$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa File: b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa (raw, json) Hash identifier: KQLbn43UxgBb0q+KZ30cNA4z2lLniIYJKCftukzn8o8= Subject key identifier: 34:01:8F:43:16:38:AF:11:1F:05:82:59:AF:04:0A:8D:8E:D7:0D:A5 Certificate issuer: /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Certificate serial: 010D0C9F4328584D343A1A1E3146C34B2FCDC400 Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 45241 IP address blocks: 198.208.209.0/24 maxlen: 24 198.208.228.0/24 maxlen: 24 198.208.230.0/24 maxlen: 24 198.208.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:1a:1e:31:46:c3:4b:2f:cd:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=2d105358-432c-4d82-b090-058e5c85a78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:89:6f:75:a5:d6:17:b5:37:e8:5a:8e:95:2b: e0:7c:ea:8c:fd:34:0c:5f:38:b1:ff:6f:56:43:51: f3:92:81:fa:b7:93:03:4b:c3:8c:52:da:4e:1e:6f: 5d:1e:3c:c1:02:f1:04:a8:c0:f7:5b:db:aa:7c:db: 9f:93:f3:97:f2:66:ba:8f:0f:8d:c6:dc:45:f3:27: e7:9a:9e:52:93:ee:a7:24:3a:79:48:dd:8f:a5:3e: ca:43:94:55:0d:86:f7:68:3e:77:7f:a3:a3:e8:5c: 8d:61:2b:7e:6a:c5:e1:17:a0:ec:08:6c:de:d2:1a: 4e:3d:d1:55:ed:be:0d:3f:31:47:44:a2:a0:ce:ab: 00:a8:59:8a:f1:e7:ee:f4:96:af:17:4f:cc:77:34: f6:97:b9:58:ca:91:b3:ad:38:af:68:fa:88:70:9a: d9:e0:c3:06:36:96:2e:27:62:cb:35:8f:70:3f:57: 43:6e:7f:7c:92:37:b9:1f:46:7f:ab:c3:87:da:57: 50:f4:df:14:06:d5:ab:0f:11:4b:9d:c3:5a:26:45: ff:e4:cb:fb:b8:98:3f:9e:ff:c3:0d:a3:d3:09:4b: 02:a1:b9:81:48:09:79:a1:c1:f7:49:7b:8b:90:71: 98:ed:9e:b9:c4:e2:4d:93:7f:2d:eb:79:fe:27:28: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:01:8F:43:16:38:AF:11:1F:05:82:59:AF:04:0A:8D:8E:D7:0D:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/b6f11f09-e505-3534-8ce0-7ae9b244f54e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl X509v3 Authority Key Identifier: keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer sbgp-ipAddrBlock: critical IPv4: 198.208.209.0/24 198.208.228.0/24 198.208.230.0/24 198.208.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:68:0c:f0:05:03:42:a9:82:6d:3e:23:c2:44:37:78:77:21: 74:cb:ab:72:ac:0c:55:b3:80:28:39:92:a9:17:a0:b3:d5:e5: 0c:fe:aa:92:56:c9:9c:72:49:29:c5:a1:e7:98:df:85:6b:e3: 99:6d:84:24:7a:ca:7f:9e:d8:d9:2b:49:aa:27:9e:86:6f:90: 9a:f9:4a:7f:fd:3c:43:cf:95:6c:5b:a7:9b:f9:31:51:9c:9a: 1f:c1:29:06:6a:37:95:d8:e6:73:eb:ef:e3:28:65:d6:25:20: 64:b1:4d:c9:f5:a2:33:89:f7:56:1a:b7:e3:a8:2e:04:d5:2d: 1f:5a:ac:62:33:7e:42:63:5c:5f:4a:6b:39:16:09:9e:ec:47: 48:f9:fd:47:f5:50:a0:1c:dd:6a:9b:28:a0:08:d1:2b:31:99: 5b:95:fe:8d:da:fe:ce:ef:24:4f:4c:7d:4e:ec:56:19:ad:15: 55:41:f8:09:15:e7:e6:d2:6b:7a:cd:63:e7:05:4b:04:38:f6: 8d:92:02:0f:74:90:b5:2e:f4:16:2d:91:80:fd:cd:b0:ef:c4: 28:de:37:2c:f7:e1:69:0f:60:36:81:db:cb:f7:e5:52:b2:f6: 8f:c0:35:a9:a6:99:34:78:c8:84:ca:42:b0:a4:c1:bf:d8:93: 4a:d2:dc:28 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE00OhoeMUbDSy/NxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl M2U0MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MmQxMDUzNTgtNDMyYy00ZDgyLWIwOTAtMDU4ZTVjODVhNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IlvdaXWF7U36FqOlSvgfOqM/TQMXzix/29W Q1HzkoH6t5MDS8OMUtpOHm9dHjzBAvEEqMD3W9uqfNufk/OX8ma6jw+NxtxF8yfn mp5Sk+6nJDp5SN2PpT7KQ5RVDYb3aD53f6Oj6FyNYSt+asXhF6DsCGze0hpOPdFV 7b4NPzFHRKKgzqsAqFmK8efu9JavF0/MdzT2l7lYypGzrTivaPqIcJrZ4MMGNpYu J2LLNY9wP1dDbn98kje5H0Z/q8OH2ldQ9N8UBtWrDxFLncNaJkX/5Mv7uJg/nv/D DaPTCUsCobmBSAl5ocH3SXuLkHGY7Z65xOJNk38t63n+JyhrAQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFDQBj0MWOK8RHwWCWa8ECo2O1w2lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2 N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvYjZmMTFmMDktZTUwNS0z NTM0LThjZTAtN2FlOWIyNDRmNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0 ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj NDk1NGUzZTQuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAxtDRAwQA xtDkAwQAxtDmAwQAxtD/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG5oDPAFA0Kpgm0+I8JEN3h3IXTLq3Ks DFWzgCg5kqkXoLPV5Qz+qpJWyZxySSnFoeeY34Vr45lthCR6yn+e2NkrSaonnoZv kJr5Sn/9PEPPlWxbp5v5MVGcmh/BKQZqN5XY5nPr7+MoZdYlIGSxTcn1ojOJ91Ya t+OoLgTVLR9arGIzfkJjXF9KazkWCZ7sR0j5/Uf1UKAc3WqbKKAI0SsxmVuV/o3a /s7vJE9MfU7sVhmtFVVB+AkV5+bSa3rNY+cFSwQ49o2SAg90kLUu9BYtkYD9zbDv xCjeNyz34WkPYDaB28v35VKy9o/ANammmTR4yITKQrCkwb/Yk0rS3Cg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:33 2026 by rpki-client