$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa File: 3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa (raw, json) Hash identifier: EADnRQH5qxzHPR89gI8j/5udRCLPq1p2/fFig83vVIo= Subject key identifier: A3:9F:8A:FB:FE:EA:51:12:D2:95:99:4C:D9:F9:6D:5B:26:48:30:62 Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D237A2D03972C9C44B75226A0 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 11404 IP address blocks: 206.192.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:2d:03:97:2c:9c:44:b7:52:26:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=6a0e17a9-37bd-4ad1-abea-e79569a71c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:0d:48:30:de:3e:c5:cb:5a:55:28:5d:f1:b5: 6d:f0:4e:b0:6d:78:3f:b5:a2:24:6e:03:52:fd:41: a7:ea:31:1a:ab:d0:8f:d1:25:71:45:00:d1:7f:c3: 4d:f4:9d:12:99:79:4c:75:dd:38:db:62:02:ce:3d: c5:2e:3e:36:4e:72:2c:b3:6e:9d:15:43:2e:e4:32: fd:f0:e9:c4:99:8c:9a:b0:9b:10:92:85:72:b0:b7: ea:aa:ce:a1:82:14:f3:3c:ff:67:80:f4:a5:57:84: bc:d5:a5:75:6b:6c:04:bb:f1:f5:26:b9:ab:85:0b: 27:13:1c:db:0b:33:a9:74:0d:3c:c7:21:2a:bb:6a: a0:5f:b3:51:d1:28:20:68:c1:a5:03:1e:1c:04:57: 61:9d:9b:8b:a5:5d:43:8d:f3:d6:8f:82:44:7a:fb: 67:6a:61:b9:50:cf:a8:bf:34:77:bf:2e:60:0b:62: b4:6e:5e:55:e0:62:1e:40:04:a0:3e:63:85:9a:db: 8d:cc:1e:d0:66:c3:09:fa:8b:db:4d:6f:a5:9e:7c: b9:a4:4d:76:a2:02:51:b8:4b:da:a0:41:04:60:e4: 19:d2:f1:70:88:a6:ee:0c:e8:11:54:93:1c:bd:d7: 6c:42:ab:6f:34:00:ae:05:d9:71:45:73:b4:ad:b9: f2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:9F:8A:FB:FE:EA:51:12:D2:95:99:4C:D9:F9:6D:5B:26:48:30:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/3896d3af-0264-35ba-8dbf-068ddc8b2e36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 206.192.232.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:65:a7:01:35:87:78:36:3f:45:02:a6:4a:33:17:52:73:1e: cb:e5:af:cb:f6:45:7e:ff:f2:04:f2:33:3a:24:13:62:c3:99: c5:bc:37:1d:6b:1a:6a:1c:2b:4e:d8:41:b7:d8:95:53:32:dd: 41:fc:96:96:af:3f:cb:93:a9:23:3b:5a:f5:d6:28:39:3a:90: 09:bc:25:7d:69:e1:bf:e0:b1:2b:93:0d:66:9c:fd:8b:87:43: d4:3d:0e:73:7b:cd:89:90:32:73:7f:e4:30:42:6f:e2:21:d2: de:1a:27:44:93:1f:51:d3:3c:7f:7b:f5:67:c1:0e:34:e6:a6: 2b:c0:b3:3c:1c:47:0d:2d:7d:b1:e7:cd:56:b5:05:ba:65:22: 84:01:31:28:97:3a:e1:b8:81:db:0a:eb:fe:7b:e0:ed:53:a2: d4:18:96:43:4d:76:44:b3:4c:7e:66:90:17:4b:5e:d3:dc:00: 5a:74:71:cb:7d:dc:4f:95:2a:14:f5:a6:73:e8:87:5b:76:bb: 93:86:60:6a:f5:4c:f7:26:bd:b6:87:a1:75:15:92:38:7f:82: dc:b3:ca:71:6f:2c:f1:a8:ff:6f:91:22:cc:4d:60:41:e1:f2: 4c:fd:f1:5e:24:fd:1a:3a:a6:6d:0a:b2:ab:f9:fe:ed:7e:47: 05:4f:df:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jei0DlyycRLdSJqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NmEwZTE3YTktMzdiZC00YWQxLWFiZWEtZTc5NTY5YTcxYzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5g1IMN4+xctaVShd8bVt8E6wbXg/taIkbgNS /UGn6jEaq9CP0SVxRQDRf8NN9J0SmXlMdd0422ICzj3FLj42TnIss26dFUMu5DL9 8OnEmYyasJsQkoVysLfqqs6hghTzPP9ngPSlV4S81aV1a2wEu/H1JrmrhQsnExzb CzOpdA08xyEqu2qgX7NR0SggaMGlAx4cBFdhnZuLpV1DjfPWj4JEevtnamG5UM+o vzR3vy5gC2K0bl5V4GIeQASgPmOFmtuNzB7QZsMJ+ovbTW+lnny5pE12ogJRuEva oEEEYOQZ0vFwiKbuDOgRVJMcvddsQqtvNACuBdlxRXO0rbny/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOfivv+6lES0pWZTNn5bVsmSDBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMzg5NmQzYWYtMDI2NC0z NWJhLThkYmYtMDY4ZGRjOGIyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzsDoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtlpwE1h3g2P0UCpkozF1JzHsvlr8v2RX7/8gTyMzokE2LDmcW8Nx1r GmocK07YQbfYlVMy3UH8lpavP8uTqSM7WvXWKDk6kAm8JX1p4b/gsSuTDWac/YuH Q9Q9DnN7zYmQMnN/5DBCb+Ih0t4aJ0STH1HTPH979WfBDjTmpivAszwcRw0tfbHn zVa1BbplIoQBMSiXOuG4gdsK6/574O1TotQYlkNNdkSzTH5mkBdLXtPcAFp0cct9 3E+VKhT1pnPoh1t2u5OGYGr1TPcmvbaHoXUVkjh/gtyzynFvLPGo/2+RIsxNYEHh 8kz98V4k/Ro6pm0Ksqv5/u1+RwVP344= -----END CERTIFICATE-----Generated at Thu Mar 26 11:25:45 2026 by rpki-client