6A:8C:FB:AC:3A:38:38:CE:6C:25:F4:54:AF:35:4D:44:8D:C2:AC Certificate issuer: /CN=5ccc6d6f-2606-494d-a559-67c452762d98 Certificate serial: 010D0C9F4328584D19B4C6A96446F53EC210D770 Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 53437 IP address blocks: 206.167.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:c6:a9:64:46:f5:3e:c2:10:d7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=f7f7739f-7a36-45ac-9182-e26c0f3b7590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:41:41:aa:f2:ff:d6:9d:ff:41:6c:57:1c:27: f1:9b:a8:93:40:f9:19:66:3f:c1:5c:43:fa:f3:19: d2:66:33:46:88:98:cc:f6:60:ae:27:0f:a1:78:04: ee:6e:d7:c7:e6:be:c2:78:49:84:fe:99:67:ce:a5: 33:57:6d:50:2f:5f:78:80:8c:37:09:ee:31:03:40: 87:89:3e:1c:ef:11:76:80:3b:93:55:b5:e6:a3:cb: 67:17:7b:a1:aa:85:c0:3a:60:51:cf:1f:20:a3:7e: 15:38:8e:7d:f0:19:2e:fa:c7:00:53:1c:df:68:7c: 9c:b0:2a:60:5a:00:8e:d4:d5:08:27:08:e9:e7:28: 64:09:4d:80:e3:b7:86:91:32:11:2b:40:3e:a6:bd: 2b:e0:de:88:b2:ca:06:97:49:a5:0f:e4:d9:29:76: ad:d9:0e:6e:fe:7a:9f:91:db:35:b8:72:18:13:18: a7:bd:61:10:03:d6:90:50:4b:f9:28:60:ca:52:56: d2:e9:aa:bf:f3:e5:0e:ac:59:ea:7a:30:0a:ab:3d: 72:c5:96:54:c3:3a:28:08:b5:ac:fa:ab:d8:10:77: a0:0c:b2:aa:94:fa:f6:76:04:fe:d2:1b:41:73:08: 14:c2:8b:53:1a:34:ca:f2:3f:06:7c:03:d6:a5:17: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:8C:FB:AC:3A:38:38:CE:6C:25:F4:54:AF:35:4D:44:8D:C2:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/bf475d03-436a-3341-a882-e4bd4a170795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl X509v3 Authority Key Identifier: keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer sbgp-ipAddrBlock: critical IPv4: 206.167.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:d8:3a:da:6f:77:2d:9e:1d:d9:fe:d2:30:f9:29:a4:04:3d: 33:e0:95:d9:8b:70:17:a9:c2:a8:70:0a:1b:31:e5:f1:2c:19: b8:db:b7:97:85:af:4b:f1:5b:55:3f:8a:7b:3c:5d:ab:1f:3d: 80:e5:83:ca:94:87:4a:d3:78:68:8c:43:c3:51:6d:8c:82:60: ca:d8:29:3b:59:b1:19:ca:3e:29:d5:53:7e:a6:14:43:40:2c: 6b:ba:15:6b:84:3b:4e:e5:a1:83:e8:1e:77:2f:69:c7:42:fa: 2e:8f:fb:ca:2e:8e:87:9a:7d:3c:d9:05:1c:d5:af:a3:74:75: 1d:49:42:cc:2b:5a:0e:30:38:d3:e9:f0:92:4e:b4:d2:c4:06: 35:34:22:d8:f9:ed:ec:56:1e:87:cf:67:d2:f0:54:f2:d8:6e: 01:e7:93:0b:76:e9:f2:6f:5b:25:01:83:53:05:4f:fc:91:43: 58:68:e7:a7:03:d3:54:09:e1:90:8a:af:c9:e6:19:b0:40:98: 0b:92:05:24:fc:df:a6:14:ed:9f:62:05:20:bb:dc:89:ec:ee: 3e:14:35:3e:af:94:dc:26:67:00:38:2a:ff:ea:49:97:2e:53: 8b:35:a3:07:45:cc:32:7c:f0:5b:0d:27:0d:e3:26:69:8d:73: 6a:cc:19:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtMapZEb1PsIQ13AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy ZDk4MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZjdmNzczOWYtN2EzNi00NWFjLTkxODItZTI2YzBmM2I3NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkFBqvL/1p3/QWxXHCfxm6iTQPkZZj/BXEP6 8xnSZjNGiJjM9mCuJw+heATubtfH5r7CeEmE/plnzqUzV21QL194gIw3Ce4xA0CH iT4c7xF2gDuTVbXmo8tnF3uhqoXAOmBRzx8go34VOI598Bku+scAUxzfaHycsCpg WgCO1NUIJwjp5yhkCU2A47eGkTIRK0A+pr0r4N6IssoGl0mlD+TZKXat2Q5u/nqf kds1uHIYExinvWEQA9aQUEv5KGDKUlbS6aq/8+UOrFnqejAKqz1yxZZUwzooCLWs +qvYEHegDLKqlPr2dgT+0htBcwgUwotTGjTK8j8GfAPWpReN0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFqjPusOjg4zmwl9FSvNU1EjcKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYmY0NzVkMDMtNDM2YS0z MzQxLWE4ODItZTRiZDRhMTcwNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1 NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2 MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0 NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADYOtpvdy2eHdn+0jD5KaQEPTPgldmLcBepwqhwChsx5fEsGbjbt5eF r0vxW1U/ins8XasfPYDlg8qUh0rTeGiMQ8NRbYyCYMrYKTtZsRnKPinVU36mFENA LGu6FWuEO07loYPoHncvacdC+i6P+8oujoeafTzZBRzVr6N0dR1JQswrWg4wONPp 8JJOtNLEBjU0Itj57exWHofPZ9LwVPLYbgHnkwt26fJvWyUBg1MFT/yRQ1ho56cD 01QJ4ZCKr8nmGbBAmAuSBST836YU7Z9iBSC73Ins7j4UNT6vlNwmZwA4Kv/qSZcu U4s1owdFzDJ88FsNJw3jJmmNc2rMGfg= -----END CERTIFICATE-----Generated at Thu Mar 26 19:39:35 2026 by rpki-client