$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa File: d77f1a9d-1504-37be-979a-7b6e3ced878c.roa (raw, json) Hash identifier: XxIqpspVJTd3beoaBKDaL0bYjYN91O5JTOTMb2VcFMU= Subject key identifier: 02:26:FA:26:14:C5:48:CB:84:7D:97:77:FE:69:3E:FA:F1:38:52:D5 Certificate issuer: /CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Certificate serial: 010D0C9F4328584D237A69A47D3D2B6DC6D91200 Authority key identifier: 22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 18612 IP address blocks: 204.14.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:69:a4:7d:3d:2b:6d:c6:d9:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d08e5c-79e4-4697-a02e-f37ea2db289c Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=592be8a2-52e5-4fa3-b968-4aed180f0b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:d9:8b:ae:3d:9c:e1:3b:bc:41:3e:0e:18: 2f:c1:f8:ab:74:20:d5:85:8d:84:02:20:ba:fa:94: fa:5f:0a:59:9d:4c:ce:a0:b9:5d:de:97:7e:9a:ff: f0:f3:2c:f9:04:6f:a6:0e:bc:31:3f:53:52:b9:ae: 5b:c5:b0:c0:53:ed:4c:e7:ce:dc:6b:48:b7:d1:5e: d0:07:cd:29:02:aa:e5:9a:79:81:80:e8:64:e1:f1: c2:fe:09:91:e9:57:05:b8:97:dc:8c:0b:3a:cf:fe: f8:b7:c1:56:94:e0:43:6a:21:e5:8d:98:3e:0c:fb: 46:cd:9b:03:bf:9e:2a:18:0c:ff:38:dd:e9:15:f0: 71:55:78:fb:19:04:77:74:23:b2:23:f1:04:96:13: fc:8d:69:07:ff:8b:d0:13:23:58:91:6f:88:0a:47: ff:95:60:9d:b9:ab:eb:07:ef:7d:1a:3a:9d:0b:6f: c7:8c:71:8f:0c:fb:3d:55:c0:ef:27:a0:e9:c3:c3: 83:91:1c:eb:5a:6d:a0:05:cc:78:a2:6e:da:53:63: 5b:a2:5a:93:aa:68:cf:a9:1c:60:05:93:40:b2:36: d6:8b:8e:29:e9:d0:9b:ef:cd:50:6b:53:5c:fa:7f: 4e:fe:ed:c9:6f:21:c7:aa:ae:3f:78:4a:3a:50:82: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:26:FA:26:14:C5:48:CB:84:7D:97:77:FE:69:3E:FA:F1:38:52:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/d77f1a9d-1504-37be-979a-7b6e3ced878c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c/61d08e5c-79e4-4697-a02e-f37ea2db289c.crl X509v3 Authority Key Identifier: keyid:22:5D:66:90:02:72:61:15:A5:8D:F3:EC:72:96:73:B2:A4:8C:A5:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/61d08e5c-79e4-4697-a02e-f37ea2db289c.cer sbgp-ipAddrBlock: critical IPv4: 204.14.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:69:f6:e8:4a:63:0a:c9:27:5b:72:a6:98:38:a8:d2:50:60: 53:c1:dd:bf:ba:86:b5:df:32:fe:37:f6:d4:c1:32:44:e1:f8: fb:a6:4f:d4:d4:fe:a5:b6:45:5e:8c:a5:03:2b:e1:38:b8:f6: 42:41:aa:38:85:ac:72:32:50:96:59:6c:ef:46:f2:62:ff:48: cd:05:d6:a6:41:e6:d8:ae:e4:cc:8a:86:69:69:39:4e:92:a1: 87:79:f7:ba:17:55:04:e9:de:d1:45:aa:2d:5d:59:1a:a4:44: f4:a2:03:d6:0c:60:9a:ad:fa:e4:65:ec:c2:06:f6:d2:d0:6c: 68:e1:8a:5b:96:5c:59:b5:83:07:c3:af:dc:bb:32:e7:19:75: e6:20:91:d7:ef:41:b9:e2:d4:74:3e:96:71:9f:a9:3e:cb:0b: 8c:78:cf:b3:0b:76:ff:64:1c:5a:90:5e:1c:81:5d:5f:84:04: 62:53:1f:72:e5:1c:ab:36:91:18:a7:e2:08:80:3d:2b:b6:98: 0f:cf:00:32:20:6d:b7:0f:a2:22:c1:16:4c:3e:f9:be:7f:8f: 1c:2d:29:24:ef:67:ff:10:29:72:a8:28:0b:92:09:5c:ba:ee: b3:6e:37:19:dd:0e:f7:ac:a7:57:96:27:e2:cc:ca:70:ad:fa: 21:ea:06:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jemmkfT0rbcbZEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFkMDhlNWMtNzllNC00Njk3LWEwMmUtZjM3ZWEyZGIy ODljMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk NTkyYmU4YTItNTJlNS00ZmEzLWI5NjgtNGFlZDE4MGYwYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlarZi649nOE7vEE+DhgvwfirdCDVhY2EAiC6 +pT6XwpZnUzOoLld3pd+mv/w8yz5BG+mDrwxP1NSua5bxbDAU+1M587ca0i30V7Q B80pAqrlmnmBgOhk4fHC/gmR6VcFuJfcjAs6z/74t8FWlOBDaiHljZg+DPtGzZsD v54qGAz/ON3pFfBxVXj7GQR3dCOyI/EElhP8jWkH/4vQEyNYkW+ICkf/lWCduavr B+99GjqdC2/HjHGPDPs9VcDvJ6Dpw8ODkRzrWm2gBcx4om7aU2NbolqTqmjPqRxg BZNAsjbWi44p6dCb781Qa1Nc+n9O/u3JbyHHqq4/eEo6UIKn/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIm+iYUxUjLhH2Xd/5pPvrxOFLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MWQw OGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdlYTJkYjI4OWMvZDc3ZjFhOWQtMTUwNC0z N2JlLTk3OWEtN2I2ZTNjZWQ4NzhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjFkMDhlNWMtNzllNC00Njk3LWEw MmUtZjM3ZWEyZGIyODljLzYxZDA4ZTVjLTc5ZTQtNDY5Ny1hMDJlLWYzN2VhMmRi Mjg5Yy5jcmwwHwYDVR0jBBgwFoAUIl1mkAJyYRWljfPscpZzsqSMpdgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MWQwOGU1Yy03OWU0LTQ2OTctYTAyZS1mMzdl YTJkYjI4OWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVp9uhKYwrJJ1typpg4qNJQYFPB3b+6hrXfMv439tTBMkTh+PumT9TU /qW2RV6MpQMr4Ti49kJBqjiFrHIyUJZZbO9G8mL/SM0F1qZB5tiu5MyKhmlpOU6S oYd597oXVQTp3tFFqi1dWRqkRPSiA9YMYJqt+uRl7MIG9tLQbGjhiluWXFm1gwfD r9y7MucZdeYgkdfvQbni1HQ+lnGfqT7LC4x4z7MLdv9kHFqQXhyBXV+EBGJTH3Ll HKs2kRin4giAPSu2mA/PADIgbbcPoiLBFkw++b5/jxwtKSTvZ/8QKXKoKAuSCVy6 7rNuNxndDvesp1eWJ+LMynCt+iHqBpM= -----END CERTIFICATE-----Generated at Thu Mar 26 18:22:44 2026 by rpki-client