$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa File: 4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa (raw, json) Hash identifier: S9OEf9GBG5Ev7BSISJDXeEqyce5pxrnY2ochCmZ89+c= Subject key identifier: 0C:2D:CF:7A:12:92:15:8D:88:2A:A3:1A:B1:29:BC:7D:50:3F:A2:CC Certificate issuer: /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Certificate serial: 010D0C9F4328584D300A57B2FB3CB56748FDFC80 Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 13692 IP address blocks: 206.192.224.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:57:b2:fb:3c:b5:67:48:fd:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=6aa9ba25-a76e-428c-b53a-8a6c85da90ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:84:b4:9f:55:67:28:e3:7f:53:42:9d:cb:82: bc:6b:ff:18:ae:62:24:ae:67:0f:9a:5d:95:91:db: 83:93:d7:e0:27:c0:c4:bc:f7:22:c6:82:ab:e5:e1: a7:99:1a:84:ef:bd:59:f0:cf:0b:55:cb:aa:31:6b: 5c:fb:72:cf:95:8e:a8:df:14:77:45:0b:6e:9a:06: 83:c7:94:bb:25:2f:ef:59:99:67:5b:9e:9f:ad:b8: dc:11:c0:34:04:27:67:e3:c9:0d:3f:a9:b6:82:a7: e6:69:fc:f3:2d:68:34:5c:ac:83:17:6b:5e:bc:a7: 67:9e:06:4c:3a:66:c2:97:f1:3e:fc:1a:c9:e4:bc: 55:0f:25:69:4c:3a:cc:2b:1c:70:23:33:46:ff:10: b6:a6:b8:70:0b:40:db:eb:7f:66:0c:a5:b0:95:be: aa:75:05:71:32:69:32:bb:38:bc:5f:c2:4c:3b:4f: 29:03:e0:15:2d:0e:ad:fd:43:70:7c:50:b2:de:38: 0f:34:09:1b:fc:4e:05:8a:fb:d5:61:fb:c4:14:c8: d0:ca:8a:bc:ae:e2:7e:da:02:ea:8d:65:71:e7:9d: 82:6e:ac:a4:f0:a0:77:58:22:6d:1c:ee:bf:2d:71: 2d:91:68:c1:bd:9f:1b:6f:b0:14:6a:3f:c8:ef:8a: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2D:CF:7A:12:92:15:8D:88:2A:A3:1A:B1:29:BC:7D:50:3F:A2:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/4eaa6c68-f076-3a9e-9d92-6f6a069b8454.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl X509v3 Authority Key Identifier: keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer sbgp-ipAddrBlock: critical IPv4: 206.192.224.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:53:2d:11:10:78:cf:3d:d5:5f:7b:9c:1f:ea:0b:98:04:dc: e8:00:4e:11:c6:aa:a5:16:f4:46:1d:6e:1e:6d:ba:cc:8e:1c: 56:05:dc:ef:05:99:fd:35:f7:6d:b9:35:5b:04:09:5d:fb:ab: af:a4:e2:0b:86:72:28:1b:06:87:94:58:c6:27:89:83:d0:e2: 80:0a:70:5e:e4:d1:23:47:e6:80:6d:a3:3e:c9:5f:60:d0:85: c6:b9:f0:1c:27:2b:e4:dc:fc:6a:3f:36:c3:c9:01:09:c7:b2: 14:06:65:16:fb:53:71:c8:e2:80:ef:70:bd:89:c0:da:86:0d: 50:8e:78:52:f7:c3:64:2a:83:68:b9:ad:42:64:2e:a0:7b:21: 02:11:06:e6:8f:1a:d7:22:0c:86:2f:d3:2d:36:89:ec:85:34: 0a:bf:49:f4:9d:00:f8:2c:ff:b1:09:20:2c:c5:ed:f8:52:4c: 36:17:d1:f9:92:23:03:1d:24:05:e5:72:88:01:f4:d9:71:a8: 15:c2:2a:be:a6:44:47:ea:04:dc:81:ca:06:df:e2:f4:ac:fb: d9:46:9b:22:58:63:30:64:e4:be:09:75:dc:d7:69:a9:2d:31: a3:cd:75:07:1e:1b:91:8e:c7:52:9b:25:0d:20:b5:ce:86:4d: 88:7a:0b:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCley+zy1Z0j9/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0 MGFmMB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NmFhOWJhMjUtYTc2ZS00MjhjLWI1M2EtOGE2Yzg1ZGE5MGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooS0n1VnKON/U0Kdy4K8a/8YrmIkrmcPml2V kduDk9fgJ8DEvPcixoKr5eGnmRqE771Z8M8LVcuqMWtc+3LPlY6o3xR3RQtumgaD x5S7JS/vWZlnW56frbjcEcA0BCdn48kNP6m2gqfmafzzLWg0XKyDF2tevKdnngZM OmbCl/E+/BrJ5LxVDyVpTDrMKxxwIzNG/xC2prhwC0Db639mDKWwlb6qdQVxMmky uzi8X8JMO08pA+AVLQ6t/UNwfFCy3jgPNAkb/E4FivvVYfvEFMjQyoq8ruJ+2gLq jWVx552Cbqyk8KB3WCJtHO6/LXEtkWjBvZ8bb7AUaj/I74qB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwtz3oSkhWNiCqjGrEpvH1QP6LMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1 Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvNGVhYTZjNjgtZjA3Ni0z YTllLTlkOTItNmY2YTA2OWI4NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdTLREQeM891V97nB/qC5gE3OgAThHGqqUW9EYdbh5tusyOHFYF3O8F mf019225NVsECV37q6+k4guGcigbBoeUWMYniYPQ4oAKcF7k0SNH5oBtoz7JX2DQ hca58BwnK+Tc/Go/NsPJAQnHshQGZRb7U3HI4oDvcL2JwNqGDVCOeFL3w2Qqg2i5 rUJkLqB7IQIRBuaPGtciDIYv0y02ieyFNAq/SfSdAPgs/7EJICzF7fhSTDYX0fmS IwMdJAXlcogB9NlxqBXCKr6mREfqBNyBygbf4vSs+9lGmyJYYzBk5L4JddzXaakt MaPNdQceG5GOx1KbJQ0gtc6GTYh6C+Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:21 2026 by rpki-client