$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa File: 8b836509-70a5-3781-a36d-d60531590d29.roa (raw, json) Hash identifier: OiTCFbV6f13N9PftpTFzFF6WMsRfFyM0b/x1whUUi80= Subject key identifier: 9B:4F:66:51:3E:CC:8F:85:AD:B5:E5:72:C4:55:9B:00:B5:87:CD:E5 Certificate issuer: /CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Certificate serial: 010D0C9F4328584D143D4921324621D89B087680 Authority key identifier: 68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 394968 IP address blocks: 204.128.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:49:21:32:46:21:d8:9b:08:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd560d4-77c9-4ab6-b22b-9771aa3b67c2 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=44e78055-09d4-4958-9f81-70ee053c7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:00:e9:93:1e:54:8c:39:80:92:e5:89:fa: 91:99:c4:b2:0c:78:5b:0d:c5:39:08:28:9e:c6:cd: 8b:da:af:08:04:b0:43:00:16:72:45:a6:b5:d3:ba: 72:a9:2b:51:2f:5b:7b:14:48:a4:0d:ce:b2:82:25: db:03:08:61:52:61:83:60:f3:86:82:87:f9:b3:f4: cf:9c:33:82:37:d4:f5:20:76:7d:db:54:d7:3c:54: 44:0b:6d:c4:0c:37:89:50:26:3e:14:76:35:8e:fd: 97:4d:0c:ff:0a:64:d1:f7:ba:81:ae:88:1c:e1:ab: e2:45:21:31:a6:bf:26:ae:75:85:67:32:fe:0a:ee: 41:6a:9d:e6:6e:5f:ed:70:2d:3d:74:70:63:ce:1d: 9d:09:6a:7c:a4:02:54:48:f2:c9:37:7b:6d:1e:05: 32:1f:45:0b:c7:40:cd:10:4f:4b:0c:ae:df:d7:04: 18:5f:50:34:89:ca:cf:97:f7:91:cd:f1:ff:a6:fa: ad:c2:40:7e:48:cd:e8:0a:d7:1a:42:41:18:a9:4c: e9:2f:25:df:bf:04:28:bb:ea:08:04:e6:71:99:88: 3d:e8:0d:3d:dd:b0:c6:c4:27:2e:ea:8e:b7:5b:6c: f9:b6:c8:a2:c8:b2:41:24:1f:bf:db:d0:ee:66:4e: 2c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4F:66:51:3E:CC:8F:85:AD:B5:E5:72:C4:55:9B:00:B5:87:CD:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/8b836509-70a5-3781-a36d-d60531590d29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.crl X509v3 Authority Key Identifier: keyid:68:7D:B7:23:4A:D5:EA:C0:22:CF:AA:80:D5:4C:DE:8E:F5:B1:1C:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7dd560d4-77c9-4ab6-b22b-9771aa3b67c2.cer sbgp-ipAddrBlock: critical IPv4: 204.128.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:51:15:67:82:c4:64:7b:4f:5d:e0:f6:87:a0:79:d7:55:08: 71:93:30:f5:9b:09:14:13:bd:fd:8b:b3:d7:e9:fd:ca:ec:60: 66:fa:c3:ad:51:2c:0d:42:25:d5:cd:5c:8c:ac:17:8e:61:95: 1f:2e:04:d2:ad:5f:93:eb:62:b9:29:ce:b0:41:16:2e:10:4c: d6:94:1f:25:ae:9f:82:3e:12:ca:ed:c2:1b:4a:7b:05:5c:0b: f5:8a:4d:94:74:92:b3:30:dc:b1:4a:96:ed:d4:60:dc:a2:95: c5:65:23:55:be:11:7b:c9:89:21:5c:c2:92:8c:49:38:90:22: eb:41:c2:0d:9f:5e:cd:77:54:4f:b9:73:e6:2f:b7:b2:60:5f: 1a:82:ca:14:0c:7a:fb:08:bf:da:22:49:89:24:a1:3b:54:6d: a3:3f:c7:98:58:4a:35:4f:9b:bf:40:f5:cc:30:17:fd:07:a1: b4:9f:83:f0:1d:ed:3a:a0:8d:17:21:00:dd:7e:6f:e6:31:b6: 1f:0d:f6:45:f4:15:70:1b:e9:56:77:e4:9d:c0:71:37:92:6b: 46:7b:72:98:49:a3:a2:36:ca:72:6e:70:1b:b1:cb:0c:a1:72: bd:a6:13:78:be:ab:e6:e6:4a:55:ce:03:5a:39:d1:8e:44:6b: 69:7f:d2:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPUkhMkYh2JsIdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2RkNTYwZDQtNzdjOS00YWI2LWIyMmItOTc3MWFhM2I2 N2MyMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NDRlNzgwNTUtMDlkNC00OTU4LTlmODEtNzBlZTA1M2M3OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj0A6ZMeVIw5gJLlifqRmcSyDHhbDcU5CCie xs2L2q8IBLBDABZyRaa107pyqStRL1t7FEikDc6ygiXbAwhhUmGDYPOGgof5s/TP nDOCN9T1IHZ921TXPFREC23EDDeJUCY+FHY1jv2XTQz/CmTR97qBrogc4aviRSEx pr8mrnWFZzL+Cu5Bap3mbl/tcC09dHBjzh2dCWp8pAJUSPLJN3ttHgUyH0ULx0DN EE9LDK7f1wQYX1A0icrPl/eRzfH/pvqtwkB+SM3oCtcaQkEYqUzpLyXfvwQou+oI BOZxmYg96A093bDGxCcu6o63W2z5tsiiyLJBJB+/29DuZk4sXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtPZlE+zI+FrbXlcsRVmwC1h83lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1 NjBkNC03N2M5LTRhYjYtYjIyYi05NzcxYWEzYjY3YzIvOGI4MzY1MDktNzBhNS0z NzgxLWEzNmQtZDYwNTMxNTkwZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2RkNTYwZDQtNzdjOS00YWI2LWIy MmItOTc3MWFhM2I2N2MyLzdkZDU2MGQ0LTc3YzktNGFiNi1iMjJiLTk3NzFhYTNi NjdjMi5jcmwwHwYDVR0jBBgwFoAUaH23I0rV6sAiz6qA1UzejvWxHL0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83ZGQ1NjBkNC03N2M5LTRhYjYtYjIyYi05Nzcx YWEzYjY3YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzICvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFRFWeCxGR7T13g9oegeddVCHGTMPWbCRQTvf2Ls9fp/crsYGb6w61R LA1CJdXNXIysF45hlR8uBNKtX5PrYrkpzrBBFi4QTNaUHyWun4I+EsrtwhtKewVc C/WKTZR0krMw3LFKlu3UYNyilcVlI1W+EXvJiSFcwpKMSTiQIutBwg2fXs13VE+5 c+Yvt7JgXxqCyhQMevsIv9oiSYkkoTtUbaM/x5hYSjVPm79A9cwwF/0HobSfg/Ad 7TqgjRchAN1+b+Yxth8N9kX0FXAb6VZ35J3AcTeSa0Z7cphJo6I2ynJucBuxywyh cr2mE3i+q+bmSlXOA1o50Y5Ea2l/0lY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:38 2026 by rpki-client